Route Origin Authorization
$ rpki-client -vvf krill.47272.net/repo/HYEHOST/5/AS135120.roa
File: AS135120.roa (raw, json)
Hash identifier: AavTUZBmzFDZMlKiyO0iK+xAlpvxsQ6+n///wp6m/Vg=
Subject key identifier: 7C:8E:C9:EF:F1:83:31:44:D4:12:5B:4E:70:0E:61:22:34:D4:6F:ED
Certificate issuer: /CN=C3CF41898936CB9C573DB1EAAB94C6E669951FD7
Certificate serial: 589F608731C758E294B90681C694F13C93C7DA0A
Authority key identifier: C3:CF:41:89:89:36:CB:9C:57:3D:B1:EA:AB:94:C6:E6:69:95:1F:D7
Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer
Subject info access: rsync://krill.47272.net/repo/HYEHOST/5/AS135120.roa
Signing time: Tue 24 Feb 2026 07:38:41 +0000
ROA not before: Tue 24 Feb 2026 07:33:41 +0000
ROA not after: Tue 23 Feb 2027 07:38:41 +0000
asID: 135120
IP address blocks: 2a0f:6284:e::/48 maxlen: 48
2a0f:6284:3300::/40 maxlen: 40
2a0f:6284:3300::/48 maxlen: 48
2a0f:6284:3301::/48 maxlen: 48
2a0f:6284:3302::/48 maxlen: 48
2a0f:6284:3303::/48 maxlen: 48
2a0f:6284:3304::/48 maxlen: 48
2a0f:6284:3305::/48 maxlen: 48
2a0f:6284:3306::/48 maxlen: 48
2a0f:6284:3307::/48 maxlen: 48
2a0f:6284:3308::/48 maxlen: 48
2a0f:6284:3320::/48 maxlen: 48
Validation: OK
Signature path: rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.crl
rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.mft
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 11:08:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
58:9f:60:87:31:c7:58:e2:94:b9:06:81:c6:94:f1:3c:93:c7:da:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C3CF41898936CB9C573DB1EAAB94C6E669951FD7
Validity
Not Before: Feb 24 07:33:41 2026 GMT
Not After : Feb 23 07:38:41 2027 GMT
Subject: CN=7C8EC9EFF1833144D4125B4E700E612234D46FED
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:13:b4:97:2c:b2:7c:59:cb:38:c6:bd:e5:14:
d1:6b:0e:a9:0f:33:73:2f:20:05:6e:c3:84:ae:6c:
88:63:29:b6:69:58:0c:7e:07:b8:86:96:92:45:71:
77:0d:f2:e6:e5:90:04:f3:21:bf:50:7a:c0:e0:8d:
37:9b:b6:36:3c:70:c1:17:83:27:b1:7b:ee:34:91:
ee:9c:19:20:ac:e9:7b:99:15:2c:c5:d9:a3:e2:37:
3b:34:b8:b9:47:d1:66:ad:0b:e5:a9:4f:2a:63:7e:
70:bb:b4:20:29:73:4a:2c:1d:2d:18:8e:f4:23:b7:
d6:03:7a:99:93:99:f3:10:6f:bc:c1:63:35:0b:35:
b6:3b:f2:f7:d4:76:5c:dd:78:cb:2d:10:98:30:d5:
b4:c1:90:50:f0:bc:8b:d2:08:ec:19:dd:24:13:9f:
0c:58:bc:b6:c1:23:f1:6b:0f:2e:43:e9:1e:4e:5f:
0c:fd:93:1b:42:73:9f:f7:c8:f4:be:a1:3e:9d:d1:
dd:ac:9c:79:d0:40:7e:d4:ee:be:5a:6a:1d:f2:f7:
61:51:ee:51:b9:0a:ec:17:b3:19:44:45:dd:30:ce:
72:1e:b5:cc:b8:9c:b2:f6:a8:98:bf:b5:7e:dc:ba:
e8:54:5b:32:3a:c9:12:0a:1f:6d:d3:78:90:45:9f:
13:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:8E:C9:EF:F1:83:31:44:D4:12:5B:4E:70:0E:61:22:34:D4:6F:ED
X509v3 Authority Key Identifier:
keyid:C3:CF:41:89:89:36:CB:9C:57:3D:B1:EA:AB:94:C6:E6:69:95:1F:D7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer
Subject Information Access:
Signed Object - URI:rsync://krill.47272.net/repo/HYEHOST/5/AS135120.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:6284:e::/48
2a0f:6284:3300::/40
Signature Algorithm: sha256WithRSAEncryption
71:bc:54:b6:22:dc:79:85:92:76:59:2e:12:5d:ba:5e:52:64:
80:91:33:2d:a1:5b:66:4a:1a:b8:6b:6c:2e:d6:89:a3:ce:29:
fa:3f:b8:bc:f6:9f:c6:d7:2d:8e:66:05:ab:2d:37:87:15:d4:
82:a9:6c:22:50:36:19:6d:cf:0a:9f:9d:d5:a7:62:14:a7:1e:
5a:5b:6c:f6:02:ae:de:c8:33:7a:1b:1c:96:99:37:23:a8:6b:
0f:bb:83:8e:5e:38:e7:c9:ea:c2:c4:03:21:c9:83:3b:2c:97:
00:95:52:ea:b4:d0:58:d5:16:8a:7d:ea:b5:47:ee:1c:01:58:
4a:1f:7e:66:1f:60:f1:50:6a:9e:6d:14:b3:7e:b1:8a:6d:3e:
a8:b9:51:90:58:82:a8:aa:dc:56:7e:ad:42:87:6a:36:28:ce:
0c:fd:d6:8c:9c:20:6d:61:40:6f:0b:70:5e:eb:87:dd:51:28:
e5:fd:80:4f:ce:2b:04:43:33:ac:04:4c:f1:6d:22:66:97:c1:
06:20:7c:d1:d7:79:a4:80:f1:8e:4d:6f:59:6a:e2:2b:43:40:
1e:5e:f2:cc:fc:9d:dc:88:b3:78:b7:d0:d0:3f:23:f4:ef:01:
15:2a:e7:58:77:54:c1:10:c9:09:87:63:e4:d2:82:4e:a8:b8:
44:2c:51:a6
-----BEGIN CERTIFICATE-----
MIIE3TCCA8WgAwIBAgIUWJ9ghzHHWOKUuQaBxpTxPJPH2gowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQzNDRjQxODk4OTM2Q0I5QzU3M0RCMUVBQUI5NEM2RTY2
OTk1MUZENzAeFw0yNjAyMjQwNzMzNDFaFw0yNzAyMjMwNzM4NDFaMDMxMTAvBgNV
BAMTKDdDOEVDOUVGRjE4MzMxNDRENDEyNUI0RTcwMEU2MTIyMzRENDZGRUQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQClE7SXLLJ8Wcs4xr3lFNFrDqkP
M3MvIAVuw4SubIhjKbZpWAx+B7iGlpJFcXcN8ublkATzIb9QesDgjTebtjY8cMEX
gyexe+40ke6cGSCs6XuZFSzF2aPiNzs0uLlH0WatC+WpTypjfnC7tCApc0osHS0Y
jvQjt9YDepmTmfMQb7zBYzULNbY78vfUdlzdeMstEJgw1bTBkFDwvIvSCOwZ3SQT
nwxYvLbBI/FrDy5D6R5OXwz9kxtCc5/3yPS+oT6d0d2snHnQQH7U7r5aah3y92FR
7lG5CuwXsxlERd0wznIetcy4nLL2qJi/tX7cuuhUWzI6yRIKH23TeJBFnxN9AgMB
AAGjggHnMIIB4zAdBgNVHQ4EFgQUfI7J7/GDMUTUEltOcA5hIjTUb+0wHwYDVR0j
BBgwFoAUw89BiYk2y5xXPbHqq5TG5mmVH9cwDgYDVR0PAQH/BAQDAgeAMGQGA1Ud
HwRdMFswWaBXoFWGU3JzeW5jOi8va3JpbGwuNDcyNzIubmV0L3JlcG8vSFlFSE9T
VC81L0MzQ0Y0MTg5ODkzNkNCOUM1NzNEQjFFQUFCOTRDNkU2Njk5NTFGRDcuY3Js
MIGTBggrBgEFBQcBAQSBhjCBgzCBgAYIKwYBBQUHMAKGdHJzeW5jOi8vcnBraS1y
cHMuYXJpbi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZjg1MGQwNjNlMDE4NTc1NWM5
MWJlM2Y5ZC83L0MzQ0Y0MTg5ODkzNkNCOUM1NzNEQjFFQUFCOTRDNkU2Njk5NTFG
RDcuY2VyME8GCCsGAQUFBwELBEMwQTA/BggrBgEFBQcwC4YzcnN5bmM6Ly9rcmls
bC40NzI3Mi5uZXQvcmVwby9IWUVIT1NULzUvQVMxMzUxMjAucm9hMBgGA1UdIAEB
/wQOMAwwCgYIKwYBBQUHDgIwKgYIKwYBBQUHAQcBAf8EGzAZMBcEAgACMBEDBwAq
D2KEAA4DBgAqD2KEMzANBgkqhkiG9w0BAQsFAAOCAQEAcbxUtiLceYWSdlkuEl26
XlJkgJEzLaFbZkoauGtsLtaJo84p+j+4vPafxtctjmYFqy03hxXUgqlsIlA2GW3P
Cp+d1adiFKceWlts9gKu3sgzehsclpk3I6hrD7uDjl4458nqwsQDIcmDOyyXAJVS
6rTQWNUWin3qtUfuHAFYSh9+Zh9g8VBqnm0Us36xim0+qLlRkFiCqKrcVn6tQodq
NijODP3WjJwgbWFAbwtwXuuH3VEo5f2AT84rBEMzrARM8W0iZpfBBiB80dd5pIDx
jk1vWWriK0NAHl7yzPyd3IizeLfQ0D8j9O8BFSrnWHdUwRDJCYdj5NKCTqi4RCxR
pg==
-----END CERTIFICATE-----
Generated at Mon Mar 2 19:35:46 2026 by rpki-client