Route Origin Authorization
$ rpki-client -vvvf krill.47272.net/repo/HYEHOST/5/AS214040.roa
File: AS214040.roa (raw, json)
Hash identifier: 0KAY4y+AE6TEWquaeCJAn0w9zWEjo1B7v/xiVEMa/eM=
Subject key identifier: 3A:F9:41:24:8E:90:C8:C0:44:6C:58:AF:57:54:E4:99:ED:84:29:2C
Certificate issuer: /CN=C3CF41898936CB9C573DB1EAAB94C6E669951FD7
Certificate serial: 3880BBDA45570A486B14138BF494D6D28763D899
Authority key identifier: C3:CF:41:89:89:36:CB:9C:57:3D:B1:EA:AB:94:C6:E6:69:95:1F:D7
Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer
Subject info access: rsync://krill.47272.net/repo/HYEHOST/5/AS214040.roa
Signing time: Sun 16 Aug 2026 12:04:30 +0000
ROA not before: Sun 16 Aug 2026 11:59:30 +0000
ROA not after: Sun 15 Aug 2027 12:04:30 +0000
asID: 214040
IP address blocks: 2a06:1281:8000::/36 maxlen: 36
2a0f:6280:8000::/36 maxlen: 48
2a0f:6280:9000::/36 maxlen: 48
2a0f:6280:a000::/36 maxlen: 48
2a0f:6280:d000::/36 maxlen: 48
2a0f:6280:e000::/36 maxlen: 48
2a0f:6282:1000::/36 maxlen: 48
2a0f:6282:a000::/36 maxlen: 36
2a0f:6282:e000::/36 maxlen: 36
2a0f:6283:2000::/36 maxlen: 36
2a0f:6283:8000::/36 maxlen: 36
Validation: OK
Signature path: rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.crl
rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.mft
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 22 Aug 2026 15:16:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
38:80:bb:da:45:57:0a:48:6b:14:13:8b:f4:94:d6:d2:87:63:d8:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C3CF41898936CB9C573DB1EAAB94C6E669951FD7
Validity
Not Before: Aug 16 11:59:30 2026 GMT
Not After : Aug 15 12:04:30 2027 GMT
Subject: CN=3AF941248E90C8C0446C58AF5754E499ED84292C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:95:fd:03:98:58:fc:df:24:3f:08:b2:41:20:
48:68:92:d3:49:11:24:cc:ac:e2:f8:c2:82:10:ba:
7a:0c:f7:0f:e1:82:7b:8b:03:aa:3b:71:0f:55:07:
b9:35:b5:02:e2:ff:27:4a:d6:e3:96:c7:8a:3c:06:
e0:9a:f6:d7:d5:25:37:b8:4d:4a:31:c8:85:3e:36:
33:73:60:45:90:5c:98:43:56:75:4c:95:3b:15:df:
fb:f0:d6:8e:62:14:32:1c:77:8c:eb:62:eb:d2:a6:
8e:39:d1:4a:bd:2e:37:96:7c:0e:01:e9:89:21:cd:
0d:b6:5a:30:20:82:aa:af:46:5a:7e:dc:a7:ac:94:
df:e3:9d:8d:56:7e:3a:94:26:4c:02:eb:f7:34:44:
d0:da:53:25:fe:c7:46:08:4c:df:eb:5b:69:dd:8e:
00:83:55:ab:4f:41:63:7d:24:2c:11:4b:53:f4:90:
a6:3f:71:f5:09:45:38:ef:4a:91:04:5e:49:87:b8:
e8:00:5a:b6:92:92:39:16:38:84:94:37:53:c0:f8:
41:13:e0:b9:a1:da:ef:bf:3f:00:f3:f7:f7:bc:93:
9b:7a:6a:cb:e1:47:35:98:d6:2c:b2:12:1a:1a:23:
77:ec:07:17:7b:21:61:58:13:6f:96:c8:40:d9:06:
bb:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:F9:41:24:8E:90:C8:C0:44:6C:58:AF:57:54:E4:99:ED:84:29:2C
X509v3 Authority Key Identifier:
keyid:C3:CF:41:89:89:36:CB:9C:57:3D:B1:EA:AB:94:C6:E6:69:95:1F:D7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer
Subject Information Access:
Signed Object - URI:rsync://krill.47272.net/repo/HYEHOST/5/AS214040.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:1281:8000::/36
2a0f:6280:8000::-2a0f:6280:afff:ffff:ffff:ffff:ffff:ffff
2a0f:6280:d000::-2a0f:6280:efff:ffff:ffff:ffff:ffff:ffff
2a0f:6282:1000::/36
2a0f:6282:a000::/36
2a0f:6282:e000::/36
2a0f:6283:2000::/36
2a0f:6283:8000::/36
Signature Algorithm: sha256WithRSAEncryption
0c:0b:13:1a:89:d1:03:e3:fd:54:6b:0c:b0:26:ca:30:e3:6a:
4d:da:f6:24:98:a9:f7:7d:04:3b:e0:67:aa:03:a8:16:5b:07:
6c:2f:44:7d:cc:6e:60:87:10:33:1b:ab:8c:02:b0:93:00:b6:
df:d0:27:b0:65:dc:85:4a:68:af:a1:05:72:0e:b3:db:9c:42:
5e:31:fa:50:f7:a0:7d:dd:9f:e0:68:e8:58:8f:e4:f8:72:ac:
de:4d:99:7d:68:13:81:31:68:db:55:63:87:3b:1b:94:49:c1:
df:d0:e4:e2:d8:4f:cd:f9:10:ad:71:eb:bf:25:b0:1d:2f:4d:
91:7c:bb:9c:af:c6:6e:d8:fe:7d:c4:d7:f5:85:c8:d4:75:10:
95:f0:08:56:25:b7:61:f2:cc:3b:7f:31:12:97:00:fd:22:19:
53:71:14:7a:82:fa:b7:3b:b4:3f:76:4e:f1:44:19:ac:6b:81:
d9:9e:cd:ce:a2:9b:a6:b4:be:85:41:04:19:57:db:85:67:a0:
8b:aa:a8:c8:42:9c:c6:38:2b:3b:02:7c:de:6f:51:4d:d1:aa:
e4:08:33:c7:06:fb:6b:3f:ba:b9:db:52:24:8f:b1:bd:fb:04:
10:a0:71:ab:03:8d:64:15:8c:b3:33:87:ef:82:e1:d0:7f:61:
6a:f4:e0:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 21 22:41:08 2026 by rpki-client