Route Origin Authorization
$ rpki-client -vvvf krill.47272.net/repo/HYEHOST/5/AS135120.roa
File: AS135120.roa (raw, json)
Hash identifier: 0KPHCG0/tXaCS3v0zOWmUvDPQrqciKYNxq7AU93eK+w=
Subject key identifier: 47:77:6A:61:89:76:2F:28:03:E8:28:F4:3C:88:02:45:E9:C3:B8:05
Certificate issuer: /CN=C3CF41898936CB9C573DB1EAAB94C6E669951FD7
Certificate serial: 57AD18531904D5C5B9D5B0D332F9FC738FFEF9CB
Authority key identifier: C3:CF:41:89:89:36:CB:9C:57:3D:B1:EA:AB:94:C6:E6:69:95:1F:D7
Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer
Subject info access: rsync://krill.47272.net/repo/HYEHOST/5/AS135120.roa
Signing time: Mon 14 Sep 2026 08:04:21 +0000
ROA not before: Mon 14 Sep 2026 07:59:21 +0000
ROA not after: Mon 13 Sep 2027 08:04:21 +0000
asID: 135120
IP address blocks: 2a0f:6284:e::/48 maxlen: 48
2a0f:6284:3300::/48 maxlen: 48
2a0f:6284:3301::/48 maxlen: 48
2a0f:6284:3302::/48 maxlen: 48
2a0f:6284:3303::/48 maxlen: 48
2a0f:6284:3304::/48 maxlen: 48
2a0f:6284:3305::/48 maxlen: 48
2a0f:6284:3306::/48 maxlen: 48
2a0f:6284:3307::/48 maxlen: 48
2a0f:6284:3308::/48 maxlen: 48
2a0f:6284:3320::/48 maxlen: 48
2a0f:6284:3321::/48 maxlen: 48
2a0f:6284:3322::/48 maxlen: 48
2a0f:6284:33fe::/48 maxlen: 48
Validation: OK
Signature path: rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.crl
rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.mft
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 14:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
57:ad:18:53:19:04:d5:c5:b9:d5:b0:d3:32:f9:fc:73:8f:fe:f9:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C3CF41898936CB9C573DB1EAAB94C6E669951FD7
Validity
Not Before: Sep 14 07:59:21 2026 GMT
Not After : Sep 13 08:04:21 2027 GMT
Subject: CN=47776A6189762F2803E828F43C880245E9C3B805
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:3a:eb:9c:3f:41:6a:07:f6:9e:86:c5:70:23:
16:f7:b0:db:66:fd:c7:21:c5:da:fe:52:ff:a4:18:
e2:7c:e2:57:b9:0f:17:bb:45:64:42:72:98:73:6e:
af:18:5e:ea:fd:4f:d4:89:f6:bd:d6:60:5c:12:b4:
50:47:d8:57:fe:8c:c2:06:b2:e7:ac:a0:22:11:78:
dd:f8:d7:90:4b:43:9a:21:95:a8:dc:60:c8:7e:8d:
f2:fa:85:4b:81:53:ee:a9:4b:da:ce:4a:48:87:6a:
70:dd:e9:65:c2:b0:a2:38:c0:06:ac:c8:42:f2:c0:
e9:02:60:4c:47:2f:5e:44:60:ab:e3:6a:3d:e0:f4:
f1:b9:c8:81:0f:7f:cd:f8:fe:18:ce:72:44:9b:d2:
e7:b1:cf:14:44:ec:50:11:72:25:a7:ef:9b:7d:fa:
d4:da:25:a0:18:a6:39:41:a0:7e:14:90:43:2e:76:
ba:78:20:9e:cf:0e:1f:cf:9c:13:e3:21:9b:c9:1f:
97:38:3a:29:57:fe:89:3e:fe:01:6c:a1:8a:69:98:
8e:a4:02:2a:8e:66:3d:f1:86:60:8d:b9:74:81:a6:
81:1b:7b:91:85:77:8c:89:d8:3b:fa:b0:1d:8d:75:
ad:f0:89:d3:09:29:29:c4:cd:0d:d4:35:c3:77:18:
77:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:77:6A:61:89:76:2F:28:03:E8:28:F4:3C:88:02:45:E9:C3:B8:05
X509v3 Authority Key Identifier:
keyid:C3:CF:41:89:89:36:CB:9C:57:3D:B1:EA:AB:94:C6:E6:69:95:1F:D7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer
Subject Information Access:
Signed Object - URI:rsync://krill.47272.net/repo/HYEHOST/5/AS135120.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:6284:e::/48
2a0f:6284:3300::-2a0f:6284:3308:ffff:ffff:ffff:ffff:ffff
2a0f:6284:3320::-2a0f:6284:3322:ffff:ffff:ffff:ffff:ffff
2a0f:6284:33fe::/48
Signature Algorithm: sha256WithRSAEncryption
1d:2d:ab:08:71:0d:ac:f2:8f:4e:01:c5:e2:8f:23:89:2f:15:
96:4a:60:6b:f5:00:07:28:49:d3:17:e5:ae:78:8b:9a:0f:a7:
69:e7:80:3f:e2:36:d6:47:52:32:4c:d2:ee:37:fb:e8:82:58:
2f:98:aa:4b:3b:7f:6d:83:d5:9c:e0:e9:36:72:56:87:42:e0:
49:ea:0c:50:28:02:85:e8:a6:65:46:5a:e6:9c:b2:29:f3:c0:
e1:4b:5b:f6:69:e9:9e:aa:f0:21:79:55:d1:56:f1:a9:ae:9e:
db:27:b8:dd:f4:ac:4b:c6:db:66:df:c9:ed:b1:6a:a3:2d:fa:
e2:b5:fe:b9:2f:a2:96:52:a2:07:ef:cf:86:21:a9:1a:6d:33:
2c:b5:f7:71:e7:fb:de:f6:35:06:c1:10:0f:42:f9:fd:3f:c1:
a5:3e:16:d4:a3:a5:61:17:0b:cf:54:c7:75:53:57:ed:01:c4:
c2:3b:5b:7f:f0:35:02:98:0e:8f:5d:87:5e:39:60:62:83:b6:
6e:ef:9b:11:78:aa:00:a2:be:25:e4:5a:0e:d7:50:5a:69:3d:
a6:69:e2:71:6d:97:fe:63:4f:cc:32:02:90:09:37:e0:bf:87:
a1:33:d3:c5:2b:48:40:dc:5e:7e:11:fd:16:a5:54:a6:b9:11:
f5:02:e5:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 21:46:28 2026 by rpki-client