$ rpki-client -vvvf krill.47272.net/repo/HYEHOST/5/AS40676.roa File: AS40676.roa (raw, json) Hash identifier: l51h3FENd0d5q6VPSup4dBMUSNYltSpFyQiKzy74Oec= Subject key identifier: E1:FB:F9:96:44:42:B5:FE:04:0A:E8:2F:19:AF:0A:CD:1F:AA:93:22 Certificate issuer: /CN=C3CF41898936CB9C573DB1EAAB94C6E669951FD7 Certificate serial: 30CF5F31BB3C71D470E358C267610E0614BEC142 Authority key identifier: C3:CF:41:89:89:36:CB:9C:57:3D:B1:EA:AB:94:C6:E6:69:95:1F:D7 Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer Subject info access: rsync://krill.47272.net/repo/HYEHOST/5/AS40676.roa Signing time: Tue 27 Oct 2026 18:35:17 +0000 ROA not before: Tue 27 Oct 2026 18:30:17 +0000 ROA not after: Tue 26 Oct 2027 18:35:17 +0000 asID: 40676 IP address blocks: 2a0f:6284:c000::/36 maxlen: 36 2a0f:6287:3000::/36 maxlen: 36 Validation: OK Signature path: rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.crl rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 08 Nov 2026 14:00:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 30:cf:5f:31:bb:3c:71:d4:70:e3:58:c2:67:61:0e:06:14:be:c1:42 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C3CF41898936CB9C573DB1EAAB94C6E669951FD7 Validity Not Before: Oct 27 18:30:17 2026 GMT Not After : Oct 26 18:35:17 2027 GMT Subject: CN=E1FBF9964442B5FE040AE82F19AF0ACD1FAA9322 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:0e:62:cd:f4:1d:f4:f5:27:cd:a1:7f:e3:a6: 29:17:31:a4:64:4d:34:ed:11:2e:da:02:e3:4e:ec: ea:85:4d:41:0a:64:83:15:d1:6b:7a:55:c7:b1:92: 10:73:51:b1:3f:ae:14:e6:e2:43:de:80:0c:44:43: 95:e9:69:7a:b9:68:3a:ff:81:1f:5b:79:8f:25:58: 90:66:8e:30:29:c1:89:a7:2c:40:e1:b8:df:95:28: ee:db:e8:4e:a9:cf:5c:b5:39:6d:4e:ec:5b:cf:87: 96:2b:10:b4:84:be:6b:13:0b:9d:ea:28:11:f6:18: 09:da:92:c0:f5:b6:b5:85:7b:e9:43:00:52:fa:42: 0c:d2:b6:38:16:62:89:8c:22:bb:a9:68:4e:9a:d4: 44:30:c6:82:ee:89:b2:f6:b5:6e:2b:37:eb:41:dd: 0f:22:1d:ca:7b:18:34:30:1e:94:3d:02:24:d4:b8: c9:89:8f:04:c1:87:a0:99:4a:b3:7a:cf:df:92:c6: 43:17:11:63:5d:76:48:8f:d1:8b:0b:7a:91:e4:85: da:17:6b:4b:84:6b:05:60:c9:ba:1a:af:5a:bc:32: e2:ae:b7:e9:f7:8d:f9:55:59:43:a1:cb:82:9a:a3: 17:0f:6a:ae:0f:b6:04:34:20:6e:a7:65:91:3f:99: 27:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:FB:F9:96:44:42:B5:FE:04:0A:E8:2F:19:AF:0A:CD:1F:AA:93:22 X509v3 Authority Key Identifier: keyid:C3:CF:41:89:89:36:CB:9C:57:3D:B1:EA:AB:94:C6:E6:69:95:1F:D7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer Subject Information Access: Signed Object - URI:rsync://krill.47272.net/repo/HYEHOST/5/AS40676.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0f:6284:c000::/36 2a0f:6287:3000::/36 Signature Algorithm: sha256WithRSAEncryption 35:bb:05:ef:25:60:22:ec:3b:fd:39:46:5f:0e:e9:f8:fc:f6: 08:e2:4d:22:f5:4a:df:3f:f2:45:8d:7b:6c:1b:aa:28:85:24: 33:de:8b:72:b4:13:d5:a5:5f:93:ce:84:61:52:53:2f:a2:3f: b5:82:9b:e4:b3:33:f6:2f:06:a6:12:41:fa:d6:5a:21:fe:3a: ec:4e:a9:29:28:da:6a:ed:e9:28:f2:65:9b:26:21:ea:5e:a5: 45:18:e8:be:63:53:95:56:52:64:f7:da:45:cc:1b:c9:b6:93: 1e:55:66:72:c1:3e:63:ec:d6:9f:9d:3c:f4:19:38:f1:7c:c0: b2:a9:4e:41:2f:6d:a8:6c:f2:e2:23:86:d2:e3:a4:c5:13:e8: 5a:a2:95:55:c7:d4:62:ea:9c:00:d5:9a:f6:c7:4c:ef:d9:8d: 9a:ae:94:eb:15:e2:6f:9d:c8:d4:23:19:4b:47:19:ef:12:72: 84:3e:6b:92:65:0a:30:8c:99:7a:17:e1:cf:f9:5c:12:1c:af: 6c:e3:74:01:6b:d6:8a:3f:f7:8f:b9:33:64:83:6e:22:bc:0a: 71:37:25:d4:7f:e1:60:5e:55:2a:af:53:b4:7b:19:ea:78:d1: 29:23:a2:77:6b:d6:da:d0:be:32:82:df:5c:f4:fb:cd:29:03: 1e:b0:b7:92 -----BEGIN CERTIFICATE----- MIIE2zCCA8OgAwIBAgIUMM9fMbs8cdRw41jCZ2EOBhS+wUIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzNDRjQxODk4OTM2Q0I5QzU3M0RCMUVBQUI5NEM2RTY2 OTk1MUZENzAeFw0yNjEwMjcxODMwMTdaFw0yNzEwMjYxODM1MTdaMDMxMTAvBgNV BAMTKEUxRkJGOTk2NDQ0MkI1RkUwNDBBRTgyRjE5QUYwQUNEMUZBQTkzMjIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDNDmLN9B309SfNoX/jpikXMaRk TTTtES7aAuNO7OqFTUEKZIMV0Wt6VcexkhBzUbE/rhTm4kPegAxEQ5XpaXq5aDr/ gR9beY8lWJBmjjApwYmnLEDhuN+VKO7b6E6pz1y1OW1O7FvPh5YrELSEvmsTC53q KBH2GAnaksD1trWFe+lDAFL6QgzStjgWYomMIrupaE6a1EQwxoLuibL2tW4rN+tB 3Q8iHcp7GDQwHpQ9AiTUuMmJjwTBh6CZSrN6z9+SxkMXEWNddkiP0YsLepHkhdoX a0uEawVgyboar1q8MuKut+n3jflVWUOhy4KaoxcPaq4PtgQ0IG6nZZE/mSetAgMB AAGjggHlMIIB4TAdBgNVHQ4EFgQU4fv5lkRCtf4ECugvGa8KzR+qkyIwHwYDVR0j BBgwFoAUw89BiYk2y5xXPbHqq5TG5mmVH9cwDgYDVR0PAQH/BAQDAgeAMGQGA1Ud HwRdMFswWaBXoFWGU3JzeW5jOi8va3JpbGwuNDcyNzIubmV0L3JlcG8vSFlFSE9T VC81L0MzQ0Y0MTg5ODkzNkNCOUM1NzNEQjFFQUFCOTRDNkU2Njk5NTFGRDcuY3Js MIGTBggrBgEFBQcBAQSBhjCBgzCBgAYIKwYBBQUHMAKGdHJzeW5jOi8vcnBraS1y cHMuYXJpbi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZjg1MGQwNjNlMDE4NTc1NWM5 MWJlM2Y5ZC83L0MzQ0Y0MTg5ODkzNkNCOUM1NzNEQjFFQUFCOTRDNkU2Njk5NTFG RDcuY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9rcmls bC40NzI3Mi5uZXQvcmVwby9IWUVIT1NULzUvQVM0MDY3Ni5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjApBggrBgEFBQcBBwEB/wQaMBgwFgQCAAIwEAMGBCoP YoTAAwYEKg9ihzAwDQYJKoZIhvcNAQELBQADggEBADW7Be8lYCLsO/05Rl8O6fj8 9gjiTSL1St8/8kWNe2wbqiiFJDPei3K0E9WlX5POhGFSUy+iP7WCm+SzM/YvBqYS QfrWWiH+OuxOqSko2mrt6SjyZZsmIepepUUY6L5jU5VWUmT32kXMG8m2kx5VZnLB PmPs1p+dPPQZOPF8wLKpTkEvbahs8uIjhtLjpMUT6FqilVXH1GLqnADVmvbHTO/Z jZqulOsV4m+dyNQjGUtHGe8ScoQ+a5JlCjCMmXoX4c/5XBIcr2zjdAFr1oo/94+5 M2SDbiK8CnE3JdR/4WBeVSqvU7R7Gep40Skjondr1trQvjKC31z0+80pAx6wt5I= -----END CERTIFICATE-----Generated at Sat Nov 7 23:13:12 2026 by rpki-client