$ rpki-client -vvvf krill.47272.net/repo/HYEHOST/5/AS219412.roa File: AS219412.roa (raw, json) Hash identifier: e/ysV83z/7Rsb8petKuZOsQchC4pyHYUkk7XJ327lTY= Subject key identifier: 47:0F:17:71:40:54:AB:53:84:69:CE:40:07:AF:09:4B:B5:A6:13:89 Certificate issuer: /CN=C3CF41898936CB9C573DB1EAAB94C6E669951FD7 Certificate serial: 17F1916A50F003B8E06880C893CDBFE742FBA830 Authority key identifier: C3:CF:41:89:89:36:CB:9C:57:3D:B1:EA:AB:94:C6:E6:69:95:1F:D7 Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer Subject info access: rsync://krill.47272.net/repo/HYEHOST/5/AS219412.roa Signing time: Sat 19 Sep 2026 06:00:16 +0000 ROA not before: Sat 19 Sep 2026 05:55:16 +0000 ROA not after: Sat 18 Sep 2027 06:00:16 +0000 asID: 219412 IP address blocks: 2a05:dfc3:f900::/40 maxlen: 48 2a0f:6284:52::/48 maxlen: 48 Validation: OK Signature path: rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.crl rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 21 Sep 2026 14:00:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 17:f1:91:6a:50:f0:03:b8:e0:68:80:c8:93:cd:bf:e7:42:fb:a8:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C3CF41898936CB9C573DB1EAAB94C6E669951FD7 Validity Not Before: Sep 19 05:55:16 2026 GMT Not After : Sep 18 06:00:16 2027 GMT Subject: CN=470F17714054AB538469CE4007AF094BB5A61389 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:25:23:9c:c1:bb:f0:76:d7:2e:80:c8:a8:42: 1b:9e:54:26:70:c8:f5:b1:e0:c6:8a:7a:8c:98:d8: ec:94:28:86:e3:71:58:f8:08:f7:f3:45:95:43:24: 47:22:47:27:26:38:d8:20:48:b1:80:df:7a:55:d6: c6:fc:a3:15:d1:93:a8:9c:db:0e:c7:2a:89:cf:57: 65:20:ac:12:60:ec:6d:8f:5c:e5:b9:b9:19:5a:ab: 54:b4:46:76:48:dd:05:e4:3a:22:91:15:be:a6:22: b6:94:9f:35:4e:ba:ca:b7:f1:2e:ea:36:fd:e4:c4: 99:6d:e1:00:85:00:d2:28:7a:dc:97:bc:1c:4a:7c: ce:39:6b:6a:85:5c:ea:c5:3b:c3:5a:4a:eb:1d:91: c4:6c:fe:46:fd:34:3f:2b:fb:d7:0f:76:08:dc:bb: c7:19:f1:17:dc:1d:b6:d8:4d:67:02:0d:a1:13:86: e3:de:9d:8d:78:9a:89:d2:de:c7:dc:29:d0:3c:64: 59:d1:b5:b4:f5:59:d9:4f:89:d4:21:ee:5e:dd:4d: b9:8c:c8:60:70:eb:a1:eb:35:88:58:cb:69:e3:2a: f7:85:9a:44:1e:27:98:71:44:77:19:e3:97:44:9e: ba:f3:75:40:66:2b:c9:52:08:39:74:b1:91:e4:8f: 4e:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:0F:17:71:40:54:AB:53:84:69:CE:40:07:AF:09:4B:B5:A6:13:89 X509v3 Authority Key Identifier: keyid:C3:CF:41:89:89:36:CB:9C:57:3D:B1:EA:AB:94:C6:E6:69:95:1F:D7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer Subject Information Access: Signed Object - URI:rsync://krill.47272.net/repo/HYEHOST/5/AS219412.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a05:dfc3:f900::/40 2a0f:6284:52::/48 Signature Algorithm: sha256WithRSAEncryption 43:b1:f4:3f:f6:21:78:6a:0c:b5:65:87:e0:90:4c:54:33:57: 89:bb:ba:5a:4d:52:ae:24:3f:e4:34:f7:83:de:57:c4:4c:dc: 2b:fe:57:73:64:fd:32:76:b6:b8:46:87:ed:0a:f0:4d:53:c7: 91:f4:f2:7a:9c:31:9b:f2:7d:43:cb:12:03:f8:bd:4b:46:71: 9a:49:7d:5b:ed:94:4f:6a:fd:b9:c1:08:91:b2:8e:18:fc:36: 5d:9e:12:52:e6:c5:f0:8b:56:c7:95:64:b0:13:b0:43:1e:5d: 8f:de:62:33:9b:20:30:9a:20:96:f0:53:c0:e8:a4:5d:bf:4d: 21:f2:f9:6e:db:11:2e:5e:ca:a1:5d:f2:1a:b9:55:1e:08:b0: 1f:5d:49:48:d1:f4:27:f1:b2:c2:04:20:05:3b:b5:48:00:21: 79:7a:e0:bb:33:09:4b:c0:3e:a8:2f:25:92:91:43:c7:80:a0: 1f:70:28:7d:fc:e9:46:36:45:a5:b2:f4:9d:0c:a3:df:17:85: c6:80:53:42:58:8e:32:1b:60:30:e6:9e:65:08:51:b7:a7:b3: 3f:cc:29:3a:c9:1f:d6:91:4f:25:33:09:a9:df:51:c7:79:19: 4c:72:bc:4e:ca:9f:f9:23:75:48:fc:8d:e0:2d:a7:51:6a:21: eb:62:4c:7b -----BEGIN CERTIFICATE----- MIIE3TCCA8WgAwIBAgIUF/GRalDwA7jgaIDIk82/50L7qDAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzNDRjQxODk4OTM2Q0I5QzU3M0RCMUVBQUI5NEM2RTY2 OTk1MUZENzAeFw0yNjA5MTkwNTU1MTZaFw0yNzA5MTgwNjAwMTZaMDMxMTAvBgNV BAMTKDQ3MEYxNzcxNDA1NEFCNTM4NDY5Q0U0MDA3QUYwOTRCQjVBNjEzODkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCxJSOcwbvwdtcugMioQhueVCZw yPWx4MaKeoyY2OyUKIbjcVj4CPfzRZVDJEciRycmONggSLGA33pV1sb8oxXRk6ic 2w7HKonPV2UgrBJg7G2PXOW5uRlaq1S0RnZI3QXkOiKRFb6mIraUnzVOusq38S7q Nv3kxJlt4QCFANIoetyXvBxKfM45a2qFXOrFO8NaSusdkcRs/kb9ND8r+9cPdgjc u8cZ8RfcHbbYTWcCDaEThuPenY14monS3sfcKdA8ZFnRtbT1WdlPidQh7l7dTbmM yGBw66HrNYhYy2njKveFmkQeJ5hxRHcZ45dEnrrzdUBmK8lSCDl0sZHkj04JAgMB AAGjggHnMIIB4zAdBgNVHQ4EFgQURw8XcUBUq1OEac5AB68JS7WmE4kwHwYDVR0j BBgwFoAUw89BiYk2y5xXPbHqq5TG5mmVH9cwDgYDVR0PAQH/BAQDAgeAMGQGA1Ud HwRdMFswWaBXoFWGU3JzeW5jOi8va3JpbGwuNDcyNzIubmV0L3JlcG8vSFlFSE9T VC81L0MzQ0Y0MTg5ODkzNkNCOUM1NzNEQjFFQUFCOTRDNkU2Njk5NTFGRDcuY3Js MIGTBggrBgEFBQcBAQSBhjCBgzCBgAYIKwYBBQUHMAKGdHJzeW5jOi8vcnBraS1y cHMuYXJpbi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZjg1MGQwNjNlMDE4NTc1NWM5 MWJlM2Y5ZC83L0MzQ0Y0MTg5ODkzNkNCOUM1NzNEQjFFQUFCOTRDNkU2Njk5NTFG RDcuY2VyME8GCCsGAQUFBwELBEMwQTA/BggrBgEFBQcwC4YzcnN5bmM6Ly9rcmls bC40NzI3Mi5uZXQvcmVwby9IWUVIT1NULzUvQVMyMTk0MTIucm9hMBgGA1UdIAEB /wQOMAwwCgYIKwYBBQUHDgIwKgYIKwYBBQUHAQcBAf8EGzAZMBcEAgACMBEDBgAq Bd/D+QMHACoPYoQAUjANBgkqhkiG9w0BAQsFAAOCAQEAQ7H0P/YheGoMtWWH4JBM VDNXibu6Wk1SriQ/5DT3g95XxEzcK/5Xc2T9Mna2uEaH7QrwTVPHkfTyepwxm/J9 Q8sSA/i9S0Zxmkl9W+2UT2r9ucEIkbKOGPw2XZ4SUubF8ItWx5VksBOwQx5dj95i M5sgMJoglvBTwOikXb9NIfL5btsRLl7KoV3yGrlVHgiwH11JSNH0J/GywgQgBTu1 SAAheXrguzMJS8A+qC8lkpFDx4CgH3AoffzpRjZFpbL0nQyj3xeFxoBTQliOMhtg MOaeZQhRt6ezP8wpOskf1pFPJTMJqd9Rx3kZTHK8Tsqf+SN1SPyN4C2nUWoh62JM ew== -----END CERTIFICATE-----Generated at Sun Sep 20 19:54:50 2026 by rpki-client