Route Origin Authorization
$ rpki-client -vvvf krill.47272.net/repo/HYEHOST/5/AS213036.roa
File: AS213036.roa (raw, json)
Hash identifier: dWe9LmEzV/PaNRL3yVctJkPIx5Kh1k6iOS8bDyH203E=
Subject key identifier: 67:E0:3E:91:34:25:2E:DE:3B:7D:E2:C6:8E:8B:30:05:58:48:70:7E
Certificate issuer: /CN=C3CF41898936CB9C573DB1EAAB94C6E669951FD7
Certificate serial: 30FEE6F1DCEE9045B947D42AAE6E8ABCACACA755
Authority key identifier: C3:CF:41:89:89:36:CB:9C:57:3D:B1:EA:AB:94:C6:E6:69:95:1F:D7
Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer
Subject info access: rsync://krill.47272.net/repo/HYEHOST/5/AS213036.roa
Signing time: Sun 13 Sep 2026 14:52:16 +0000
ROA not before: Sun 13 Sep 2026 14:47:16 +0000
ROA not after: Sun 12 Sep 2027 14:52:16 +0000
asID: 213036
IP address blocks: 2a06:1281:60::/44 maxlen: 48
2a06:1281:60::/48 maxlen: 48
2a06:1281:61::/48 maxlen: 48
2a06:1281:62::/48 maxlen: 48
2a06:1281:63::/48 maxlen: 48
2a06:1281:64::/48 maxlen: 48
2a06:1281:65::/48 maxlen: 48
2a06:1281:66::/48 maxlen: 48
2a06:1281:67::/48 maxlen: 48
2a06:1281:68::/48 maxlen: 48
2a06:1281:69::/48 maxlen: 48
2a06:1281:6a::/48 maxlen: 48
2a06:1281:6b::/48 maxlen: 48
2a06:1281:6c::/48 maxlen: 48
2a06:1281:6d::/48 maxlen: 48
2a06:1281:6e::/48 maxlen: 48
2a06:1281:6f::/48 maxlen: 48
Validation: OK
Signature path: rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.crl
rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.mft
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 14:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
30:fe:e6:f1:dc:ee:90:45:b9:47:d4:2a:ae:6e:8a:bc:ac:ac:a7:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C3CF41898936CB9C573DB1EAAB94C6E669951FD7
Validity
Not Before: Sep 13 14:47:16 2026 GMT
Not After : Sep 12 14:52:16 2027 GMT
Subject: CN=67E03E9134252EDE3B7DE2C68E8B30055848707E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:96:29:c9:b9:87:36:45:35:9d:b0:24:11:d3:
f6:9f:05:01:a0:86:8f:b0:96:f7:97:5a:b7:ff:85:
65:55:22:1f:31:58:c7:12:a4:fa:0e:c6:13:27:b8:
20:f9:74:99:a0:46:0d:e6:18:b8:6b:34:84:73:ec:
1a:2f:b3:91:fc:68:86:7c:3e:00:60:98:62:f5:0a:
b5:21:90:b0:aa:a4:6b:fe:ea:e8:d7:eb:b7:95:97:
ef:32:1c:51:2d:e6:4d:ea:70:53:d8:0f:d6:a3:09:
e8:2e:b8:05:d2:99:ce:32:ec:a9:a4:90:fd:04:83:
35:cb:d2:77:27:ed:05:13:2b:85:09:65:02:5a:49:
50:d1:85:93:3c:af:fd:e1:43:61:4f:54:01:2f:b4:
6e:fd:ab:ec:37:78:49:36:35:ff:65:ce:be:35:c5:
68:eb:18:9f:39:b3:5d:8f:67:fc:eb:ff:88:91:ca:
d8:ee:bb:49:1a:b5:bb:e1:76:0a:7e:a8:c2:d5:2d:
b5:aa:a5:32:b3:13:7c:43:34:bb:3c:78:7e:0e:61:
c2:98:22:c4:9c:78:a5:8a:b4:87:25:bd:66:33:3f:
88:38:bd:ed:50:01:f1:7a:3c:f6:dc:0b:36:2f:65:
85:6f:f8:f4:e3:92:2d:da:5d:54:ff:f9:8e:a4:1c:
2f:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:E0:3E:91:34:25:2E:DE:3B:7D:E2:C6:8E:8B:30:05:58:48:70:7E
X509v3 Authority Key Identifier:
keyid:C3:CF:41:89:89:36:CB:9C:57:3D:B1:EA:AB:94:C6:E6:69:95:1F:D7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer
Subject Information Access:
Signed Object - URI:rsync://krill.47272.net/repo/HYEHOST/5/AS213036.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:1281:60::/44
Signature Algorithm: sha256WithRSAEncryption
4b:9d:05:75:6b:55:72:c2:00:ed:2d:a8:85:f2:eb:90:15:49:
71:12:6c:0e:21:66:ce:98:47:98:a4:98:32:8e:86:2a:33:c3:
10:48:ea:07:6d:0d:63:c3:24:73:0c:d5:6e:02:c9:70:2b:7f:
94:ee:5e:3c:11:cd:40:c5:15:54:91:f0:cd:3b:b7:03:12:c8:
80:fd:60:4d:d8:7d:d3:a1:75:3a:11:6f:f4:9d:84:c1:2a:80:
e5:31:c4:3d:42:8f:37:3f:12:91:54:11:8e:9a:41:51:e2:97:
22:b7:0f:b5:ef:e0:be:5f:fc:c1:69:d0:6c:e3:ca:45:73:80:
12:d4:a6:ab:e1:fa:83:e1:68:97:8f:3d:7d:f3:6a:5c:dd:91:
16:ce:80:52:d4:2a:08:39:37:4b:c4:50:d2:e3:b2:f6:55:34:
1a:ad:e4:e7:42:12:36:fc:7f:19:3e:56:81:f7:06:81:37:cd:
55:13:63:f6:26:89:39:32:4d:7b:85:62:dd:23:3c:9c:fc:14:
ba:e8:d3:ff:9e:8b:67:01:0a:eb:9f:59:1a:71:88:35:e5:99:
47:58:7a:14:63:06:5e:4c:95:14:52:de:b7:b8:4e:8b:fc:93:
16:f1:03:25:f5:65:5f:9d:64:23:b3:4d:a3:b3:aa:c7:7e:59:
f9:80:91:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 17:59:07 2026 by rpki-client