Route Origin Authorization
$ rpki-client -vvf krill.47272.net/repo/HYEHOST/5/AS205378.roa
File: AS205378.roa (raw, json)
Hash identifier: EaqIuwv1S6MJzx7LvuGsvhAwqdeegWqXkibu+NnS1Ws=
Subject key identifier: 4D:A1:9E:37:80:11:15:41:C6:75:1D:BE:C2:EC:50:C1:68:51:1E:CD
Certificate issuer: /CN=C3CF41898936CB9C573DB1EAAB94C6E669951FD7
Certificate serial: 34A406800B0A879BD77B057ED91FA8DB628C7A50
Authority key identifier: C3:CF:41:89:89:36:CB:9C:57:3D:B1:EA:AB:94:C6:E6:69:95:1F:D7
Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer
Subject info access: rsync://krill.47272.net/repo/HYEHOST/5/AS205378.roa
Signing time: Sun 08 Mar 2026 21:17:40 +0000
ROA not before: Sun 08 Mar 2026 21:12:40 +0000
ROA not after: Sun 07 Mar 2027 21:17:40 +0000
asID: 205378
IP address blocks: 2a0f:6284:4600::/42 maxlen: 42
2a0f:6284:46a0::/48 maxlen: 48
2a0f:6284:46a1::/48 maxlen: 48
2a0f:6284:46b0::/48 maxlen: 48
2a0f:6284:46b1::/48 maxlen: 48
2a0f:6284:46ba::/48 maxlen: 48
2a0f:6284:46cc::/48 maxlen: 48
2a0f:6284:46e0::/48 maxlen: 48
2a0f:6284:46ea::/48 maxlen: 48
2a0f:6284:46f0::/48 maxlen: 48
2a0f:6284:46ff::/48 maxlen: 48
Validation: OK
Signature path: rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.crl
rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.mft
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 23:11:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
34:a4:06:80:0b:0a:87:9b:d7:7b:05:7e:d9:1f:a8:db:62:8c:7a:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C3CF41898936CB9C573DB1EAAB94C6E669951FD7
Validity
Not Before: Mar 8 21:12:40 2026 GMT
Not After : Mar 7 21:17:40 2027 GMT
Subject: CN=4DA19E3780111541C6751DBEC2EC50C168511ECD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:ec:83:37:70:0b:a0:4f:ac:72:2c:70:f0:51:
bb:fb:b2:af:13:a6:c7:3b:71:ed:ca:78:53:1b:78:
9a:7c:bb:97:21:9a:75:6d:54:b4:a7:88:bd:f9:34:
d2:59:da:f5:bc:d6:15:6f:49:bb:3a:b2:ed:ad:e5:
6a:6b:96:55:21:4c:9c:4b:fe:37:95:35:10:c7:b4:
26:1c:6c:6a:75:4d:8c:0f:b4:bf:f1:2c:a6:ae:43:
cc:d1:c3:c5:cb:59:f1:ab:4c:7d:d3:3e:1b:d6:45:
05:dd:42:06:b4:e0:09:75:11:93:07:6c:41:bf:22:
54:18:ff:7c:42:38:36:66:35:96:77:14:05:9d:da:
c4:32:bf:79:af:04:01:17:48:ee:4c:f1:a3:d5:75:
8d:20:34:6a:96:47:26:dc:d1:6e:44:6c:93:87:40:
5c:9e:0f:a8:a3:58:97:fd:dc:5a:dd:9f:e0:62:85:
93:f8:66:68:f7:98:05:1d:b9:68:ae:e5:da:c6:23:
8a:d3:0e:8f:3e:1b:d0:9b:cc:76:6d:57:95:89:2f:
32:24:4a:b1:f5:70:20:d6:0b:12:f4:b5:12:2a:ed:
af:61:3f:9c:70:1f:bc:8d:8f:08:36:26:a3:7c:ce:
89:0b:0c:e1:77:8d:11:5c:c1:e4:f4:85:9f:0b:0d:
b1:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:A1:9E:37:80:11:15:41:C6:75:1D:BE:C2:EC:50:C1:68:51:1E:CD
X509v3 Authority Key Identifier:
keyid:C3:CF:41:89:89:36:CB:9C:57:3D:B1:EA:AB:94:C6:E6:69:95:1F:D7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer
Subject Information Access:
Signed Object - URI:rsync://krill.47272.net/repo/HYEHOST/5/AS205378.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:6284:4600::/42
2a0f:6284:46a0::/47
2a0f:6284:46b0::/47
2a0f:6284:46ba::/48
2a0f:6284:46cc::/48
2a0f:6284:46e0::/48
2a0f:6284:46ea::/48
2a0f:6284:46f0::/48
2a0f:6284:46ff::/48
Signature Algorithm: sha256WithRSAEncryption
26:2a:3c:55:76:24:79:56:7b:7e:76:f9:46:8e:51:ad:3c:7e:
64:e5:c7:2f:2d:73:1d:67:ee:a1:2b:91:91:10:38:cb:94:4c:
d1:83:2d:da:ee:db:64:5a:d5:f5:a9:09:e2:04:75:f0:bc:c5:
62:15:83:93:bf:1f:18:8f:28:fb:7d:89:f3:72:84:dd:2d:31:
4b:0d:a7:77:4e:8c:23:da:29:4d:a6:01:42:2d:d1:b0:73:88:
01:69:cb:9c:20:c3:a8:5e:c5:f3:b2:b8:71:32:38:dd:9b:b3:
99:52:65:61:68:86:70:2d:3c:57:5f:a1:9b:b5:53:f5:fb:29:
7f:31:33:9c:77:07:dc:0f:d9:81:a9:c6:bd:de:b3:8a:8a:6c:
80:52:1d:36:60:ae:26:91:dd:b3:6d:ab:28:dc:89:0f:4a:04:
16:90:eb:e2:ed:1f:97:a0:01:52:8e:67:e7:1a:27:bf:1a:7a:
39:a2:61:ee:f7:99:16:ed:c6:99:45:b1:4d:04:c7:c6:95:54:
14:98:bd:ea:14:7c:55:b4:cb:0f:f3:ec:4c:82:8d:17:63:fe:
54:bb:36:e7:9f:f9:54:e0:a1:bc:88:41:40:25:4b:18:8b:ea:
9d:58:34:43:8e:dc:0a:c7:5c:98:71:33:6f:89:a0:74:32:2e:
88:b9:97:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 05:30:22 2026 by rpki-client