$ rpki-client -vvf krill.47272.net/repo/HYEHOST/5/AS215039.roa File: AS215039.roa (raw, json) Hash identifier: l5kQ4kCtDltQ6jTuLoptIbJlm9iHf8e3JgEIwLiXul4= Subject key identifier: BD:5E:F4:E4:67:BE:A3:34:2F:B2:20:08:BD:35:05:51:13:78:20:04 Certificate issuer: /CN=C3CF41898936CB9C573DB1EAAB94C6E669951FD7 Certificate serial: 66837551FF3985D595B46806FB9EEF7FD53FC68F Authority key identifier: C3:CF:41:89:89:36:CB:9C:57:3D:B1:EA:AB:94:C6:E6:69:95:1F:D7 Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer Subject info access: rsync://krill.47272.net/repo/HYEHOST/5/AS215039.roa Signing time: Fri 15 May 2026 10:36:18 +0000 ROA not before: Fri 15 May 2026 10:31:18 +0000 ROA not after: Fri 14 May 2027 10:36:18 +0000 asID: 215039 IP address blocks: 2a0a:6044:ac50::/44 maxlen: 48 Validation: OK Signature path: rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.crl rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 14 Jun 2026 07:08:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 66:83:75:51:ff:39:85:d5:95:b4:68:06:fb:9e:ef:7f:d5:3f:c6:8f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C3CF41898936CB9C573DB1EAAB94C6E669951FD7 Validity Not Before: May 15 10:31:18 2026 GMT Not After : May 14 10:36:18 2027 GMT Subject: CN=BD5EF4E467BEA3342FB22008BD35055113782004 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:bf:cf:a1:e4:7f:4d:38:f7:35:99:b7:30:df: bf:5c:0b:e3:9f:05:b2:62:15:af:b4:96:e9:4a:d0: a5:fd:b5:67:c8:7a:8e:92:32:4f:7e:c3:58:a9:9e: 8a:6a:92:c0:1c:90:ac:64:62:eb:04:65:15:41:9f: 41:d1:f8:bf:58:2b:bf:54:b6:d3:78:f0:ae:e1:a3: a1:3e:cf:d2:eb:c1:2d:73:59:0c:26:82:a8:40:cd: ff:06:c7:95:78:63:1c:d4:cd:5a:68:2c:d8:b6:52: 01:4e:ad:9e:00:b6:a4:46:2d:0a:16:e7:77:00:3f: 53:98:95:73:32:94:ae:74:41:65:26:5a:34:19:25: c8:5c:e6:ba:ae:a4:f1:34:f0:d5:86:58:be:0b:46: 2a:c9:0e:f5:94:88:34:ed:a5:ed:c6:e8:3b:b3:b2: 76:4c:72:a6:5a:9c:0c:39:79:fb:03:72:14:84:70: d7:04:8c:93:7e:9f:6e:a0:5d:77:46:1c:ac:d4:a6: 03:b8:77:58:da:f3:fa:2c:7c:c7:e9:9e:4b:3d:fa: bd:2b:5f:2c:5b:cb:62:11:85:0f:18:0b:33:0f:f0: 7f:b6:95:64:f0:97:56:38:3d:ac:65:6d:3c:c2:f9: 00:e2:a0:1b:e3:27:0e:2b:52:21:9a:0d:8b:dc:67: f2:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:5E:F4:E4:67:BE:A3:34:2F:B2:20:08:BD:35:05:51:13:78:20:04 X509v3 Authority Key Identifier: keyid:C3:CF:41:89:89:36:CB:9C:57:3D:B1:EA:AB:94:C6:E6:69:95:1F:D7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer Subject Information Access: Signed Object - URI:rsync://krill.47272.net/repo/HYEHOST/5/AS215039.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0a:6044:ac50::/44 Signature Algorithm: sha256WithRSAEncryption 8e:57:39:bf:e3:08:a1:46:64:6d:af:fe:7c:76:67:04:8a:aa: 62:75:a6:fa:da:85:d0:1b:e1:e2:e2:96:5d:18:49:c7:01:13: c9:f5:26:ce:b4:9d:65:38:90:00:f8:ae:f5:42:70:bc:98:2d: 83:af:f6:3d:aa:92:52:c5:06:29:4a:bd:21:8f:59:89:5f:28: 73:3f:1c:62:26:c9:1c:e6:6f:c5:f7:ba:33:94:91:c5:80:d0: e7:62:99:1a:8f:4a:2e:5a:e2:c1:e7:7b:8e:97:7a:13:36:cc: cb:df:b5:1c:55:f3:90:83:9c:cd:1f:22:b8:fd:3a:91:50:e9: 18:70:bd:e2:2c:06:67:b9:bf:84:9b:0f:a7:3f:b8:3d:f3:be: f1:0a:f4:88:c4:2f:f5:20:45:33:87:38:53:b9:14:8b:91:89: 44:6b:74:71:7f:55:cf:f4:7f:4e:22:b2:29:5e:54:25:f4:3c: 60:ef:90:18:3e:2a:cd:33:cf:5d:f9:7b:ba:3e:d1:4b:76:20: 29:bc:a8:c0:86:63:0b:aa:c6:25:d3:12:92:4a:a7:8f:00:6f: 97:91:ce:68:b8:94:dc:ec:1b:2c:fe:30:65:97:54:ea:49:42: 9e:10:ea:a4:93:f5:86:0e:53:64:c6:30:16:76:3a:3c:39:e8: 59:d6:9d:46 -----BEGIN CERTIFICATE----- MIIE1TCCA72gAwIBAgIUZoN1Uf85hdWVtGgG+57vf9U/xo8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzNDRjQxODk4OTM2Q0I5QzU3M0RCMUVBQUI5NEM2RTY2 OTk1MUZENzAeFw0yNjA1MTUxMDMxMThaFw0yNzA1MTQxMDM2MThaMDMxMTAvBgNV BAMTKEJENUVGNEU0NjdCRUEzMzQyRkIyMjAwOEJEMzUwNTUxMTM3ODIwMDQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCwv8+h5H9NOPc1mbcw379cC+Of BbJiFa+0lulK0KX9tWfIeo6SMk9+w1ipnopqksAckKxkYusEZRVBn0HR+L9YK79U ttN48K7ho6E+z9LrwS1zWQwmgqhAzf8Gx5V4YxzUzVpoLNi2UgFOrZ4AtqRGLQoW 53cAP1OYlXMylK50QWUmWjQZJchc5rqupPE08NWGWL4LRirJDvWUiDTtpe3G6Duz snZMcqZanAw5efsDchSEcNcEjJN+n26gXXdGHKzUpgO4d1ja8/osfMfpnks9+r0r Xyxby2IRhQ8YCzMP8H+2lWTwl1Y4PaxlbTzC+QDioBvjJw4rUiGaDYvcZ/J9AgMB AAGjggHfMIIB2zAdBgNVHQ4EFgQUvV705Ge+ozQvsiAIvTUFURN4IAQwHwYDVR0j BBgwFoAUw89BiYk2y5xXPbHqq5TG5mmVH9cwDgYDVR0PAQH/BAQDAgeAMGQGA1Ud HwRdMFswWaBXoFWGU3JzeW5jOi8va3JpbGwuNDcyNzIubmV0L3JlcG8vSFlFSE9T VC81L0MzQ0Y0MTg5ODkzNkNCOUM1NzNEQjFFQUFCOTRDNkU2Njk5NTFGRDcuY3Js MIGTBggrBgEFBQcBAQSBhjCBgzCBgAYIKwYBBQUHMAKGdHJzeW5jOi8vcnBraS1y cHMuYXJpbi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZjg1MGQwNjNlMDE4NTc1NWM5 MWJlM2Y5ZC83L0MzQ0Y0MTg5ODkzNkNCOUM1NzNEQjFFQUFCOTRDNkU2Njk5NTFG RDcuY2VyME8GCCsGAQUFBwELBEMwQTA/BggrBgEFBQcwC4YzcnN5bmM6Ly9rcmls bC40NzI3Mi5uZXQvcmVwby9IWUVIT1NULzUvQVMyMTUwMzkucm9hMBgGA1UdIAEB /wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwQq CmBErFAwDQYJKoZIhvcNAQELBQADggEBAI5XOb/jCKFGZG2v/nx2ZwSKqmJ1pvra hdAb4eLill0YSccBE8n1Js60nWU4kAD4rvVCcLyYLYOv9j2qklLFBilKvSGPWYlf KHM/HGImyRzmb8X3ujOUkcWA0OdimRqPSi5a4sHne46XehM2zMvftRxV85CDnM0f Irj9OpFQ6RhwveIsBme5v4SbD6c/uD3zvvEK9IjEL/UgRTOHOFO5FIuRiURrdHF/ Vc/0f04isileVCX0PGDvkBg+Ks0zz135e7o+0Ut2ICm8qMCGYwuqxiXTEpJKp48A b5eRzmi4lNzsGyz+MGWXVOpJQp4Q6qST9YYOU2TGMBZ2Ojw56FnWnUY= -----END CERTIFICATE-----Generated at Sat Jun 13 11:32:29 2026 by rpki-client