$ rpki-client -vvf krill.47272.net/repo/HYEHOST/5/AS207455.roa File: AS207455.roa (raw, json) Hash identifier: itcb79Hk+YgPR3WPtqS/tZnPHJa+MOEXGiK6ny4EOTY= Subject key identifier: 22:95:8C:F2:32:5A:93:25:15:A9:4D:64:15:B5:EF:53:3C:77:A2:46 Certificate issuer: /CN=C3CF41898936CB9C573DB1EAAB94C6E669951FD7 Certificate serial: 52353B710571705DB75F9F4E1D62977E78909AE6 Authority key identifier: C3:CF:41:89:89:36:CB:9C:57:3D:B1:EA:AB:94:C6:E6:69:95:1F:D7 Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer Subject info access: rsync://krill.47272.net/repo/HYEHOST/5/AS207455.roa Signing time: Thu 23 Oct 2025 17:34:04 +0000 ROA not before: Thu 23 Oct 2025 17:29:04 +0000 ROA not after: Thu 22 Oct 2026 17:34:04 +0000 asID: 207455 IP address blocks: 2a06:1281:90::/44 maxlen: 44 Validation: OK Signature path: rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.crl rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 06 Nov 2025 10:22:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 52:35:3b:71:05:71:70:5d:b7:5f:9f:4e:1d:62:97:7e:78:90:9a:e6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C3CF41898936CB9C573DB1EAAB94C6E669951FD7 Validity Not Before: Oct 23 17:29:04 2025 GMT Not After : Oct 22 17:34:04 2026 GMT Subject: CN=22958CF2325A932515A94D6415B5EF533C77A246 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:c0:be:22:78:10:97:55:35:7b:af:0c:4d:12: a9:b2:c3:f4:e1:c2:ba:d7:5d:d6:d8:45:71:fb:5b: c2:2e:8e:c2:91:bc:81:96:39:ec:15:a0:52:4e:20: 60:f4:d0:38:24:c1:5c:a0:5f:93:35:50:72:29:98: cb:4e:2f:3f:6b:c0:7c:8d:1b:b2:1e:5a:8c:00:f9: 63:46:5c:c2:f5:f7:a5:ea:26:0a:ec:dd:1f:ef:08: d1:38:23:ad:68:1e:40:03:fd:86:31:4b:7e:d5:a1: 2d:24:17:90:38:17:c7:62:31:94:ad:80:48:2e:6f: 71:65:73:c1:b5:17:31:1b:36:0a:5d:42:45:f7:23: b1:df:3a:1b:f1:79:3c:ba:77:4c:e8:71:06:f3:cf: af:7a:71:e6:5f:b8:82:43:06:50:7b:fa:e5:62:be: 87:d2:b5:17:10:54:f0:82:43:63:2b:b7:44:9b:ce: 4e:8b:a5:21:e5:b7:95:a2:78:9f:31:1a:3e:1d:7e: 2c:71:07:d0:2d:53:e7:7b:17:6c:c4:d8:f6:2b:aa: 0b:05:01:7a:d2:b8:a5:df:37:51:ac:f6:1d:8f:b0: 8e:0e:c7:7b:ae:04:a2:59:ef:35:1d:03:51:36:f6: ae:57:17:ce:00:84:15:fa:42:5b:5f:be:32:05:16: 71:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:95:8C:F2:32:5A:93:25:15:A9:4D:64:15:B5:EF:53:3C:77:A2:46 X509v3 Authority Key Identifier: keyid:C3:CF:41:89:89:36:CB:9C:57:3D:B1:EA:AB:94:C6:E6:69:95:1F:D7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer Subject Information Access: Signed Object - URI:rsync://krill.47272.net/repo/HYEHOST/5/AS207455.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a06:1281:90::/44 Signature Algorithm: sha256WithRSAEncryption 1b:07:5c:50:56:12:e1:b7:c7:59:9c:7a:9d:9a:db:d0:0b:55: 35:b0:07:b3:e8:a4:bb:df:f5:34:d1:97:9c:26:86:d0:ee:6e: 91:29:09:20:10:f2:3c:d0:da:d8:d0:30:54:ef:22:c8:91:8a: a7:10:ab:73:8f:9c:70:cf:d0:fc:e6:af:b2:b3:50:c8:11:6e: ac:06:6c:de:6e:3f:3c:c4:23:4b:86:b0:e9:a8:5e:d9:11:f0: 44:0f:c7:8a:8b:4f:27:33:ae:1e:de:cd:42:6c:fb:f0:6f:5d: 52:62:01:13:fc:ba:c4:24:3f:87:9b:14:a7:0d:33:81:3a:06: 19:04:7e:34:70:ca:33:d5:a5:f2:7d:eb:65:c3:fd:e6:95:d5: ec:75:8a:d7:26:68:23:29:6e:7f:d5:73:5f:3d:5a:49:7b:70: 34:f4:93:b3:e7:01:24:8e:c9:40:41:05:fc:e9:5c:6f:cb:02: 15:7d:7b:59:1b:b9:76:cf:2e:3d:71:8b:55:da:80:99:3b:1d: b4:af:57:4a:a4:4f:cd:05:19:0e:bc:08:43:01:80:c0:df:b6: 0a:88:ee:9f:b0:94:c1:b0:24:4f:f6:66:c9:92:2b:05:f8:41: 2c:79:91:d4:05:ff:a0:21:2b:86:bc:95:41:1a:0b:de:35:a7: 72:cf:c3:44 -----BEGIN CERTIFICATE----- MIIE1TCCA72gAwIBAgIUUjU7cQVxcF23X59OHWKXfniQmuYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzNDRjQxODk4OTM2Q0I5QzU3M0RCMUVBQUI5NEM2RTY2 OTk1MUZENzAeFw0yNTEwMjMxNzI5MDRaFw0yNjEwMjIxNzM0MDRaMDMxMTAvBgNV BAMTKDIyOTU4Q0YyMzI1QTkzMjUxNUE5NEQ2NDE1QjVFRjUzM0M3N0EyNDYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDIwL4ieBCXVTV7rwxNEqmyw/Th wrrXXdbYRXH7W8IujsKRvIGWOewVoFJOIGD00DgkwVygX5M1UHIpmMtOLz9rwHyN G7IeWowA+WNGXML196XqJgrs3R/vCNE4I61oHkAD/YYxS37VoS0kF5A4F8diMZSt gEgub3Flc8G1FzEbNgpdQkX3I7HfOhvxeTy6d0zocQbzz696ceZfuIJDBlB7+uVi vofStRcQVPCCQ2Mrt0Sbzk6LpSHlt5WieJ8xGj4dfixxB9AtU+d7F2zE2PYrqgsF AXrSuKXfN1Gs9h2PsI4Ox3uuBKJZ7zUdA1E29q5XF84AhBX6QltfvjIFFnHnAgMB AAGjggHfMIIB2zAdBgNVHQ4EFgQUIpWM8jJakyUVqU1kFbXvUzx3okYwHwYDVR0j BBgwFoAUw89BiYk2y5xXPbHqq5TG5mmVH9cwDgYDVR0PAQH/BAQDAgeAMGQGA1Ud HwRdMFswWaBXoFWGU3JzeW5jOi8va3JpbGwuNDcyNzIubmV0L3JlcG8vSFlFSE9T VC81L0MzQ0Y0MTg5ODkzNkNCOUM1NzNEQjFFQUFCOTRDNkU2Njk5NTFGRDcuY3Js MIGTBggrBgEFBQcBAQSBhjCBgzCBgAYIKwYBBQUHMAKGdHJzeW5jOi8vcnBraS1y cHMuYXJpbi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZjg1MGQwNjNlMDE4NTc1NWM5 MWJlM2Y5ZC83L0MzQ0Y0MTg5ODkzNkNCOUM1NzNEQjFFQUFCOTRDNkU2Njk5NTFG RDcuY2VyME8GCCsGAQUFBwELBEMwQTA/BggrBgEFBQcwC4YzcnN5bmM6Ly9rcmls bC40NzI3Mi5uZXQvcmVwby9IWUVIT1NULzUvQVMyMDc0NTUucm9hMBgGA1UdIAEB /wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwQq BhKBAJAwDQYJKoZIhvcNAQELBQADggEBABsHXFBWEuG3x1mcep2a29ALVTWwB7Po pLvf9TTRl5wmhtDubpEpCSAQ8jzQ2tjQMFTvIsiRiqcQq3OPnHDP0Pzmr7KzUMgR bqwGbN5uPzzEI0uGsOmoXtkR8EQPx4qLTyczrh7ezUJs+/BvXVJiARP8usQkP4eb FKcNM4E6BhkEfjRwyjPVpfJ962XD/eaV1ex1itcmaCMpbn/Vc189Wkl7cDT0k7Pn ASSOyUBBBfzpXG/LAhV9e1kbuXbPLj1xi1XagJk7HbSvV0qkT80FGQ68CEMBgMDf tgqI7p+wlMGwJE/2ZsmSKwX4QSx5kdQF/6AhK4a8lUEaC941p3LPw0Q= -----END CERTIFICATE-----Generated at Thu Nov 6 00:19:25 2025 by rpki-client