Route Origin Authorization
$ rpki-client -vvvf krill.47272.net/repo/HYEHOST/5/AS0.roa
File: AS0.roa (raw, json)
Hash identifier: vHrX6KU+N+84pTQvvmH7QA9jVaAEMxHNlDzLABysx8w=
Subject key identifier: 7B:E3:89:96:EE:2F:C9:DD:5A:A3:18:DA:D0:74:EB:25:90:71:08:3E
Certificate issuer: /CN=C3CF41898936CB9C573DB1EAAB94C6E669951FD7
Certificate serial: 6D372F231706199382BF61DD8F9BB3FA80AD9056
Authority key identifier: C3:CF:41:89:89:36:CB:9C:57:3D:B1:EA:AB:94:C6:E6:69:95:1F:D7
Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer
Subject info access: rsync://krill.47272.net/repo/HYEHOST/5/AS0.roa
Signing time: Wed 04 Nov 2026 06:00:27 +0000
ROA not before: Wed 04 Nov 2026 05:55:27 +0000
ROA not after: Wed 03 Nov 2027 06:00:27 +0000
asID: 0
IP address blocks: 2a06:1281:a0::/44 maxlen: 48
2a0a:6044:6700::/40 maxlen: 48
2a0a:6044:a800::/40 maxlen: 48
2a0f:6284::/48 maxlen: 48
2a0f:6284:7::/48 maxlen: 48
2a0f:6284:d::/48 maxlen: 48
2a0f:6284:200::/40 maxlen: 48
2a0f:6284:4212::/48 maxlen: 48
2a0f:6284:4216::/48 maxlen: 48
2a0f:6284:4218::/48 maxlen: 48
Validation: OK
Signature path: rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.crl
rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.mft
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 05 Nov 2026 17:02:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6d:37:2f:23:17:06:19:93:82:bf:61:dd:8f:9b:b3:fa:80:ad:90:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C3CF41898936CB9C573DB1EAAB94C6E669951FD7
Validity
Not Before: Nov 4 05:55:27 2026 GMT
Not After : Nov 3 06:00:27 2027 GMT
Subject: CN=7BE38996EE2FC9DD5AA318DAD074EB259071083E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:f2:5d:89:4d:d8:59:97:8a:a2:21:a7:7b:02:
5a:63:c9:5a:ea:f4:8a:64:37:d6:8c:32:de:a0:33:
eb:07:fd:57:9d:0d:71:82:4c:1e:f4:51:89:da:a9:
38:0c:3f:c9:c0:8f:6a:a4:90:a9:3f:16:98:1d:36:
2f:74:4d:73:9a:74:80:8c:90:e5:fc:94:0c:30:7a:
be:d5:3a:f8:5a:fb:46:f7:d6:31:4a:97:57:1d:ef:
88:d9:6e:0a:2b:32:bb:66:cf:c3:26:03:10:f2:4b:
2d:18:2b:cb:64:02:55:93:7c:5e:aa:9e:0e:69:29:
5a:86:b6:a6:9a:47:c8:b0:1d:79:47:99:00:0c:57:
29:5e:42:fa:3c:3a:88:ec:11:df:f7:fe:b0:61:b3:
3b:20:e7:bd:61:ef:c9:c1:4a:da:26:0a:5d:7e:25:
26:23:9e:b1:e4:c9:0c:e9:8f:4d:2e:a1:8a:03:b4:
a9:13:f7:ce:e0:2b:fe:dd:dd:17:5f:6a:97:e8:9e:
29:65:05:35:83:e0:f3:59:8f:dc:b7:88:cc:ef:8d:
10:a3:57:27:c4:4e:56:f0:d0:4a:d4:3d:f5:68:f3:
cb:2b:97:27:4a:16:57:14:b6:af:e0:d9:1a:b0:0b:
0a:e6:2c:f7:4b:cf:66:99:bc:30:a9:d0:7f:eb:87:
da:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:E3:89:96:EE:2F:C9:DD:5A:A3:18:DA:D0:74:EB:25:90:71:08:3E
X509v3 Authority Key Identifier:
keyid:C3:CF:41:89:89:36:CB:9C:57:3D:B1:EA:AB:94:C6:E6:69:95:1F:D7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer
Subject Information Access:
Signed Object - URI:rsync://krill.47272.net/repo/HYEHOST/5/AS0.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:1281:a0::/44
2a0a:6044:6700::/40
2a0a:6044:a800::/40
2a0f:6284::/48
2a0f:6284:7::/48
2a0f:6284:d::/48
2a0f:6284:200::/40
2a0f:6284:4212::/48
2a0f:6284:4216::/48
2a0f:6284:4218::/48
Signature Algorithm: sha256WithRSAEncryption
85:4c:50:78:18:21:39:3c:e3:51:11:3a:1a:cb:78:8a:2f:9d:
c5:cb:9f:72:15:99:40:54:86:35:21:0f:85:b2:d1:2b:57:47:
b9:d8:50:6d:e0:0e:b0:3b:50:fe:28:fc:99:b9:57:b1:1a:7e:
19:01:57:13:86:ba:18:a3:7a:4e:41:83:78:d2:10:91:6f:8a:
64:2a:fc:19:63:f3:6b:30:50:3d:ab:9a:2d:bd:ee:0e:23:35:
0c:7a:a4:6a:de:17:50:c1:86:16:5f:a3:43:d2:c3:62:11:ba:
9a:45:be:6b:6a:e7:04:60:c3:6a:d5:94:bd:80:de:e8:eb:51:
98:bd:2f:56:e4:c6:61:76:61:82:fd:0f:27:71:bc:2a:b6:e2:
50:5b:91:de:f5:a5:76:b8:ee:a5:bc:37:1c:e0:2a:97:9b:13:
df:a9:ae:61:81:56:18:b9:8a:67:2a:89:4a:a5:ce:19:23:42:
4a:84:1e:8b:dd:f6:8c:ad:7c:0b:f4:1d:25:3f:ea:96:78:bd:
74:5a:3d:8e:54:cf:7a:bf:aa:43:26:eb:2e:e9:e8:dd:4c:9d:
12:6f:03:34:7a:b2:0d:b6:b7:cf:fb:bc:7e:e7:b0:e9:62:13:
b7:51:ee:6a:fa:66:64:16:63:c3:37:c9:cf:0e:f4:37:f1:ff:
b7:13:d8:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 5 05:03:41 2026 by rpki-client