Route Origin Authorization
$ rpki-client -vvvf krill.47272.net/repo/HYEHOST/5/AS31898.roa
File: AS31898.roa (raw, json)
Hash identifier: ZgNR5ZLnR2EzNKMiTwU8LKGQqKpPj+IlVNB5p4jDnp4=
Subject key identifier: 00:77:49:9A:51:52:7F:0D:5C:6A:E8:32:57:FE:7D:EA:20:C6:57:C2
Certificate issuer: /CN=C3CF41898936CB9C573DB1EAAB94C6E669951FD7
Certificate serial: 109346126A73652A9B381201D3976022CC925BBD
Authority key identifier: C3:CF:41:89:89:36:CB:9C:57:3D:B1:EA:AB:94:C6:E6:69:95:1F:D7
Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer
Subject info access: rsync://krill.47272.net/repo/HYEHOST/5/AS31898.roa
Signing time: Wed 29 Jul 2026 09:21:21 +0000
ROA not before: Wed 29 Jul 2026 09:16:21 +0000
ROA not after: Wed 28 Jul 2027 09:21:21 +0000
asID: 31898
IP address blocks: 2a05:dfc3:f6ce::/48 maxlen: 48
2a05:dfc3:f760::/44 maxlen: 48
2a0a:6044:6d00::/48 maxlen: 48
2a0f:6282:210a::/48 maxlen: 48
2a0f:6282:210b::/48 maxlen: 48
2a0f:6284:4c10::/44 maxlen: 48
2a0f:6284:4c20::/44 maxlen: 48
Validation: OK
Signature path: rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.crl
rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.mft
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 26 Aug 2026 23:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
10:93:46:12:6a:73:65:2a:9b:38:12:01:d3:97:60:22:cc:92:5b:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C3CF41898936CB9C573DB1EAAB94C6E669951FD7
Validity
Not Before: Jul 29 09:16:21 2026 GMT
Not After : Jul 28 09:21:21 2027 GMT
Subject: CN=0077499A51527F0D5C6AE83257FE7DEA20C657C2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:5f:8d:87:4d:89:51:ad:f5:e3:69:75:75:ff:
2d:fc:b8:e7:32:26:94:33:a0:ea:ec:39:2c:21:7c:
b4:9b:fe:96:96:be:ed:da:d0:9d:97:c0:b2:b3:8b:
49:50:71:76:23:c1:34:35:9c:a3:b7:0e:1e:28:6a:
0a:ae:0f:f8:87:4f:62:8f:aa:0d:5b:a3:47:5a:34:
54:e3:d8:9a:4e:97:24:a8:e6:16:5a:1d:4b:14:2c:
cd:d6:b0:63:ce:8c:07:14:2c:0e:cc:51:62:7f:07:
41:30:a0:63:5a:92:70:be:04:b0:c2:ec:17:0a:49:
82:d5:62:d5:6a:76:d9:49:8d:3b:57:af:5b:09:db:
a2:30:c5:d0:02:c7:ed:1c:f5:70:6f:0c:7d:1f:d2:
23:9c:55:47:fe:2a:1c:74:4c:c5:81:2b:02:a5:63:
2c:38:87:20:db:95:4b:4f:ca:be:a8:e4:c9:4b:72:
2e:08:8e:67:cf:0d:46:f1:eb:aa:b2:8f:75:14:08:
09:09:ab:9e:c9:f2:d2:ef:02:ad:ec:6c:83:d3:97:
26:b5:1b:91:92:e1:11:77:b1:66:71:a7:cf:30:dc:
66:32:f7:fb:9c:4d:8c:db:4f:7d:3a:68:90:df:7c:
f4:c9:ed:af:72:31:6a:58:06:7e:51:33:df:9b:13:
c9:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:77:49:9A:51:52:7F:0D:5C:6A:E8:32:57:FE:7D:EA:20:C6:57:C2
X509v3 Authority Key Identifier:
keyid:C3:CF:41:89:89:36:CB:9C:57:3D:B1:EA:AB:94:C6:E6:69:95:1F:D7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer
Subject Information Access:
Signed Object - URI:rsync://krill.47272.net/repo/HYEHOST/5/AS31898.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:dfc3:f6ce::/48
2a05:dfc3:f760::/44
2a0a:6044:6d00::/48
2a0f:6282:210a::/47
2a0f:6284:4c10::-2a0f:6284:4c2f:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
1c:1e:2b:db:1e:e2:f4:10:d5:e8:45:0f:62:a9:e7:da:81:1c:
4f:bb:ab:ad:3a:69:27:1c:51:99:13:54:49:4f:be:9e:f1:74:
c1:2d:f8:43:f9:11:ce:ae:7b:a8:e8:40:fc:2c:85:4b:78:19:
ed:d3:56:72:5f:34:dc:bb:f2:b1:ff:a4:06:b1:a0:8a:ed:e5:
b8:8a:a1:29:2b:ca:70:ac:8d:81:a1:29:d2:7d:ca:b9:16:28:
6c:48:16:43:ff:bf:8c:ed:da:66:a6:8a:b8:e3:5f:81:61:bb:
74:a1:76:95:de:01:64:2c:32:32:c1:13:7f:b5:b6:86:2b:07:
d0:86:76:3f:6d:e3:1b:b6:59:e8:39:9d:40:9e:c5:4e:43:bf:
b2:b0:e9:54:8d:b1:4f:b9:20:7a:d9:c1:5b:13:fd:6c:ac:f1:
e2:e7:ba:3b:81:03:2f:d7:b9:2f:aa:6b:ec:ab:4d:58:e3:e9:
2c:22:96:01:cf:5e:53:bb:04:c7:ba:80:72:d6:23:65:3b:b4:
79:7f:d1:e2:ad:12:3a:80:ab:0c:7b:f7:3c:71:94:be:bc:a5:
d2:9b:80:a7:a8:52:9a:76:01:03:e9:f3:37:99:d7:fb:d9:6c:
c3:0f:5c:a4:b1:2e:48:50:bb:bd:77:34:17:88:c9:0e:1b:c9:
9c:0c:55:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 26 07:55:36 2026 by rpki-client