Route Origin Authorization
$ rpki-client -vvf krill.47272.net/repo/HYEHOST/5/AS207113.roa
File: AS207113.roa (raw, json)
Hash identifier: VESEZ0KcoEDPmjQ+T5vuXaM25df3ZtXzeoBRuiEkuP0=
Subject key identifier: 79:7E:EA:C9:2A:8B:C4:6F:66:AF:6B:6D:28:6D:C0:DC:D0:EF:C1:C0
Certificate issuer: /CN=C3CF41898936CB9C573DB1EAAB94C6E669951FD7
Certificate serial: 166A3433CFD824A308C0C8A9296D8CC02F418AB4
Authority key identifier: C3:CF:41:89:89:36:CB:9C:57:3D:B1:EA:AB:94:C6:E6:69:95:1F:D7
Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer
Subject info access: rsync://krill.47272.net/repo/HYEHOST/5/AS207113.roa
Signing time: Sun 28 Jun 2026 18:57:22 +0000
ROA not before: Sun 28 Jun 2026 18:52:22 +0000
ROA not after: Sun 27 Jun 2027 18:57:22 +0000
asID: 207113
IP address blocks: 2a06:1281::/44 maxlen: 48
2a06:1281::/48 maxlen: 48
2a06:1281:1::/48 maxlen: 48
2a0f:6284:100::/40 maxlen: 40
2a0f:6284:100::/44 maxlen: 44
2a0f:6284:100::/48 maxlen: 48
2a0f:6284:101::/48 maxlen: 48
2a0f:6284:102::/48 maxlen: 48
2a0f:6284:150::/44 maxlen: 44
2a0f:6284:150::/48 maxlen: 48
2a0f:6284:151::/48 maxlen: 48
2a0f:6284:152::/48 maxlen: 48
2a0f:6284:160::/44 maxlen: 44
2a0f:6284:160::/48 maxlen: 48
2a0f:6284:161::/48 maxlen: 48
2a0f:6284:162::/48 maxlen: 48
2a0f:6284:180::/44 maxlen: 44
2a0f:6284:180::/48 maxlen: 48
2a0f:6284:181::/48 maxlen: 48
2a0f:6284:182::/48 maxlen: 48
2a0f:6284:190::/44 maxlen: 44
2a0f:6284:190::/48 maxlen: 48
2a0f:6284:191::/48 maxlen: 48
2a0f:6284:192::/48 maxlen: 48
2a0f:6284:1a0::/44 maxlen: 44
2a0f:6284:1a0::/48 maxlen: 48
2a0f:6284:1a1::/48 maxlen: 48
2a0f:6284:1a2::/48 maxlen: 48
2a0f:6284:1c0::/48 maxlen: 48
2a0f:6284:1f0::/48 maxlen: 48
2a0f:6284:4200::/44 maxlen: 48
Validation: OK
Signature path: rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.crl
rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.mft
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 12:59:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
16:6a:34:33:cf:d8:24:a3:08:c0:c8:a9:29:6d:8c:c0:2f:41:8a:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C3CF41898936CB9C573DB1EAAB94C6E669951FD7
Validity
Not Before: Jun 28 18:52:22 2026 GMT
Not After : Jun 27 18:57:22 2027 GMT
Subject: CN=797EEAC92A8BC46F66AF6B6D286DC0DCD0EFC1C0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:34:93:29:26:44:0c:3f:60:92:7b:29:76:59:
cf:e2:e9:0b:aa:31:0c:b6:9e:5a:a2:d8:9d:56:57:
d0:90:d6:2d:76:17:6b:ed:60:0b:9a:b7:b5:89:4b:
b5:79:07:ea:00:24:fb:1d:38:14:17:20:d4:6a:7f:
e5:8c:88:a1:f7:fc:ed:e1:c4:80:26:06:e8:1e:db:
e3:df:31:07:17:8f:67:a7:3e:35:71:9f:94:17:96:
73:5a:10:82:a2:c8:46:53:38:a7:0d:bf:56:ba:65:
88:48:b2:73:18:c4:8e:82:c8:2d:6b:e7:ec:a9:56:
96:db:d2:46:f0:9e:aa:f3:b8:18:b7:ed:1c:4d:66:
a5:f5:06:de:e8:cd:9d:3b:b1:d9:cd:02:c0:bb:9d:
b7:96:35:ef:a9:ce:2c:4c:3a:7f:95:65:29:c1:b7:
a6:1a:19:92:01:b2:95:45:bd:bc:e7:e6:a2:b6:92:
cd:a2:c3:e9:d8:22:4f:cc:1a:05:98:67:87:9f:9e:
42:ad:4c:7a:3f:ae:0b:66:7a:3e:15:a6:75:99:a9:
1d:b5:b9:62:6f:53:d9:da:c2:88:4b:c9:eb:98:e9:
76:0c:8b:32:30:99:8d:37:a7:aa:9b:7d:e1:44:be:
cf:c7:de:49:3a:dd:56:bb:f7:7c:05:fb:b9:7d:f7:
ed:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:7E:EA:C9:2A:8B:C4:6F:66:AF:6B:6D:28:6D:C0:DC:D0:EF:C1:C0
X509v3 Authority Key Identifier:
keyid:C3:CF:41:89:89:36:CB:9C:57:3D:B1:EA:AB:94:C6:E6:69:95:1F:D7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer
Subject Information Access:
Signed Object - URI:rsync://krill.47272.net/repo/HYEHOST/5/AS207113.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:1281::/44
2a0f:6284:100::/40
2a0f:6284:4200::/44
Signature Algorithm: sha256WithRSAEncryption
5e:a2:f9:3c:e5:7c:6c:9d:95:e5:a5:7a:93:77:55:77:3c:a1:
e1:a1:4d:77:ee:74:9d:69:9f:5c:36:11:00:3d:96:8e:33:a9:
a9:1d:17:91:fb:0e:69:1a:ed:ae:7a:0e:c5:41:c9:71:ab:01:
65:40:95:d9:ae:c6:cd:bf:f7:f2:fc:4e:19:67:4e:06:42:93:
93:c6:4d:90:b7:9a:5c:d3:88:2d:43:25:39:ff:5a:57:b9:ea:
33:16:18:24:6f:2c:32:90:f5:58:b5:d3:7a:ef:af:4e:63:bc:
ed:54:0b:5e:88:91:3e:2e:ec:d4:b9:c0:a2:0c:df:bb:f2:18:
73:26:be:ac:b2:b3:bb:9f:b9:d5:15:17:90:12:da:7f:21:91:
13:a5:c5:64:b0:21:cd:e8:e6:0b:6b:f3:d6:04:7b:e2:4f:1d:
78:ee:35:09:e1:7a:91:ae:e2:1d:f9:fd:e6:4e:41:53:65:8f:
e6:b6:ac:94:92:f0:27:66:18:3e:7e:63:d4:1a:51:0b:09:23:
4c:96:8e:af:5d:c6:fe:11:ab:fa:ca:ae:44:7a:ef:b0:94:73:
0a:01:93:a6:ab:fd:cc:1b:80:84:88:a1:90:85:a6:d5:4e:00:
3a:fe:34:7e:b4:f2:24:02:72:8e:f7:1b:66:04:89:b3:35:03:
fc:6b:a3:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 01:06:03 2026 by rpki-client