$ rpki-client -vvvf krill.47272.net/repo/HYEHOST/5/AS208972.roa File: AS208972.roa (raw, json) Hash identifier: kw0OJdokJ6j7Xr9539ATbNQa9Ch6/6kNWHeqjMn0RYI= Subject key identifier: 7E:DC:96:28:88:A6:CF:02:75:1C:D2:C2:4D:28:A2:F2:4D:A4:8E:B6 Certificate issuer: /CN=C3CF41898936CB9C573DB1EAAB94C6E669951FD7 Certificate serial: 05DB228F2A62A7CB5E6604A5E668B3FB3F298EF4 Authority key identifier: C3:CF:41:89:89:36:CB:9C:57:3D:B1:EA:AB:94:C6:E6:69:95:1F:D7 Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer Subject info access: rsync://krill.47272.net/repo/HYEHOST/5/AS208972.roa Signing time: Sun 08 Nov 2026 21:44:48 +0000 ROA not before: Sun 08 Nov 2026 21:39:48 +0000 ROA not after: Sun 07 Nov 2027 21:44:48 +0000 asID: 208972 IP address blocks: 2a05:dfc3:fd30::/44 maxlen: 44 Validation: OK Signature path: rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.crl rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Nov 2026 22:05:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 05:db:22:8f:2a:62:a7:cb:5e:66:04:a5:e6:68:b3:fb:3f:29:8e:f4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C3CF41898936CB9C573DB1EAAB94C6E669951FD7 Validity Not Before: Nov 8 21:39:48 2026 GMT Not After : Nov 7 21:44:48 2027 GMT Subject: CN=7EDC962888A6CF02751CD2C24D28A2F24DA48EB6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:c7:f7:f2:b9:bd:8f:75:9b:7d:25:fb:5e:2c: ad:fc:50:42:f7:80:62:07:b7:3e:f8:26:17:ac:e7: be:d0:38:b1:6a:90:8c:08:e2:94:e6:ff:cb:ac:5e: f0:58:d5:d5:56:42:2b:02:5e:75:32:55:35:d8:9a: 19:4c:b6:7b:79:50:18:08:23:b6:18:0b:de:ff:f5: 48:44:b5:4d:c7:ca:41:ab:f9:40:76:33:49:86:58: aa:b3:ed:04:b2:04:1c:9d:7d:2f:ed:d7:e6:73:ee: 17:03:8a:23:4e:3e:d0:fb:11:de:00:4c:3c:93:02: 8c:aa:eb:72:a4:1d:ac:3a:4b:5e:fb:f0:f5:27:c2: ef:13:ed:bb:88:29:d8:e1:b8:b4:bb:70:ad:99:e6: 28:5b:56:88:5b:f4:d7:cb:b2:e4:72:ef:aa:31:9f: 9e:34:9f:88:b0:3b:f8:4b:61:a3:85:f1:3d:01:48: 46:ad:8e:fa:28:d8:93:e4:55:32:b0:25:30:b8:0d: ac:a3:f6:36:75:ce:e1:dd:b2:be:57:a4:22:ca:40: 2e:90:27:4a:23:11:e5:9d:31:e8:ef:8e:e6:f1:4b: 5e:96:47:af:ec:06:f7:2e:bb:a8:63:b0:3f:19:ce: e8:ea:8a:64:e9:16:56:e6:0a:4a:7f:56:6c:a6:d9: 0f:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:DC:96:28:88:A6:CF:02:75:1C:D2:C2:4D:28:A2:F2:4D:A4:8E:B6 X509v3 Authority Key Identifier: keyid:C3:CF:41:89:89:36:CB:9C:57:3D:B1:EA:AB:94:C6:E6:69:95:1F:D7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer Subject Information Access: Signed Object - URI:rsync://krill.47272.net/repo/HYEHOST/5/AS208972.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a05:dfc3:fd30::/44 Signature Algorithm: sha256WithRSAEncryption 0c:25:fd:86:6d:77:33:66:76:b8:ce:1a:51:a9:97:15:10:ad: 5d:3c:c1:f3:da:88:0d:5a:a1:7c:87:f0:34:57:41:2e:0a:80: ca:29:35:8d:3e:31:d2:fa:9a:d0:41:59:dc:87:b5:75:c3:81: e2:b8:cb:9c:91:cb:43:e1:10:54:67:33:80:c5:bf:cc:79:c4: 60:5b:8a:3c:ca:a6:b5:79:a5:60:b9:01:c4:6f:08:aa:bf:66: fe:cc:04:b1:bb:74:44:d3:90:a6:72:01:b7:d6:1f:1a:f5:23: cb:cf:5a:90:1e:67:23:d7:5a:27:c9:50:3e:0e:be:63:be:1d: fa:c1:93:cc:b4:b2:c9:21:19:70:78:8b:f5:6e:44:b8:0c:4f: f7:de:11:67:38:b3:b1:d9:55:40:d4:6a:d6:a6:c6:48:0c:ac: d9:89:5b:b3:d8:bc:99:34:97:ac:24:64:cd:bd:73:7a:00:8f: c9:5a:b1:ae:4d:da:43:10:be:2a:4c:18:21:90:26:5a:5f:2d: 71:d8:48:b8:4d:ef:a2:c5:26:e2:4c:cd:10:f3:11:30:47:6e: ff:5d:b6:c1:4d:6d:73:a9:0a:6a:2b:63:70:22:91:34:f0:96: 88:d4:53:dd:93:79:29:86:b5:84:2d:aa:32:4e:a9:c8:fa:28: 5c:9a:ad:85 -----BEGIN CERTIFICATE----- MIIE1TCCA72gAwIBAgIUBdsijypip8teZgSl5miz+z8pjvQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzNDRjQxODk4OTM2Q0I5QzU3M0RCMUVBQUI5NEM2RTY2 OTk1MUZENzAeFw0yNjExMDgyMTM5NDhaFw0yNzExMDcyMTQ0NDhaMDMxMTAvBgNV BAMTKDdFREM5NjI4ODhBNkNGMDI3NTFDRDJDMjREMjhBMkYyNERBNDhFQjYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6x/fyub2PdZt9JfteLK38UEL3 gGIHtz74Jhes577QOLFqkIwI4pTm/8usXvBY1dVWQisCXnUyVTXYmhlMtnt5UBgI I7YYC97/9UhEtU3HykGr+UB2M0mGWKqz7QSyBBydfS/t1+Zz7hcDiiNOPtD7Ed4A TDyTAoyq63KkHaw6S1778PUnwu8T7buIKdjhuLS7cK2Z5ihbVohb9NfLsuRy76ox n540n4iwO/hLYaOF8T0BSEatjvoo2JPkVTKwJTC4Dayj9jZ1zuHdsr5XpCLKQC6Q J0ojEeWdMejvjubxS16WR6/sBvcuu6hjsD8ZzujqimTpFlbmCkp/Vmym2Q/1AgMB AAGjggHfMIIB2zAdBgNVHQ4EFgQUftyWKIimzwJ1HNLCTSii8k2kjrYwHwYDVR0j BBgwFoAUw89BiYk2y5xXPbHqq5TG5mmVH9cwDgYDVR0PAQH/BAQDAgeAMGQGA1Ud HwRdMFswWaBXoFWGU3JzeW5jOi8va3JpbGwuNDcyNzIubmV0L3JlcG8vSFlFSE9T VC81L0MzQ0Y0MTg5ODkzNkNCOUM1NzNEQjFFQUFCOTRDNkU2Njk5NTFGRDcuY3Js MIGTBggrBgEFBQcBAQSBhjCBgzCBgAYIKwYBBQUHMAKGdHJzeW5jOi8vcnBraS1y cHMuYXJpbi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZjg1MGQwNjNlMDE4NTc1NWM5 MWJlM2Y5ZC83L0MzQ0Y0MTg5ODkzNkNCOUM1NzNEQjFFQUFCOTRDNkU2Njk5NTFG RDcuY2VyME8GCCsGAQUFBwELBEMwQTA/BggrBgEFBQcwC4YzcnN5bmM6Ly9rcmls bC40NzI3Mi5uZXQvcmVwby9IWUVIT1NULzUvQVMyMDg5NzIucm9hMBgGA1UdIAEB /wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwQq Bd/D/TAwDQYJKoZIhvcNAQELBQADggEBAAwl/YZtdzNmdrjOGlGplxUQrV08wfPa iA1aoXyH8DRXQS4KgMopNY0+MdL6mtBBWdyHtXXDgeK4y5yRy0PhEFRnM4DFv8x5 xGBbijzKprV5pWC5AcRvCKq/Zv7MBLG7dETTkKZyAbfWHxr1I8vPWpAeZyPXWifJ UD4OvmO+HfrBk8y0sskhGXB4i/VuRLgMT/feEWc4s7HZVUDUatamxkgMrNmJW7PY vJk0l6wkZM29c3oAj8lasa5N2kMQvipMGCGQJlpfLXHYSLhN76LFJuJMzRDzETBH bv9dtsFNbXOpCmorY3AikTTwlojUU92TeSmGtYQtqjJOqcj6KFyarYU= -----END CERTIFICATE-----Generated at Tue Nov 10 08:45:08 2026 by rpki-client