Route Origin Authorization
$ rpki-client -vvvf krill.47272.net/repo/HYEHOST/5/AS47272.roa
File: AS47272.roa (raw, json)
Hash identifier: W9Hb7YFELh/HqXvRBttVe5fcnBxtOqRDjcd2c9+ciro=
Subject key identifier: 19:FD:04:C0:C0:96:59:EF:3E:53:11:AD:26:2D:ED:5B:23:F6:07:A9
Certificate issuer: /CN=C3CF41898936CB9C573DB1EAAB94C6E669951FD7
Certificate serial: 191BA575D134F0D1518E0435483E6E83CBC573C0
Authority key identifier: C3:CF:41:89:89:36:CB:9C:57:3D:B1:EA:AB:94:C6:E6:69:95:1F:D7
Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer
Subject info access: rsync://krill.47272.net/repo/HYEHOST/5/AS47272.roa
Signing time: Mon 21 Sep 2026 08:49:37 +0000
ROA not before: Mon 21 Sep 2026 08:44:37 +0000
ROA not after: Mon 20 Sep 2027 08:49:37 +0000
asID: 47272
IP address blocks: 199.47.240.0/24 maxlen: 32
2a06:1281:40::/44 maxlen: 44
2a06:1281:1000::/36 maxlen: 36
2a0f:6280:a::/48 maxlen: 48
2a0f:6280:13::/48 maxlen: 48
2a0f:6280:15::/48 maxlen: 48
2a0f:6280:18::/48 maxlen: 48
2a0f:6280:1d::/48 maxlen: 48
2a0f:6280:1f::/48 maxlen: 48
2a0f:6280:1005::/48 maxlen: 48
2a0f:6280:1006::/48 maxlen: 48
2a0f:6280:100b::/48 maxlen: 48
2a0f:6280:1300::/40 maxlen: 48
2a0f:6280:1a00::/40 maxlen: 48
2a0f:6280:1b00::/40 maxlen: 48
2a0f:6280:2000::/36 maxlen: 48
2a0f:6280:f000::/36 maxlen: 36
2a0f:6282:4000::/36 maxlen: 48
2a0f:6282:7000::/36 maxlen: 48
2a0f:6282:9000::/36 maxlen: 48
2a0f:6284:20::/44 maxlen: 44
2a0f:6284:4700::/40 maxlen: 40
Validation: OK
Signature path: rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.crl
rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.mft
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 20:03:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
19:1b:a5:75:d1:34:f0:d1:51:8e:04:35:48:3e:6e:83:cb:c5:73:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C3CF41898936CB9C573DB1EAAB94C6E669951FD7
Validity
Not Before: Sep 21 08:44:37 2026 GMT
Not After : Sep 20 08:49:37 2027 GMT
Subject: CN=19FD04C0C09659EF3E5311AD262DED5B23F607A9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:e3:0f:08:1f:42:2e:ca:ad:45:62:2d:fb:a3:
59:4d:10:b0:99:2e:05:c9:6e:92:42:b9:67:e3:67:
3d:b6:6e:df:d3:0d:58:e1:d4:a3:fb:a2:fa:14:0b:
0b:c3:9f:50:c2:cc:7a:7a:9d:a6:ca:88:82:9e:f2:
6e:d1:08:9a:51:50:32:85:f4:de:89:03:6e:17:59:
c5:e9:21:de:e6:27:54:6d:db:9d:5a:6c:09:c1:23:
8f:54:a2:02:62:d2:0c:f8:db:b4:e0:2e:4c:01:5f:
65:ab:3a:03:eb:8b:ca:05:77:af:17:82:30:78:e5:
76:52:24:32:d9:9b:41:88:49:19:23:86:ae:c7:61:
75:69:67:ff:18:54:6a:03:0f:5d:3b:16:8d:f2:0c:
8a:6a:eb:fc:5a:2e:24:d5:20:48:b3:50:05:d2:15:
98:9b:d8:61:12:49:e8:84:61:09:c5:ad:54:d3:98:
f6:ac:76:77:81:91:10:7b:b9:b3:b5:1a:2a:84:5c:
4f:50:9c:73:3c:89:25:e4:28:9b:f3:7b:24:fd:82:
c2:82:b2:0a:15:64:69:11:65:26:28:52:2a:f9:95:
09:de:9e:a7:88:c5:7f:b2:56:60:7a:50:52:9b:91:
a5:33:e2:09:6f:9f:98:5f:85:fa:55:14:da:3f:fd:
f5:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:FD:04:C0:C0:96:59:EF:3E:53:11:AD:26:2D:ED:5B:23:F6:07:A9
X509v3 Authority Key Identifier:
keyid:C3:CF:41:89:89:36:CB:9C:57:3D:B1:EA:AB:94:C6:E6:69:95:1F:D7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer
Subject Information Access:
Signed Object - URI:rsync://krill.47272.net/repo/HYEHOST/5/AS47272.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.47.240.0/24
IPv6:
2a06:1281:40::/44
2a06:1281:1000::/36
2a0f:6280:a::/48
2a0f:6280:13::/48
2a0f:6280:15::/48
2a0f:6280:18::/48
2a0f:6280:1d::/48
2a0f:6280:1f::/48
2a0f:6280:1005::-2a0f:6280:1006:ffff:ffff:ffff:ffff:ffff
2a0f:6280:100b::/48
2a0f:6280:1300::/40
2a0f:6280:1a00::/39
2a0f:6280:2000::/36
2a0f:6280:f000::/36
2a0f:6282:4000::/36
2a0f:6282:7000::/36
2a0f:6282:9000::/36
2a0f:6284:20::/44
2a0f:6284:4700::/40
Signature Algorithm: sha256WithRSAEncryption
16:b3:d7:cd:c5:66:79:4e:33:2d:d2:74:b2:7b:27:ba:e0:2b:
64:01:b0:f2:17:7c:37:d2:77:c1:ee:09:d3:38:f8:2e:53:d8:
bc:6d:0a:85:87:b2:09:91:e6:34:a3:e0:74:ca:06:56:e5:63:
7a:be:a4:1b:3c:6c:bd:c2:c2:59:33:73:30:43:fb:fa:1c:87:
ed:5b:e7:a7:69:d5:80:3c:45:82:ef:fa:eb:3f:52:f7:c1:d2:
19:cc:f7:21:b8:57:2a:97:f2:57:27:d7:49:b8:3f:d7:79:31:
73:42:21:38:a6:1d:3d:8a:82:8e:b6:18:26:64:e7:7e:ba:7f:
7d:62:57:6b:21:48:20:b4:66:5f:72:aa:9a:d5:85:e8:2a:2c:
37:87:ef:8f:ad:7c:32:3c:3c:f8:60:b4:c3:64:1c:ba:73:9d:
99:5f:54:5f:b5:42:4d:4a:74:02:6e:ca:06:ec:5f:0f:43:3a:
91:6d:e4:76:f2:b5:ab:e6:72:2d:d5:16:5e:3a:3e:fe:65:f9:
cb:89:4f:a1:cf:34:c1:be:90:4b:c3:ea:33:82:ed:71:bc:6d:
d9:2f:f5:d5:72:e5:3e:46:fe:f3:dc:a0:39:88:d5:60:6b:cb:
c4:a9:cd:63:9e:c5:c0:f1:60:47:98:38:f8:9e:99:73:c9:97:
6c:f9:e1:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 02:43:21 2026 by rpki-client