Route Origin Authorization
$ rpki-client -vvvf krill.47272.net/repo/HYEHOST/5/AS213864.roa
File: AS213864.roa (raw, json)
Hash identifier: KHx9q1Hsi776z2xGliCXJnnHZOg4kbxQ/nSYiGIrYw0=
Subject key identifier: 7F:ED:B8:51:44:2D:CA:92:E2:8C:20:CF:A7:37:D1:87:42:C7:15:16
Certificate issuer: /CN=C3CF41898936CB9C573DB1EAAB94C6E669951FD7
Certificate serial: 0592ACC9642D64369F09D587B0D5B8BEF905D506
Authority key identifier: C3:CF:41:89:89:36:CB:9C:57:3D:B1:EA:AB:94:C6:E6:69:95:1F:D7
Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer
Subject info access: rsync://krill.47272.net/repo/HYEHOST/5/AS213864.roa
Signing time: Wed 02 Sep 2026 10:57:40 +0000
ROA not before: Wed 02 Sep 2026 10:52:40 +0000
ROA not after: Wed 01 Sep 2027 10:57:40 +0000
asID: 213864
IP address blocks: 2a05:dfc2::/32 maxlen: 32
2a09:54c4::/32 maxlen: 32
2a0f:6280:2000::/36 maxlen: 48
2a0f:6280:5000::/36 maxlen: 48
2a0f:6282:5000::/36 maxlen: 48
2a0f:6282:6000::/36 maxlen: 48
2a0f:6284:5000::/36 maxlen: 48
2a0f:6285::/32 maxlen: 32
Validation: OK
Signature path: rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.crl
rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.mft
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 16:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
05:92:ac:c9:64:2d:64:36:9f:09:d5:87:b0:d5:b8:be:f9:05:d5:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C3CF41898936CB9C573DB1EAAB94C6E669951FD7
Validity
Not Before: Sep 2 10:52:40 2026 GMT
Not After : Sep 1 10:57:40 2027 GMT
Subject: CN=7FEDB851442DCA92E28C20CFA737D18742C71516
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:02:b0:6b:bf:60:19:b7:42:2a:4c:c6:6d:06:
79:f1:c6:31:02:f8:35:b8:4e:d3:7b:43:bd:2a:1e:
68:ba:b6:9b:27:54:dd:d1:26:3c:49:b1:82:5f:26:
ed:cb:07:43:92:c7:44:fa:dd:5c:29:27:83:80:96:
33:c4:33:0c:6e:b0:fb:5f:7d:a8:fa:a5:40:7a:47:
63:33:9a:a4:8c:9c:93:24:d9:be:3d:e1:61:3c:32:
40:03:f7:21:33:6a:24:d3:f8:7e:be:d1:c1:d1:87:
64:fe:f6:e4:10:58:e6:fd:cf:ad:8f:74:d4:5c:1f:
fd:6f:df:ea:d5:a5:8b:94:ef:a7:79:09:3a:7f:b5:
dd:fe:9f:3a:cf:87:95:bd:14:89:7f:12:6d:12:3f:
d8:9e:dc:e4:82:fe:12:b6:e5:cc:d4:a9:ce:cc:38:
67:c7:a5:27:34:e5:2d:41:cc:0f:7b:70:9f:ee:42:
a4:f7:21:1c:c9:66:1f:2a:77:b6:b7:07:ef:ad:4d:
e6:10:7d:da:30:ea:21:7e:c8:92:ca:5d:f2:91:5c:
96:6d:8b:86:76:e4:f6:96:af:ea:58:10:e6:93:c9:
bf:01:84:3d:a8:53:59:14:06:b7:98:d1:23:8f:55:
42:59:c9:f4:8c:54:df:0a:01:e4:bb:12:a6:14:a1:
ef:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:ED:B8:51:44:2D:CA:92:E2:8C:20:CF:A7:37:D1:87:42:C7:15:16
X509v3 Authority Key Identifier:
keyid:C3:CF:41:89:89:36:CB:9C:57:3D:B1:EA:AB:94:C6:E6:69:95:1F:D7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer
Subject Information Access:
Signed Object - URI:rsync://krill.47272.net/repo/HYEHOST/5/AS213864.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:dfc2::/32
2a09:54c4::/32
2a0f:6280:2000::/36
2a0f:6280:5000::/36
2a0f:6282:5000::-2a0f:6282:6fff:ffff:ffff:ffff:ffff:ffff
2a0f:6284:5000::/36
2a0f:6285::/32
Signature Algorithm: sha256WithRSAEncryption
1a:4e:ca:c6:a6:80:c7:b0:28:e0:23:b3:e5:2f:b8:7f:72:6b:
92:a8:51:3b:a1:f9:ad:a8:74:91:6c:4a:dc:76:fe:10:7f:28:
78:5d:7e:86:0d:64:be:64:22:12:3f:43:08:1b:9f:ef:79:af:
96:b7:aa:a9:5c:fc:03:ac:b0:03:b2:d5:c0:ee:a0:13:f9:ff:
d9:87:23:b2:3f:a1:b5:d3:a8:81:9c:8e:66:62:91:4f:c4:8a:
3c:2d:0a:05:5a:99:76:90:1d:28:d3:ed:3c:be:4d:ba:c5:bf:
79:e3:c8:78:3f:81:4d:69:de:cc:68:25:ad:f5:42:a4:ff:3b:
8d:88:4a:21:db:4b:be:ac:ae:21:d5:7b:1a:16:49:66:cd:c6:
7f:0d:06:2b:79:02:69:f0:12:e9:58:c7:b5:a9:47:72:44:c3:
b9:df:6f:84:a6:d0:77:55:57:15:33:d8:91:77:3e:54:9e:ec:
94:3c:ee:fe:c7:69:33:c0:40:5b:32:e5:05:5d:3e:e2:20:8d:
be:3a:b8:9d:5b:1e:dd:d7:b3:d4:6b:7e:58:53:b3:9b:e2:ce:
ad:ff:cb:4c:81:71:61:37:ca:0f:33:ba:e4:d4:0f:07:a3:0e:
b3:e2:65:f2:65:4e:a6:b3:1d:17:a9:94:92:36:a6:98:a4:88:
fc:94:49:6f
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Fri Sep 4 22:33:32 2026 by rpki-client