$ rpki-client -vvf krill.47272.net/repo/HYEHOST/5/AS213798.roa File: AS213798.roa (raw, json) Hash identifier: i1cnN8AQhmKH+q4a/XkQfOEEEwTrfOr0nzBMH5P0B6U= Subject key identifier: 2C:D4:00:69:DD:74:E5:26:98:24:4F:BB:69:AF:13:31:8D:06:7C:D6 Certificate issuer: /CN=C3CF41898936CB9C573DB1EAAB94C6E669951FD7 Certificate serial: 084E4B83C558B06C7F742B5DDF3D3FC7E87E87ED Authority key identifier: C3:CF:41:89:89:36:CB:9C:57:3D:B1:EA:AB:94:C6:E6:69:95:1F:D7 Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer Subject info access: rsync://krill.47272.net/repo/HYEHOST/5/AS213798.roa Signing time: Mon 15 Jun 2026 10:38:15 +0000 ROA not before: Mon 15 Jun 2026 10:33:15 +0000 ROA not after: Mon 14 Jun 2027 10:38:15 +0000 asID: 213798 IP address blocks: 2a0f:6286:1::/48 maxlen: 48 Validation: OK Signature path: rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.crl rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 17 Jun 2026 22:25:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 08:4e:4b:83:c5:58:b0:6c:7f:74:2b:5d:df:3d:3f:c7:e8:7e:87:ed Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C3CF41898936CB9C573DB1EAAB94C6E669951FD7 Validity Not Before: Jun 15 10:33:15 2026 GMT Not After : Jun 14 10:38:15 2027 GMT Subject: CN=2CD40069DD74E52698244FBB69AF13318D067CD6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:d7:8e:11:e6:80:7e:7a:65:bf:a4:ee:15:67: 20:2c:b7:d9:a3:2c:ba:83:be:e2:c6:71:d7:61:91: dd:25:c6:e8:97:c8:03:fb:b1:d1:46:ca:39:90:ed: 1c:19:70:97:ad:5e:55:8e:09:90:a2:e5:9b:93:70: 2b:5f:5a:8f:79:ca:ca:b3:bc:b7:71:47:d4:45:29: f8:0d:dd:4e:2e:d9:94:27:81:74:58:cb:85:95:e7: f0:cd:67:34:cd:5c:36:3a:a5:99:cf:44:81:b0:6d: 4a:b2:73:71:c9:5c:be:a0:13:e3:32:58:c6:4f:96: 92:f8:ec:a8:ef:9e:b7:6b:be:2c:fd:2f:01:1c:64: 0f:2f:23:09:4e:18:4a:ff:54:b9:cc:16:3a:59:93: e6:c0:5f:ce:da:7a:bd:1a:30:49:9c:3c:99:a7:cd: 66:11:cb:96:bc:c2:5f:db:bf:68:f1:c4:f1:f6:47: df:fc:27:59:a9:94:56:90:4b:2a:05:49:ac:71:cf: 43:df:9f:8b:2b:79:f4:d2:88:3b:2b:24:14:e0:3b: 78:aa:bc:44:a6:f1:dd:2a:2c:b0:e3:33:0a:a3:a0: 71:e2:b4:c7:99:f5:b3:ab:ea:ff:99:18:c4:ba:db: c7:c4:3c:12:e6:36:fa:d5:5c:23:8a:52:2a:d2:9f: e3:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:D4:00:69:DD:74:E5:26:98:24:4F:BB:69:AF:13:31:8D:06:7C:D6 X509v3 Authority Key Identifier: keyid:C3:CF:41:89:89:36:CB:9C:57:3D:B1:EA:AB:94:C6:E6:69:95:1F:D7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer Subject Information Access: Signed Object - URI:rsync://krill.47272.net/repo/HYEHOST/5/AS213798.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0f:6286:1::/48 Signature Algorithm: sha256WithRSAEncryption 84:95:f3:47:d2:58:8c:73:83:0f:85:56:49:60:39:1b:ec:a7: 55:50:73:44:5a:e3:9f:1e:a0:ac:a3:8a:ee:2b:34:01:51:6e: 81:7c:9a:76:61:a6:a4:47:93:21:00:b6:f6:e7:e7:c1:ba:1b: b3:1c:1d:72:dc:a4:07:fa:6e:c8:97:14:33:c7:f9:8f:dc:9f: 14:31:f4:a7:96:08:8c:9b:91:7d:4b:eb:88:3a:7d:cb:a0:f3: c5:24:69:64:40:f5:d2:7c:7a:9b:ef:ba:a7:26:4b:e2:de:a5: 93:44:75:76:95:7a:14:07:5c:97:f7:9c:29:ae:aa:b6:86:cd: e1:fc:c3:54:e3:de:70:ed:0b:32:19:73:1b:bb:7b:1d:db:6e: 0f:8a:d4:15:69:b1:20:db:96:eb:67:fd:23:a9:22:c8:7f:bf: 35:5f:6f:d5:b3:36:9f:d2:d7:f5:9d:fd:0e:2e:54:48:f6:b3: 6b:98:76:93:5b:da:c3:2a:1b:59:09:f3:ca:af:3b:f6:04:e4: 58:ba:9c:41:e1:93:f5:ea:6c:68:b7:d9:57:ed:96:ee:85:18: 8b:5e:37:b5:1c:16:1f:16:ec:d7:e8:b4:44:3f:da:c9:44:53: d5:3b:91:32:67:d5:e9:3e:02:83:69:af:29:84:70:d5:77:40: d1:f4:23:71 -----BEGIN CERTIFICATE----- MIIE1TCCA72gAwIBAgIUCE5Lg8VYsGx/dCtd3z0/x+h+h+0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzNDRjQxODk4OTM2Q0I5QzU3M0RCMUVBQUI5NEM2RTY2 OTk1MUZENzAeFw0yNjA2MTUxMDMzMTVaFw0yNzA2MTQxMDM4MTVaMDMxMTAvBgNV BAMTKDJDRDQwMDY5REQ3NEU1MjY5ODI0NEZCQjY5QUYxMzMxOEQwNjdDRDYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJ144R5oB+emW/pO4VZyAst9mj LLqDvuLGcddhkd0lxuiXyAP7sdFGyjmQ7RwZcJetXlWOCZCi5ZuTcCtfWo95ysqz vLdxR9RFKfgN3U4u2ZQngXRYy4WV5/DNZzTNXDY6pZnPRIGwbUqyc3HJXL6gE+My WMZPlpL47Kjvnrdrviz9LwEcZA8vIwlOGEr/VLnMFjpZk+bAX87aer0aMEmcPJmn zWYRy5a8wl/bv2jxxPH2R9/8J1mplFaQSyoFSaxxz0Pfn4srefTSiDsrJBTgO3iq vESm8d0qLLDjMwqjoHHitMeZ9bOr6v+ZGMS628fEPBLmNvrVXCOKUirSn+OpAgMB AAGjggHfMIIB2zAdBgNVHQ4EFgQULNQAad105SaYJE+7aa8TMY0GfNYwHwYDVR0j BBgwFoAUw89BiYk2y5xXPbHqq5TG5mmVH9cwDgYDVR0PAQH/BAQDAgeAMGQGA1Ud HwRdMFswWaBXoFWGU3JzeW5jOi8va3JpbGwuNDcyNzIubmV0L3JlcG8vSFlFSE9T VC81L0MzQ0Y0MTg5ODkzNkNCOUM1NzNEQjFFQUFCOTRDNkU2Njk5NTFGRDcuY3Js MIGTBggrBgEFBQcBAQSBhjCBgzCBgAYIKwYBBQUHMAKGdHJzeW5jOi8vcnBraS1y cHMuYXJpbi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZjg1MGQwNjNlMDE4NTc1NWM5 MWJlM2Y5ZC83L0MzQ0Y0MTg5ODkzNkNCOUM1NzNEQjFFQUFCOTRDNkU2Njk5NTFG RDcuY2VyME8GCCsGAQUFBwELBEMwQTA/BggrBgEFBQcwC4YzcnN5bmM6Ly9rcmls bC40NzI3Mi5uZXQvcmVwby9IWUVIT1NULzUvQVMyMTM3OTgucm9hMBgGA1UdIAEB /wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwAq D2KGAAEwDQYJKoZIhvcNAQELBQADggEBAISV80fSWIxzgw+FVklgORvsp1VQc0Ra 458eoKyjiu4rNAFRboF8mnZhpqRHkyEAtvbn58G6G7McHXLcpAf6bsiXFDPH+Y/c nxQx9KeWCIybkX1L64g6fcug88UkaWRA9dJ8epvvuqcmS+LepZNEdXaVehQHXJf3 nCmuqraGzeH8w1Tj3nDtCzIZcxu7ex3bbg+K1BVpsSDblutn/SOpIsh/vzVfb9Wz Np/S1/Wd/Q4uVEj2s2uYdpNb2sMqG1kJ88qvO/YE5Fi6nEHhk/XqbGi32Vftlu6F GIteN7UcFh8W7NfotEQ/2slEU9U7kTJn1ek+AoNprymEcNV3QNH0I3E= -----END CERTIFICATE-----Generated at Wed Jun 17 08:47:24 2026 by rpki-client