Route Origin Authorization
$ rpki-client -vvf krill.47272.net/repo/HYEHOST/5/AS213535.roa
File: AS213535.roa (raw, json)
Hash identifier: vAhsGwXWTUgO+Q+YYFmPZYgaeW6FoVplvzgENXBdQyk=
Subject key identifier: 88:B6:ED:B9:45:75:60:54:F4:34:67:9E:3F:6E:16:39:5D:F5:67:E7
Certificate issuer: /CN=C3CF41898936CB9C573DB1EAAB94C6E669951FD7
Certificate serial: 35A369778752B05ADFD61307C6A8E62DD6DAC27C
Authority key identifier: C3:CF:41:89:89:36:CB:9C:57:3D:B1:EA:AB:94:C6:E6:69:95:1F:D7
Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer
Subject info access: rsync://krill.47272.net/repo/HYEHOST/5/AS213535.roa
Signing time: Tue 09 Jun 2026 21:27:27 +0000
ROA not before: Tue 09 Jun 2026 21:22:27 +0000
ROA not after: Tue 08 Jun 2027 21:27:27 +0000
asID: 213535
IP address blocks: 2a0f:6284:50::/48 maxlen: 48
2a0f:6284:60::/48 maxlen: 48
2a0f:6284:61::/48 maxlen: 48
2a0f:6284:62::/48 maxlen: 48
2a0f:6284:63::/48 maxlen: 48
2a0f:6284:64::/48 maxlen: 48
2a0f:6284:67::/48 maxlen: 48
2a0f:6284:68::/48 maxlen: 48
2a0f:6284:69::/48 maxlen: 48
2a0f:6284:6a::/48 maxlen: 48
Validation: OK
Signature path: rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.crl
rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.mft
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 07:08:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
35:a3:69:77:87:52:b0:5a:df:d6:13:07:c6:a8:e6:2d:d6:da:c2:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C3CF41898936CB9C573DB1EAAB94C6E669951FD7
Validity
Not Before: Jun 9 21:22:27 2026 GMT
Not After : Jun 8 21:27:27 2027 GMT
Subject: CN=88B6EDB945756054F434679E3F6E16395DF567E7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:a7:6a:ba:9a:06:19:ac:02:bf:82:bf:79:43:
15:16:6a:d3:ce:64:a8:2a:60:30:1c:f7:cb:63:b1:
70:ff:ab:83:76:bb:6c:57:3b:1d:6b:64:03:38:cb:
61:4b:20:25:dc:75:51:7c:d7:3a:66:14:da:21:33:
f1:40:90:12:b6:d8:52:bb:8f:33:8a:94:1a:bc:18:
56:1e:c0:ed:9a:0a:31:cf:e7:48:13:be:22:5b:8a:
59:1e:75:d9:ca:11:d1:e8:6e:36:1c:f8:02:86:96:
68:18:8b:dc:0b:e8:74:2b:0f:f3:8b:d0:c2:47:9c:
93:4d:f1:85:e1:1d:0f:01:b1:3c:4d:dd:8e:ee:bb:
ab:4e:3d:1d:5c:e2:f2:7d:53:6d:61:c2:16:f9:e0:
79:5d:5c:23:12:8a:5e:24:0e:d6:f7:e8:2f:e1:2c:
f6:0a:77:69:01:19:f3:d2:44:6d:51:8e:2e:a0:aa:
cd:c6:17:17:77:ea:e9:81:a4:44:0c:ee:78:7d:5c:
92:49:e8:0d:b0:e5:29:93:e6:e7:88:de:0a:9b:35:
2b:b0:0f:be:2d:11:fe:03:77:3a:b9:7c:a0:82:51:
e6:a9:de:e7:45:2e:ea:22:e3:89:2f:fa:60:af:6a:
eb:25:16:f5:37:64:81:8c:66:50:72:dd:7f:bf:e0:
5c:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:B6:ED:B9:45:75:60:54:F4:34:67:9E:3F:6E:16:39:5D:F5:67:E7
X509v3 Authority Key Identifier:
keyid:C3:CF:41:89:89:36:CB:9C:57:3D:B1:EA:AB:94:C6:E6:69:95:1F:D7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer
Subject Information Access:
Signed Object - URI:rsync://krill.47272.net/repo/HYEHOST/5/AS213535.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:6284:50::/48
2a0f:6284:60::-2a0f:6284:64:ffff:ffff:ffff:ffff:ffff
2a0f:6284:67::-2a0f:6284:6a:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
57:6b:d1:66:31:99:d4:10:1b:73:15:aa:8c:f7:89:68:99:7f:
c2:b5:ea:a5:42:25:3e:7e:86:97:b3:f2:f1:df:c4:c6:a9:0b:
17:28:8a:95:65:b0:59:21:1c:6a:2a:e4:1d:91:58:22:82:7d:
78:5b:14:84:44:6a:fb:b1:53:12:e6:43:72:85:c9:79:29:e1:
cf:f6:f7:8b:ce:8d:5b:18:ca:f5:4a:c1:f5:94:4f:b1:e5:ac:
49:ca:ea:e3:30:11:2a:24:dc:ba:0c:cf:a4:76:01:e4:c8:4e:
8a:9f:ce:6c:9d:55:75:79:5d:77:20:80:77:2a:64:9b:8b:06:
e0:08:f7:58:24:91:6e:c1:fb:eb:b7:15:38:78:fd:0d:a1:96:
01:7c:bd:99:21:c2:2d:84:c0:b0:4e:64:44:f1:fc:17:a5:a0:
3e:ad:40:79:61:06:01:09:dc:c9:ff:1d:0e:ae:45:9c:96:94:
46:8e:3f:4e:d0:57:4a:a5:3f:c0:45:40:8f:1d:1d:48:9c:eb:
bb:8b:bc:1c:de:c8:8a:3e:ac:08:f2:2d:ee:a4:9d:40:b2:58:
a3:40:e6:fa:8b:fa:50:20:d9:a3:b7:3b:5e:57:28:1b:1f:56:
14:c8:40:58:45:64:77:8a:6d:1f:2b:8a:eb:0d:4d:19:f1:3a:
d1:58:09:78
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgIUNaNpd4dSsFrf1hMHxqjmLdbawnwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQzNDRjQxODk4OTM2Q0I5QzU3M0RCMUVBQUI5NEM2RTY2
OTk1MUZENzAeFw0yNjA2MDkyMTIyMjdaFw0yNzA2MDgyMTI3MjdaMDMxMTAvBgNV
BAMTKDg4QjZFREI5NDU3NTYwNTRGNDM0Njc5RTNGNkUxNjM5NURGNTY3RTcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCrp2q6mgYZrAK/gr95QxUWatPO
ZKgqYDAc98tjsXD/q4N2u2xXOx1rZAM4y2FLICXcdVF81zpmFNohM/FAkBK22FK7
jzOKlBq8GFYewO2aCjHP50gTviJbilkeddnKEdHobjYc+AKGlmgYi9wL6HQrD/OL
0MJHnJNN8YXhHQ8BsTxN3Y7uu6tOPR1c4vJ9U21hwhb54HldXCMSil4kDtb36C/h
LPYKd2kBGfPSRG1Rji6gqs3GFxd36umBpEQM7nh9XJJJ6A2w5SmT5ueI3gqbNSuw
D74tEf4Ddzq5fKCCUeap3udFLuoi44kv+mCvauslFvU3ZIGMZlBy3X+/4FyJAgMB
AAGjggIHMIICAzAdBgNVHQ4EFgQUiLbtuUV1YFT0NGeeP24WOV31Z+cwHwYDVR0j
BBgwFoAUw89BiYk2y5xXPbHqq5TG5mmVH9cwDgYDVR0PAQH/BAQDAgeAMGQGA1Ud
HwRdMFswWaBXoFWGU3JzeW5jOi8va3JpbGwuNDcyNzIubmV0L3JlcG8vSFlFSE9T
VC81L0MzQ0Y0MTg5ODkzNkNCOUM1NzNEQjFFQUFCOTRDNkU2Njk5NTFGRDcuY3Js
MIGTBggrBgEFBQcBAQSBhjCBgzCBgAYIKwYBBQUHMAKGdHJzeW5jOi8vcnBraS1y
cHMuYXJpbi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZjg1MGQwNjNlMDE4NTc1NWM5
MWJlM2Y5ZC83L0MzQ0Y0MTg5ODkzNkNCOUM1NzNEQjFFQUFCOTRDNkU2Njk5NTFG
RDcuY2VyME8GCCsGAQUFBwELBEMwQTA/BggrBgEFBQcwC4YzcnN5bmM6Ly9rcmls
bC40NzI3Mi5uZXQvcmVwby9IWUVIT1NULzUvQVMyMTM1MzUucm9hMBgGA1UdIAEB
/wQOMAwwCgYIKwYBBQUHDgIwSgYIKwYBBQUHAQcBAf8EOzA5MDcEAgACMDEDBwAq
D2KEAFAwEgMHBSoPYoQAYAMHACoPYoQAZDASAwcAKg9ihABnAwcAKg9ihABqMA0G
CSqGSIb3DQEBCwUAA4IBAQBXa9FmMZnUEBtzFaqM94lomX/CteqlQiU+foaXs/Lx
38TGqQsXKIqVZbBZIRxqKuQdkVgign14WxSERGr7sVMS5kNyhcl5KeHP9veLzo1b
GMr1SsH1lE+x5axJyurjMBEqJNy6DM+kdgHkyE6Kn85snVV1eV13IIB3KmSbiwbg
CPdYJJFuwfvrtxU4eP0NoZYBfL2ZIcIthMCwTmRE8fwXpaA+rUB5YQYBCdzJ/x0O
rkWclpRGjj9O0FdKpT/ARUCPHR1InOu7i7wc3siKPqwI8i3upJ1AslijQOb6i/pQ
INmjtzteVygbH1YUyEBYRWR3im0fK4rrDU0Z8TrRWAl4
-----END CERTIFICATE-----
Generated at Sat Jun 13 11:32:45 2026 by rpki-client