Route Origin Authorization
$ rpki-client -vvvf krill.47272.net/repo/HYEHOST/5/AS47272.roa
File: AS47272.roa (raw, json)
Hash identifier: ThdoiN01nwGzE9fQrnkfKqbftJreISJlIOizvdnBKk4=
Subject key identifier: D4:D4:B2:47:8E:28:32:A3:E0:41:EA:B4:6C:97:D6:97:36:16:A9:02
Certificate issuer: /CN=C3CF41898936CB9C573DB1EAAB94C6E669951FD7
Certificate serial: 351C9CBCC288C3B3F4ECEFF4E44E49D4B18032C8
Authority key identifier: C3:CF:41:89:89:36:CB:9C:57:3D:B1:EA:AB:94:C6:E6:69:95:1F:D7
Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer
Subject info access: rsync://krill.47272.net/repo/HYEHOST/5/AS47272.roa
Signing time: Fri 18 Sep 2026 09:02:41 +0000
ROA not before: Fri 18 Sep 2026 08:57:41 +0000
ROA not after: Fri 17 Sep 2027 09:02:41 +0000
asID: 47272
IP address blocks: 199.47.240.0/24 maxlen: 32
2a06:1281:40::/44 maxlen: 44
2a06:1281:1000::/36 maxlen: 36
2a0f:6280:a::/48 maxlen: 48
2a0f:6280:13::/48 maxlen: 48
2a0f:6280:15::/48 maxlen: 48
2a0f:6280:18::/48 maxlen: 48
2a0f:6280:1d::/48 maxlen: 48
2a0f:6280:1f::/48 maxlen: 48
2a0f:6280:1005::/48 maxlen: 48
2a0f:6280:1006::/48 maxlen: 48
2a0f:6280:100b::/48 maxlen: 48
2a0f:6280:1300::/40 maxlen: 48
2a0f:6280:1a00::/40 maxlen: 48
2a0f:6280:1b00::/40 maxlen: 48
2a0f:6280:f000::/36 maxlen: 36
2a0f:6282:4000::/36 maxlen: 48
2a0f:6282:7000::/36 maxlen: 48
2a0f:6282:9000::/36 maxlen: 48
2a0f:6284:20::/44 maxlen: 44
2a0f:6284:4700::/40 maxlen: 40
Validation: OK
Signature path: rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.crl
rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.mft
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 05:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
35:1c:9c:bc:c2:88:c3:b3:f4:ec:ef:f4:e4:4e:49:d4:b1:80:32:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C3CF41898936CB9C573DB1EAAB94C6E669951FD7
Validity
Not Before: Sep 18 08:57:41 2026 GMT
Not After : Sep 17 09:02:41 2027 GMT
Subject: CN=D4D4B2478E2832A3E041EAB46C97D6973616A902
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:40:b6:ef:c4:77:dd:37:e1:34:32:5f:ec:e9:
2d:3c:5f:1e:59:6c:00:a6:bd:9a:16:9b:ca:98:26:
c5:55:c8:89:76:78:2b:e8:67:f8:8e:d2:71:8a:10:
9e:6a:52:0d:82:c2:47:44:ff:31:bb:7f:fd:75:41:
a9:1e:2a:69:ca:ad:a6:01:bb:96:a7:a9:6f:14:ec:
6c:59:66:1d:f2:82:f0:81:b5:d0:7f:5e:6e:00:a2:
ed:4b:bc:a1:51:37:ca:bc:46:9b:bb:89:12:4e:53:
5b:6c:8a:c7:d2:97:06:e1:e4:d8:bc:f3:9c:d2:a7:
3f:15:e3:95:19:0a:bf:f6:75:c8:33:f1:12:f5:1b:
cd:ef:43:71:fa:85:e3:ce:93:aa:20:01:f4:1f:34:
aa:4c:1d:30:89:57:75:3a:4f:99:7d:b2:2c:33:16:
de:b3:46:09:26:99:cb:df:2e:59:cd:51:f2:48:0a:
b3:da:0b:01:7b:76:c9:ac:3c:c1:25:b4:d3:b4:0b:
68:3b:9b:1d:e2:a2:a3:7e:02:73:66:39:9e:b3:a9:
99:97:b5:e0:4a:01:39:e8:18:02:19:6a:a4:00:3e:
bb:6f:7a:ed:e2:09:0c:9c:e7:14:77:5c:84:34:90:
26:eb:e3:d7:42:67:c4:33:46:a4:f5:e5:70:f9:01:
22:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:D4:B2:47:8E:28:32:A3:E0:41:EA:B4:6C:97:D6:97:36:16:A9:02
X509v3 Authority Key Identifier:
keyid:C3:CF:41:89:89:36:CB:9C:57:3D:B1:EA:AB:94:C6:E6:69:95:1F:D7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer
Subject Information Access:
Signed Object - URI:rsync://krill.47272.net/repo/HYEHOST/5/AS47272.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.47.240.0/24
IPv6:
2a06:1281:40::/44
2a06:1281:1000::/36
2a0f:6280:a::/48
2a0f:6280:13::/48
2a0f:6280:15::/48
2a0f:6280:18::/48
2a0f:6280:1d::/48
2a0f:6280:1f::/48
2a0f:6280:1005::-2a0f:6280:1006:ffff:ffff:ffff:ffff:ffff
2a0f:6280:100b::/48
2a0f:6280:1300::/40
2a0f:6280:1a00::/39
2a0f:6280:f000::/36
2a0f:6282:4000::/36
2a0f:6282:7000::/36
2a0f:6282:9000::/36
2a0f:6284:20::/44
2a0f:6284:4700::/40
Signature Algorithm: sha256WithRSAEncryption
49:7f:6b:f0:de:5e:a3:3d:ad:03:dd:7f:de:89:e5:2e:0c:97:
78:db:ff:dd:9e:af:41:96:36:8d:c9:f8:a2:96:bc:4b:bf:93:
32:f1:ff:8b:a3:32:f8:7f:a0:c8:10:6a:74:0f:f1:02:04:af:
ab:70:bf:56:d2:b5:1e:00:8d:d7:c1:c3:9c:76:c0:94:b4:ed:
72:73:67:94:05:16:8a:37:66:cb:93:e1:ab:e8:50:3c:fd:ba:
17:04:5c:fa:44:d1:e6:f8:e0:d5:5f:80:1d:a2:4b:b0:e4:31:
0d:a8:3f:84:83:b6:c2:27:c6:13:cc:ec:22:48:94:8e:38:67:
e1:7e:04:4f:4d:8e:5c:fc:db:ec:cb:e3:4a:c6:d5:05:42:38:
c9:82:40:f7:42:81:de:1c:71:d0:4d:bb:a4:42:57:b0:8c:4b:
d5:ac:53:11:65:76:16:8c:73:fe:d0:17:52:a3:56:58:78:6a:
78:62:a1:e7:cd:eb:de:f0:02:d4:d9:27:44:8d:07:34:63:4d:
e1:7e:bf:03:37:fa:ab:57:29:38:a3:68:49:cd:5c:39:c9:54:
8d:70:6f:67:c0:d0:c9:81:f0:8d:75:b9:07:2b:f4:ff:db:f1:
7b:21:be:75:58:61:7d:cb:d5:6a:b1:c5:cf:98:24:ce:d3:bb:
77:e1:a9:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 14:28:45 2026 by rpki-client