$ rpki-client -vvf krill.47272.net/repo/HYEHOST/5/AS40676.roa File: AS40676.roa (raw, json) Hash identifier: nWtkB7OIvkfwbYwaqySIXgtjz1njHgjDchOR9AbEO8s= Subject key identifier: 6A:07:7A:39:92:7E:5A:D6:CE:03:D5:44:19:E6:63:68:3E:69:E8:4F Certificate issuer: /CN=C3CF41898936CB9C573DB1EAAB94C6E669951FD7 Certificate serial: 501FDA90E1A447332A141043BF92C7A7E4125134 Authority key identifier: C3:CF:41:89:89:36:CB:9C:57:3D:B1:EA:AB:94:C6:E6:69:95:1F:D7 Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer Subject info access: rsync://krill.47272.net/repo/HYEHOST/5/AS40676.roa Signing time: Sun 22 Feb 2026 09:50:45 +0000 ROA not before: Sun 22 Feb 2026 09:45:45 +0000 ROA not after: Sun 21 Feb 2027 09:50:45 +0000 asID: 40676 IP address blocks: 2a0f:6284:c000::/36 maxlen: 36 2a0f:6287:3000::/36 maxlen: 36 Validation: OK Signature path: rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.crl rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 03 Mar 2026 11:08:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 50:1f:da:90:e1:a4:47:33:2a:14:10:43:bf:92:c7:a7:e4:12:51:34 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C3CF41898936CB9C573DB1EAAB94C6E669951FD7 Validity Not Before: Feb 22 09:45:45 2026 GMT Not After : Feb 21 09:50:45 2027 GMT Subject: CN=6A077A39927E5AD6CE03D54419E663683E69E84F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:14:a2:53:f3:bc:0e:e0:2b:71:6c:ff:16:85: 05:36:fe:27:0a:eb:d7:b9:7d:59:8d:ee:c3:b1:dc: 92:d4:e3:03:41:0d:90:7a:e2:70:e9:21:02:2f:a7: 08:b0:b9:f3:bc:7d:5c:1a:9b:51:75:b4:f3:b1:5c: e1:5b:f0:92:88:e1:ae:69:35:94:c3:5d:aa:9f:7e: e8:85:5c:e5:41:fd:08:d2:ad:2e:34:0e:60:da:8b: 5b:f4:8b:c0:8c:ca:5b:20:de:bb:47:d0:ed:b3:f3: 7c:87:57:d4:ba:1c:df:57:c2:3b:4d:aa:1f:0f:96: 74:25:e7:25:2f:4d:29:c1:02:27:0a:f2:3d:94:1b: 22:78:6a:94:86:be:9c:c1:0b:5f:0b:67:6a:1c:3b: f6:ad:d1:78:c3:e1:93:6b:1f:ce:94:b2:01:80:16: 3f:9e:1b:34:1c:68:ef:9b:bb:0e:f7:f8:0f:a4:68: 63:7f:de:d8:7a:12:a5:66:f2:35:10:77:47:0c:c9: 94:97:19:e6:3e:5b:82:d5:f3:11:04:2c:e9:5a:c4: b0:e3:b1:12:2b:7b:20:ff:3f:36:ff:09:fd:43:4e: 17:10:ea:5e:4f:d0:df:a0:d5:01:4f:e4:21:ad:5e: 40:ba:06:84:02:03:22:d6:92:ac:ec:85:5f:d4:47: 2e:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:07:7A:39:92:7E:5A:D6:CE:03:D5:44:19:E6:63:68:3E:69:E8:4F X509v3 Authority Key Identifier: keyid:C3:CF:41:89:89:36:CB:9C:57:3D:B1:EA:AB:94:C6:E6:69:95:1F:D7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer Subject Information Access: Signed Object - URI:rsync://krill.47272.net/repo/HYEHOST/5/AS40676.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0f:6284:c000::/36 2a0f:6287:3000::/36 Signature Algorithm: sha256WithRSAEncryption 48:80:34:f5:5f:05:79:c1:5d:e6:91:7f:6b:20:b4:ff:c8:2b: 2a:f9:6c:c0:f3:4c:0c:d5:20:2e:c0:ad:82:24:8e:a2:18:70: cf:67:5f:79:f7:5d:88:5a:b9:5d:03:81:88:87:85:d1:7a:0b: d3:1f:da:b2:3c:d2:36:6c:e4:0e:07:e4:de:5b:fd:3d:82:e1: b8:fb:16:c1:2e:02:a0:02:57:d3:fc:62:65:2f:80:39:67:67: 17:7a:20:ee:9a:2a:cd:2b:8d:57:23:4c:02:d0:84:d5:dd:06: bf:a3:d1:d4:d5:2a:13:06:e1:34:9b:cb:69:2d:18:82:bf:82: 79:3d:c4:3e:ba:c3:19:49:f2:e7:0e:0a:5d:5d:53:3f:fe:67: c6:2f:1e:ab:6a:67:da:65:00:15:2b:ae:8e:0d:6e:76:7f:f0: d1:32:ad:f0:a7:25:05:19:8d:b1:36:d6:74:22:cd:3f:0e:51: f1:e7:f5:7a:74:1c:99:23:93:7b:3e:bd:92:21:07:e8:5b:be: 19:e7:d2:f3:3d:78:b1:75:1e:6d:78:37:86:3f:84:44:b6:fd: c1:ef:4a:14:0f:c6:67:cb:b7:67:7e:82:4d:71:a5:20:ff:a2: dc:96:cd:d6:09:0b:02:d6:00:36:0e:2d:8c:24:5e:79:30:d8: 90:2e:a4:c8 -----BEGIN CERTIFICATE----- MIIE2zCCA8OgAwIBAgIUUB/akOGkRzMqFBBDv5LHp+QSUTQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzNDRjQxODk4OTM2Q0I5QzU3M0RCMUVBQUI5NEM2RTY2 OTk1MUZENzAeFw0yNjAyMjIwOTQ1NDVaFw0yNzAyMjEwOTUwNDVaMDMxMTAvBgNV BAMTKDZBMDc3QTM5OTI3RTVBRDZDRTAzRDU0NDE5RTY2MzY4M0U2OUU4NEYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDKFKJT87wO4CtxbP8WhQU2/icK 69e5fVmN7sOx3JLU4wNBDZB64nDpIQIvpwiwufO8fVwam1F1tPOxXOFb8JKI4a5p NZTDXaqffuiFXOVB/QjSrS40DmDai1v0i8CMylsg3rtH0O2z83yHV9S6HN9XwjtN qh8PlnQl5yUvTSnBAicK8j2UGyJ4apSGvpzBC18LZ2ocO/at0XjD4ZNrH86UsgGA Fj+eGzQcaO+buw73+A+kaGN/3th6EqVm8jUQd0cMyZSXGeY+W4LV8xEELOlaxLDj sRIreyD/Pzb/Cf1DThcQ6l5P0N+g1QFP5CGtXkC6BoQCAyLWkqzshV/URy57AgMB AAGjggHlMIIB4TAdBgNVHQ4EFgQUagd6OZJ+WtbOA9VEGeZjaD5p6E8wHwYDVR0j BBgwFoAUw89BiYk2y5xXPbHqq5TG5mmVH9cwDgYDVR0PAQH/BAQDAgeAMGQGA1Ud HwRdMFswWaBXoFWGU3JzeW5jOi8va3JpbGwuNDcyNzIubmV0L3JlcG8vSFlFSE9T VC81L0MzQ0Y0MTg5ODkzNkNCOUM1NzNEQjFFQUFCOTRDNkU2Njk5NTFGRDcuY3Js MIGTBggrBgEFBQcBAQSBhjCBgzCBgAYIKwYBBQUHMAKGdHJzeW5jOi8vcnBraS1y cHMuYXJpbi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZjg1MGQwNjNlMDE4NTc1NWM5 MWJlM2Y5ZC83L0MzQ0Y0MTg5ODkzNkNCOUM1NzNEQjFFQUFCOTRDNkU2Njk5NTFG RDcuY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9rcmls bC40NzI3Mi5uZXQvcmVwby9IWUVIT1NULzUvQVM0MDY3Ni5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjApBggrBgEFBQcBBwEB/wQaMBgwFgQCAAIwEAMGBCoP YoTAAwYEKg9ihzAwDQYJKoZIhvcNAQELBQADggEBAEiANPVfBXnBXeaRf2sgtP/I Kyr5bMDzTAzVIC7ArYIkjqIYcM9nX3n3XYhauV0DgYiHhdF6C9Mf2rI80jZs5A4H 5N5b/T2C4bj7FsEuAqACV9P8YmUvgDlnZxd6IO6aKs0rjVcjTALQhNXdBr+j0dTV KhMG4TSby2ktGIK/gnk9xD66wxlJ8ucOCl1dUz/+Z8YvHqtqZ9plABUrro4NbnZ/ 8NEyrfCnJQUZjbE21nQizT8OUfHn9Xp0HJkjk3s+vZIhB+hbvhnn0vM9eLF1Hm14 N4Y/hES2/cHvShQPxmfLt2d+gk1xpSD/otyWzdYJCwLWADYOLYwkXnkw2JAupMg= -----END CERTIFICATE-----Generated at Mon Mar 2 19:35:48 2026 by rpki-client