Route Origin Authorization
$ rpki-client -vvf krill.47272.net/repo/HYEHOST/5/AS135120.roa
File: AS135120.roa (raw, json)
Hash identifier: +JFPEaSlgpBWEts9mDmn9CiEagEAud2fs81z4zJQYMY=
Subject key identifier: 0F:4D:5E:96:37:06:7A:DC:77:49:81:43:DA:3B:39:43:84:BD:21:03
Certificate issuer: /CN=C3CF41898936CB9C573DB1EAAB94C6E669951FD7
Certificate serial: 9C86E4D9B8ECE5B0016CE4FE2991F3325CC3AB
Authority key identifier: C3:CF:41:89:89:36:CB:9C:57:3D:B1:EA:AB:94:C6:E6:69:95:1F:D7
Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer
Subject info access: rsync://krill.47272.net/repo/HYEHOST/5/AS135120.roa
Signing time: Wed 18 Mar 2026 06:54:01 +0000
ROA not before: Wed 18 Mar 2026 06:49:01 +0000
ROA not after: Wed 17 Mar 2027 06:54:01 +0000
asID: 135120
IP address blocks: 2a0f:6284:e::/48 maxlen: 48
2a0f:6284:3300::/40 maxlen: 40
2a0f:6284:3300::/48 maxlen: 48
2a0f:6284:3301::/48 maxlen: 48
2a0f:6284:3302::/48 maxlen: 48
2a0f:6284:3303::/48 maxlen: 48
2a0f:6284:3304::/48 maxlen: 48
2a0f:6284:3305::/48 maxlen: 48
2a0f:6284:3306::/48 maxlen: 48
2a0f:6284:3307::/48 maxlen: 48
2a0f:6284:3308::/48 maxlen: 48
2a0f:6284:3320::/48 maxlen: 48
2a0f:6284:3321::/48 maxlen: 48
2a0f:6284:33fe::/48 maxlen: 48
Validation: OK
Signature path: rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.crl
rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.mft
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
9c:86:e4:d9:b8:ec:e5:b0:01:6c:e4:fe:29:91:f3:32:5c:c3:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C3CF41898936CB9C573DB1EAAB94C6E669951FD7
Validity
Not Before: Mar 18 06:49:01 2026 GMT
Not After : Mar 17 06:54:01 2027 GMT
Subject: CN=0F4D5E9637067ADC77498143DA3B394384BD2103
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:4b:d6:24:8f:e1:bd:44:af:38:89:db:c7:77:
21:0e:6e:32:b7:de:ab:5b:ef:39:d2:4d:9d:40:85:
dd:7c:3b:0b:ad:2a:71:50:8a:02:d2:6e:14:9b:09:
55:7b:ed:fa:00:10:10:9b:20:42:07:72:27:64:42:
09:7b:02:7e:dc:79:bb:c8:ce:4f:2d:a8:21:1c:c5:
5f:c5:c7:9f:d3:e0:dd:01:20:d0:62:34:26:03:7e:
7c:eb:79:91:ac:08:1e:de:6d:a9:34:c2:03:72:b3:
2f:ed:1d:a0:4b:3f:8f:87:9e:ca:46:9c:e9:64:4d:
76:b0:aa:59:f3:8b:34:4d:96:a4:33:6d:a1:70:4a:
28:ab:48:0e:ed:8a:8e:e2:ab:cc:12:13:b3:3b:31:
b8:fe:9a:3f:21:4b:2c:ea:80:97:66:8e:8e:b3:8b:
73:7c:8e:02:43:15:d0:64:a8:25:5a:41:12:03:e3:
90:ab:ac:c4:31:02:01:db:80:3e:23:ad:96:86:52:
91:25:6d:0c:d8:fa:d7:a7:a6:80:ac:2a:06:a4:23:
b8:63:60:72:80:10:9b:37:3b:70:73:a4:c5:c8:0d:
0a:a1:33:f5:d4:4d:9c:1e:45:13:ad:16:7e:76:2f:
00:f4:fd:21:19:48:d2:02:93:fb:0e:1d:3d:20:a2:
b3:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:4D:5E:96:37:06:7A:DC:77:49:81:43:DA:3B:39:43:84:BD:21:03
X509v3 Authority Key Identifier:
keyid:C3:CF:41:89:89:36:CB:9C:57:3D:B1:EA:AB:94:C6:E6:69:95:1F:D7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer
Subject Information Access:
Signed Object - URI:rsync://krill.47272.net/repo/HYEHOST/5/AS135120.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:6284:e::/48
2a0f:6284:3300::/40
Signature Algorithm: sha256WithRSAEncryption
42:c6:02:66:c0:a8:0b:41:37:f5:c9:b1:cd:03:71:30:11:b2:
93:69:90:11:65:76:a0:32:86:1d:b0:38:5b:a4:76:d9:e9:c3:
8d:c1:bb:6c:cb:f8:b0:4d:d5:2e:9c:5a:1f:e5:19:a7:fd:8d:
74:68:fa:f4:f5:fb:3c:4f:cc:63:c8:47:c0:65:6e:82:75:dd:
80:11:78:c3:24:d0:d8:27:72:b3:f1:6a:05:24:61:17:ca:ee:
63:1c:97:aa:92:e2:d7:8c:bd:72:9d:98:9a:52:29:db:fa:47:
71:ac:c8:02:cf:f0:dc:39:9f:4d:42:b0:d0:99:75:28:d2:7a:
33:3f:44:57:08:07:91:46:69:de:58:27:e4:36:49:75:4a:1e:
85:7c:eb:42:75:5c:7c:05:1c:ad:d8:a4:1c:b4:af:a4:a5:da:
38:e5:2e:71:64:0b:bb:b0:c6:9a:ba:11:f6:16:46:ad:e1:c7:
7b:93:2f:53:cd:71:3b:f1:1a:61:99:b1:25:74:87:c4:a1:17:
d7:ca:5e:e7:bc:a1:de:94:b6:64:da:bd:29:0e:be:a9:6a:a4:
e7:c5:3b:d5:36:f7:0a:7e:93:22:70:fd:8e:69:a1:97:f5:19:
a7:0a:bb:9c:e7:32:9e:14:2a:f0:e5:4e:62:39:b3:e0:87:15:
5e:88:31:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 14:04:52 2026 by rpki-client