Route Origin Authorization
$ rpki-client -vvvf krill.47272.net/repo/HYEHOST/5/AS212895.roa
File: AS212895.roa (raw, json)
Hash identifier: vdDwatSHeRbXJS/9vzTOPSeFtABI9SxoO03ELAvk1/w=
Subject key identifier: 97:58:8E:87:50:E6:F9:04:84:F0:22:D9:8B:E5:B6:66:7E:1B:D1:27
Certificate issuer: /CN=C3CF41898936CB9C573DB1EAAB94C6E669951FD7
Certificate serial: 71CD9B50AE2E7A04346CD475B09423FCCE6B8AE2
Authority key identifier: C3:CF:41:89:89:36:CB:9C:57:3D:B1:EA:AB:94:C6:E6:69:95:1F:D7
Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer
Subject info access: rsync://krill.47272.net/repo/HYEHOST/5/AS212895.roa
Signing time: Sat 31 Oct 2026 20:56:37 +0000
ROA not before: Sat 31 Oct 2026 20:51:37 +0000
ROA not after: Sat 30 Oct 2027 20:56:37 +0000
asID: 212895
IP address blocks: 2a0a:6044:aa10::/48 maxlen: 48
2a0f:6280:1020::/44 maxlen: 48
2a0f:6280:108b::/48 maxlen: 48
2a0f:6280:1100::/44 maxlen: 48
2a0f:6280:1900::/40 maxlen: 48
2a0f:6280:1c00::/40 maxlen: 48
2a0f:6280:c000::/36 maxlen: 48
2a0f:6282:6000::/36 maxlen: 48
Validation: OK
Signature path: rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.crl
rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.mft
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Nov 2026 10:00:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
71:cd:9b:50:ae:2e:7a:04:34:6c:d4:75:b0:94:23:fc:ce:6b:8a:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C3CF41898936CB9C573DB1EAAB94C6E669951FD7
Validity
Not Before: Oct 31 20:51:37 2026 GMT
Not After : Oct 30 20:56:37 2027 GMT
Subject: CN=97588E8750E6F90484F022D98BE5B6667E1BD127
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:5e:bf:a2:a2:67:24:31:ab:b9:d3:e0:50:f1:
4c:5a:1b:21:23:ac:82:a9:d4:11:bd:5f:54:89:09:
d5:62:03:ce:7e:d8:c2:14:6e:f1:75:ce:52:e8:62:
8d:f1:48:ff:3f:ea:33:97:67:a9:af:f6:80:8a:a3:
76:01:da:2c:2d:62:20:17:df:02:a1:72:e2:d1:f7:
74:98:bb:61:bf:f1:2d:5b:9a:c9:a9:e6:43:d5:83:
22:3e:fe:fa:37:40:fc:df:fe:7b:4b:8a:b7:09:cc:
fc:4a:db:a8:27:1c:e4:ff:7a:9b:54:a8:dd:f9:a6:
78:e4:63:a5:ff:9d:a2:01:f6:ef:88:16:6f:60:5b:
f5:51:cf:56:85:bc:19:e9:ae:61:8e:49:e4:21:f7:
a6:06:33:1d:53:61:72:c3:aa:3c:3c:84:b2:11:d1:
63:13:da:77:cb:57:c6:eb:40:91:21:d3:a6:e2:2e:
7a:18:44:05:a7:9f:5c:8d:47:e3:66:ee:90:c4:13:
07:30:1f:59:0c:31:22:e0:03:2c:82:24:85:03:e7:
1f:32:29:b3:a2:eb:a6:c1:b5:c0:e0:1f:8f:d3:97:
ab:53:ce:ca:44:68:51:2f:25:3f:4d:57:c5:05:96:
6c:74:0b:0a:69:87:ee:00:cb:6d:09:80:9f:a8:b6:
e4:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:58:8E:87:50:E6:F9:04:84:F0:22:D9:8B:E5:B6:66:7E:1B:D1:27
X509v3 Authority Key Identifier:
keyid:C3:CF:41:89:89:36:CB:9C:57:3D:B1:EA:AB:94:C6:E6:69:95:1F:D7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer
Subject Information Access:
Signed Object - URI:rsync://krill.47272.net/repo/HYEHOST/5/AS212895.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0a:6044:aa10::/48
2a0f:6280:1020::/44
2a0f:6280:108b::/48
2a0f:6280:1100::/44
2a0f:6280:1900::/40
2a0f:6280:1c00::/40
2a0f:6280:c000::/36
2a0f:6282:6000::/36
Signature Algorithm: sha256WithRSAEncryption
4a:c9:3c:ed:f6:8f:0a:8f:fd:7a:e7:5f:49:00:70:cf:59:e4:
9a:4b:38:c1:13:0b:00:af:ba:f8:62:6c:98:99:d9:42:2b:b2:
25:14:5a:11:69:dc:6c:13:01:37:e4:06:1d:69:5f:c2:a4:53:
07:e1:cd:4c:66:5b:98:8f:6e:13:20:a1:6b:6a:66:c3:ce:f7:
cd:4b:ca:99:07:54:43:c1:27:cc:e8:87:6e:da:b7:89:6c:e9:
8d:b3:68:fd:5f:b3:05:11:34:30:fb:59:ec:33:0b:74:13:d4:
42:c7:d3:0b:dc:a0:49:51:ee:5f:85:7f:32:f7:a1:21:bc:6c:
09:a1:05:99:53:4c:95:9c:64:a3:49:e9:7c:e4:ba:9d:2e:9f:
22:9a:cb:14:e6:69:a0:ef:c5:38:a1:68:81:43:f7:fa:91:8e:
b6:09:9e:d1:63:b2:d7:83:67:dd:c6:f4:e0:55:b7:1e:c5:a2:
18:c6:3c:04:39:63:d9:dd:da:a6:07:b1:69:f7:32:f0:85:e1:
f3:07:c1:38:a0:58:11:07:0e:ce:1d:3f:e6:a6:4f:6a:80:d6:
7a:cf:c3:06:24:be:06:a7:af:24:72:88:ed:57:e1:86:7f:55:
20:4b:dd:ec:0c:e1:50:fa:19:37:0a:08:ef:6b:dd:0b:bd:a5:
67:61:5c:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 7 20:14:40 2026 by rpki-client