Route Origin Authorization
$ rpki-client -vvvf krill.47272.net/repo/HYEHOST/5/AS47272.roa
File: AS47272.roa (raw, json)
Hash identifier: T5uHNRBN5emG5w9UvOFGetE+/vWXAu6Mq/MJg8IfZ6U=
Subject key identifier: 3B:AE:7F:58:8C:E1:D8:66:39:02:0C:1E:D0:A0:C5:C3:CF:00:81:0D
Certificate issuer: /CN=C3CF41898936CB9C573DB1EAAB94C6E669951FD7
Certificate serial: 1E2C95D8024093C1295F548E3EF53B42EF6B9925
Authority key identifier: C3:CF:41:89:89:36:CB:9C:57:3D:B1:EA:AB:94:C6:E6:69:95:1F:D7
Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer
Subject info access: rsync://krill.47272.net/repo/HYEHOST/5/AS47272.roa
Signing time: Tue 03 Nov 2026 07:46:02 +0000
ROA not before: Tue 03 Nov 2026 07:41:02 +0000
ROA not after: Tue 02 Nov 2027 07:46:02 +0000
asID: 47272
IP address blocks: 199.47.240.0/24 maxlen: 32
2a06:1281:1000::/36 maxlen: 36
2a0f:6280:a::/48 maxlen: 48
2a0f:6280:13::/48 maxlen: 48
2a0f:6280:15::/48 maxlen: 48
2a0f:6280:18::/48 maxlen: 48
2a0f:6280:1d::/48 maxlen: 48
2a0f:6280:1f::/48 maxlen: 48
2a0f:6280:1005::/48 maxlen: 48
2a0f:6280:1006::/48 maxlen: 48
2a0f:6280:100b::/48 maxlen: 48
2a0f:6280:100f::/48 maxlen: 48
2a0f:6280:1054::/47 maxlen: 48
2a0f:6280:1056::/48 maxlen: 48
2a0f:6280:1058::/46 maxlen: 48
2a0f:6280:105c::/47 maxlen: 48
2a0f:6280:105e::/48 maxlen: 48
2a0f:6280:105f::/48 maxlen: 48
2a0f:6280:1081::/48 maxlen: 48
2a0f:6280:1082::/48 maxlen: 48
2a0f:6280:1083::/48 maxlen: 48
2a0f:6280:108a::/48 maxlen: 48
2a0f:6280:1090::/44 maxlen: 48
2a0f:6280:10b0::/44 maxlen: 48
2a0f:6280:1300::/40 maxlen: 48
2a0f:6280:1a00::/40 maxlen: 48
2a0f:6280:1b00::/40 maxlen: 48
2a0f:6280:2000::/40 maxlen: 48
2a0f:6280:2100::/40 maxlen: 48
2a0f:6280:2400::/38 maxlen: 48
2a0f:6280:2800::/38 maxlen: 48
2a0f:6280:3000::/36 maxlen: 48
2a0f:6280:4000::/36 maxlen: 48
2a0f:6280:5000::/38 maxlen: 48
2a0f:6280:5400::/38 maxlen: 48
2a0f:6280:f000::/36 maxlen: 36
2a0f:6282:4000::/36 maxlen: 48
2a0f:6282:7000::/36 maxlen: 48
2a0f:6282:9000::/36 maxlen: 48
2a0f:6284:20::/44 maxlen: 44
2a0f:6284:4700::/40 maxlen: 40
Validation: OK
Signature path: rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.crl
rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.mft
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 05 Nov 2026 17:02:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1e:2c:95:d8:02:40:93:c1:29:5f:54:8e:3e:f5:3b:42:ef:6b:99:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C3CF41898936CB9C573DB1EAAB94C6E669951FD7
Validity
Not Before: Nov 3 07:41:02 2026 GMT
Not After : Nov 2 07:46:02 2027 GMT
Subject: CN=3BAE7F588CE1D86639020C1ED0A0C5C3CF00810D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f9:ea:06:b4:a8:10:22:cd:3b:c8:14:70:15:72:
99:dd:d5:b3:45:89:1d:86:c0:0f:fb:5e:51:61:f0:
d8:ce:b9:cf:a2:dd:74:58:28:a9:a5:13:77:62:92:
5b:7f:4a:f6:1d:fb:5f:b3:f5:2c:03:4e:03:66:ab:
94:d6:a0:f9:be:b4:2a:ef:b5:9a:58:1e:47:79:22:
01:11:bc:28:70:4f:bb:20:38:e1:55:e3:a0:d5:1e:
ca:39:e7:54:11:50:cd:69:70:43:cc:c8:dc:0a:3f:
b2:b1:22:af:7c:5a:6a:13:42:6f:e6:96:e5:61:56:
28:86:0c:b1:c8:39:3b:a2:ef:ec:ba:2e:d4:a4:42:
8d:15:4e:fb:84:e8:34:8c:52:ef:0f:60:a2:da:31:
d4:cf:0c:a9:42:43:9d:de:39:db:81:7b:7b:62:81:
61:c2:93:37:26:17:67:d7:5a:5a:6c:a8:86:7b:ee:
74:bd:51:ba:51:05:99:bd:bf:e4:f7:27:b0:fa:da:
0f:51:83:8b:18:cc:27:0c:43:22:27:28:d6:61:46:
41:e3:91:f0:fc:3c:30:a4:6f:e7:4e:91:05:6b:dd:
47:bc:c5:a4:8a:42:98:80:33:3c:84:d3:49:ed:8b:
2d:76:f6:91:76:69:93:84:f2:27:dc:58:41:e7:8b:
82:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:AE:7F:58:8C:E1:D8:66:39:02:0C:1E:D0:A0:C5:C3:CF:00:81:0D
X509v3 Authority Key Identifier:
keyid:C3:CF:41:89:89:36:CB:9C:57:3D:B1:EA:AB:94:C6:E6:69:95:1F:D7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer
Subject Information Access:
Signed Object - URI:rsync://krill.47272.net/repo/HYEHOST/5/AS47272.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.47.240.0/24
IPv6:
2a06:1281:1000::/36
2a0f:6280:a::/48
2a0f:6280:13::/48
2a0f:6280:15::/48
2a0f:6280:18::/48
2a0f:6280:1d::/48
2a0f:6280:1f::/48
2a0f:6280:1005::-2a0f:6280:1006:ffff:ffff:ffff:ffff:ffff
2a0f:6280:100b::/48
2a0f:6280:100f::/48
2a0f:6280:1054::-2a0f:6280:1056:ffff:ffff:ffff:ffff:ffff
2a0f:6280:1058::/45
2a0f:6280:1081::-2a0f:6280:1083:ffff:ffff:ffff:ffff:ffff
2a0f:6280:108a::/48
2a0f:6280:1090::/44
2a0f:6280:10b0::/44
2a0f:6280:1300::/40
2a0f:6280:1a00::/39
2a0f:6280:2000::/39
2a0f:6280:2400::-2a0f:6280:2bff:ffff:ffff:ffff:ffff:ffff
2a0f:6280:3000::-2a0f:6280:57ff:ffff:ffff:ffff:ffff:ffff
2a0f:6280:f000::/36
2a0f:6282:4000::/36
2a0f:6282:7000::/36
2a0f:6282:9000::/36
2a0f:6284:20::/44
2a0f:6284:4700::/40
Signature Algorithm: sha256WithRSAEncryption
6f:f3:83:c5:4c:0b:99:b1:6c:27:c2:e3:80:e4:11:df:5f:3c:
e9:c8:79:4c:18:b9:ce:6b:81:a3:25:8f:de:69:f1:bf:a0:1b:
65:d7:e0:03:be:0f:87:14:5e:4e:76:2f:3f:9e:52:6c:8f:9b:
d5:af:5f:e3:19:63:94:be:d8:7f:e3:73:46:18:6b:97:74:f7:
08:ef:b4:ea:ea:bd:f1:a2:58:7d:53:51:a0:5e:01:d8:aa:73:
fa:27:4d:a2:19:8a:ac:ac:50:93:11:dd:a4:2b:20:8e:a9:bf:
7f:ff:8d:f8:65:84:ce:8f:48:73:30:06:af:c4:a0:a8:60:ce:
30:ba:13:61:d8:05:74:e6:e4:82:b9:23:70:a9:c0:4d:1d:79:
cd:b8:1f:ab:f2:37:2d:bb:50:5d:08:49:34:0f:65:8a:06:b9:
c9:02:08:7c:9a:b3:dd:7b:2f:81:0a:7e:36:8f:b7:95:44:4e:
7d:2f:0a:d3:06:56:30:8d:53:56:2e:d8:f2:d6:51:e7:9a:3b:
d6:fb:2a:fd:96:6b:01:ea:e9:03:bd:5e:83:8b:ac:8d:6d:ea:
3e:0e:82:85:38:71:02:55:1b:b4:b2:c4:c9:70:7f:0e:16:fa:
7b:d8:c3:70:72:41:45:c2:27:85:e2:da:f4:94:ee:42:fc:68:
4b:17:59:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 5 04:18:22 2026 by rpki-client