Route Origin Authorization
$ rpki-client -vvf krill.47272.net/repo/HYEHOST/5/AS216401.roa
File: AS216401.roa (raw, json)
Hash identifier: 3t35xtu7BW2i0NN+NJcysbXqcgKA6DISGkmAU1b3f5U=
Subject key identifier: B0:0A:7E:DC:75:6F:0B:5A:19:C5:D9:68:6C:91:6F:CA:5C:BD:DA:41
Certificate issuer: /CN=C3CF41898936CB9C573DB1EAAB94C6E669951FD7
Certificate serial: 6291A230371E18C021787D64548059525DD5B444
Authority key identifier: C3:CF:41:89:89:36:CB:9C:57:3D:B1:EA:AB:94:C6:E6:69:95:1F:D7
Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer
Subject info access: rsync://krill.47272.net/repo/HYEHOST/5/AS216401.roa
Signing time: Sun 28 Jun 2026 18:57:34 +0000
ROA not before: Sun 28 Jun 2026 18:52:34 +0000
ROA not after: Sun 27 Jun 2027 18:57:34 +0000
asID: 216401
IP address blocks: 2a0a:6044:b500::/40 maxlen: 40
2a0a:6044:b500::/44 maxlen: 44
2a0a:6044:b510::/44 maxlen: 44
2a0a:6044:b520::/44 maxlen: 44
2a0a:6044:b530::/44 maxlen: 44
2a0a:6044:b540::/44 maxlen: 44
2a0a:6044:b550::/44 maxlen: 44
2a0a:6044:b560::/44 maxlen: 44
2a0a:6044:b570::/44 maxlen: 44
2a0a:6044:b580::/44 maxlen: 44
2a0a:6044:b590::/44 maxlen: 44
2a0a:6044:b5c0::/44 maxlen: 44
2a0a:6044:b5d0::/44 maxlen: 44
2a0a:6044:b5e0::/44 maxlen: 48
2a0a:6044:b5f0::/44 maxlen: 48
2a0f:6284:2000::/36 maxlen: 36
2a0f:6284:2000::/44 maxlen: 48
2a0f:6284:2010::/44 maxlen: 48
2a0f:6284:2020::/44 maxlen: 48
2a0f:6284:2030::/44 maxlen: 48
2a0f:6284:2040::/44 maxlen: 48
2a0f:6284:2050::/44 maxlen: 48
2a0f:6284:2060::/44 maxlen: 48
2a0f:6284:2070::/44 maxlen: 48
2a0f:6284:2080::/44 maxlen: 44
2a0f:6284:2090::/44 maxlen: 44
2a0f:6284:20a0::/44 maxlen: 44
2a0f:6284:20b0::/44 maxlen: 44
2a0f:6284:20c0::/44 maxlen: 44
2a0f:6284:20d0::/44 maxlen: 44
Validation: OK
Signature path: rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.crl
rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.mft
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 12:59:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
62:91:a2:30:37:1e:18:c0:21:78:7d:64:54:80:59:52:5d:d5:b4:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C3CF41898936CB9C573DB1EAAB94C6E669951FD7
Validity
Not Before: Jun 28 18:52:34 2026 GMT
Not After : Jun 27 18:57:34 2027 GMT
Subject: CN=B00A7EDC756F0B5A19C5D9686C916FCA5CBDDA41
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:1a:33:b2:b4:cd:93:56:3f:29:03:50:7f:44:
cd:2f:b5:3f:fe:59:6b:50:33:ee:97:fd:4f:bb:bd:
1f:41:72:42:29:28:40:40:5e:9b:e5:fd:f1:cf:a7:
c8:9a:33:86:36:8a:ee:c5:fa:77:8e:2c:bc:3a:ba:
29:4b:e9:71:62:48:e7:a6:83:fd:0a:41:13:ca:57:
eb:22:b0:9d:89:5a:e4:89:5f:37:f8:5a:28:9b:91:
db:52:a5:53:29:4f:22:b3:47:23:66:93:7e:af:70:
18:9f:2b:aa:97:e3:72:e8:5d:14:78:0a:12:8f:e8:
19:80:ff:ed:2d:00:67:ee:ab:eb:1f:21:ab:d5:e5:
e4:0a:ba:40:f8:2a:84:b6:16:1e:3b:66:32:47:b9:
41:92:d1:c1:b1:98:f3:6a:dc:3b:34:58:af:c9:6f:
9f:c4:02:ba:f1:8c:80:9c:d7:c3:4f:e5:3b:3e:58:
6e:5f:f3:90:6d:8e:80:f1:75:44:6a:d5:60:c8:01:
21:a3:6b:2a:ee:a7:56:c0:f3:51:ab:fb:bb:e5:70:
ac:df:ff:12:62:f0:d4:be:b6:a3:02:ac:40:48:0a:
0a:c1:5c:12:53:4c:30:7c:dd:8b:3a:79:7d:5a:b1:
08:17:8c:0d:6a:4f:d7:2f:ba:8f:5a:c2:fd:6d:f6:
36:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:0A:7E:DC:75:6F:0B:5A:19:C5:D9:68:6C:91:6F:CA:5C:BD:DA:41
X509v3 Authority Key Identifier:
keyid:C3:CF:41:89:89:36:CB:9C:57:3D:B1:EA:AB:94:C6:E6:69:95:1F:D7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer
Subject Information Access:
Signed Object - URI:rsync://krill.47272.net/repo/HYEHOST/5/AS216401.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0a:6044:b500::/40
2a0f:6284:2000::/36
Signature Algorithm: sha256WithRSAEncryption
3c:04:6f:da:de:09:6d:eb:e2:31:75:ce:01:40:3f:75:94:dd:
a1:60:b3:4d:5b:fc:0e:2a:46:fd:ae:52:d1:03:7d:99:05:a9:
47:1e:ef:f5:b8:2b:c5:89:0e:fe:89:50:dc:05:b0:9d:36:fb:
8d:01:d4:c9:47:0c:3d:cb:b0:d3:ed:05:bb:82:81:83:6f:5a:
2e:5a:cb:54:e2:32:eb:60:e8:74:11:05:f1:50:0a:f3:0a:07:
b5:35:ab:5a:3a:27:a6:75:5b:e6:f6:0b:06:6d:4c:c8:ba:93:
a4:cd:70:63:99:08:85:05:01:d7:8f:c5:f6:8b:1e:6a:60:9e:
4d:82:b9:8c:78:d8:68:e5:97:5f:fa:23:ef:22:27:a6:3f:5a:
d8:dc:94:cf:d2:68:01:cb:40:c0:fb:5f:24:6e:8d:b6:07:7b:
7e:32:bb:8a:7b:a1:86:87:7c:6f:27:94:c1:bf:40:47:81:1d:
ea:06:b8:78:59:65:e6:11:7b:7a:31:89:3a:5d:ed:a5:9b:41:
61:52:f0:51:b6:36:a6:79:cd:80:a5:33:66:8d:4e:17:0f:a1:
f5:43:66:7b:59:e5:d0:a2:a7:23:8b:71:81:ed:4a:5e:47:34:
4d:6a:f4:37:ca:84:ab:7c:88:f0:a9:99:ab:42:f5:7e:8d:51:
57:85:f9:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 23:51:25 2026 by rpki-client