$ rpki-client -vvvf krill.47272.net/repo/HYEHOST/5/AS218187.roa File: AS218187.roa (raw, json) Hash identifier: CNrGYK0E3GMGchX+KWyxqAVh8HzIA8klVDZh6jJhZvo= Subject key identifier: FA:39:7E:49:10:33:08:53:F9:BF:15:27:AE:A8:BC:87:F5:8F:8F:5D Certificate issuer: /CN=C3CF41898936CB9C573DB1EAAB94C6E669951FD7 Certificate serial: 0D328C63383C5C9AAC9533CE91E4FFF904B94DE2 Authority key identifier: C3:CF:41:89:89:36:CB:9C:57:3D:B1:EA:AB:94:C6:E6:69:95:1F:D7 Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer Subject info access: rsync://krill.47272.net/repo/HYEHOST/5/AS218187.roa Signing time: Fri 06 Nov 2026 12:05:51 +0000 ROA not before: Fri 06 Nov 2026 12:00:51 +0000 ROA not after: Fri 05 Nov 2027 12:05:51 +0000 asID: 218187 IP address blocks: 2a0f:6280:2d00::/40 maxlen: 48 Validation: OK Signature path: rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.crl rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Nov 2026 22:05:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0d:32:8c:63:38:3c:5c:9a:ac:95:33:ce:91:e4:ff:f9:04:b9:4d:e2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C3CF41898936CB9C573DB1EAAB94C6E669951FD7 Validity Not Before: Nov 6 12:00:51 2026 GMT Not After : Nov 5 12:05:51 2027 GMT Subject: CN=FA397E4910330853F9BF1527AEA8BC87F58F8F5D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:a5:bf:2e:f5:12:8f:66:e7:be:47:e3:97:37: c1:a9:27:2e:45:b4:50:78:a6:06:f2:6d:6e:c8:de: 6d:37:7e:be:43:2c:61:c7:7b:8f:72:fc:27:ee:34: 4e:1c:6e:3b:eb:eb:35:53:0f:b0:53:d5:6d:66:ba: f4:c4:83:0e:ef:98:6b:93:e8:99:a1:09:b8:38:97: 61:48:9c:9a:f5:5e:8a:b7:99:01:e8:d1:8f:33:d6: 6a:ca:77:74:09:28:eb:27:72:c9:89:91:3e:13:d6: 77:7e:b5:50:4a:14:21:40:24:95:43:26:aa:9d:4a: 64:8d:d4:fe:69:62:52:95:f4:9c:53:91:59:59:02: 7a:23:fe:4d:f7:98:47:c8:4a:42:62:3e:50:f9:83: 0a:72:6a:e9:aa:3b:03:e8:5a:05:a3:9b:58:08:cb: 5a:0f:ef:53:b9:03:cc:30:3d:e5:25:21:43:68:0f: 76:01:1f:c2:1e:11:2f:2a:d8:12:b8:32:14:48:4a: b7:21:d5:e2:fb:1a:c9:d0:71:f4:97:82:32:26:4a: 38:e9:e5:61:b6:c0:07:95:dd:19:ff:a7:1f:c9:90: ee:5f:86:fe:34:74:23:15:2a:1b:1a:35:b7:60:a9: 8c:e3:e7:49:ca:fb:10:4b:55:0b:f0:d9:b6:e7:8f: 13:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:39:7E:49:10:33:08:53:F9:BF:15:27:AE:A8:BC:87:F5:8F:8F:5D X509v3 Authority Key Identifier: keyid:C3:CF:41:89:89:36:CB:9C:57:3D:B1:EA:AB:94:C6:E6:69:95:1F:D7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer Subject Information Access: Signed Object - URI:rsync://krill.47272.net/repo/HYEHOST/5/AS218187.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0f:6280:2d00::/40 Signature Algorithm: sha256WithRSAEncryption 12:27:f9:ee:86:6c:19:cb:29:b2:96:6b:6a:76:70:d7:6f:5f: 93:3a:85:b9:9e:b1:65:be:78:22:52:51:e6:54:98:79:e7:6d: a0:92:4c:49:f1:52:ec:bb:b1:8c:f3:fa:cb:08:0e:69:b4:59: f2:f1:2b:a3:d7:0b:94:82:68:10:55:e4:b6:e3:45:65:2f:ac: 43:69:76:cc:4b:95:fc:8f:54:df:42:df:ad:34:19:4d:36:67: 0d:8f:59:a7:ab:bd:a4:94:e7:f0:fc:3c:62:4e:b2:a4:81:c2: e2:df:ac:ce:1f:aa:8d:31:6d:80:02:30:9c:7a:a1:49:cb:4d: 69:d2:7e:3f:06:13:16:46:37:d7:11:f6:dc:46:57:30:f6:d7: 30:c6:3f:cd:06:c0:ee:19:28:e9:fd:03:73:ce:6d:6c:b0:2a: f0:30:85:3e:bd:49:af:bb:57:70:b7:69:f7:8d:d1:eb:0d:80: 08:43:7e:2f:38:10:09:c4:7c:06:c5:6e:b7:6e:43:4c:56:64: ad:00:f4:c3:30:82:62:e9:6f:f5:93:dc:bb:5a:9f:a5:07:58: 14:10:17:fb:d5:c8:cc:76:c0:c1:a8:44:91:6e:40:6c:fa:33: 41:ac:a1:95:2e:99:5a:c4:17:36:06:ca:7f:19:04:db:04:8a: 03:3b:df:21 -----BEGIN CERTIFICATE----- MIIE1DCCA7ygAwIBAgIUDTKMYzg8XJqslTPOkeT/+QS5TeIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzNDRjQxODk4OTM2Q0I5QzU3M0RCMUVBQUI5NEM2RTY2 OTk1MUZENzAeFw0yNjExMDYxMjAwNTFaFw0yNzExMDUxMjA1NTFaMDMxMTAvBgNV BAMTKEZBMzk3RTQ5MTAzMzA4NTNGOUJGMTUyN0FFQThCQzg3RjU4RjhGNUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCwpb8u9RKPZue+R+OXN8GpJy5F tFB4pgbybW7I3m03fr5DLGHHe49y/CfuNE4cbjvr6zVTD7BT1W1muvTEgw7vmGuT 6JmhCbg4l2FInJr1Xoq3mQHo0Y8z1mrKd3QJKOsncsmJkT4T1nd+tVBKFCFAJJVD JqqdSmSN1P5pYlKV9JxTkVlZAnoj/k33mEfISkJiPlD5gwpyaumqOwPoWgWjm1gI y1oP71O5A8wwPeUlIUNoD3YBH8IeES8q2BK4MhRISrch1eL7GsnQcfSXgjImSjjp 5WG2wAeV3Rn/px/JkO5fhv40dCMVKhsaNbdgqYzj50nK+xBLVQvw2bbnjxMhAgMB AAGjggHeMIIB2jAdBgNVHQ4EFgQU+jl+SRAzCFP5vxUnrqi8h/WPj10wHwYDVR0j BBgwFoAUw89BiYk2y5xXPbHqq5TG5mmVH9cwDgYDVR0PAQH/BAQDAgeAMGQGA1Ud HwRdMFswWaBXoFWGU3JzeW5jOi8va3JpbGwuNDcyNzIubmV0L3JlcG8vSFlFSE9T VC81L0MzQ0Y0MTg5ODkzNkNCOUM1NzNEQjFFQUFCOTRDNkU2Njk5NTFGRDcuY3Js MIGTBggrBgEFBQcBAQSBhjCBgzCBgAYIKwYBBQUHMAKGdHJzeW5jOi8vcnBraS1y cHMuYXJpbi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZjg1MGQwNjNlMDE4NTc1NWM5 MWJlM2Y5ZC83L0MzQ0Y0MTg5ODkzNkNCOUM1NzNEQjFFQUFCOTRDNkU2Njk5NTFG RDcuY2VyME8GCCsGAQUFBwELBEMwQTA/BggrBgEFBQcwC4YzcnN5bmM6Ly9rcmls bC40NzI3Mi5uZXQvcmVwby9IWUVIT1NULzUvQVMyMTgxODcucm9hMBgGA1UdIAEB /wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgACMAgDBgAq D2KALTANBgkqhkiG9w0BAQsFAAOCAQEAEif57oZsGcspspZranZw129fkzqFuZ6x Zb54IlJR5lSYeedtoJJMSfFS7LuxjPP6ywgOabRZ8vEro9cLlIJoEFXktuNFZS+s Q2l2zEuV/I9U30LfrTQZTTZnDY9Zp6u9pJTn8Pw8Yk6ypIHC4t+szh+qjTFtgAIw nHqhSctNadJ+PwYTFkY31xH23EZXMPbXMMY/zQbA7hko6f0Dc85tbLAq8DCFPr1J r7tXcLdp943R6w2ACEN+LzgQCcR8BsVut25DTFZkrQD0wzCCYulv9ZPcu1qfpQdY FBAX+9XIzHbAwahEkW5AbPozQayhlS6ZWsQXNgbKfxkE2wSKAzvfIQ== -----END CERTIFICATE-----Generated at Tue Nov 10 08:44:58 2026 by rpki-client