Route Origin Authorization
$ rpki-client -vvvf krill.47272.net/repo/HYEHOST/5/AS218184.roa
File: AS218184.roa (raw, json)
Hash identifier: Lphcmbu7oG2/Ac01kRrDlaaxBj1u/7SlWeTOY7aZiro=
Subject key identifier: 70:48:9B:2E:AB:9F:26:8A:6E:6B:62:72:B6:72:F3:99:3E:6B:A3:C8
Certificate issuer: /CN=C3CF41898936CB9C573DB1EAAB94C6E669951FD7
Certificate serial: 15C74CB352CD225827272D60491600FD32B68D09
Authority key identifier: C3:CF:41:89:89:36:CB:9C:57:3D:B1:EA:AB:94:C6:E6:69:95:1F:D7
Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer
Subject info access: rsync://krill.47272.net/repo/HYEHOST/5/AS218184.roa
Signing time: Wed 11 Nov 2026 19:14:58 +0000
ROA not before: Wed 11 Nov 2026 19:09:58 +0000
ROA not after: Wed 10 Nov 2027 19:14:58 +0000
asID: 218184
IP address blocks: 2a0f:6280:10ac::/48 maxlen: 48
2a0f:6280:10ad::/48 maxlen: 48
2a0f:6280:10ae::/48 maxlen: 48
2a0f:6280:10af::/48 maxlen: 48
2a0f:6280:1114::/48 maxlen: 48
2a0f:6280:1115::/48 maxlen: 48
2a0f:6280:1116::/48 maxlen: 48
2a0f:6280:1117::/48 maxlen: 48
2a0f:6280:1118::/48 maxlen: 48
2a0f:6280:1119::/48 maxlen: 48
2a0f:6280:111a::/48 maxlen: 48
2a0f:6280:111b::/48 maxlen: 48
2a0f:6280:111c::/48 maxlen: 48
2a0f:6280:111d::/48 maxlen: 48
2a0f:6280:111e::/48 maxlen: 48
2a0f:6280:111f::/48 maxlen: 48
Validation: OK
Signature path: rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.crl
rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.mft
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 06:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
15:c7:4c:b3:52:cd:22:58:27:27:2d:60:49:16:00:fd:32:b6:8d:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C3CF41898936CB9C573DB1EAAB94C6E669951FD7
Validity
Not Before: Nov 11 19:09:58 2026 GMT
Not After : Nov 10 19:14:58 2027 GMT
Subject: CN=70489B2EAB9F268A6E6B6272B672F3993E6BA3C8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:eb:a7:f3:5b:b3:bc:12:88:3f:1c:74:d8:2b:
d8:35:60:58:c7:05:9e:48:5c:c7:ae:29:7f:36:7c:
ff:af:8d:e1:5f:92:ef:90:1f:04:b9:66:fd:87:35:
b8:88:70:88:2b:ed:61:bd:49:f6:60:3c:28:1d:e9:
77:8a:89:44:4c:ca:92:d0:63:b7:88:d3:65:92:b3:
b3:8d:81:80:7e:7b:9d:71:ba:c2:d8:ec:94:b5:33:
cd:69:19:66:b8:d6:70:d9:07:0f:f4:b0:d1:c8:f0:
a1:95:2a:4f:d6:48:fb:01:64:a9:83:f2:a1:7c:8b:
e4:35:b0:a4:d0:bc:a0:7a:bc:3c:68:7b:f8:45:d2:
f7:54:34:87:55:7a:ec:10:61:53:ad:07:32:b5:77:
35:1b:56:7b:2e:ad:21:89:e3:de:cc:71:ea:99:78:
db:ab:67:93:8b:8f:3f:f4:4c:e4:1f:fe:47:22:68:
4f:f9:ef:51:e2:c5:02:66:38:30:3e:4f:8a:95:1b:
63:10:0b:bd:40:d5:f5:c3:0e:28:35:37:1d:aa:1a:
21:f7:dc:1c:c3:7c:b4:a5:96:27:c4:ab:62:ee:66:
23:fd:51:7b:10:5d:5f:7b:0b:db:77:b5:11:b6:61:
30:cb:4d:11:98:28:b1:aa:bc:bd:7d:4a:c3:dd:79:
a6:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:48:9B:2E:AB:9F:26:8A:6E:6B:62:72:B6:72:F3:99:3E:6B:A3:C8
X509v3 Authority Key Identifier:
keyid:C3:CF:41:89:89:36:CB:9C:57:3D:B1:EA:AB:94:C6:E6:69:95:1F:D7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer
Subject Information Access:
Signed Object - URI:rsync://krill.47272.net/repo/HYEHOST/5/AS218184.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:6280:10ac::/46
2a0f:6280:1114::-2a0f:6280:111f:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
58:83:ec:b7:29:60:56:65:8f:f6:5f:f0:49:da:6e:a9:df:75:
1d:fb:7f:55:8b:ea:f8:02:eb:80:9f:1d:05:bb:83:88:d3:5b:
b1:ca:8f:7b:2d:de:7c:55:6b:4e:8b:e4:58:de:0d:91:ea:b3:
ef:e1:ce:e9:4a:b2:75:22:85:fc:3d:38:a9:f9:b4:b7:d6:0d:
e0:7a:7f:a7:86:69:49:eb:ec:f8:06:3a:57:4e:bb:3b:c9:27:
ad:25:90:cc:ac:d1:1c:87:14:95:2f:7e:3f:b6:7a:a1:70:3a:
4b:7f:0c:29:00:39:cb:a5:e8:89:cf:61:ed:d0:80:c9:87:bd:
a9:f5:e2:ee:14:e5:68:c4:34:95:94:58:4d:bd:94:8f:3e:76:
6a:5e:81:39:a4:61:c0:74:18:7f:ef:9a:cd:24:bd:75:e3:ed:
54:a7:99:93:0c:73:52:2b:e2:ef:18:f0:8d:22:59:13:e5:cb:
a9:8b:f5:52:ad:2b:36:a5:0f:25:df:2b:f7:e6:b7:df:b3:6d:
46:9f:de:63:6c:1d:67:fa:4f:07:f3:20:78:ac:7d:35:11:f7:
f7:fb:f7:f9:6c:8a:0b:df:c3:ca:ed:6a:96:4b:87:e4:c3:7a:
e8:c9:32:86:fb:7e:b1:de:b9:af:a3:02:b8:44:19:0f:cb:a1:
54:c7:24:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 12:37:05 2026 by rpki-client