Route Origin Authorization
$ rpki-client -vvvf krill.47272.net/repo/HYEHOST/5/AS0.roa
File: AS0.roa (raw, json)
Hash identifier: 2wr6YPcaIoaUanBYKLjQe4fmPbWN1ENWHgAcW7xARu8=
Subject key identifier: DA:67:C4:51:07:8A:E0:C9:CA:F2:FA:CD:25:FB:BA:D5:5D:82:DB:F7
Certificate issuer: /CN=C3CF41898936CB9C573DB1EAAB94C6E669951FD7
Certificate serial: 3E3773358239260E1BCF1D85395944CD4538577E
Authority key identifier: C3:CF:41:89:89:36:CB:9C:57:3D:B1:EA:AB:94:C6:E6:69:95:1F:D7
Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer
Subject info access: rsync://krill.47272.net/repo/HYEHOST/5/AS0.roa
Signing time: Sun 20 Sep 2026 06:00:11 +0000
ROA not before: Sun 20 Sep 2026 05:55:11 +0000
ROA not after: Sun 19 Sep 2027 06:00:11 +0000
asID: 0
IP address blocks: 2a06:1281:a0::/44 maxlen: 48
2a0a:6044:a800::/40 maxlen: 48
2a0f:6280:3000::/36 maxlen: 48
2a0f:6280:c000::/36 maxlen: 48
2a0f:6284::/48 maxlen: 48
2a0f:6284:7::/48 maxlen: 48
2a0f:6284:d::/48 maxlen: 48
2a0f:6284:4212::/48 maxlen: 48
2a0f:6284:4216::/48 maxlen: 48
2a0f:6284:4218::/48 maxlen: 48
Validation: OK
Signature path: rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.crl
rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.mft
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 05:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3e:37:73:35:82:39:26:0e:1b:cf:1d:85:39:59:44:cd:45:38:57:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C3CF41898936CB9C573DB1EAAB94C6E669951FD7
Validity
Not Before: Sep 20 05:55:11 2026 GMT
Not After : Sep 19 06:00:11 2027 GMT
Subject: CN=DA67C451078AE0C9CAF2FACD25FBBAD55D82DBF7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:d5:b2:a6:1e:f7:fb:2a:1a:9a:c5:19:c5:af:
f0:15:6e:36:47:28:cb:6f:f7:82:ff:55:02:19:51:
06:86:8f:16:4f:8d:48:ae:0f:40:cb:d1:84:c1:eb:
81:c3:df:1e:d1:2d:68:ea:9f:c6:6c:7b:40:e6:31:
3f:0e:9c:99:0f:d7:87:c2:2f:ca:a7:80:e5:35:4b:
8c:fd:04:f0:57:65:4b:fb:85:62:ee:2a:38:e7:9e:
b8:fe:18:fd:a3:ce:a7:28:72:53:bd:1c:ea:df:7a:
8d:43:5e:26:08:54:73:3d:39:68:06:ca:03:3b:42:
61:eb:3a:02:f1:f0:f8:72:9a:88:25:2a:dc:b0:98:
13:3a:f6:26:fa:22:42:a7:b9:48:ac:0e:a8:a7:9c:
da:7d:b4:a9:c0:bf:8d:23:8f:30:a9:63:0c:31:41:
e7:2f:05:64:fb:3f:89:c6:3e:93:ed:a6:57:f7:84:
5d:ad:2f:07:3a:34:54:20:ec:48:a6:88:e3:cc:22:
6d:51:b5:31:bc:5a:32:05:3f:a9:65:43:9b:eb:fe:
76:68:0d:55:33:2e:0c:d8:7e:79:b6:ea:a3:64:24:
23:c7:15:fe:3b:da:6d:5b:fa:09:30:12:fc:b1:63:
5a:4d:77:d2:e3:06:4a:35:da:e4:fa:57:1e:9b:f8:
0d:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:67:C4:51:07:8A:E0:C9:CA:F2:FA:CD:25:FB:BA:D5:5D:82:DB:F7
X509v3 Authority Key Identifier:
keyid:C3:CF:41:89:89:36:CB:9C:57:3D:B1:EA:AB:94:C6:E6:69:95:1F:D7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer
Subject Information Access:
Signed Object - URI:rsync://krill.47272.net/repo/HYEHOST/5/AS0.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:1281:a0::/44
2a0a:6044:a800::/40
2a0f:6280:3000::/36
2a0f:6280:c000::/36
2a0f:6284::/48
2a0f:6284:7::/48
2a0f:6284:d::/48
2a0f:6284:4212::/48
2a0f:6284:4216::/48
2a0f:6284:4218::/48
Signature Algorithm: sha256WithRSAEncryption
79:a3:43:de:32:72:81:30:36:3e:75:37:cf:85:0d:e9:ea:5b:
d7:ca:2d:07:3b:a7:f2:24:18:07:ad:cd:eb:0f:5d:1a:25:08:
72:83:0e:80:e0:b4:c3:72:3d:21:2c:79:68:db:6d:07:4c:d3:
5d:03:46:ee:21:d4:01:5e:ae:c1:61:cb:30:0d:92:21:36:d6:
c1:c8:a3:dc:74:63:54:d1:38:9f:eb:3b:bf:29:fe:54:63:f6:
ff:62:23:16:ae:8b:28:14:c1:47:f1:b3:21:33:a5:20:7e:18:
24:d1:d4:b4:95:5d:60:b8:a1:fe:8c:14:ae:da:ca:05:21:55:
f4:67:0f:23:1c:d9:61:3d:88:de:5a:df:37:41:28:da:f1:4e:
66:57:4c:b7:30:24:0d:58:30:f2:54:fe:cb:0e:da:70:92:26:
a9:25:07:61:05:92:aa:b0:32:47:24:c2:e7:fd:65:af:e8:e8:
b8:df:79:df:4a:76:27:8b:0e:e9:56:84:bc:e9:b0:14:29:33:
19:9a:80:be:e0:87:8a:42:dc:fb:c1:62:ac:0c:52:26:36:21:
8c:6e:96:d7:06:f1:7c:4e:a5:99:d9:55:81:53:c1:e5:4f:a7:
c5:33:05:a3:c9:3c:7e:37:ac:9b:8f:8d:b1:1a:45:dc:c5:dd:
63:aa:9b:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 14:29:34 2026 by rpki-client