Route Origin Authorization
$ rpki-client -vvvf krill.47272.net/repo/HYEHOST/5/AS207113.roa
File: AS207113.roa (raw, json)
Hash identifier: STavZXh05ZfpC9MtM30owrqCj8y7A8kK8JMW2J3GPxE=
Subject key identifier: 38:C0:32:36:00:14:D2:13:D1:CD:64:DB:1C:F5:20:6F:91:14:93:C6
Certificate issuer: /CN=C3CF41898936CB9C573DB1EAAB94C6E669951FD7
Certificate serial: 50A40F45B0D01EA752A02853591299BEB328BF26
Authority key identifier: C3:CF:41:89:89:36:CB:9C:57:3D:B1:EA:AB:94:C6:E6:69:95:1F:D7
Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer
Subject info access: rsync://krill.47272.net/repo/HYEHOST/5/AS207113.roa
Signing time: Sun 18 Oct 2026 06:34:12 +0000
ROA not before: Sun 18 Oct 2026 06:29:12 +0000
ROA not after: Sun 17 Oct 2027 06:34:12 +0000
asID: 207113
IP address blocks: 2a06:1281::/44 maxlen: 48
2a0f:6284:100::/40 maxlen: 40
2a0f:6284:100::/44 maxlen: 44
2a0f:6284:100::/48 maxlen: 48
2a0f:6284:101::/48 maxlen: 48
2a0f:6284:102::/48 maxlen: 48
2a0f:6284:150::/44 maxlen: 44
2a0f:6284:150::/48 maxlen: 48
2a0f:6284:151::/48 maxlen: 48
2a0f:6284:152::/48 maxlen: 48
2a0f:6284:160::/44 maxlen: 44
2a0f:6284:160::/48 maxlen: 48
2a0f:6284:161::/48 maxlen: 48
2a0f:6284:162::/48 maxlen: 48
2a0f:6284:180::/44 maxlen: 44
2a0f:6284:180::/48 maxlen: 48
2a0f:6284:181::/48 maxlen: 48
2a0f:6284:182::/48 maxlen: 48
2a0f:6284:190::/44 maxlen: 44
2a0f:6284:190::/48 maxlen: 48
2a0f:6284:191::/48 maxlen: 48
2a0f:6284:192::/48 maxlen: 48
2a0f:6284:1a0::/44 maxlen: 44
2a0f:6284:1a0::/48 maxlen: 48
2a0f:6284:1a1::/48 maxlen: 48
2a0f:6284:1a2::/48 maxlen: 48
2a0f:6284:1c0::/48 maxlen: 48
2a0f:6284:1f0::/48 maxlen: 48
2a0f:6284:4200::/44 maxlen: 48
Validation: OK
Signature path: rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.crl
rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.mft
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Nov 2026 10:00:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
50:a4:0f:45:b0:d0:1e:a7:52:a0:28:53:59:12:99:be:b3:28:bf:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C3CF41898936CB9C573DB1EAAB94C6E669951FD7
Validity
Not Before: Oct 18 06:29:12 2026 GMT
Not After : Oct 17 06:34:12 2027 GMT
Subject: CN=38C032360014D213D1CD64DB1CF5206F911493C6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:8b:11:b6:a0:2b:12:08:88:5b:aa:bb:06:1b:
68:83:70:58:3e:41:d9:c1:81:12:32:0f:0c:4d:d0:
dd:6e:69:a7:85:73:0a:eb:c0:37:be:3d:86:52:1e:
d4:73:36:62:fb:ff:09:5a:0a:09:66:51:3e:f8:78:
57:b9:1e:7a:d1:e4:68:ec:6e:64:00:4e:e9:9e:42:
4b:f3:47:85:d4:58:d4:51:e0:a2:0d:c0:bb:e8:8e:
12:1a:da:23:f2:05:b0:2d:75:b5:f2:6f:b1:15:5d:
86:34:fb:77:c6:cd:68:3f:3b:f9:a1:57:2a:0a:80:
4c:db:b0:07:7f:c4:46:7f:59:05:a6:63:07:82:0f:
6f:b4:ea:24:f4:18:3a:7a:35:91:a8:ac:c5:f9:bf:
83:b4:02:2d:3c:be:7d:d1:87:02:26:17:fd:1f:43:
66:8b:b7:0d:ed:60:40:c3:51:31:8b:bf:29:a0:d5:
02:86:c5:4b:70:e5:46:d2:eb:e1:34:82:be:8a:74:
9c:08:e3:9c:72:ab:98:4f:ee:39:91:c0:c9:c4:36:
3f:89:0c:b2:fd:a3:64:d1:2e:25:3c:b2:f3:70:44:
77:8b:d5:62:7c:c7:fe:18:19:46:6b:d0:a0:5a:49:
46:5f:3c:d2:4a:30:b1:40:0f:c7:52:96:62:91:af:
ae:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:C0:32:36:00:14:D2:13:D1:CD:64:DB:1C:F5:20:6F:91:14:93:C6
X509v3 Authority Key Identifier:
keyid:C3:CF:41:89:89:36:CB:9C:57:3D:B1:EA:AB:94:C6:E6:69:95:1F:D7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer
Subject Information Access:
Signed Object - URI:rsync://krill.47272.net/repo/HYEHOST/5/AS207113.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:1281::/44
2a0f:6284:100::/40
2a0f:6284:4200::/44
Signature Algorithm: sha256WithRSAEncryption
12:2b:fe:cb:3e:9f:e7:36:64:f3:bc:88:de:75:2f:20:a5:b0:
2e:73:da:4b:43:de:cb:61:9e:15:68:10:20:99:4c:a0:9d:0d:
d1:1d:d9:9d:5a:26:96:40:52:b8:40:85:06:38:40:05:f2:70:
c6:ac:f0:31:1a:bd:ca:95:98:44:9b:e6:3c:8f:00:d9:1a:b2:
fd:bb:da:36:91:33:11:a9:64:f2:07:fc:d6:f4:65:3e:cf:91:
09:e1:e8:28:17:0a:b4:12:9d:b2:24:a6:f9:3a:cd:b9:2b:9c:
af:e9:bf:7a:97:45:4f:de:ca:46:da:ae:c3:2c:fc:79:96:50:
8e:4a:5d:8f:47:d7:a2:10:f3:b2:1c:c7:57:b7:ea:9d:54:21:
0d:ad:a8:5b:26:43:8a:0e:8b:5c:df:10:af:16:ea:60:7b:04:
2a:d8:5d:c2:3a:f4:69:13:78:d2:b3:67:a8:d2:25:6b:f8:61:
36:b5:5a:ad:a4:7a:c5:50:d0:ca:e7:2d:b6:f9:ac:3f:b1:53:
5a:8c:06:e6:42:ee:52:d2:07:36:f3:bc:19:59:75:60:4f:2d:
a2:f7:27:bf:bb:36:de:ab:38:39:c8:71:31:73:de:fa:ef:5d:
53:2e:cf:4f:78:ca:75:fd:b7:1d:af:0d:e4:8c:8f:58:31:93:
47:d9:93:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 7 17:04:52 2026 by rpki-client