$ rpki-client -vvf krill.47272.net/repo/HYEHOST/5/AS210537.roa File: AS210537.roa (raw, json) Hash identifier: uujzLRsvgeCcdxKnAqI4UBP/amV9A5Adv4Ju5z0wu8s= Subject key identifier: 6E:FB:16:4C:E8:DB:84:9F:5E:D6:CE:79:30:26:D2:64:08:F0:BC:29 Certificate issuer: /CN=C3CF41898936CB9C573DB1EAAB94C6E669951FD7 Certificate serial: 41BCDF247D14604876987EA8FEB15C018976D9ED Authority key identifier: C3:CF:41:89:89:36:CB:9C:57:3D:B1:EA:AB:94:C6:E6:69:95:1F:D7 Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer Subject info access: rsync://krill.47272.net/repo/HYEHOST/5/AS210537.roa Signing time: Fri 10 Apr 2026 05:03:53 +0000 ROA not before: Fri 10 Apr 2026 04:58:53 +0000 ROA not after: Fri 09 Apr 2027 05:03:53 +0000 asID: 210537 IP address blocks: 2a0f:6284:f00::/40 maxlen: 40 Validation: OK Signature path: rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.crl rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 20 Apr 2026 04:00:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 41:bc:df:24:7d:14:60:48:76:98:7e:a8:fe:b1:5c:01:89:76:d9:ed Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C3CF41898936CB9C573DB1EAAB94C6E669951FD7 Validity Not Before: Apr 10 04:58:53 2026 GMT Not After : Apr 9 05:03:53 2027 GMT Subject: CN=6EFB164CE8DB849F5ED6CE793026D26408F0BC29 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:3e:ed:12:39:54:df:1d:ae:e2:35:cb:a7:f8: 35:2d:20:a2:20:c7:88:1b:c9:57:b3:76:e3:97:d3: 11:dc:a4:4e:11:28:e9:83:e8:24:a0:0f:11:aa:49: 01:b4:22:a6:65:bd:1a:88:a7:71:55:1b:1c:3a:91: c2:3e:be:84:61:4a:58:21:9d:d2:e0:a9:a0:cb:98: 79:cf:05:53:ba:a9:22:df:a5:4a:3b:9f:c5:a8:bb: 6d:51:bf:c7:af:c2:47:1e:d3:b8:a6:d3:59:f4:a8: 16:35:e2:ce:3a:e6:a1:62:81:88:0c:52:69:6c:1f: e6:89:b5:8c:b4:a5:5f:27:e4:1e:f0:8b:c8:f3:c9: f2:57:65:7a:c2:d6:71:bd:22:00:5c:11:c3:a1:28: b6:50:dd:6c:55:4c:bb:5d:4a:58:ee:3c:06:f0:ed: 2d:56:c8:45:fe:48:a7:8d:04:d1:3d:93:20:d2:f3: 38:e9:e7:2f:39:f9:cc:ef:7d:ff:27:df:fc:28:1d: 84:17:34:35:04:ae:d5:be:25:3b:d2:a5:94:fb:db: ea:78:70:42:dc:a9:5f:18:84:60:5d:89:5a:16:f2: b1:8e:fe:7f:b0:b8:1a:b4:e9:84:c8:90:03:41:86: 69:86:ea:51:f3:36:20:8c:0d:81:53:ad:cb:d1:ed: d9:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:FB:16:4C:E8:DB:84:9F:5E:D6:CE:79:30:26:D2:64:08:F0:BC:29 X509v3 Authority Key Identifier: keyid:C3:CF:41:89:89:36:CB:9C:57:3D:B1:EA:AB:94:C6:E6:69:95:1F:D7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer Subject Information Access: Signed Object - URI:rsync://krill.47272.net/repo/HYEHOST/5/AS210537.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0f:6284:f00::/40 Signature Algorithm: sha256WithRSAEncryption 79:4c:d1:c7:4e:7b:40:d5:ec:1b:ee:23:b3:22:35:33:1d:c6: c8:de:17:22:e3:3f:fd:a6:8c:8d:21:01:42:fe:77:b5:c1:ea: 66:b2:f9:0c:81:83:90:02:8e:25:3f:d2:4a:06:dd:ab:22:36: bb:7e:d3:be:ff:44:7d:63:df:45:8a:d4:46:06:83:92:90:84: d0:b5:78:3a:4c:89:d1:8a:4e:75:b0:71:44:40:1d:70:fe:cc: 89:25:43:7d:b8:97:8f:78:0d:e4:1e:4d:d8:d8:d6:e1:97:f6: 71:dc:0a:04:08:6b:eb:47:b9:9b:52:49:5b:fb:e2:81:50:90: 12:01:16:ab:16:cb:27:d7:62:4a:93:6f:8c:fa:75:09:16:8d: 51:0a:f9:2d:4f:20:82:55:82:ee:12:46:4f:ba:7e:05:e9:b0: f2:a1:75:81:24:40:ac:34:3e:5a:15:aa:95:9a:36:4a:0a:5a: 21:19:a5:83:e3:8c:79:bf:7f:2c:d2:4b:0e:35:70:ef:05:40: 36:fc:e1:f2:df:2e:18:8e:a4:59:1f:13:d5:59:97:c3:39:62: dc:1c:6a:2b:90:d3:94:60:3f:69:ce:70:93:0d:02:8d:58:b3: 7f:f6:6a:55:2a:a5:03:aa:85:32:0e:e4:7b:76:56:a7:5b:15: 70:6a:1a:0b -----BEGIN CERTIFICATE----- MIIE1DCCA7ygAwIBAgIUQbzfJH0UYEh2mH6o/rFcAYl22e0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzNDRjQxODk4OTM2Q0I5QzU3M0RCMUVBQUI5NEM2RTY2 OTk1MUZENzAeFw0yNjA0MTAwNDU4NTNaFw0yNzA0MDkwNTAzNTNaMDMxMTAvBgNV BAMTKDZFRkIxNjRDRThEQjg0OUY1RUQ2Q0U3OTMwMjZEMjY0MDhGMEJDMjkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDEPu0SOVTfHa7iNcun+DUtIKIg x4gbyVezduOX0xHcpE4RKOmD6CSgDxGqSQG0IqZlvRqIp3FVGxw6kcI+voRhSlgh ndLgqaDLmHnPBVO6qSLfpUo7n8Wou21Rv8evwkce07im01n0qBY14s465qFigYgM UmlsH+aJtYy0pV8n5B7wi8jzyfJXZXrC1nG9IgBcEcOhKLZQ3WxVTLtdSljuPAbw 7S1WyEX+SKeNBNE9kyDS8zjp5y85+czvff8n3/woHYQXNDUErtW+JTvSpZT72+p4 cELcqV8YhGBdiVoW8rGO/n+wuBq06YTIkANBhmmG6lHzNiCMDYFTrcvR7dmJAgMB AAGjggHeMIIB2jAdBgNVHQ4EFgQUbvsWTOjbhJ9e1s55MCbSZAjwvCkwHwYDVR0j BBgwFoAUw89BiYk2y5xXPbHqq5TG5mmVH9cwDgYDVR0PAQH/BAQDAgeAMGQGA1Ud HwRdMFswWaBXoFWGU3JzeW5jOi8va3JpbGwuNDcyNzIubmV0L3JlcG8vSFlFSE9T VC81L0MzQ0Y0MTg5ODkzNkNCOUM1NzNEQjFFQUFCOTRDNkU2Njk5NTFGRDcuY3Js MIGTBggrBgEFBQcBAQSBhjCBgzCBgAYIKwYBBQUHMAKGdHJzeW5jOi8vcnBraS1y cHMuYXJpbi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZjg1MGQwNjNlMDE4NTc1NWM5 MWJlM2Y5ZC83L0MzQ0Y0MTg5ODkzNkNCOUM1NzNEQjFFQUFCOTRDNkU2Njk5NTFG RDcuY2VyME8GCCsGAQUFBwELBEMwQTA/BggrBgEFBQcwC4YzcnN5bmM6Ly9rcmls bC40NzI3Mi5uZXQvcmVwby9IWUVIT1NULzUvQVMyMTA1Mzcucm9hMBgGA1UdIAEB /wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgACMAgDBgAq D2KEDzANBgkqhkiG9w0BAQsFAAOCAQEAeUzRx057QNXsG+4jsyI1Mx3GyN4XIuM/ /aaMjSEBQv53tcHqZrL5DIGDkAKOJT/SSgbdqyI2u37Tvv9EfWPfRYrURgaDkpCE 0LV4OkyJ0YpOdbBxREAdcP7MiSVDfbiXj3gN5B5N2NjW4Zf2cdwKBAhr60e5m1JJ W/vigVCQEgEWqxbLJ9diSpNvjPp1CRaNUQr5LU8gglWC7hJGT7p+Bemw8qF1gSRA rDQ+WhWqlZo2SgpaIRmlg+OMeb9/LNJLDjVw7wVANvzh8t8uGI6kWR8T1VmXwzli 3BxqK5DTlGA/ac5wkw0CjVizf/ZqVSqlA6qFMg7ke3ZWp1sVcGoaCw== -----END CERTIFICATE-----Generated at Sun Apr 19 12:37:34 2026 by rpki-client