$ rpki-client -vvvf krill.47272.net/repo/HYEHOST/5/AS219299.roa File: AS219299.roa (raw, json) Hash identifier: Mw4GbOMeK7HqyZOKJ0fL68Jtn2UoebAqYHb091sDzo0= Subject key identifier: 1D:F5:58:DA:0E:15:70:4C:29:E9:BA:A0:20:EA:A6:4A:22:D1:B8:A3 Certificate issuer: /CN=C3CF41898936CB9C573DB1EAAB94C6E669951FD7 Certificate serial: 1C1652F54F477FF3F2ADCB7C7CDA13DB2C791522 Authority key identifier: C3:CF:41:89:89:36:CB:9C:57:3D:B1:EA:AB:94:C6:E6:69:95:1F:D7 Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer Subject info access: rsync://krill.47272.net/repo/HYEHOST/5/AS219299.roa Signing time: Thu 05 Nov 2026 17:24:24 +0000 ROA not before: Thu 05 Nov 2026 17:19:24 +0000 ROA not after: Thu 04 Nov 2027 17:24:24 +0000 asID: 219299 IP address blocks: 2a0f:6280:108d::/48 maxlen: 48 Validation: OK Signature path: rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.crl rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Nov 2026 22:05:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1c:16:52:f5:4f:47:7f:f3:f2:ad:cb:7c:7c:da:13:db:2c:79:15:22 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C3CF41898936CB9C573DB1EAAB94C6E669951FD7 Validity Not Before: Nov 5 17:19:24 2026 GMT Not After : Nov 4 17:24:24 2027 GMT Subject: CN=1DF558DA0E15704C29E9BAA020EAA64A22D1B8A3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:35:82:f7:fa:b9:3b:4e:4f:ed:53:1e:e2:6d: 4c:c2:5e:d3:f6:0f:0c:a5:91:16:f7:07:45:bc:37: 96:c7:68:be:10:c3:d9:c3:eb:59:28:51:98:d1:d6: 19:7b:72:73:c1:0f:75:ec:78:bc:8e:b6:bf:45:11: c0:0d:62:3a:d5:d1:58:b0:cb:0f:2f:e7:7e:99:c6: 59:9d:a9:1d:67:a5:e3:dc:88:b7:c7:a8:99:9e:0d: c4:be:60:da:fe:5d:d6:0b:46:b1:59:ea:0f:e4:7e: ec:a5:da:2f:98:b0:05:7f:d8:c4:69:60:ee:13:98: 9f:d6:8a:a3:7b:7a:92:79:65:10:86:94:6c:01:f1: 35:ff:f4:88:e6:e9:da:bb:93:a6:3d:6c:72:30:37: c6:f1:95:83:10:0d:09:bd:31:66:80:54:b4:9a:20: 62:1f:ee:83:46:89:4d:1b:cb:cf:9b:5d:61:4b:f7: 3f:18:89:3e:35:15:1e:6e:7e:65:c1:2d:f4:4b:03: f9:d6:96:02:4b:8b:ab:af:0d:17:b4:d0:6a:c7:7c: ff:02:63:0e:bb:a5:86:c9:c2:72:d9:ac:bb:74:c8: bd:ca:75:68:84:72:1c:0b:74:04:3a:f5:38:02:51: b6:4b:3b:fa:14:45:f6:10:e9:47:b6:e7:09:68:48: 99:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:F5:58:DA:0E:15:70:4C:29:E9:BA:A0:20:EA:A6:4A:22:D1:B8:A3 X509v3 Authority Key Identifier: keyid:C3:CF:41:89:89:36:CB:9C:57:3D:B1:EA:AB:94:C6:E6:69:95:1F:D7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer Subject Information Access: Signed Object - URI:rsync://krill.47272.net/repo/HYEHOST/5/AS219299.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0f:6280:108d::/48 Signature Algorithm: sha256WithRSAEncryption 7e:d9:9f:72:b7:4f:6e:14:5a:9a:34:12:a6:0d:c5:b8:a9:d6: f6:c2:d6:a1:84:73:df:76:38:83:1d:66:75:23:18:b7:c2:7f: 41:9e:01:6d:ea:31:91:fb:5b:45:e8:af:45:14:d2:fd:4e:ff: 70:60:9f:c2:10:62:b8:bd:c4:73:8e:d5:e2:00:2e:e1:ca:59: c9:66:f0:1a:c6:48:2b:de:02:2a:4c:86:6b:12:30:f6:ca:f9: 8e:77:99:0d:10:aa:29:de:f1:3d:cb:15:2f:5a:ab:86:7e:29: b5:ee:63:c5:78:93:ae:39:0d:ef:11:fa:52:03:d9:ff:d6:15: 96:98:98:06:ac:ba:5b:81:97:38:ce:65:a6:f5:4b:f4:40:97: fe:4d:5f:5c:aa:87:cd:9d:00:ae:37:31:96:8e:61:cc:b4:aa: 7f:b1:9e:13:67:8b:6b:a3:43:d3:23:03:b4:29:eb:fc:3d:5e: a8:5a:61:98:32:55:5f:fc:06:0c:75:e6:eb:e8:6c:78:67:6a: 6e:12:2e:60:bb:d9:bb:8e:71:d5:aa:0e:99:65:06:50:a1:0d: c4:b4:01:fe:20:1e:86:4d:84:37:0f:a9:54:29:a2:63:11:9c: 85:db:57:c6:89:bc:94:86:74:37:df:65:fa:25:1d:31:e8:96: 89:13:8d:23 -----BEGIN CERTIFICATE----- MIIE1TCCA72gAwIBAgIUHBZS9U9Hf/Pyrct8fNoT2yx5FSIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzNDRjQxODk4OTM2Q0I5QzU3M0RCMUVBQUI5NEM2RTY2 OTk1MUZENzAeFw0yNjExMDUxNzE5MjRaFw0yNzExMDQxNzI0MjRaMDMxMTAvBgNV BAMTKDFERjU1OERBMEUxNTcwNEMyOUU5QkFBMDIwRUFBNjRBMjJEMUI4QTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDBNYL3+rk7Tk/tUx7ibUzCXtP2 DwylkRb3B0W8N5bHaL4Qw9nD61koUZjR1hl7cnPBD3XseLyOtr9FEcANYjrV0Viw yw8v536ZxlmdqR1npePciLfHqJmeDcS+YNr+XdYLRrFZ6g/kfuyl2i+YsAV/2MRp YO4TmJ/WiqN7epJ5ZRCGlGwB8TX/9Ijm6dq7k6Y9bHIwN8bxlYMQDQm9MWaAVLSa IGIf7oNGiU0by8+bXWFL9z8YiT41FR5ufmXBLfRLA/nWlgJLi6uvDRe00GrHfP8C Yw67pYbJwnLZrLt0yL3KdWiEchwLdAQ69TgCUbZLO/oURfYQ6Ue25wloSJmrAgMB AAGjggHfMIIB2zAdBgNVHQ4EFgQUHfVY2g4VcEwp6bqgIOqmSiLRuKMwHwYDVR0j BBgwFoAUw89BiYk2y5xXPbHqq5TG5mmVH9cwDgYDVR0PAQH/BAQDAgeAMGQGA1Ud HwRdMFswWaBXoFWGU3JzeW5jOi8va3JpbGwuNDcyNzIubmV0L3JlcG8vSFlFSE9T VC81L0MzQ0Y0MTg5ODkzNkNCOUM1NzNEQjFFQUFCOTRDNkU2Njk5NTFGRDcuY3Js MIGTBggrBgEFBQcBAQSBhjCBgzCBgAYIKwYBBQUHMAKGdHJzeW5jOi8vcnBraS1y cHMuYXJpbi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZjg1MGQwNjNlMDE4NTc1NWM5 MWJlM2Y5ZC83L0MzQ0Y0MTg5ODkzNkNCOUM1NzNEQjFFQUFCOTRDNkU2Njk5NTFG RDcuY2VyME8GCCsGAQUFBwELBEMwQTA/BggrBgEFBQcwC4YzcnN5bmM6Ly9rcmls bC40NzI3Mi5uZXQvcmVwby9IWUVIT1NULzUvQVMyMTkyOTkucm9hMBgGA1UdIAEB /wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwAq D2KAEI0wDQYJKoZIhvcNAQELBQADggEBAH7Zn3K3T24UWpo0EqYNxbip1vbC1qGE c992OIMdZnUjGLfCf0GeAW3qMZH7W0Xor0UU0v1O/3Bgn8IQYri9xHOO1eIALuHK Wclm8BrGSCveAipMhmsSMPbK+Y53mQ0Qqine8T3LFS9aq4Z+KbXuY8V4k645De8R +lID2f/WFZaYmAasuluBlzjOZab1S/RAl/5NX1yqh82dAK43MZaOYcy0qn+xnhNn i2ujQ9MjA7Qp6/w9XqhaYZgyVV/8Bgx15uvobHhnam4SLmC72buOcdWqDpllBlCh DcS0Af4gHoZNhDcPqVQpomMRnIXbV8aJvJSGdDffZfolHTHolokTjSM= -----END CERTIFICATE-----Generated at Tue Nov 10 08:45:18 2026 by rpki-client