
$ rpki-client -vvvf krill.47272.net/repo/HYEHOST/5/AS218798.roa
File: AS218798.roa (raw, json)
Hash identifier: SIgnbhMSKXa3yDmTecJE+DDQ/Zn+lOZsfjMVmCdF++4=
Subject key identifier: 61:3F:97:DE:49:CC:F2:42:73:0E:75:E8:A0:C0:70:B0:43:1E:ED:C9
Certificate issuer: /CN=C3CF41898936CB9C573DB1EAAB94C6E669951FD7
Certificate serial: 7D3BD2598124F28E05D7EF6B53100247D16D72AE
Authority key identifier: C3:CF:41:89:89:36:CB:9C:57:3D:B1:EA:AB:94:C6:E6:69:95:1F:D7
Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer
Subject info access: rsync://krill.47272.net/repo/HYEHOST/5/AS218798.roa
Signing time: Wed 28 Oct 2026 06:54:00 +0000
ROA not before: Wed 28 Oct 2026 06:49:00 +0000
ROA not after: Wed 27 Oct 2027 06:54:00 +0000
asID: 218798
IP address blocks: 2a0f:6281::/33 maxlen: 34
2a0f:6283:4000::/34 maxlen: 48
2a0f:6286::/34 maxlen: 48
2a0f:6286:4000::/34 maxlen: 48
2a0f:6286:8000::/35 maxlen: 48
2a0f:6286:c000::/34 maxlen: 48
Validation: OK
Signature path: rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.crl
rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.mft
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Nov 2026 05:00:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7d:3b:d2:59:81:24:f2:8e:05:d7:ef:6b:53:10:02:47:d1:6d:72:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C3CF41898936CB9C573DB1EAAB94C6E669951FD7
Validity
Not Before: Oct 28 06:49:00 2026 GMT
Not After : Oct 27 06:54:00 2027 GMT
Subject: CN=613F97DE49CCF242730E75E8A0C070B0431EEDC9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:be:30:dd:35:b7:11:a3:93:52:02:83:b3:7c:
a3:df:a4:c4:ad:5a:ca:48:03:aa:3e:0b:44:19:12:
a7:c8:9e:51:f5:45:9e:51:11:65:11:76:80:4f:6f:
a3:11:be:97:42:88:6a:45:13:87:48:15:9f:75:c9:
66:bc:b9:60:bf:54:9d:68:22:01:8d:99:bb:42:2f:
32:8e:d9:c1:4c:a3:7f:45:6f:bc:b4:9c:d2:55:53:
d2:7a:1f:f9:7d:d1:74:f3:02:e4:f2:fd:4e:b0:ac:
e4:39:00:41:06:fe:91:70:35:63:90:b9:a5:64:ac:
92:f8:73:65:fa:87:d3:75:9f:05:e3:8a:40:28:d6:
1f:a8:66:e7:14:b8:2b:69:eb:75:bd:6c:9a:0b:1a:
0f:b7:f2:89:cc:54:41:7b:d2:1d:25:e0:c0:2b:cc:
bc:bd:be:62:91:f5:8a:2e:2b:78:6e:f3:33:c5:eb:
be:22:f8:99:1d:9b:d2:b4:49:db:e3:47:f6:43:6d:
0a:e7:7a:99:2c:53:16:94:07:9b:52:23:4a:f3:05:
2a:fd:73:09:78:de:f7:76:d0:cc:00:a2:05:76:83:
92:13:a5:49:74:05:53:ed:ff:8a:98:43:b7:18:67:
7b:d2:3d:73:ae:53:be:50:12:c4:e4:fc:77:85:26:
41:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:3F:97:DE:49:CC:F2:42:73:0E:75:E8:A0:C0:70:B0:43:1E:ED:C9
X509v3 Authority Key Identifier:
keyid:C3:CF:41:89:89:36:CB:9C:57:3D:B1:EA:AB:94:C6:E6:69:95:1F:D7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer
Subject Information Access:
Signed Object - URI:rsync://krill.47272.net/repo/HYEHOST/5/AS218798.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:6281::/33
2a0f:6283:4000::/34
2a0f:6286::-2a0f:6286:9fff:ffff:ffff:ffff:ffff:ffff
2a0f:6286:c000::/34
Signature Algorithm: sha256WithRSAEncryption
90:13:7d:fe:ec:6c:00:06:4d:32:7a:57:3f:0f:4f:85:94:08:
5f:06:e3:cf:bd:82:c0:d6:04:89:6e:e8:c9:32:49:3f:65:76:
36:af:de:e3:8a:76:db:6d:f6:65:aa:09:6b:88:2d:46:d7:fa:
83:30:eb:91:f9:a7:02:1e:75:b9:59:a5:a7:c6:8f:ce:79:d1:
90:6f:bf:be:2d:69:5f:d1:eb:85:07:d6:3f:41:12:58:d0:f0:
96:ee:9b:30:7a:42:76:b9:10:b0:45:9f:8a:0e:fd:93:cc:38:
3a:20:dc:fd:ad:66:f5:dc:b6:c4:e3:39:02:2c:99:19:f6:50:
79:f0:6f:f2:c4:f4:7f:84:55:7d:74:dd:61:ee:9c:50:0f:af:
2e:67:ed:7f:29:c9:2f:f8:47:1e:cc:e1:ec:a1:05:fa:9c:66:
a3:c8:82:11:86:9f:fb:88:18:98:26:83:fc:3e:db:71:6a:d2:
47:eb:00:2f:5c:97:35:c0:48:64:03:fd:ff:b8:0e:d8:b8:08:
ae:c0:42:86:54:00:96:94:35:ec:3e:e1:00:8d:e3:d7:01:9e:
88:5f:72:78:96:54:41:47:04:73:68:29:aa:fc:14:b8:01:25:
89:9f:f1:47:52:f8:d6:d6:dd:b3:4a:c5:4e:dd:f2:06:42:40:
a2:ed:3b:dc
-----BEGIN CERTIFICATE-----
MIIE9TCCA92gAwIBAgIUfTvSWYEk8o4F1+9rUxACR9Ftcq4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQzNDRjQxODk4OTM2Q0I5QzU3M0RCMUVBQUI5NEM2RTY2
OTk1MUZENzAeFw0yNjEwMjgwNjQ5MDBaFw0yNzEwMjcwNjU0MDBaMDMxMTAvBgNV
BAMTKDYxM0Y5N0RFNDlDQ0YyNDI3MzBFNzVFOEEwQzA3MEIwNDMxRUVEQzkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCsvjDdNbcRo5NSAoOzfKPfpMSt
WspIA6o+C0QZEqfInlH1RZ5REWURdoBPb6MRvpdCiGpFE4dIFZ91yWa8uWC/VJ1o
IgGNmbtCLzKO2cFMo39Fb7y0nNJVU9J6H/l90XTzAuTy/U6wrOQ5AEEG/pFwNWOQ
uaVkrJL4c2X6h9N1nwXjikAo1h+oZucUuCtp63W9bJoLGg+38onMVEF70h0l4MAr
zLy9vmKR9YouK3hu8zPF674i+Jkdm9K0SdvjR/ZDbQrnepksUxaUB5tSI0rzBSr9
cwl43vd20MwAogV2g5ITpUl0BVPt/4qYQ7cYZ3vSPXOuU75QEsTk/HeFJkHpAgMB
AAGjggH/MIIB+zAdBgNVHQ4EFgQUYT+X3knM8kJzDnXooMBwsEMe7ckwHwYDVR0j
BBgwFoAUw89BiYk2y5xXPbHqq5TG5mmVH9cwDgYDVR0PAQH/BAQDAgeAMGQGA1Ud
HwRdMFswWaBXoFWGU3JzeW5jOi8va3JpbGwuNDcyNzIubmV0L3JlcG8vSFlFSE9T
VC81L0MzQ0Y0MTg5ODkzNkNCOUM1NzNEQjFFQUFCOTRDNkU2Njk5NTFGRDcuY3Js
MIGTBggrBgEFBQcBAQSBhjCBgzCBgAYIKwYBBQUHMAKGdHJzeW5jOi8vcnBraS1y
cHMuYXJpbi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZjg1MGQwNjNlMDE4NTc1NWM5
MWJlM2Y5ZC83L0MzQ0Y0MTg5ODkzNkNCOUM1NzNEQjFFQUFCOTRDNkU2Njk5NTFG
RDcuY2VyME8GCCsGAQUFBwELBEMwQTA/BggrBgEFBQcwC4YzcnN5bmM6Ly9rcmls
bC40NzI3Mi5uZXQvcmVwby9IWUVIT1NULzUvQVMyMTg3OTgucm9hMBgGA1UdIAEB
/wQOMAwwCgYIKwYBBQUHDgIwQgYIKwYBBQUHAQcBAf8EMzAxMC8EAgACMCkDBgcq
D2KBAAMGBioPYoNAMA8DBQEqD2KGAwYFKg9ihoADBgYqD2KGwDANBgkqhkiG9w0B
AQsFAAOCAQEAkBN9/uxsAAZNMnpXPw9PhZQIXwbjz72CwNYEiW7oyTJJP2V2Nq/e
44p22232ZaoJa4gtRtf6gzDrkfmnAh51uVmlp8aPznnRkG+/vi1pX9HrhQfWP0ES
WNDwlu6bMHpCdrkQsEWfig79k8w4OiDc/a1m9dy2xOM5AiyZGfZQefBv8sT0f4RV
fXTdYe6cUA+vLmftfynJL/hHHszh7KEF+pxmo8iCEYaf+4gYmCaD/D7bcWrSR+sA
L1yXNcBIZAP9/7gO2LgIrsBChlQAlpQ17D7hAI3j1wGeiF9yeJZUQUcEc2gpqvwU
uAEliZ/xR1L41tbds0rFTt3yBkJAou073A==
-----END CERTIFICATE-----
Generated at Sat Nov 7 15:12:44 2026 by rpki-client