Route Origin Authorization
$ rpki-client -vvf krill.47272.net/repo/HYEHOST/5/AS47272.roa
File: AS47272.roa (raw, json)
Hash identifier: 4PeZBq6FskKr+yB26oSkqoayZkEwwyjxsJQZ26IB1Ks=
Subject key identifier: F1:1B:B9:A6:0C:F8:33:1F:C2:5A:0A:D7:CC:5E:83:BD:7A:52:05:98
Certificate issuer: /CN=C3CF41898936CB9C573DB1EAAB94C6E669951FD7
Certificate serial: 4EFC6B68B5F152ADF7C948F75F2287B58E18A0E9
Authority key identifier: C3:CF:41:89:89:36:CB:9C:57:3D:B1:EA:AB:94:C6:E6:69:95:1F:D7
Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer
Subject info access: rsync://krill.47272.net/repo/HYEHOST/5/AS47272.roa
Signing time: Mon 10 Aug 2026 18:24:42 +0000
ROA not before: Mon 10 Aug 2026 18:19:42 +0000
ROA not after: Mon 09 Aug 2027 18:24:42 +0000
asID: 47272
IP address blocks: 199.47.240.0/24 maxlen: 32
2a06:1281:40::/44 maxlen: 44
2a06:1281:1000::/36 maxlen: 36
2a0f:6280:a::/48 maxlen: 48
2a0f:6280:13::/48 maxlen: 48
2a0f:6280:15::/48 maxlen: 48
2a0f:6280:18::/48 maxlen: 48
2a0f:6280:1d::/48 maxlen: 48
2a0f:6280:1f::/48 maxlen: 48
2a0f:6280:1300::/40 maxlen: 48
2a0f:6280:4000::/36 maxlen: 36
2a0f:6284:20::/44 maxlen: 44
2a0f:6284:4700::/40 maxlen: 40
Validation: OK
Signature path: rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.crl
rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.mft
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 14 Aug 2026 01:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4e:fc:6b:68:b5:f1:52:ad:f7:c9:48:f7:5f:22:87:b5:8e:18:a0:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C3CF41898936CB9C573DB1EAAB94C6E669951FD7
Validity
Not Before: Aug 10 18:19:42 2026 GMT
Not After : Aug 9 18:24:42 2027 GMT
Subject: CN=F11BB9A60CF8331FC25A0AD7CC5E83BD7A520598
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:2f:e7:2f:fc:6f:c5:95:d9:d6:95:70:d9:db:
d3:bf:85:9b:65:47:6d:57:0a:47:c3:82:d3:b3:59:
2a:ec:d4:ab:2f:85:20:0c:56:35:e6:b7:ec:1b:c0:
27:f9:d3:57:11:9c:bb:90:e9:fe:7a:11:9d:f8:81:
37:6d:5f:d7:06:5a:8b:52:b6:36:c4:f3:6f:ca:41:
bb:ba:03:b1:23:d9:a3:7b:18:e7:60:b5:65:0e:94:
92:2e:15:ac:2f:1b:c0:f2:7a:63:5c:b4:0c:ed:77:
79:9b:2b:df:a8:3e:de:89:00:0c:8f:cc:ac:cd:94:
21:f0:c4:81:63:f7:f9:8c:2e:f1:b3:ef:4e:b7:45:
b8:a6:22:8f:63:fc:0a:1d:a3:22:fb:06:c7:af:0c:
be:10:ae:6c:d7:0b:b7:0a:93:57:58:e5:09:86:fd:
a4:92:6a:f1:d7:92:59:3f:5b:f8:7f:f8:a4:14:92:
2b:76:c7:ae:be:4c:d6:e7:49:69:34:f2:2f:4c:af:
22:e6:6a:f3:44:be:e8:1f:f9:21:5c:d3:cf:7a:e6:
df:79:88:d3:62:85:50:3b:b1:7d:1c:52:4f:b3:9f:
0c:2f:13:41:45:ed:db:2d:3e:64:f3:5c:fc:41:19:
81:31:50:dd:16:51:20:7c:e0:b1:2d:67:30:f4:3e:
8d:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:1B:B9:A6:0C:F8:33:1F:C2:5A:0A:D7:CC:5E:83:BD:7A:52:05:98
X509v3 Authority Key Identifier:
keyid:C3:CF:41:89:89:36:CB:9C:57:3D:B1:EA:AB:94:C6:E6:69:95:1F:D7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer
Subject Information Access:
Signed Object - URI:rsync://krill.47272.net/repo/HYEHOST/5/AS47272.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.47.240.0/24
IPv6:
2a06:1281:40::/44
2a06:1281:1000::/36
2a0f:6280:a::/48
2a0f:6280:13::/48
2a0f:6280:15::/48
2a0f:6280:18::/48
2a0f:6280:1d::/48
2a0f:6280:1f::/48
2a0f:6280:1300::/40
2a0f:6280:4000::/36
2a0f:6284:20::/44
2a0f:6284:4700::/40
Signature Algorithm: sha256WithRSAEncryption
3f:de:7f:e7:4d:0a:83:7d:1c:30:91:e1:61:ef:94:8f:04:67:
a5:8d:de:c2:83:74:a5:df:66:28:73:44:2a:ba:38:e4:bb:08:
38:40:3a:08:07:14:11:30:a7:5f:64:e6:17:c9:1b:9b:d0:32:
d3:0c:24:14:e5:bd:5d:d9:67:b8:c6:78:68:9f:fc:3a:d4:30:
a6:f8:2a:f7:55:61:3b:78:8d:af:86:ac:9e:95:ed:e8:b2:bd:
1b:08:c9:13:26:4c:9a:94:ff:6b:e1:d7:a3:05:01:e3:81:32:
82:6a:f6:47:9b:e2:a2:aa:e6:74:86:aa:2a:a2:73:61:2a:9e:
d7:2f:31:f2:b3:9e:05:d8:fc:ca:13:7e:5e:34:f7:fc:dc:7b:
aa:df:ad:53:ab:e7:63:ef:17:07:7a:6d:51:f1:a4:f2:1b:02:
68:28:cc:d1:37:2b:2d:6f:b2:e3:1c:f9:6c:30:15:ad:59:51:
9f:56:97:5c:2a:a5:62:ad:4b:d0:ed:9a:14:38:54:5c:44:c3:
d1:fa:99:fa:7c:cf:bf:1c:bf:27:ec:31:d5:89:f1:45:4b:f3:
ea:be:84:41:7c:17:6b:b4:f5:65:58:7c:15:c6:e5:04:3e:72:
6f:15:18:f4:28:13:ba:25:fb:b5:01:73:c8:54:dc:1c:e4:fb:
82:28:f9:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 13 07:11:17 2026 by rpki-client