$ rpki-client -vvf krill.47272.net/repo/HYEHOST/5/AS51202.roa File: AS51202.roa (raw, json) Hash identifier: UFWbTOGKcgAE575AtzTsq3YShn+PQJgULmxmwota+Rc= Subject key identifier: B0:4F:73:F0:C9:80:9B:78:A2:6E:AA:B6:8C:70:4B:B2:8F:27:A6:68 Certificate issuer: /CN=C3CF41898936CB9C573DB1EAAB94C6E669951FD7 Certificate serial: 39C9E84C5DC3ED1CE3DDB29326791179FFD3BB4A Authority key identifier: C3:CF:41:89:89:36:CB:9C:57:3D:B1:EA:AB:94:C6:E6:69:95:1F:D7 Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer Subject info access: rsync://krill.47272.net/repo/HYEHOST/5/AS51202.roa Signing time: Sat 01 Nov 2025 11:15:31 +0000 ROA not before: Sat 01 Nov 2025 11:10:31 +0000 ROA not after: Sat 31 Oct 2026 11:15:31 +0000 asID: 51202 IP address blocks: 2a0f:6284:2::/48 maxlen: 48 Validation: OK Signature path: rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.crl rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 05 Nov 2025 16:43:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 39:c9:e8:4c:5d:c3:ed:1c:e3:dd:b2:93:26:79:11:79:ff:d3:bb:4a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C3CF41898936CB9C573DB1EAAB94C6E669951FD7 Validity Not Before: Nov 1 11:10:31 2025 GMT Not After : Oct 31 11:15:31 2026 GMT Subject: CN=B04F73F0C9809B78A26EAAB68C704BB28F27A668 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:06:b4:03:5c:3c:19:2f:98:a1:b6:59:28:38: 41:84:62:da:a2:42:0c:30:f1:15:cf:24:62:fb:21: 2e:08:cf:3b:fb:3b:0f:ee:72:fd:9e:0a:df:77:47: 35:f1:11:b8:fc:90:3b:e3:69:75:43:ea:01:59:00: 5b:1c:aa:03:4e:a2:ce:a1:99:9f:c5:48:6a:e9:9e: ad:f6:c0:f7:ff:5a:05:93:34:a1:ab:07:1a:fb:3f: d6:72:99:77:a6:9c:d5:5c:77:b3:e5:a9:6c:25:62: 7e:b2:5f:9d:74:f8:af:92:a6:0b:91:ba:d1:8d:08: 79:e0:1d:11:75:11:d1:d0:29:f1:5f:ef:7d:a9:59: 32:7e:c8:f3:23:8a:2c:52:e9:f0:39:95:65:8c:05: 97:14:23:33:5d:12:a6:4b:bf:d6:5d:6d:05:42:fa: ae:a6:f3:83:82:08:f3:7d:0f:1d:bc:b3:31:03:05: ae:fa:b5:a8:bb:60:f9:cc:33:35:52:55:cc:c5:4c: 64:4c:d5:1a:79:af:49:70:95:52:62:2b:68:24:4a: 3e:42:de:3d:56:ce:2d:24:4f:87:c9:74:e0:92:b2: 50:b6:6f:1c:e8:dd:26:e3:cf:75:9e:9e:56:d7:1a: 93:97:4d:9f:1f:f1:b3:74:e6:4d:4d:84:3d:3c:48: f7:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:4F:73:F0:C9:80:9B:78:A2:6E:AA:B6:8C:70:4B:B2:8F:27:A6:68 X509v3 Authority Key Identifier: keyid:C3:CF:41:89:89:36:CB:9C:57:3D:B1:EA:AB:94:C6:E6:69:95:1F:D7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer Subject Information Access: Signed Object - URI:rsync://krill.47272.net/repo/HYEHOST/5/AS51202.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0f:6284:2::/48 Signature Algorithm: sha256WithRSAEncryption 8c:2e:09:da:10:a0:55:37:9d:87:30:56:1e:1e:93:5e:0c:7d: be:0f:c5:d3:e4:cb:2b:6b:cb:a6:a1:4c:69:05:68:05:53:78: c3:0e:32:9b:7b:7b:35:9c:10:9b:ba:8a:45:8f:4a:fa:db:00: 20:86:f0:84:9e:64:85:72:e8:f4:35:51:b2:17:8a:51:9d:f1: 9c:18:e6:01:03:a1:19:97:b2:fb:89:b0:82:ac:50:b2:60:7f: b7:a2:b1:d0:c6:ea:26:1b:06:45:17:47:7e:3c:12:c0:41:5d: 02:a0:ec:62:85:5c:05:61:7f:51:b4:7c:4f:1c:3c:0e:69:41: 5f:2c:f6:42:af:9a:11:94:1b:ce:77:e1:ec:90:c8:d6:da:5a: e8:9e:51:ee:3b:42:13:3c:27:ad:34:39:44:44:41:01:ad:43: ee:b9:0e:8a:b8:75:9b:c0:43:f4:be:4c:ba:6d:c2:53:6f:d5: fd:6c:a2:8e:34:a2:fb:12:04:6e:b5:90:b4:36:bb:6d:59:2b: 75:eb:08:e5:59:68:4b:b7:5b:b9:ed:7e:54:ee:15:c4:d9:4d: bc:85:ce:59:b3:5b:30:aa:0d:81:f7:dc:b0:c3:bb:03:bc:cd: 42:87:5d:ce:c9:c6:cd:5d:db:5d:48:ff:ef:f1:32:01:6a:5f: 7a:75:76:dc -----BEGIN CERTIFICATE----- MIIE1DCCA7ygAwIBAgIUOcnoTF3D7Rzj3bKTJnkRef/Tu0owDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzNDRjQxODk4OTM2Q0I5QzU3M0RCMUVBQUI5NEM2RTY2 OTk1MUZENzAeFw0yNTExMDExMTEwMzFaFw0yNjEwMzExMTE1MzFaMDMxMTAvBgNV BAMTKEIwNEY3M0YwQzk4MDlCNzhBMjZFQUFCNjhDNzA0QkIyOEYyN0E2NjgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDABrQDXDwZL5ihtlkoOEGEYtqi Qgww8RXPJGL7IS4Izzv7Ow/ucv2eCt93RzXxEbj8kDvjaXVD6gFZAFscqgNOos6h mZ/FSGrpnq32wPf/WgWTNKGrBxr7P9ZymXemnNVcd7PlqWwlYn6yX510+K+SpguR utGNCHngHRF1EdHQKfFf732pWTJ+yPMjiixS6fA5lWWMBZcUIzNdEqZLv9ZdbQVC +q6m84OCCPN9Dx28szEDBa76tai7YPnMMzVSVczFTGRM1Rp5r0lwlVJiK2gkSj5C 3j1Wzi0kT4fJdOCSslC2bxzo3Sbjz3WenlbXGpOXTZ8f8bN05k1NhD08SPcPAgMB AAGjggHeMIIB2jAdBgNVHQ4EFgQUsE9z8MmAm3iibqq2jHBLso8npmgwHwYDVR0j BBgwFoAUw89BiYk2y5xXPbHqq5TG5mmVH9cwDgYDVR0PAQH/BAQDAgeAMGQGA1Ud HwRdMFswWaBXoFWGU3JzeW5jOi8va3JpbGwuNDcyNzIubmV0L3JlcG8vSFlFSE9T VC81L0MzQ0Y0MTg5ODkzNkNCOUM1NzNEQjFFQUFCOTRDNkU2Njk5NTFGRDcuY3Js MIGTBggrBgEFBQcBAQSBhjCBgzCBgAYIKwYBBQUHMAKGdHJzeW5jOi8vcnBraS1y cHMuYXJpbi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZjg1MGQwNjNlMDE4NTc1NWM5 MWJlM2Y5ZC83L0MzQ0Y0MTg5ODkzNkNCOUM1NzNEQjFFQUFCOTRDNkU2Njk5NTFG RDcuY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9rcmls bC40NzI3Mi5uZXQvcmVwby9IWUVIT1NULzUvQVM1MTIwMi5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACoP YoQAAjANBgkqhkiG9w0BAQsFAAOCAQEAjC4J2hCgVTedhzBWHh6TXgx9vg/F0+TL K2vLpqFMaQVoBVN4ww4ym3t7NZwQm7qKRY9K+tsAIIbwhJ5khXLo9DVRsheKUZ3x nBjmAQOhGZey+4mwgqxQsmB/t6Kx0MbqJhsGRRdHfjwSwEFdAqDsYoVcBWF/UbR8 Txw8DmlBXyz2Qq+aEZQbznfh7JDI1tpa6J5R7jtCEzwnrTQ5RERBAa1D7rkOirh1 m8BD9L5Mum3CU2/V/WyijjSi+xIEbrWQtDa7bVkrdesI5VloS7dbue1+VO4VxNlN vIXOWbNbMKoNgffcsMO7A7zNQoddzsnGzV3bXUj/7/EyAWpfenV23A== -----END CERTIFICATE-----Generated at Wed Nov 5 02:39:31 2025 by rpki-client