Route Origin Authorization
$ rpki-client -vvf krill.47272.net/repo/HYEHOST/5/AS214040.roa
File: AS214040.roa (raw, json)
Hash identifier: imbpzOl7IgQYCa1773ZGa0oEqE+px4MQQcmXI2+F7MA=
Subject key identifier: 23:8C:EF:44:97:7C:5E:6E:34:92:54:A9:CB:1F:6E:F6:9B:08:CD:69
Certificate issuer: /CN=C3CF41898936CB9C573DB1EAAB94C6E669951FD7
Certificate serial: 3F2F7FF993B1E3A12CB45F6C1F383288F6CEFFE0
Authority key identifier: C3:CF:41:89:89:36:CB:9C:57:3D:B1:EA:AB:94:C6:E6:69:95:1F:D7
Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer
Subject info access: rsync://krill.47272.net/repo/HYEHOST/5/AS214040.roa
Signing time: Sun 19 Jul 2026 04:57:12 +0000
ROA not before: Sun 19 Jul 2026 04:52:12 +0000
ROA not after: Sun 18 Jul 2027 04:57:12 +0000
asID: 214040
IP address blocks: 2a06:1281:8000::/36 maxlen: 36
2a0f:6280:d000::/36 maxlen: 48
2a0f:6280:e000::/36 maxlen: 48
2a0f:6282:a000::/36 maxlen: 36
2a0f:6282:e000::/36 maxlen: 36
2a0f:6283:2000::/36 maxlen: 36
2a0f:6283:8000::/36 maxlen: 36
Validation: OK
Signature path: rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.crl
rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.mft
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 12:59:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3f:2f:7f:f9:93:b1:e3:a1:2c:b4:5f:6c:1f:38:32:88:f6:ce:ff:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C3CF41898936CB9C573DB1EAAB94C6E669951FD7
Validity
Not Before: Jul 19 04:52:12 2026 GMT
Not After : Jul 18 04:57:12 2027 GMT
Subject: CN=238CEF44977C5E6E349254A9CB1F6EF69B08CD69
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:e5:e1:f0:01:96:14:b8:ff:63:c1:26:b5:6f:
eb:da:70:6a:65:7e:be:91:a1:e9:e9:dd:74:6c:c8:
ed:bb:98:f4:77:d4:b3:99:67:32:d5:b2:13:71:af:
fc:e5:0f:04:c6:5c:ad:46:ad:ef:2e:72:8a:d6:c7:
1a:5b:8a:52:dc:76:5d:f9:49:a0:36:c1:83:f9:6c:
d1:e2:23:00:ba:88:51:13:39:7b:05:24:9c:62:f0:
33:83:9a:ad:3f:27:4d:96:34:57:0e:6f:03:0e:02:
4b:f7:11:2f:4e:69:a3:b3:53:bd:c8:a2:cd:7b:54:
75:cb:a8:c7:8b:d8:68:ff:44:bb:27:fe:8f:2e:10:
4b:39:ad:ba:f2:06:28:3b:2d:20:74:d7:10:ad:94:
4e:cb:1b:63:f6:a1:3c:90:a2:53:e7:01:a6:ff:64:
e5:4e:af:e6:3c:5f:41:eb:f4:07:f0:f3:38:c4:3f:
8d:66:f5:ea:d4:45:33:f2:ba:35:4f:1e:a2:b8:ea:
64:ea:e4:0a:a0:28:03:a6:b3:e7:7f:9c:e8:8b:a8:
e5:e7:f8:a3:31:3f:55:dd:71:1b:c0:d3:11:59:76:
22:9d:d8:17:89:bf:b9:e8:77:bd:fb:30:fa:ae:00:
a2:ab:16:56:49:e7:21:24:70:f5:06:80:e8:af:9b:
94:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:8C:EF:44:97:7C:5E:6E:34:92:54:A9:CB:1F:6E:F6:9B:08:CD:69
X509v3 Authority Key Identifier:
keyid:C3:CF:41:89:89:36:CB:9C:57:3D:B1:EA:AB:94:C6:E6:69:95:1F:D7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer
Subject Information Access:
Signed Object - URI:rsync://krill.47272.net/repo/HYEHOST/5/AS214040.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:1281:8000::/36
2a0f:6280:d000::-2a0f:6280:efff:ffff:ffff:ffff:ffff:ffff
2a0f:6282:a000::/36
2a0f:6282:e000::/36
2a0f:6283:2000::/36
2a0f:6283:8000::/36
Signature Algorithm: sha256WithRSAEncryption
1f:75:1e:37:0b:cb:9c:01:56:43:28:96:7d:4f:14:0b:48:74:
17:41:bd:8a:d5:f1:7c:ab:79:1b:c5:a8:e3:e3:02:28:46:31:
90:43:19:12:a7:d7:6a:77:87:77:7a:13:77:ed:9e:d4:c9:82:
a3:a4:26:fd:c5:14:69:35:7f:31:d6:e4:99:93:b5:9f:f7:b6:
77:f8:95:12:b0:fd:5e:7c:da:ef:7e:f5:4e:74:7c:14:40:f4:
9e:04:21:1b:ca:87:ae:4b:82:20:0b:ad:ff:58:c1:c6:46:34:
e5:cc:64:82:2c:f4:25:02:f1:c8:40:78:3e:bf:01:a2:96:66:
b1:00:86:5f:db:1f:6f:95:73:78:9a:25:34:7b:5b:0f:fc:3a:
96:67:69:67:94:75:91:1d:da:10:31:a8:1b:d6:f0:57:64:bd:
a6:3e:4c:df:9f:e5:db:65:5a:a5:f0:15:b9:57:8f:7f:46:98:
c2:ab:21:80:eb:ec:50:a4:83:85:8b:6a:4b:84:52:27:00:6b:
f5:d9:0a:52:72:96:71:0d:4c:c0:52:7e:e4:3b:c3:0e:1a:b6:
b4:a3:dc:82:36:e1:ae:54:76:b5:75:d0:ad:f4:66:b8:c4:03:
93:bc:f8:da:b7:2d:07:f6:6f:ea:8c:ea:01:f7:5e:11:77:61:
00:cf:cb:06
-----BEGIN CERTIFICATE-----
MIIFBjCCA+6gAwIBAgIUPy9/+ZOx46EstF9sHzgyiPbO/+AwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQzNDRjQxODk4OTM2Q0I5QzU3M0RCMUVBQUI5NEM2RTY2
OTk1MUZENzAeFw0yNjA3MTkwNDUyMTJaFw0yNzA3MTgwNDU3MTJaMDMxMTAvBgNV
BAMTKDIzOENFRjQ0OTc3QzVFNkUzNDkyNTRBOUNCMUY2RUY2OUIwOENENjkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDf5eHwAZYUuP9jwSa1b+vacGpl
fr6Roenp3XRsyO27mPR31LOZZzLVshNxr/zlDwTGXK1Gre8ucorWxxpbilLcdl35
SaA2wYP5bNHiIwC6iFETOXsFJJxi8DODmq0/J02WNFcObwMOAkv3ES9OaaOzU73I
os17VHXLqMeL2Gj/RLsn/o8uEEs5rbryBig7LSB01xCtlE7LG2P2oTyQolPnAab/
ZOVOr+Y8X0Hr9Afw8zjEP41m9erURTPyujVPHqK46mTq5AqgKAOms+d/nOiLqOXn
+KMxP1XdcRvA0xFZdiKd2BeJv7nod737MPquAKKrFlZJ5yEkcPUGgOivm5QpAgMB
AAGjggIQMIICDDAdBgNVHQ4EFgQUI4zvRJd8Xm40klSpyx9u9psIzWkwHwYDVR0j
BBgwFoAUw89BiYk2y5xXPbHqq5TG5mmVH9cwDgYDVR0PAQH/BAQDAgeAMGQGA1Ud
HwRdMFswWaBXoFWGU3JzeW5jOi8va3JpbGwuNDcyNzIubmV0L3JlcG8vSFlFSE9T
VC81L0MzQ0Y0MTg5ODkzNkNCOUM1NzNEQjFFQUFCOTRDNkU2Njk5NTFGRDcuY3Js
MIGTBggrBgEFBQcBAQSBhjCBgzCBgAYIKwYBBQUHMAKGdHJzeW5jOi8vcnBraS1y
cHMuYXJpbi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZjg1MGQwNjNlMDE4NTc1NWM5
MWJlM2Y5ZC83L0MzQ0Y0MTg5ODkzNkNCOUM1NzNEQjFFQUFCOTRDNkU2Njk5NTFG
RDcuY2VyME8GCCsGAQUFBwELBEMwQTA/BggrBgEFBQcwC4YzcnN5bmM6Ly9rcmls
bC40NzI3Mi5uZXQvcmVwby9IWUVIT1NULzUvQVMyMTQwNDAucm9hMBgGA1UdIAEB
/wQOMAwwCgYIKwYBBQUHDgIwUwYIKwYBBQUHAQcBAf8ERDBCMEAEAgACMDoDBgQq
BhKBgDAQAwYEKg9igNADBgQqD2KA4AMGBCoPYoKgAwYEKg9iguADBgQqD2KDIAMG
BCoPYoOAMA0GCSqGSIb3DQEBCwUAA4IBAQAfdR43C8ucAVZDKJZ9TxQLSHQXQb2K
1fF8q3kbxajj4wIoRjGQQxkSp9dqd4d3ehN37Z7UyYKjpCb9xRRpNX8x1uSZk7Wf
97Z3+JUSsP1efNrvfvVOdHwUQPSeBCEbyoeuS4IgC63/WMHGRjTlzGSCLPQlAvHI
QHg+vwGilmaxAIZf2x9vlXN4miU0e1sP/DqWZ2lnlHWRHdoQMagb1vBXZL2mPkzf
n+XbZVql8BW5V49/RpjCqyGA6+xQpIOFi2pLhFInAGv12QpScpZxDUzAUn7kO8MO
Gra0o9yCNuGuVHa1ddCt9Ga4xAOTvPjaty0H9m/qjOoB914Rd2EAz8sG
-----END CERTIFICATE-----
Generated at Thu Jul 23 23:48:26 2026 by rpki-client