$ rpki-client -vvvf krill.47272.net/repo/HYEHOST/5/AS218681.roa File: AS218681.roa (raw, json) Hash identifier: CNf6W8e8wdDfYUm1j7ZLvN5ctiheCifQPQD67/wg3/s= Subject key identifier: 6F:CA:CF:33:ED:6E:42:70:77:E7:78:BE:70:AF:53:52:BE:46:65:C1 Certificate issuer: /CN=C3CF41898936CB9C573DB1EAAB94C6E669951FD7 Certificate serial: 5B7F16A4CE3C884A7892BEFAAA2CC4A18F37B604 Authority key identifier: C3:CF:41:89:89:36:CB:9C:57:3D:B1:EA:AB:94:C6:E6:69:95:1F:D7 Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer Subject info access: rsync://krill.47272.net/repo/HYEHOST/5/AS218681.roa Signing time: Mon 14 Sep 2026 08:05:29 +0000 ROA not before: Mon 14 Sep 2026 08:00:29 +0000 ROA not after: Mon 13 Sep 2027 08:05:29 +0000 asID: 218681 IP address blocks: 2a0f:6284:33fb::/48 maxlen: 48 Validation: OK Signature path: rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.crl rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 21 Sep 2026 16:10:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5b:7f:16:a4:ce:3c:88:4a:78:92:be:fa:aa:2c:c4:a1:8f:37:b6:04 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C3CF41898936CB9C573DB1EAAB94C6E669951FD7 Validity Not Before: Sep 14 08:00:29 2026 GMT Not After : Sep 13 08:05:29 2027 GMT Subject: CN=6FCACF33ED6E427077E778BE70AF5352BE4665C1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:c6:ea:be:c5:c2:53:0c:31:5f:f1:11:f6:1b: cd:8e:1f:1e:8b:ed:7c:6e:58:86:ee:1a:21:dd:2b: 8c:07:ce:af:70:f5:7b:38:f3:37:ba:a8:b5:5b:3b: ae:b1:60:02:5c:d5:f3:e5:da:b4:5c:72:b5:0e:24: bc:b1:72:b2:83:69:24:d1:e6:58:a9:45:b9:fc:f2: 73:57:1d:82:f0:a9:67:dc:51:cf:76:73:8b:08:23: 46:14:5d:21:cf:c5:5c:58:fa:f8:b4:26:5b:fb:51: 64:d9:04:5d:3e:7b:b8:5c:56:7d:56:c6:01:1b:6a: 63:18:5f:ee:1c:88:22:c0:9c:2f:58:24:76:cd:6b: 1a:74:57:20:ab:83:80:df:54:b3:43:79:2d:e0:8f: db:da:d6:19:3b:5f:0e:86:5f:e6:94:0c:67:f3:82: f2:3f:4a:dd:c0:d9:9e:1a:96:ec:df:da:39:bd:3f: 82:d0:8b:09:fe:0a:34:72:0a:ef:40:5e:cf:56:0e: 52:f9:d4:14:6d:fc:89:b5:84:ca:34:11:b0:dc:f3: f6:6e:3b:58:91:08:0e:33:d3:92:fc:67:85:62:f1: 82:a1:e1:b1:a6:a6:5c:2b:72:74:f2:21:d6:86:26: 05:14:0e:68:a2:94:cc:95:4f:42:97:ea:5a:ce:16: ec:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:CA:CF:33:ED:6E:42:70:77:E7:78:BE:70:AF:53:52:BE:46:65:C1 X509v3 Authority Key Identifier: keyid:C3:CF:41:89:89:36:CB:9C:57:3D:B1:EA:AB:94:C6:E6:69:95:1F:D7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer Subject Information Access: Signed Object - URI:rsync://krill.47272.net/repo/HYEHOST/5/AS218681.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0f:6284:33fb::/48 Signature Algorithm: sha256WithRSAEncryption 29:e1:7a:3c:d8:5e:1c:5b:e5:9b:a3:49:26:dd:3c:f6:3a:f7: 63:16:4a:03:d5:cb:b2:27:66:e9:6e:e5:92:6a:00:44:8d:6a: f8:84:0b:b6:9c:a3:b0:35:b2:61:ae:18:f7:b2:c6:fa:57:8e: 88:51:cc:1c:9e:04:8b:a5:1b:76:6f:05:ac:97:38:3d:c7:04: 45:a3:93:55:9a:84:1e:9e:04:d5:45:4b:50:aa:96:1f:a8:46: 2d:20:67:e8:fd:97:a8:2d:95:61:be:d1:be:81:49:98:b9:70: 29:b1:c7:76:4b:c0:3b:ba:6f:bd:ba:5b:f9:60:e6:8a:63:eb: c2:78:1a:60:e7:37:3a:76:5b:c4:cb:8a:0e:9f:99:49:44:3c: 6b:ef:d5:67:34:3e:87:bd:c3:17:5e:cb:dc:ed:04:20:63:88: c5:33:59:67:0d:37:5f:16:f1:88:e6:7d:f3:a5:8b:b1:13:ee: d1:dd:38:21:df:f7:6c:a2:8d:7b:53:af:90:e9:75:56:f1:4b: 7e:9f:be:65:f1:53:2b:2f:74:2b:33:65:f7:c3:a4:ef:b9:12: 3c:4c:74:05:60:99:2f:ea:96:d4:af:d3:4e:7d:bb:a5:ed:b5: c4:f9:10:da:e4:1e:58:3d:7e:60:2d:44:e8:a6:b3:d5:f9:77: 8b:90:53:25 -----BEGIN CERTIFICATE----- MIIE1TCCA72gAwIBAgIUW38WpM48iEp4kr76qizEoY83tgQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzNDRjQxODk4OTM2Q0I5QzU3M0RCMUVBQUI5NEM2RTY2 OTk1MUZENzAeFw0yNjA5MTQwODAwMjlaFw0yNzA5MTMwODA1MjlaMDMxMTAvBgNV BAMTKDZGQ0FDRjMzRUQ2RTQyNzA3N0U3NzhCRTcwQUY1MzUyQkU0NjY1QzEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDXxuq+xcJTDDFf8RH2G82OHx6L 7XxuWIbuGiHdK4wHzq9w9Xs48ze6qLVbO66xYAJc1fPl2rRccrUOJLyxcrKDaSTR 5lipRbn88nNXHYLwqWfcUc92c4sII0YUXSHPxVxY+vi0Jlv7UWTZBF0+e7hcVn1W xgEbamMYX+4ciCLAnC9YJHbNaxp0VyCrg4DfVLNDeS3gj9va1hk7Xw6GX+aUDGfz gvI/St3A2Z4aluzf2jm9P4LQiwn+CjRyCu9AXs9WDlL51BRt/Im1hMo0EbDc8/Zu O1iRCA4z05L8Z4Vi8YKh4bGmplwrcnTyIdaGJgUUDmiilMyVT0KX6lrOFuwtAgMB AAGjggHfMIIB2zAdBgNVHQ4EFgQUb8rPM+1uQnB353i+cK9TUr5GZcEwHwYDVR0j BBgwFoAUw89BiYk2y5xXPbHqq5TG5mmVH9cwDgYDVR0PAQH/BAQDAgeAMGQGA1Ud HwRdMFswWaBXoFWGU3JzeW5jOi8va3JpbGwuNDcyNzIubmV0L3JlcG8vSFlFSE9T VC81L0MzQ0Y0MTg5ODkzNkNCOUM1NzNEQjFFQUFCOTRDNkU2Njk5NTFGRDcuY3Js MIGTBggrBgEFBQcBAQSBhjCBgzCBgAYIKwYBBQUHMAKGdHJzeW5jOi8vcnBraS1y cHMuYXJpbi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZjg1MGQwNjNlMDE4NTc1NWM5 MWJlM2Y5ZC83L0MzQ0Y0MTg5ODkzNkNCOUM1NzNEQjFFQUFCOTRDNkU2Njk5NTFG RDcuY2VyME8GCCsGAQUFBwELBEMwQTA/BggrBgEFBQcwC4YzcnN5bmM6Ly9rcmls bC40NzI3Mi5uZXQvcmVwby9IWUVIT1NULzUvQVMyMTg2ODEucm9hMBgGA1UdIAEB /wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwAq D2KEM/swDQYJKoZIhvcNAQELBQADggEBACnhejzYXhxb5ZujSSbdPPY692MWSgPV y7InZulu5ZJqAESNaviEC7aco7A1smGuGPeyxvpXjohRzByeBIulG3ZvBayXOD3H BEWjk1WahB6eBNVFS1Cqlh+oRi0gZ+j9l6gtlWG+0b6BSZi5cCmxx3ZLwDu6b726 W/lg5opj68J4GmDnNzp2W8TLig6fmUlEPGvv1Wc0Poe9wxdey9ztBCBjiMUzWWcN N18W8YjmffOli7ET7tHdOCHf92yijXtTr5DpdVbxS36fvmXxUysvdCszZffDpO+5 EjxMdAVgmS/qltSv0059u6XttcT5ENrkHlg9fmAtROims9X5d4uQUyU= -----END CERTIFICATE-----Generated at Mon Sep 21 04:09:50 2026 by rpki-client