Route Origin Authorization
$ rpki-client -vvvf krill.47272.net/repo/HYEHOST/5/AS31898.roa
File: AS31898.roa (raw, json)
Hash identifier: W0lqf1skZzHhSPmiwv/AWTzgedinUxc9LVkT0UYu7go=
Subject key identifier: E2:EC:67:15:2F:BB:AB:E9:A3:42:BD:43:D2:F3:F5:A1:76:63:90:5E
Certificate issuer: /CN=C3CF41898936CB9C573DB1EAAB94C6E669951FD7
Certificate serial: 14C59180FD4C2F89BD18BA13D965FE8600AC0866
Authority key identifier: C3:CF:41:89:89:36:CB:9C:57:3D:B1:EA:AB:94:C6:E6:69:95:1F:D7
Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer
Subject info access: rsync://krill.47272.net/repo/HYEHOST/5/AS31898.roa
Signing time: Wed 04 Nov 2026 16:58:14 +0000
ROA not before: Wed 04 Nov 2026 16:53:14 +0000
ROA not after: Wed 03 Nov 2027 16:58:14 +0000
asID: 31898
IP address blocks: 2a05:dfc3:f6ce::/48 maxlen: 48
2a05:dfc3:f760::/44 maxlen: 48
2a0a:6044:6d00::/48 maxlen: 48
2a0a:6044:77fe::/48 maxlen: 48
2a0f:6282:2108::/47 maxlen: 47
2a0f:6282:210a::/48 maxlen: 48
2a0f:6282:210b::/48 maxlen: 48
2a0f:6284:4c10::/44 maxlen: 48
2a0f:6284:4c20::/44 maxlen: 48
Validation: OK
Signature path: rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.crl
rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.mft
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 12 Nov 2026 01:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
14:c5:91:80:fd:4c:2f:89:bd:18:ba:13:d9:65:fe:86:00:ac:08:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C3CF41898936CB9C573DB1EAAB94C6E669951FD7
Validity
Not Before: Nov 4 16:53:14 2026 GMT
Not After : Nov 3 16:58:14 2027 GMT
Subject: CN=E2EC67152FBBABE9A342BD43D2F3F5A17663905E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:5a:de:e8:81:10:8e:a2:d5:10:f3:95:8a:76:
66:52:f3:aa:38:0c:53:75:d9:d1:29:96:3c:88:59:
20:d7:e4:50:03:44:bc:6c:47:e7:24:c7:88:a1:db:
ac:69:21:be:6e:f8:39:5b:d8:7a:c4:46:04:d6:35:
db:3b:50:3c:f4:06:9a:1a:db:2d:fe:b5:95:72:27:
08:dd:b7:0e:cf:07:bf:b2:81:dc:96:2f:19:76:70:
1d:a2:32:98:5f:44:61:c1:c5:1d:ae:0c:5f:15:87:
16:07:58:03:cb:ed:34:f4:b8:2c:b6:97:3e:f1:27:
33:16:9c:d9:87:a5:17:a0:b1:4b:8e:c4:0e:a6:98:
93:71:2e:c1:e0:ec:bb:93:8d:ea:c7:c4:f6:ba:e1:
a1:ab:77:57:37:6e:8b:91:8b:af:d6:9f:92:65:a6:
52:54:54:9e:46:30:78:1c:49:59:92:56:28:83:6b:
82:92:95:6c:71:69:a5:7f:3a:ac:d8:7c:10:d6:a8:
4b:7d:1f:1a:7a:47:29:e0:4a:a8:14:74:9f:51:10:
be:f2:a9:c1:06:63:1c:80:12:ec:71:83:51:9f:23:
2a:6f:e9:e4:e9:ca:b3:a0:82:2d:c5:0d:e1:ae:01:
df:1f:bc:79:bb:12:f4:3d:cc:03:36:48:bd:d5:45:
3f:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:EC:67:15:2F:BB:AB:E9:A3:42:BD:43:D2:F3:F5:A1:76:63:90:5E
X509v3 Authority Key Identifier:
keyid:C3:CF:41:89:89:36:CB:9C:57:3D:B1:EA:AB:94:C6:E6:69:95:1F:D7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer
Subject Information Access:
Signed Object - URI:rsync://krill.47272.net/repo/HYEHOST/5/AS31898.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:dfc3:f6ce::/48
2a05:dfc3:f760::/44
2a0a:6044:6d00::/48
2a0a:6044:77fe::/48
2a0f:6282:2108::/46
2a0f:6284:4c10::-2a0f:6284:4c2f:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
4f:03:2e:5a:13:8b:e8:9a:f3:4e:f4:a9:4b:86:84:95:61:aa:
11:ca:71:3b:2f:2c:b9:a8:f9:7a:3b:8a:e5:ba:54:3f:28:ba:
8c:51:fa:6c:46:a3:5c:dc:22:72:c7:45:f1:17:49:c1:ff:53:
5f:08:47:a2:6c:09:51:94:4d:3d:24:88:71:20:7a:c6:b0:74:
eb:38:d1:8e:95:96:ff:92:9a:4e:2f:13:40:ed:c5:36:ae:c1:
31:1a:9f:88:76:76:a2:af:d8:c6:4b:be:6a:5d:ed:d0:e6:a5:
61:30:18:62:8f:e3:2b:e7:fc:09:22:c2:8f:8f:97:af:57:2e:
2f:44:6c:d1:43:d0:4c:a7:6f:76:15:1d:32:26:f9:f8:12:5c:
c2:59:67:eb:25:0a:fe:ba:fa:e8:48:98:b6:0e:52:59:a0:04:
c4:b1:fc:7a:18:b7:36:9b:23:a5:92:0f:06:39:7c:76:b2:ae:
79:08:2e:7a:99:70:21:32:1b:89:d7:fe:e5:13:16:ff:2f:8f:
7b:0d:92:80:b6:95:01:ec:fd:e2:c9:60:c7:99:13:85:68:b6:
f9:8c:25:3e:57:05:40:bc:be:5e:5b:00:c9:b3:35:3e:48:d4:
b3:5e:76:13:44:d5:73:a1:bf:bf:2f:b6:b1:cd:67:f1:c7:58:
9a:ff:3f:da
-----BEGIN CERTIFICATE-----
MIIFDDCCA/SgAwIBAgIUFMWRgP1ML4m9GLoT2WX+hgCsCGYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQzNDRjQxODk4OTM2Q0I5QzU3M0RCMUVBQUI5NEM2RTY2
OTk1MUZENzAeFw0yNjExMDQxNjUzMTRaFw0yNzExMDMxNjU4MTRaMDMxMTAvBgNV
BAMTKEUyRUM2NzE1MkZCQkFCRTlBMzQyQkQ0M0QyRjNGNUExNzY2MzkwNUUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCvWt7ogRCOotUQ85WKdmZS86o4
DFN12dEpljyIWSDX5FADRLxsR+ckx4ih26xpIb5u+Dlb2HrERgTWNds7UDz0Bpoa
2y3+tZVyJwjdtw7PB7+ygdyWLxl2cB2iMphfRGHBxR2uDF8VhxYHWAPL7TT0uCy2
lz7xJzMWnNmHpRegsUuOxA6mmJNxLsHg7LuTjerHxPa64aGrd1c3bouRi6/Wn5Jl
plJUVJ5GMHgcSVmSViiDa4KSlWxxaaV/OqzYfBDWqEt9Hxp6RyngSqgUdJ9REL7y
qcEGYxyAEuxxg1GfIypv6eTpyrOggi3FDeGuAd8fvHm7EvQ9zAM2SL3VRT+NAgMB
AAGjggIWMIICEjAdBgNVHQ4EFgQU4uxnFS+7q+mjQr1D0vP1oXZjkF4wHwYDVR0j
BBgwFoAUw89BiYk2y5xXPbHqq5TG5mmVH9cwDgYDVR0PAQH/BAQDAgeAMGQGA1Ud
HwRdMFswWaBXoFWGU3JzeW5jOi8va3JpbGwuNDcyNzIubmV0L3JlcG8vSFlFSE9T
VC81L0MzQ0Y0MTg5ODkzNkNCOUM1NzNEQjFFQUFCOTRDNkU2Njk5NTFGRDcuY3Js
MIGTBggrBgEFBQcBAQSBhjCBgzCBgAYIKwYBBQUHMAKGdHJzeW5jOi8vcnBraS1y
cHMuYXJpbi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZjg1MGQwNjNlMDE4NTc1NWM5
MWJlM2Y5ZC83L0MzQ0Y0MTg5ODkzNkNCOUM1NzNEQjFFQUFCOTRDNkU2Njk5NTFG
RDcuY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9rcmls
bC40NzI3Mi5uZXQvcmVwby9IWUVIT1NULzUvQVMzMTg5OC5yb2EwGAYDVR0gAQH/
BA4wDDAKBggrBgEFBQcOAjBaBggrBgEFBQcBBwEB/wRLMEkwRwQCAAIwQQMHACoF
38P2zgMHBCoF38P3YAMHACoKYERtAAMHACoKYER3/gMHAioPYoIhCDASAwcEKg9i
hEwQAwcEKg9ihEwgMA0GCSqGSIb3DQEBCwUAA4IBAQBPAy5aE4vomvNO9KlLhoSV
YaoRynE7Lyy5qPl6O4rlulQ/KLqMUfpsRqNc3CJyx0XxF0nB/1NfCEeibAlRlE09
JIhxIHrGsHTrONGOlZb/kppOLxNA7cU2rsExGp+Idnair9jGS75qXe3Q5qVhMBhi
j+Mr5/wJIsKPj5evVy4vRGzRQ9BMp292FR0yJvn4ElzCWWfrJQr+uvroSJi2DlJZ
oATEsfx6GLc2myOlkg8GOXx2sq55CC56mXAhMhuJ1/7lExb/L497DZKAtpUB7P3i
yWDHmROFaLb5jCU+VwVAvL5eWwDJszU+SNSzXnYTRNVzob+/L7axzWfxx1ia/z/a
-----END CERTIFICATE-----
Generated at Wed Nov 11 09:07:37 2026 by rpki-client