Route Origin Authorization
$ rpki-client -vvvf krill.47272.net/repo/HYEHOST/5/AS47272.roa
File: AS47272.roa (raw, json)
Hash identifier: rbbtokFXTPVGkPw2IrE3uhEHk4gGXjkjS3sEOVrps7g=
Subject key identifier: 04:14:CB:19:4C:0B:56:DE:FA:10:BC:27:BB:96:6C:EE:B9:95:62:5E
Certificate issuer: /CN=C3CF41898936CB9C573DB1EAAB94C6E669951FD7
Certificate serial: 6CE77BA5A28920CC1D31C8C3626C8325E7C0ECA9
Authority key identifier: C3:CF:41:89:89:36:CB:9C:57:3D:B1:EA:AB:94:C6:E6:69:95:1F:D7
Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer
Subject info access: rsync://krill.47272.net/repo/HYEHOST/5/AS47272.roa
Signing time: Tue 10 Nov 2026 21:50:11 +0000
ROA not before: Tue 10 Nov 2026 21:45:11 +0000
ROA not after: Tue 09 Nov 2027 21:50:11 +0000
asID: 47272
IP address blocks: 199.47.240.0/24 maxlen: 32
2a06:1281:1000::/36 maxlen: 36
2a0f:6280:a::/48 maxlen: 48
2a0f:6280:13::/48 maxlen: 48
2a0f:6280:15::/48 maxlen: 48
2a0f:6280:18::/48 maxlen: 48
2a0f:6280:1d::/48 maxlen: 48
2a0f:6280:1f::/48 maxlen: 48
2a0f:6280:1005::/48 maxlen: 48
2a0f:6280:1006::/48 maxlen: 48
2a0f:6280:100b::/48 maxlen: 48
2a0f:6280:100f::/48 maxlen: 48
2a0f:6280:1054::/47 maxlen: 48
2a0f:6280:1056::/48 maxlen: 48
2a0f:6280:1058::/46 maxlen: 48
2a0f:6280:105c::/47 maxlen: 48
2a0f:6280:105e::/48 maxlen: 48
2a0f:6280:105f::/48 maxlen: 48
2a0f:6280:1081::/48 maxlen: 48
2a0f:6280:1082::/48 maxlen: 48
2a0f:6280:1083::/48 maxlen: 48
2a0f:6280:108a::/48 maxlen: 48
2a0f:6280:108f::/48 maxlen: 48
2a0f:6280:1090::/44 maxlen: 48
2a0f:6280:10a8::/48 maxlen: 48
2a0f:6280:10b0::/44 maxlen: 48
2a0f:6280:1300::/40 maxlen: 48
2a0f:6280:1a00::/40 maxlen: 48
2a0f:6280:1b00::/40 maxlen: 48
2a0f:6280:2000::/40 maxlen: 48
2a0f:6280:2100::/40 maxlen: 48
2a0f:6280:2400::/38 maxlen: 48
2a0f:6280:2800::/38 maxlen: 48
2a0f:6280:3000::/36 maxlen: 48
2a0f:6280:4000::/36 maxlen: 48
2a0f:6280:5000::/38 maxlen: 48
2a0f:6280:5400::/38 maxlen: 48
2a0f:6280:5800::/38 maxlen: 48
2a0f:6280:f000::/36 maxlen: 36
2a0f:6282:4000::/36 maxlen: 48
2a0f:6282:7000::/36 maxlen: 48
2a0f:6282:9000::/36 maxlen: 48
2a0f:6283:a000::/36 maxlen: 48
2a0f:6284:20::/44 maxlen: 44
2a0f:6284:4700::/40 maxlen: 40
Validation: OK
Signature path: rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.crl
rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.mft
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 12 Nov 2026 01:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6c:e7:7b:a5:a2:89:20:cc:1d:31:c8:c3:62:6c:83:25:e7:c0:ec:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C3CF41898936CB9C573DB1EAAB94C6E669951FD7
Validity
Not Before: Nov 10 21:45:11 2026 GMT
Not After : Nov 9 21:50:11 2027 GMT
Subject: CN=0414CB194C0B56DEFA10BC27BB966CEEB995625E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f5:51:ab:2c:4f:ae:9e:e9:80:4b:71:f4:b9:4e:
ae:01:a1:da:1e:dd:e4:af:86:3c:4b:4d:38:4f:1d:
32:5a:b8:d3:07:b5:1c:89:eb:b3:38:9d:72:66:00:
bd:63:ae:42:90:39:ba:2e:94:7d:28:b2:15:c9:a4:
5f:8d:27:a4:4f:81:95:d9:93:8e:42:95:00:1c:36:
e2:5a:07:93:5a:33:24:6f:b1:f8:1c:e0:b8:97:33:
ee:50:b5:64:bb:b1:e6:8c:43:95:50:c2:94:b9:31:
f3:67:07:15:f9:a5:cc:3b:0a:d1:22:22:14:33:32:
aa:f0:00:c1:a4:9e:a2:78:44:0b:e3:77:b6:c7:00:
68:40:a9:95:5c:bc:0d:e0:d6:5c:3c:b5:e4:09:6a:
bc:0f:e9:dd:db:e8:13:ed:fc:ab:14:42:ce:45:ad:
ff:9e:1e:4b:59:9b:eb:fe:2b:f7:f9:cd:70:a8:11:
5c:82:0d:af:03:ac:fd:79:98:50:38:df:3c:76:13:
ab:c0:5a:f5:3e:00:1b:2f:ff:74:91:32:6f:74:6c:
df:3e:6e:8f:05:40:8e:f4:ff:33:a2:68:f6:a1:24:
e4:15:57:dc:ba:59:e9:c2:b4:19:12:d2:fd:18:d0:
dc:ed:d5:ea:bd:21:c5:ed:06:b5:f4:43:34:a8:92:
56:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:14:CB:19:4C:0B:56:DE:FA:10:BC:27:BB:96:6C:EE:B9:95:62:5E
X509v3 Authority Key Identifier:
keyid:C3:CF:41:89:89:36:CB:9C:57:3D:B1:EA:AB:94:C6:E6:69:95:1F:D7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer
Subject Information Access:
Signed Object - URI:rsync://krill.47272.net/repo/HYEHOST/5/AS47272.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.47.240.0/24
IPv6:
2a06:1281:1000::/36
2a0f:6280:a::/48
2a0f:6280:13::/48
2a0f:6280:15::/48
2a0f:6280:18::/48
2a0f:6280:1d::/48
2a0f:6280:1f::/48
2a0f:6280:1005::-2a0f:6280:1006:ffff:ffff:ffff:ffff:ffff
2a0f:6280:100b::/48
2a0f:6280:100f::/48
2a0f:6280:1054::-2a0f:6280:1056:ffff:ffff:ffff:ffff:ffff
2a0f:6280:1058::/45
2a0f:6280:1081::-2a0f:6280:1083:ffff:ffff:ffff:ffff:ffff
2a0f:6280:108a::/48
2a0f:6280:108f::-2a0f:6280:109f:ffff:ffff:ffff:ffff:ffff
2a0f:6280:10a8::/48
2a0f:6280:10b0::/44
2a0f:6280:1300::/40
2a0f:6280:1a00::/39
2a0f:6280:2000::/39
2a0f:6280:2400::-2a0f:6280:2bff:ffff:ffff:ffff:ffff:ffff
2a0f:6280:3000::-2a0f:6280:5bff:ffff:ffff:ffff:ffff:ffff
2a0f:6280:f000::/36
2a0f:6282:4000::/36
2a0f:6282:7000::/36
2a0f:6282:9000::/36
2a0f:6283:a000::/36
2a0f:6284:20::/44
2a0f:6284:4700::/40
Signature Algorithm: sha256WithRSAEncryption
24:da:91:b8:a3:55:76:fa:67:7f:a5:e2:d9:77:a5:d5:e4:c0:
91:e0:03:e5:a2:cf:79:74:c2:9f:ab:aa:df:2f:1a:b7:5c:f6:
51:ea:a0:bf:66:0a:0a:a9:7a:c4:3f:47:ce:2d:67:fc:1c:cc:
ac:fb:5f:8d:78:b6:32:48:66:94:f9:1c:07:d4:a2:65:a2:11:
78:01:8b:fd:ca:89:78:b3:99:c9:ef:28:68:5a:79:5e:5a:9a:
36:e2:3f:a3:2c:70:96:1c:e2:53:d1:ca:1b:a2:7a:c7:b1:65:
fb:2d:cb:4c:93:07:4f:68:64:69:a5:dc:cb:44:c4:83:fa:eb:
0d:74:26:6b:7f:fd:40:0e:77:f8:59:54:43:0a:f2:f9:a0:77:
24:5d:c0:1c:09:5e:99:da:15:33:d9:19:39:34:fa:ef:e0:0d:
51:d3:af:43:ae:e1:09:7a:90:46:da:87:23:67:3d:af:d4:51:
68:fb:e7:bc:36:fd:c5:66:d3:81:d9:6a:ac:f2:8c:8e:2f:58:
e9:b3:48:69:6a:e9:80:a2:92:b3:6f:25:38:cf:b8:00:f5:2c:
7f:60:3e:a0:cc:b5:eb:f8:d8:d7:2e:9e:b3:9f:69:a9:6f:f0:
da:d6:b8:ec:e0:a7:07:0c:eb:2b:2f:df:07:5c:d0:c6:4b:a5:
65:f4:68:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 11 08:21:40 2026 by rpki-client