$ rpki-client -vvvf krill.47272.net/repo/HYEHOST/5/AS215541.roa File: AS215541.roa (raw, json) Hash identifier: 7/1eBXQX2yebrIvv9LM1eQYwBB9qAvGVVvbED69EEeQ= Subject key identifier: 2E:6D:A6:A8:96:AC:5E:D1:74:EC:5E:9C:4F:D9:6F:2C:43:39:82:CF Certificate issuer: /CN=C3CF41898936CB9C573DB1EAAB94C6E669951FD7 Certificate serial: 3BEC048F21DA90A0345DFDBB85308625C2216D2C Authority key identifier: C3:CF:41:89:89:36:CB:9C:57:3D:B1:EA:AB:94:C6:E6:69:95:1F:D7 Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer Subject info access: rsync://krill.47272.net/repo/HYEHOST/5/AS215541.roa Signing time: Sat 05 Sep 2026 21:56:33 +0000 ROA not before: Sat 05 Sep 2026 21:51:33 +0000 ROA not after: Sat 04 Sep 2027 21:56:33 +0000 asID: 215541 IP address blocks: 2a0f:6280:6000::/36 maxlen: 48 Validation: OK Signature path: rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.crl rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 21 Sep 2026 05:00:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3b:ec:04:8f:21:da:90:a0:34:5d:fd:bb:85:30:86:25:c2:21:6d:2c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C3CF41898936CB9C573DB1EAAB94C6E669951FD7 Validity Not Before: Sep 5 21:51:33 2026 GMT Not After : Sep 4 21:56:33 2027 GMT Subject: CN=2E6DA6A896AC5ED174EC5E9C4FD96F2C433982CF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:d3:31:82:c1:27:b2:5d:d1:d4:13:74:18:d3: e9:49:ad:8d:de:d8:8e:09:be:86:c8:32:8c:8b:c9: 57:48:c8:05:e1:60:4d:48:6c:2c:00:1b:14:03:c1: b6:11:c4:ea:3d:84:7f:31:c1:98:b7:0f:ea:3b:68: d4:f1:2e:66:d2:0f:a6:15:1b:26:ce:24:c6:0d:f1: 3b:ec:96:56:95:4f:6c:fe:35:67:96:ff:81:8c:16: e4:02:d7:64:39:5c:3e:b0:69:48:25:24:8a:9c:c8: 86:86:2a:f6:3a:c1:5a:56:fb:1e:e3:1e:18:e2:37: fe:4c:85:60:5c:4f:19:e5:22:dd:ec:7c:b9:1c:6c: 5b:a1:48:d3:30:da:31:3e:77:ad:67:ee:85:94:cd: 90:9e:7f:c7:db:25:5c:27:8a:bb:32:1d:6a:3e:e3: de:b4:36:5f:e2:b2:a8:6d:1a:5b:0f:57:67:d4:9f: 74:91:05:e5:6d:b6:e4:18:09:3d:5f:35:33:50:aa: 88:80:a3:1a:fa:f5:fa:d3:30:58:aa:83:90:55:4c: b9:1a:34:b5:9e:15:74:b8:d5:be:fd:2e:a5:77:96: 18:44:7e:c8:48:1b:7e:bc:38:01:7a:67:af:3c:37: 0c:43:ec:e5:1e:d1:64:02:e5:b7:c5:d9:92:70:76: 76:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:6D:A6:A8:96:AC:5E:D1:74:EC:5E:9C:4F:D9:6F:2C:43:39:82:CF X509v3 Authority Key Identifier: keyid:C3:CF:41:89:89:36:CB:9C:57:3D:B1:EA:AB:94:C6:E6:69:95:1F:D7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer Subject Information Access: Signed Object - URI:rsync://krill.47272.net/repo/HYEHOST/5/AS215541.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0f:6280:6000::/36 Signature Algorithm: sha256WithRSAEncryption 67:7b:e5:4c:9c:ec:87:00:b0:d9:27:28:c0:68:2f:1d:e2:9d: 21:78:7d:66:98:0d:12:2b:33:29:ce:e8:7a:98:7e:d6:89:ae: a6:f6:f2:20:28:8f:36:bf:60:7c:6c:08:6a:83:ad:31:be:bb: 86:20:76:4c:a4:52:4c:9b:0b:0f:11:c8:30:99:e0:9c:b0:b1: 9f:ca:d9:46:64:a0:7c:48:b1:3a:9e:6a:ee:21:d0:39:eb:d4: 60:d7:ec:c5:97:ac:9f:2c:c9:e2:4c:dd:d2:74:38:62:0b:53: e0:59:a0:18:5f:e1:2d:4b:09:2c:2c:28:46:0d:d7:28:fb:54: 51:5d:0f:f3:15:44:5a:f2:9e:44:bf:5f:a8:15:f2:f6:2e:0a: 22:6f:11:eb:4c:72:5f:19:c3:da:97:a7:4f:71:d9:2c:a1:5b: 66:bd:91:86:22:2f:34:e1:97:27:5e:0f:22:47:6a:97:8e:3a: 2f:b5:15:e0:2f:ef:c9:62:9f:42:b1:9f:00:6d:4c:fe:81:97: 0b:01:fe:5f:6d:c6:df:a6:1f:b6:2a:94:85:e1:03:c2:7d:a0: 4e:8c:28:98:86:16:92:ec:a3:5b:a3:38:88:f3:46:d2:2a:7e: cf:04:fb:0a:25:43:c3:f5:c8:46:f8:26:84:51:aa:b1:52:f1: 49:e7:08:c7 -----BEGIN CERTIFICATE----- MIIE1DCCA7ygAwIBAgIUO+wEjyHakKA0Xf27hTCGJcIhbSwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzNDRjQxODk4OTM2Q0I5QzU3M0RCMUVBQUI5NEM2RTY2 OTk1MUZENzAeFw0yNjA5MDUyMTUxMzNaFw0yNzA5MDQyMTU2MzNaMDMxMTAvBgNV BAMTKDJFNkRBNkE4OTZBQzVFRDE3NEVDNUU5QzRGRDk2RjJDNDMzOTgyQ0YwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDW0zGCwSeyXdHUE3QY0+lJrY3e 2I4JvobIMoyLyVdIyAXhYE1IbCwAGxQDwbYRxOo9hH8xwZi3D+o7aNTxLmbSD6YV GybOJMYN8TvsllaVT2z+NWeW/4GMFuQC12Q5XD6waUglJIqcyIaGKvY6wVpW+x7j HhjiN/5MhWBcTxnlIt3sfLkcbFuhSNMw2jE+d61n7oWUzZCef8fbJVwnirsyHWo+ 4960Nl/isqhtGlsPV2fUn3SRBeVttuQYCT1fNTNQqoiAoxr69frTMFiqg5BVTLka NLWeFXS41b79LqV3lhhEfshIG368OAF6Z688NwxD7OUe0WQC5bfF2ZJwdna9AgMB AAGjggHeMIIB2jAdBgNVHQ4EFgQULm2mqJasXtF07F6cT9lvLEM5gs8wHwYDVR0j BBgwFoAUw89BiYk2y5xXPbHqq5TG5mmVH9cwDgYDVR0PAQH/BAQDAgeAMGQGA1Ud HwRdMFswWaBXoFWGU3JzeW5jOi8va3JpbGwuNDcyNzIubmV0L3JlcG8vSFlFSE9T VC81L0MzQ0Y0MTg5ODkzNkNCOUM1NzNEQjFFQUFCOTRDNkU2Njk5NTFGRDcuY3Js MIGTBggrBgEFBQcBAQSBhjCBgzCBgAYIKwYBBQUHMAKGdHJzeW5jOi8vcnBraS1y cHMuYXJpbi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZjg1MGQwNjNlMDE4NTc1NWM5 MWJlM2Y5ZC83L0MzQ0Y0MTg5ODkzNkNCOUM1NzNEQjFFQUFCOTRDNkU2Njk5NTFG RDcuY2VyME8GCCsGAQUFBwELBEMwQTA/BggrBgEFBQcwC4YzcnN5bmM6Ly9rcmls bC40NzI3Mi5uZXQvcmVwby9IWUVIT1NULzUvQVMyMTU1NDEucm9hMBgGA1UdIAEB /wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgACMAgDBgQq D2KAYDANBgkqhkiG9w0BAQsFAAOCAQEAZ3vlTJzshwCw2ScowGgvHeKdIXh9ZpgN EiszKc7oeph+1omupvbyICiPNr9gfGwIaoOtMb67hiB2TKRSTJsLDxHIMJngnLCx n8rZRmSgfEixOp5q7iHQOevUYNfsxZesnyzJ4kzd0nQ4YgtT4FmgGF/hLUsJLCwo Rg3XKPtUUV0P8xVEWvKeRL9fqBXy9i4KIm8R60xyXxnD2penT3HZLKFbZr2RhiIv NOGXJ14PIkdql446L7UV4C/vyWKfQrGfAG1M/oGXCwH+X23G36YftiqUheEDwn2g TowomIYWkuyjW6M4iPNG0ip+zwT7CiVDw/XIRvgmhFGqsVLxSecIxw== -----END CERTIFICATE-----Generated at Sun Sep 20 09:21:19 2026 by rpki-client