$ rpki-client -vvf krill.47272.net/repo/HYEHOST/5/AS208694.roa File: AS208694.roa (raw, json) Hash identifier: VtnKqoYUqLKQ46qXIYbuy8YBQxcve9OQBBmmEkmsPr0= Subject key identifier: 29:03:FD:DD:87:DF:D5:96:AB:45:17:DE:B9:37:CD:CC:AB:FD:54:04 Certificate issuer: /CN=C3CF41898936CB9C573DB1EAAB94C6E669951FD7 Certificate serial: 6F2F59D31CE3C65B1914C1E18903BA71690C208A Authority key identifier: C3:CF:41:89:89:36:CB:9C:57:3D:B1:EA:AB:94:C6:E6:69:95:1F:D7 Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer Subject info access: rsync://krill.47272.net/repo/HYEHOST/5/AS208694.roa Signing time: Thu 11 Jun 2026 00:38:42 +0000 ROA not before: Thu 11 Jun 2026 00:33:42 +0000 ROA not after: Thu 10 Jun 2027 00:38:42 +0000 asID: 208694 IP address blocks: 2a09:54c5:1000::/40 maxlen: 40 2a09:54c5:1000::/48 maxlen: 48 2a09:54c5:1001::/48 maxlen: 48 2a09:54c5:1002::/48 maxlen: 48 2a09:54c5:100f::/48 maxlen: 48 2a09:54c5:1010::/44 maxlen: 44 2a09:54c5:1020::/44 maxlen: 44 2a09:54c5:1030::/44 maxlen: 44 Validation: OK Signature path: rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.crl rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 17 Jun 2026 22:25:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6f:2f:59:d3:1c:e3:c6:5b:19:14:c1:e1:89:03:ba:71:69:0c:20:8a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C3CF41898936CB9C573DB1EAAB94C6E669951FD7 Validity Not Before: Jun 11 00:33:42 2026 GMT Not After : Jun 10 00:38:42 2027 GMT Subject: CN=2903FDDD87DFD596AB4517DEB937CDCCABFD5404 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:41:6e:fd:fb:fc:2b:9d:f6:8c:23:d0:4f:30: ef:22:9a:cc:5c:b0:3a:33:fe:eb:4f:7a:26:97:96: 60:e1:65:82:34:1f:70:a1:b0:a6:01:5c:76:fb:f0: 46:c0:31:d7:1a:c9:e7:92:fa:50:9e:a8:35:89:b9: 69:1c:e9:9f:e5:5d:f4:9a:cc:d2:ad:65:52:ad:43: d9:18:31:ca:e8:9f:35:2a:10:7d:68:f3:52:96:0b: 5f:0b:9f:97:7d:4e:0b:35:32:d1:61:59:05:69:87: db:78:da:22:15:c5:25:50:11:2f:b4:6f:5c:34:89: 69:4b:f3:16:bf:b2:c5:a0:a4:50:35:67:4b:84:65: 98:60:b4:37:a9:b4:54:82:c3:23:58:eb:d3:13:c9: 8d:9a:00:80:8b:06:52:88:0e:b4:c3:d7:24:24:74: ad:05:7f:fb:8b:5e:3a:79:15:81:3b:f3:8d:3e:d2: dd:06:80:58:02:85:03:78:37:dd:17:60:fd:01:35: 3b:6b:93:59:54:da:66:8e:ab:be:f5:b9:aa:4c:e4: 34:53:30:7b:a4:d6:d5:c1:72:38:fe:1b:fe:70:82: e3:1a:94:7a:4b:fe:f3:45:87:cc:cd:f2:2c:53:f6: a0:7d:2f:ed:ed:79:58:78:bb:11:b2:65:47:08:5f: 54:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:03:FD:DD:87:DF:D5:96:AB:45:17:DE:B9:37:CD:CC:AB:FD:54:04 X509v3 Authority Key Identifier: keyid:C3:CF:41:89:89:36:CB:9C:57:3D:B1:EA:AB:94:C6:E6:69:95:1F:D7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer Subject Information Access: Signed Object - URI:rsync://krill.47272.net/repo/HYEHOST/5/AS208694.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a09:54c5:1000::/40 Signature Algorithm: sha256WithRSAEncryption 81:4b:3d:c4:fb:de:9a:17:1f:ed:6a:ec:39:cc:cb:8f:c0:cc: 32:4a:9b:d1:3f:65:4d:3a:77:f1:ff:4d:19:1a:cd:9a:2f:48: 8d:f9:dc:7c:25:75:90:0e:74:13:f2:f8:31:d8:98:1e:d5:bd: a6:45:32:66:f4:ec:48:2e:d1:44:60:5e:e7:f6:2e:21:70:00: aa:e5:ba:18:03:11:20:a5:7d:ad:62:15:bb:e2:a9:1e:d7:f6: 35:f2:c3:ac:e7:7f:9d:2c:27:66:f4:60:0d:0a:cf:ae:3d:dd: 07:a3:9f:66:e8:26:01:a6:3b:5e:8c:1a:f9:6a:51:b8:83:b1: d3:1b:f8:2b:33:76:3b:e3:8b:ba:32:66:a0:07:9e:67:86:00: 53:55:b0:ed:f5:4d:af:b2:e3:93:07:33:0a:cd:2d:7f:33:83: e6:f8:40:cc:67:a4:0d:f9:57:c3:c7:49:6f:37:56:d5:7f:96: a5:79:74:1b:fa:c6:ae:9d:04:2d:e3:96:3d:d6:d5:f7:6a:d4: 7f:16:b8:42:a6:43:c0:97:4d:47:37:f3:d4:ea:b1:5f:6c:1d: b7:2a:af:28:52:c4:02:2b:07:9e:d1:19:84:c1:46:e5:38:5b: ab:cd:a1:14:46:cc:59:7d:08:65:35:cc:a3:1e:75:be:d8:5e: 36:b6:65:07 -----BEGIN CERTIFICATE----- MIIE1DCCA7ygAwIBAgIUby9Z0xzjxlsZFMHhiQO6cWkMIIowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzNDRjQxODk4OTM2Q0I5QzU3M0RCMUVBQUI5NEM2RTY2 OTk1MUZENzAeFw0yNjA2MTEwMDMzNDJaFw0yNzA2MTAwMDM4NDJaMDMxMTAvBgNV BAMTKDI5MDNGREREODdERkQ1OTZBQjQ1MTdERUI5MzdDRENDQUJGRDU0MDQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDlQW79+/wrnfaMI9BPMO8imsxc sDoz/utPeiaXlmDhZYI0H3ChsKYBXHb78EbAMdcayeeS+lCeqDWJuWkc6Z/lXfSa zNKtZVKtQ9kYMcronzUqEH1o81KWC18Ln5d9Tgs1MtFhWQVph9t42iIVxSVQES+0 b1w0iWlL8xa/ssWgpFA1Z0uEZZhgtDeptFSCwyNY69MTyY2aAICLBlKIDrTD1yQk dK0Ff/uLXjp5FYE7840+0t0GgFgChQN4N90XYP0BNTtrk1lU2maOq771uapM5DRT MHuk1tXBcjj+G/5wguMalHpL/vNFh8zN8ixT9qB9L+3teVh4uxGyZUcIX1SdAgMB AAGjggHeMIIB2jAdBgNVHQ4EFgQUKQP93Yff1ZarRRfeuTfNzKv9VAQwHwYDVR0j BBgwFoAUw89BiYk2y5xXPbHqq5TG5mmVH9cwDgYDVR0PAQH/BAQDAgeAMGQGA1Ud HwRdMFswWaBXoFWGU3JzeW5jOi8va3JpbGwuNDcyNzIubmV0L3JlcG8vSFlFSE9T VC81L0MzQ0Y0MTg5ODkzNkNCOUM1NzNEQjFFQUFCOTRDNkU2Njk5NTFGRDcuY3Js MIGTBggrBgEFBQcBAQSBhjCBgzCBgAYIKwYBBQUHMAKGdHJzeW5jOi8vcnBraS1y cHMuYXJpbi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZjg1MGQwNjNlMDE4NTc1NWM5 MWJlM2Y5ZC83L0MzQ0Y0MTg5ODkzNkNCOUM1NzNEQjFFQUFCOTRDNkU2Njk5NTFG RDcuY2VyME8GCCsGAQUFBwELBEMwQTA/BggrBgEFBQcwC4YzcnN5bmM6Ly9rcmls bC40NzI3Mi5uZXQvcmVwby9IWUVIT1NULzUvQVMyMDg2OTQucm9hMBgGA1UdIAEB /wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgACMAgDBgAq CVTFEDANBgkqhkiG9w0BAQsFAAOCAQEAgUs9xPvemhcf7WrsOczLj8DMMkqb0T9l TTp38f9NGRrNmi9IjfncfCV1kA50E/L4MdiYHtW9pkUyZvTsSC7RRGBe5/YuIXAA quW6GAMRIKV9rWIVu+KpHtf2NfLDrOd/nSwnZvRgDQrPrj3dB6OfZugmAaY7Xowa +WpRuIOx0xv4KzN2O+OLujJmoAeeZ4YAU1Ww7fVNr7LjkwczCs0tfzOD5vhAzGek DflXw8dJbzdW1X+WpXl0G/rGrp0ELeOWPdbV92rUfxa4QqZDwJdNRzfz1OqxX2wd tyqvKFLEAisHntEZhMFG5Thbq82hFEbMWX0IZTXMox51vtheNrZlBw== -----END CERTIFICATE-----Generated at Wed Jun 17 08:27:37 2026 by rpki-client