Route Origin Authorization
$ rpki-client -vvf krill.47272.net/repo/HYEHOST/0/323030313a3637633a6438343a3a2f34382d313238203d3e203437323732.roa
File: 323030313a3637633a6438343a3a2f34382d313238203d3e203437323732.roa (raw, json)
Hash identifier: bn/qMrJZn+P/wPIixqbtgGZZgPHROqYvhsj72vXDS1g=
Subject key identifier: 16:F4:9F:97:BB:13:BC:38:78:E7:88:00:08:1E:37:3B:42:80:F8:A4
Certificate issuer: /CN=4add5466723084490ef491c619b8bc61a328a8b6
Certificate serial: 66C7E3A65D3B0AACBA1B4872BE6F2BF7AE0A1139
Authority key identifier: 4A:DD:54:66:72:30:84:49:0E:F4:91:C6:19:B8:BC:61:A3:28:A8:B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/St1UZnIwhEkO9JHGGbi8YaMoqLY.cer
Subject info access: rsync://krill.47272.net/repo/HYEHOST/0/323030313a3637633a6438343a3a2f34382d313238203d3e203437323732.roa
Signing time: Thu 04 Jun 2026 15:51:42 +0000
ROA not before: Thu 04 Jun 2026 15:46:42 +0000
ROA not after: Thu 03 Jun 2027 15:51:42 +0000
asID: 47272
IP address blocks: 2001:67c:d84::/48 maxlen: 128
Validation: OK
Signature path: rsync://krill.47272.net/repo/HYEHOST/0/4ADD5466723084490EF491C619B8BC61A328A8B6.crl
rsync://krill.47272.net/repo/HYEHOST/0/4ADD5466723084490EF491C619B8BC61A328A8B6.mft
rsync://rpki.ripe.net/repository/DEFAULT/St1UZnIwhEkO9JHGGbi8YaMoqLY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 08:43:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
66:c7:e3:a6:5d:3b:0a:ac:ba:1b:48:72:be:6f:2b:f7:ae:0a:11:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4add5466723084490ef491c619b8bc61a328a8b6
Validity
Not Before: Jun 4 15:46:42 2026 GMT
Not After : Jun 3 15:51:42 2027 GMT
Subject: CN=16F49F97BB13BC3878E78800081E373B4280F8A4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:15:a6:57:60:93:a1:45:28:2a:40:66:23:c4:
21:22:44:12:0b:da:44:8a:f5:52:cb:57:ee:47:98:
78:4e:33:16:0e:16:76:c1:2b:5a:a9:f5:11:79:ed:
6b:ca:c8:d3:39:6e:dc:ea:34:9b:4a:e0:aa:65:96:
ad:e9:7d:51:6e:f3:3a:91:cb:16:a5:e0:5e:1b:ce:
f0:c8:62:85:47:85:1e:ba:b1:9e:62:3b:2a:9c:c4:
90:5e:ba:d4:22:e1:a5:ac:4a:d2:5f:b4:87:3d:2e:
74:8d:33:88:43:d8:88:bd:d6:ce:c4:ff:23:0b:fb:
de:34:96:8f:4a:f7:d9:c2:67:62:33:85:1c:cc:ff:
49:88:34:78:de:53:26:ce:08:78:58:69:40:0c:47:
b5:84:51:08:dc:3d:c4:91:78:ef:28:07:5d:4a:2d:
db:40:e8:8d:aa:1c:c4:b4:f5:67:81:ca:21:af:12:
05:52:b2:f2:d7:3d:c5:c8:ea:e9:bf:bb:37:4f:b8:
f8:55:77:02:5d:a5:4d:da:8e:4b:44:d3:2c:33:43:
f4:87:66:5f:a8:15:b2:ba:38:8c:83:7a:02:3d:90:
32:8d:b2:20:f6:99:bc:c6:11:cf:e4:17:7c:83:20:
d5:ca:ff:a4:a8:3b:40:21:0f:39:03:1e:c4:22:06:
3d:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:F4:9F:97:BB:13:BC:38:78:E7:88:00:08:1E:37:3B:42:80:F8:A4
X509v3 Authority Key Identifier:
keyid:4A:DD:54:66:72:30:84:49:0E:F4:91:C6:19:B8:BC:61:A3:28:A8:B6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://krill.47272.net/repo/HYEHOST/0/4ADD5466723084490EF491C619B8BC61A328A8B6.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/St1UZnIwhEkO9JHGGbi8YaMoqLY.cer
Subject Information Access:
Signed Object - URI:rsync://krill.47272.net/repo/HYEHOST/0/323030313a3637633a6438343a3a2f34382d313238203d3e203437323732.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:d84::/48
Signature Algorithm: sha256WithRSAEncryption
6a:33:9e:1c:8b:a5:88:a6:6b:78:bb:d8:0f:73:a4:3f:28:41:
72:29:6c:27:08:c2:ee:53:43:17:31:35:00:a5:e2:4e:cf:77:
a0:3e:14:5f:f6:9d:61:8b:ca:59:17:ad:c2:25:db:dc:77:b7:
b5:7d:8d:a3:ea:14:9e:be:7b:fa:c9:fa:1f:44:d5:4e:1c:88:
af:a1:32:26:b0:91:1e:49:a4:2a:e4:73:2f:85:41:15:04:8e:
96:ed:51:3c:98:55:95:36:af:93:e4:11:0f:df:34:78:17:07:
2b:40:30:17:f3:93:db:78:bc:6c:8b:48:b1:06:ac:12:5b:24:
21:b0:2c:ac:79:a8:69:85:95:6c:af:76:77:79:00:db:f4:2e:
7b:4c:6b:df:a0:c9:11:56:05:ec:07:ad:ed:e2:51:4b:61:d0:
d5:57:a6:7a:43:d3:b7:82:97:af:a0:45:44:98:d5:c8:ec:b0:
b0:24:0e:3e:d9:39:f9:aa:b0:7e:38:a5:7a:8e:30:6c:f3:a9:
c9:c9:68:48:09:ff:04:fb:09:aa:6a:1c:c8:77:3f:73:3d:59:
db:66:96:98:95:82:c1:71:fb:9a:10:66:ce:27:72:05:14:35:
0c:f1:52:82:47:89:24:ee:39:dd:aa:7c:83:8a:ee:07:78:d8:
d0:0f:91:14
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sat Jun 13 14:23:21 2026 by rpki-client