Route Origin Authorization
$ rpki-client -vvvf krill.47272.net/repo/HYEHOST/5/AS213535.roa
File: AS213535.roa (raw, json)
Hash identifier: CX7EUvxI63YvryNJSzdf+Ssm43s8DBKfvH6pv7e2Vuo=
Subject key identifier: A4:78:E0:14:DB:29:63:98:6D:A0:A0:E9:30:49:94:A1:78:4B:0F:5C
Certificate issuer: /CN=C3CF41898936CB9C573DB1EAAB94C6E669951FD7
Certificate serial: 4FF98154FABEDD38373CDA3A906381DC6B62496A
Authority key identifier: C3:CF:41:89:89:36:CB:9C:57:3D:B1:EA:AB:94:C6:E6:69:95:1F:D7
Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer
Subject info access: rsync://krill.47272.net/repo/HYEHOST/5/AS213535.roa
Signing time: Fri 07 Aug 2026 09:13:13 +0000
ROA not before: Fri 07 Aug 2026 09:08:13 +0000
ROA not after: Fri 06 Aug 2027 09:13:13 +0000
asID: 213535
IP address blocks: 2a0f:6284:50::/48 maxlen: 48
2a0f:6284:60::/48 maxlen: 48
2a0f:6284:61::/48 maxlen: 48
2a0f:6284:62::/48 maxlen: 48
2a0f:6284:63::/48 maxlen: 48
2a0f:6284:64::/48 maxlen: 48
2a0f:6284:66::/48 maxlen: 48
2a0f:6284:67::/48 maxlen: 48
2a0f:6284:68::/48 maxlen: 48
2a0f:6284:69::/48 maxlen: 48
2a0f:6284:6a::/48 maxlen: 48
2a0f:6284:6b::/48 maxlen: 48
Validation: OK
Signature path: rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.crl
rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.mft
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 26 Aug 2026 23:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4f:f9:81:54:fa:be:dd:38:37:3c:da:3a:90:63:81:dc:6b:62:49:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C3CF41898936CB9C573DB1EAAB94C6E669951FD7
Validity
Not Before: Aug 7 09:08:13 2026 GMT
Not After : Aug 6 09:13:13 2027 GMT
Subject: CN=A478E014DB2963986DA0A0E9304994A1784B0F5C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:73:43:85:43:b8:fd:82:d7:4b:f7:7f:df:3a:
b0:e1:89:7e:1a:4f:1f:18:66:ee:05:58:f5:43:6c:
2e:11:44:46:ce:81:bf:fe:93:7c:bc:ab:6b:e6:ff:
35:05:29:d3:6e:8a:cc:06:58:8a:71:56:cd:ff:4e:
85:ea:3c:fd:c2:10:2a:7a:6f:a5:58:41:eb:e0:0b:
ee:37:00:45:77:af:54:f8:13:2c:03:70:b8:ca:81:
1d:12:00:81:c9:8d:41:7b:8a:95:26:53:33:61:b4:
2c:97:3e:05:41:a5:0c:d6:c6:26:39:1e:cb:a7:54:
52:11:e0:c3:a9:bd:c4:9f:4f:7f:b5:0e:ea:6a:75:
7c:c2:05:54:52:34:13:ce:4b:ab:8e:a1:2c:03:f5:
49:5e:d9:16:20:60:39:6c:7a:3f:1a:84:d1:99:69:
2f:6e:09:9b:15:13:44:60:f9:3c:ef:ec:58:f5:bc:
ac:42:9e:e0:e3:5d:d5:d0:64:6e:d1:5b:2b:bb:3d:
60:48:44:42:38:f5:d8:8b:c0:72:be:15:24:a1:f2:
73:10:fb:08:43:47:a4:a8:d9:b4:d1:28:c4:0b:11:
44:fc:ce:09:cf:8b:9a:ea:de:c9:04:6d:61:4f:27:
28:6c:b8:32:6e:a2:75:30:f1:b5:f7:0e:82:82:0f:
51:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:78:E0:14:DB:29:63:98:6D:A0:A0:E9:30:49:94:A1:78:4B:0F:5C
X509v3 Authority Key Identifier:
keyid:C3:CF:41:89:89:36:CB:9C:57:3D:B1:EA:AB:94:C6:E6:69:95:1F:D7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer
Subject Information Access:
Signed Object - URI:rsync://krill.47272.net/repo/HYEHOST/5/AS213535.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:6284:50::/48
2a0f:6284:60::-2a0f:6284:64:ffff:ffff:ffff:ffff:ffff
2a0f:6284:66::-2a0f:6284:6b:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
67:5e:5b:4a:52:6a:62:32:ac:bb:c8:e0:d1:fa:7c:7f:a6:f2:
90:f3:48:9c:f8:0e:39:72:fb:cd:78:be:bb:26:44:ac:2e:7b:
37:8d:ed:24:a6:99:7e:45:bf:3c:94:98:ee:1d:a5:ca:4f:16:
db:97:09:49:46:71:32:03:3c:cb:3f:fb:fb:68:02:30:79:13:
1f:04:c4:e6:03:6c:57:b0:c4:ba:e8:49:bd:dc:69:df:a5:83:
6e:f5:ee:d7:82:ed:ff:c8:c9:3e:47:6f:1c:29:cc:5a:63:dd:
71:a6:d7:f2:bf:30:3c:80:d2:78:bd:a8:23:06:14:28:d6:2a:
85:51:c7:4e:ff:27:68:c5:13:88:70:20:14:86:88:63:84:35:
9d:a8:1e:d6:a0:b4:ca:03:ef:8c:75:bd:6b:df:a6:d2:9d:8b:
fd:c7:b9:41:67:01:34:ac:ce:47:b0:5e:db:45:c5:e2:79:95:
bb:99:89:5a:cf:2e:4e:83:26:0d:9b:62:aa:ae:1f:81:43:d3:
10:89:b5:6e:ea:81:3e:6f:fa:97:d8:7e:a2:94:f8:e9:6e:c7:
87:6b:5c:dc:05:68:85:db:e5:d2:e9:27:0f:7c:80:64:6c:27:
e3:01:af:7d:05:4f:41:0b:33:ff:ef:fe:3f:fe:e9:b1:ae:cc:
f4:b1:8f:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 26 07:55:14 2026 by rpki-client