Route Origin Authorization
$ rpki-client -vvvf krill.47272.net/repo/HYEHOST/5/AS47272.roa
File: AS47272.roa (raw, json)
Hash identifier: IRitkNkHfjZ1EL/HNRLgVOFph3rTLgzvDBzydmSZtDI=
Subject key identifier: 3C:13:79:9F:EE:A2:F3:52:C6:82:B9:0F:55:A7:9B:B1:0A:E1:09:8A
Certificate issuer: /CN=C3CF41898936CB9C573DB1EAAB94C6E669951FD7
Certificate serial: 183C3F2502EA2B8094CA94312D4E1C2DA3DF1147
Authority key identifier: C3:CF:41:89:89:36:CB:9C:57:3D:B1:EA:AB:94:C6:E6:69:95:1F:D7
Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer
Subject info access: rsync://krill.47272.net/repo/HYEHOST/5/AS47272.roa
Signing time: Wed 23 Sep 2026 07:44:08 +0000
ROA not before: Wed 23 Sep 2026 07:39:08 +0000
ROA not after: Wed 22 Sep 2027 07:44:08 +0000
asID: 47272
IP address blocks: 199.47.240.0/24 maxlen: 32
2a06:1281:40::/44 maxlen: 44
2a06:1281:1000::/36 maxlen: 36
2a0f:6280:a::/48 maxlen: 48
2a0f:6280:13::/48 maxlen: 48
2a0f:6280:15::/48 maxlen: 48
2a0f:6280:18::/48 maxlen: 48
2a0f:6280:1d::/48 maxlen: 48
2a0f:6280:1f::/48 maxlen: 48
2a0f:6280:1005::/48 maxlen: 48
2a0f:6280:1006::/48 maxlen: 48
2a0f:6280:100b::/48 maxlen: 48
2a0f:6280:100f::/48 maxlen: 48
2a0f:6280:1300::/40 maxlen: 48
2a0f:6280:1a00::/40 maxlen: 48
2a0f:6280:1b00::/40 maxlen: 48
2a0f:6280:2000::/36 maxlen: 48
2a0f:6280:f000::/36 maxlen: 36
2a0f:6282:4000::/36 maxlen: 48
2a0f:6282:7000::/36 maxlen: 48
2a0f:6282:9000::/36 maxlen: 48
2a0f:6284:20::/44 maxlen: 44
2a0f:6284:4700::/40 maxlen: 40
Validation: OK
Signature path: rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.crl
rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.mft
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Sep 2026 05:16:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
18:3c:3f:25:02:ea:2b:80:94:ca:94:31:2d:4e:1c:2d:a3:df:11:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C3CF41898936CB9C573DB1EAAB94C6E669951FD7
Validity
Not Before: Sep 23 07:39:08 2026 GMT
Not After : Sep 22 07:44:08 2027 GMT
Subject: CN=3C13799FEEA2F352C682B90F55A79BB10AE1098A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:79:dc:95:10:f3:13:2c:3c:f6:1c:47:59:f5:
ce:cd:a5:75:65:c4:b9:63:5e:35:38:77:50:1d:f2:
35:0a:08:cb:f5:df:75:03:ce:80:e7:ef:79:00:2b:
fc:16:cc:8f:ff:9c:fa:42:e9:8f:fc:8d:37:bf:a1:
f6:b1:db:ac:74:fc:be:85:ee:27:05:f6:3b:8a:2f:
1c:a4:9e:b2:03:82:4b:5f:4e:47:51:ad:38:77:fa:
47:27:b9:c6:74:86:d1:c1:3c:da:b0:77:53:9a:77:
8e:66:86:f2:84:57:58:d7:84:14:de:29:14:db:15:
bd:0b:5f:40:78:ee:e0:eb:79:c2:7a:da:b4:ca:24:
1c:ed:c5:b4:02:fa:c2:fe:68:f8:66:63:ab:4e:e9:
cd:e5:c8:a8:bb:7a:68:88:18:86:21:9e:2f:7d:f6:
21:ae:76:b2:e7:83:5c:13:d5:6b:04:fd:6f:53:12:
2a:35:f4:5a:66:55:0c:d9:40:c4:38:dd:10:d2:29:
23:ee:b4:2a:c2:60:9f:9b:a8:c6:09:f0:76:9e:03:
6d:e0:92:ea:2c:64:24:d8:5e:25:b6:10:3d:91:3c:
50:29:ea:63:57:70:04:b4:47:a4:2e:01:73:8e:b4:
db:31:5a:2b:17:4c:a9:e7:42:dd:b9:ab:9a:b7:1e:
12:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:13:79:9F:EE:A2:F3:52:C6:82:B9:0F:55:A7:9B:B1:0A:E1:09:8A
X509v3 Authority Key Identifier:
keyid:C3:CF:41:89:89:36:CB:9C:57:3D:B1:EA:AB:94:C6:E6:69:95:1F:D7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer
Subject Information Access:
Signed Object - URI:rsync://krill.47272.net/repo/HYEHOST/5/AS47272.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.47.240.0/24
IPv6:
2a06:1281:40::/44
2a06:1281:1000::/36
2a0f:6280:a::/48
2a0f:6280:13::/48
2a0f:6280:15::/48
2a0f:6280:18::/48
2a0f:6280:1d::/48
2a0f:6280:1f::/48
2a0f:6280:1005::-2a0f:6280:1006:ffff:ffff:ffff:ffff:ffff
2a0f:6280:100b::/48
2a0f:6280:100f::/48
2a0f:6280:1300::/40
2a0f:6280:1a00::/39
2a0f:6280:2000::/36
2a0f:6280:f000::/36
2a0f:6282:4000::/36
2a0f:6282:7000::/36
2a0f:6282:9000::/36
2a0f:6284:20::/44
2a0f:6284:4700::/40
Signature Algorithm: sha256WithRSAEncryption
8c:7c:cd:a7:0a:44:c7:5b:33:4a:33:af:0b:be:99:df:74:d6:
df:02:48:48:b5:2d:c9:7d:a5:13:aa:76:f8:34:1d:6c:67:2f:
7b:12:a1:41:39:1a:37:fb:08:50:86:8d:24:77:d6:3f:78:a5:
fb:21:d6:30:7b:3e:9f:47:02:fc:40:88:19:04:42:c7:aa:17:
b1:b1:93:ac:95:43:d2:31:7f:54:fd:32:7a:d7:ca:72:a3:b2:
45:25:ae:16:8a:04:6b:59:0f:a0:3d:60:c6:78:22:81:47:b5:
29:1e:e0:50:05:0f:b3:05:2d:fa:7f:6c:cf:12:ca:30:9d:e2:
0b:42:2a:8a:ae:e8:07:41:78:21:0a:fa:2f:81:97:24:7e:91:
83:48:f8:74:20:30:4c:6a:0f:58:b9:f9:02:7d:98:32:54:95:
ae:2f:64:7c:df:22:a9:44:a5:01:d7:e8:df:a4:cb:28:87:e8:
d6:e2:fb:0a:6e:19:aa:44:33:f6:91:04:ac:f9:e7:4d:1a:83:
91:dd:1c:6c:e7:cc:49:a2:e8:66:04:db:8c:9e:89:ce:f8:6d:
a8:5c:8c:19:51:5f:8f:f5:bd:65:b5:3c:27:76:f2:8b:98:e8:
2f:d5:c0:40:7a:6e:ca:0e:66:78:6c:b2:bc:60:48:68:4d:d4:
43:cf:98:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 19:26:26 2026 by rpki-client