Route Origin Authorization
$ rpki-client -vvvf krill.47272.net/repo/HYEHOST/5/AS0.roa
File: AS0.roa (raw, json)
Hash identifier: DEsgpF7lr4yQwG4ad19+z6V0fj3Edjoq0aM/VAwd3jY=
Subject key identifier: 3A:FF:FB:75:B4:AF:87:3B:BF:09:94:A3:17:2A:D2:DB:32:8C:47:64
Certificate issuer: /CN=C3CF41898936CB9C573DB1EAAB94C6E669951FD7
Certificate serial: 77E67BCFFA6BDD1A7BD9AA4ED87806E751CF56EA
Authority key identifier: C3:CF:41:89:89:36:CB:9C:57:3D:B1:EA:AB:94:C6:E6:69:95:1F:D7
Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer
Subject info access: rsync://krill.47272.net/repo/HYEHOST/5/AS0.roa
Signing time: Sat 14 Nov 2026 16:36:03 +0000
ROA not before: Sat 14 Nov 2026 16:31:03 +0000
ROA not after: Sat 13 Nov 2027 16:36:03 +0000
asID: 0
IP address blocks: 2a06:1281:a0::/44 maxlen: 48
2a0a:6044:a800::/40 maxlen: 48
2a0f:6280:5000::/38 maxlen: 48
2a0f:6284::/48 maxlen: 48
2a0f:6284:7::/48 maxlen: 48
2a0f:6284:d::/48 maxlen: 48
2a0f:6284:4212::/48 maxlen: 48
2a0f:6284:4216::/48 maxlen: 48
2a0f:6284:4218::/48 maxlen: 48
Validation: OK
Signature path: rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.crl
rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.mft
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Nov 2026 12:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
77:e6:7b:cf:fa:6b:dd:1a:7b:d9:aa:4e:d8:78:06:e7:51:cf:56:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C3CF41898936CB9C573DB1EAAB94C6E669951FD7
Validity
Not Before: Nov 14 16:31:03 2026 GMT
Not After : Nov 13 16:36:03 2027 GMT
Subject: CN=3AFFFB75B4AF873BBF0994A3172AD2DB328C4764
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:14:62:4c:d4:72:c1:87:04:df:40:1a:17:5c:
1d:de:ac:7e:28:3a:3f:de:f8:9c:1a:a8:3d:f9:28:
2e:7c:12:8b:bd:0b:5c:49:c7:39:e3:7b:f8:e6:86:
b2:ae:14:7b:b0:68:2d:8e:e3:55:96:93:b9:f0:2e:
ec:58:ff:91:c2:c3:91:4e:76:75:2e:c6:2c:57:cb:
e5:8b:de:b6:89:61:4b:d5:8a:7f:2c:88:3c:48:99:
4c:af:50:0d:81:5e:3e:02:15:d0:e1:97:43:79:11:
75:bf:f1:aa:57:f9:40:50:60:ce:45:d1:93:17:fd:
70:fb:53:fa:27:0b:76:d3:83:0e:02:6d:df:c6:e7:
25:90:60:d0:61:49:e2:09:c6:22:b3:d5:df:e5:f8:
96:f9:0e:d8:eb:32:e8:0f:4d:d4:dc:fb:18:85:28:
01:e8:a1:91:7b:65:db:41:d2:21:8d:f0:ba:a1:58:
41:a7:66:e9:1b:0b:01:aa:8a:8a:09:8f:68:dc:5a:
8d:9a:f4:43:ae:cd:f7:6e:4e:a9:4b:89:de:e7:a0:
7c:d4:f4:e4:9d:7e:6f:bc:57:9e:e7:38:b2:cb:48:
b8:f5:dd:69:57:04:0e:78:da:17:08:17:08:51:d6:
d6:23:39:dd:63:b2:03:46:d8:73:71:34:91:03:d6:
a3:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:FF:FB:75:B4:AF:87:3B:BF:09:94:A3:17:2A:D2:DB:32:8C:47:64
X509v3 Authority Key Identifier:
keyid:C3:CF:41:89:89:36:CB:9C:57:3D:B1:EA:AB:94:C6:E6:69:95:1F:D7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer
Subject Information Access:
Signed Object - URI:rsync://krill.47272.net/repo/HYEHOST/5/AS0.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:1281:a0::/44
2a0a:6044:a800::/40
2a0f:6280:5000::/38
2a0f:6284::/48
2a0f:6284:7::/48
2a0f:6284:d::/48
2a0f:6284:4212::/48
2a0f:6284:4216::/48
2a0f:6284:4218::/48
Signature Algorithm: sha256WithRSAEncryption
86:ff:64:7f:5f:20:17:3e:ff:d9:60:01:ab:eb:0c:01:17:dc:
c9:3d:95:55:73:48:be:11:88:a1:48:65:7b:72:5c:f1:61:ae:
ec:65:fc:b3:04:5d:82:5a:eb:16:e4:4f:ee:43:27:47:ed:c3:
d9:c5:48:af:7a:b7:06:d2:b1:c3:f9:b4:48:e8:84:4b:52:87:
88:d3:ec:47:a0:f9:3e:b7:19:07:c3:e7:82:e3:6f:65:a0:76:
6e:78:77:f4:0f:a8:06:97:a2:ff:35:95:6c:9a:47:50:b5:32:
d1:7c:0d:53:30:4d:bc:70:6b:99:24:7c:a0:8f:c3:81:10:28:
b4:08:3c:f0:f2:28:19:c3:2c:59:37:bc:9a:ee:af:18:a2:f5:
12:26:6f:e4:52:0c:51:9a:d4:4d:c8:3e:d2:fb:0e:35:19:97:
b8:45:a6:77:31:6e:ed:d0:3b:08:87:4b:bf:6e:9f:b3:e4:f8:
49:d3:db:05:b0:e6:73:2b:4a:04:0b:25:65:e3:05:46:ff:96:
f5:0c:aa:04:f7:a7:e0:b4:95:75:7d:73:1a:fa:bd:35:4a:d4:
f5:46:a5:d4:ec:37:67:01:7c:aa:3a:65:0f:ea:c4:cb:12:c3:
72:e7:40:0b:af:74:dd:36:13:17:9d:67:d5:b0:be:b4:6d:3a:
41:e0:05:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 14 21:04:40 2026 by rpki-client