Route Origin Authorization
$ rpki-client -vvf krill.47272.net/repo/HYEHOST/5/AS0.roa
File: AS0.roa (raw, json)
Hash identifier: TfUDPC0tp4sMt/FjHzygdANlZTYz/Iks97JK5Ssxvkk=
Subject key identifier: E9:A6:50:AB:95:06:7E:DF:8B:42:05:54:6A:86:CD:FC:92:D8:93:66
Certificate issuer: /CN=C3CF41898936CB9C573DB1EAAB94C6E669951FD7
Certificate serial: 1C9B56E441006788D98874D588774514E79A3F1B
Authority key identifier: C3:CF:41:89:89:36:CB:9C:57:3D:B1:EA:AB:94:C6:E6:69:95:1F:D7
Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer
Subject info access: rsync://krill.47272.net/repo/HYEHOST/5/AS0.roa
Signing time: Thu 23 Jul 2026 00:28:42 +0000
ROA not before: Thu 23 Jul 2026 00:23:42 +0000
ROA not after: Thu 22 Jul 2027 00:28:42 +0000
asID: 0
IP address blocks: 2a0a:6044:a800::/40 maxlen: 48
2a0a:6044:aa08::/48 maxlen: 48
2a0a:6044:aa09::/48 maxlen: 48
2a0a:6044:bd00::/40 maxlen: 48
2a0a:6044:be00::/40 maxlen: 48
2a0f:6280:1000::/40 maxlen: 48
2a0f:6282:210c::/48 maxlen: 48
2a0f:6283:1000::/40 maxlen: 48
2a0f:6283:1100::/48 maxlen: 48
2a0f:6283:1110::/48 maxlen: 48
2a0f:6283:1130::/44 maxlen: 48
2a0f:6283:1140::/44 maxlen: 48
2a0f:6283:1150::/44 maxlen: 48
2a0f:6283:1300::/40 maxlen: 48
Validation: OK
Signature path: rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.crl
rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.mft
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 12:59:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1c:9b:56:e4:41:00:67:88:d9:88:74:d5:88:77:45:14:e7:9a:3f:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C3CF41898936CB9C573DB1EAAB94C6E669951FD7
Validity
Not Before: Jul 23 00:23:42 2026 GMT
Not After : Jul 22 00:28:42 2027 GMT
Subject: CN=E9A650AB95067EDF8B4205546A86CDFC92D89366
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:52:51:e5:e5:8d:ed:06:4d:82:92:7a:ba:74:
29:f6:93:44:99:d0:6f:06:7d:94:8a:09:7b:cd:cc:
3a:fd:71:c7:53:b7:f2:29:1b:e7:a8:9c:65:16:d6:
81:e8:a4:81:54:6c:db:c5:a5:67:dd:bc:90:c7:87:
b9:db:19:e2:72:34:28:41:25:b6:11:6f:9b:e6:57:
d8:93:7f:82:6f:41:bb:f7:57:b3:11:34:a1:5d:cf:
db:56:01:e2:01:61:f8:db:3c:c7:a5:8d:81:b2:f8:
a8:9c:0f:cd:71:00:48:89:b8:33:42:d0:e1:48:aa:
e1:e1:4b:69:01:18:4e:36:c9:c8:65:85:e7:73:d3:
fb:f3:65:c4:bd:26:76:8f:76:32:a6:ad:94:c6:77:
0c:69:6d:33:71:77:eb:e9:65:39:66:53:4a:a8:f7:
72:8d:08:c0:6a:81:27:c8:ca:0a:40:fa:4e:94:d6:
20:ef:db:c4:f3:0e:20:9e:0e:e6:a8:bb:bc:d8:53:
1a:a8:a6:0b:ee:4e:b2:49:25:0b:98:9f:01:bb:c0:
b6:70:07:d9:35:a6:68:db:85:3d:44:c4:99:ed:de:
1f:4a:24:c6:e8:a7:5c:22:21:06:35:8f:8a:51:c7:
53:e8:de:ac:cd:23:ee:10:34:fe:24:e0:f0:ee:58:
c9:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:A6:50:AB:95:06:7E:DF:8B:42:05:54:6A:86:CD:FC:92:D8:93:66
X509v3 Authority Key Identifier:
keyid:C3:CF:41:89:89:36:CB:9C:57:3D:B1:EA:AB:94:C6:E6:69:95:1F:D7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer
Subject Information Access:
Signed Object - URI:rsync://krill.47272.net/repo/HYEHOST/5/AS0.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0a:6044:a800::/40
2a0a:6044:aa08::/47
2a0a:6044:bd00::-2a0a:6044:beff:ffff:ffff:ffff:ffff:ffff
2a0f:6280:1000::/40
2a0f:6282:210c::/48
2a0f:6283:1000::-2a0f:6283:1100:ffff:ffff:ffff:ffff:ffff
2a0f:6283:1110::/48
2a0f:6283:1130::-2a0f:6283:115f:ffff:ffff:ffff:ffff:ffff
2a0f:6283:1300::/40
Signature Algorithm: sha256WithRSAEncryption
60:ec:75:21:d2:bd:8a:f7:dc:73:92:30:18:dd:a5:79:a3:2c:
a3:96:03:02:ea:23:cb:70:1a:9f:32:2d:12:0e:35:ab:91:ec:
59:b4:fe:d2:54:53:de:4f:af:29:b8:1e:cb:c7:d5:93:0e:ee:
e9:3f:6c:97:2b:c3:7b:96:6e:69:aa:ee:1d:ed:e3:0c:34:fb:
09:6a:ab:8c:20:88:ee:2c:3c:22:3c:9a:2e:ea:a3:a5:53:1b:
9c:20:3e:9d:81:6c:0e:7b:75:82:07:f2:88:c9:4d:0d:4b:32:
2d:a6:78:33:d7:cc:8b:94:54:aa:b3:05:6e:09:93:60:47:11:
76:c3:9a:82:c3:d3:cc:c8:12:61:05:30:17:63:28:72:0f:a4:
41:82:0a:ff:0b:dd:15:be:c0:c6:1f:7f:ae:83:1d:ed:3d:3c:
1c:c9:ca:95:b1:cb:6f:da:e7:18:33:6f:7f:4a:2a:b3:19:e4:
58:97:b8:d9:ce:8d:18:df:ae:2b:9c:fe:dc:91:24:31:36:2b:
52:ac:3b:b8:0c:f0:2c:41:18:c5:20:e1:7d:38:b4:3b:67:cf:
81:71:0f:b7:cd:bc:f3:3a:92:ad:9b:1b:29:1d:8a:c8:e3:87:
4f:f9:33:9a:24:3f:0f:fb:7a:f5:9c:36:32:d2:7a:49:77:44:
9e:dc:37:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 02:20:02 2026 by rpki-client