$ rpki-client -vvvf krill.byhill.de/repo/byhill-ca/1/326131333a633863343a373130303a3a2f34302d3430203d3e20323135313130.roa File: 326131333a633863343a373130303a3a2f34302d3430203d3e20323135313130.roa (raw, json) Hash identifier: cEpZqnCUCXvDnH3pSPMSUOx1tDbxwMrkTLWn8/Sj84U= Subject key identifier: 1F:65:2F:D3:1C:9B:C3:D8:D3:A7:E2:3D:84:95:B8:EF:34:7B:28:80 Certificate issuer: /CN=F55C2745322CEC1805815DCD65BC6AFFD99168DA Certificate serial: 3AA3D07C873AD9FEF12A3F636A2FCD6AA8DD0C5C Authority key identifier: F5:5C:27:45:32:2C:EC:18:05:81:5D:CD:65:BC:6A:FF:D9:91:68:DA Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/002f8ee6-abe7-4ae8-964c-788bb98c975c/1/F55C2745322CEC1805815DCD65BC6AFFD99168DA.cer Subject info access: rsync://krill.byhill.de/repo/byhill-ca/1/326131333a633863343a373130303a3a2f34302d3430203d3e20323135313130.roa Signing time: Wed 16 Sep 2026 22:26:13 +0000 ROA not before: Wed 16 Sep 2026 22:21:13 +0000 ROA not after: Wed 15 Sep 2027 22:26:13 +0000 asID: 215110 IP address blocks: 2a13:c8c4:7100::/40 maxlen: 40 Validation: OK Signature path: rsync://krill.byhill.de/repo/byhill-ca/1/F55C2745322CEC1805815DCD65BC6AFFD99168DA.crl rsync://krill.byhill.de/repo/byhill-ca/1/F55C2745322CEC1805815DCD65BC6AFFD99168DA.mft rsync://rsync.paas.rpki.ripe.net/repository/002f8ee6-abe7-4ae8-964c-788bb98c975c/1/F55C2745322CEC1805815DCD65BC6AFFD99168DA.cer rsync://rsync.paas.rpki.ripe.net/repository/002f8ee6-abe7-4ae8-964c-788bb98c975c/1/1E74494683D8D2A4E029AAD4573928D2A55FA411.crl rsync://rsync.paas.rpki.ripe.net/repository/002f8ee6-abe7-4ae8-964c-788bb98c975c/1/1E74494683D8D2A4E029AAD4573928D2A55FA411.mft rsync://rsync.paas.rpki.ripe.net/repository/6c43d3a6-7d13-4895-959d-419b9a6eb34b/4/1E74494683D8D2A4E029AAD4573928D2A55FA411.cer rsync://rsync.paas.rpki.ripe.net/repository/6c43d3a6-7d13-4895-959d-419b9a6eb34b/4/ACB5DFF8A45DF5CDAFA2A95C715F10C5FE5F91A3.crl rsync://rsync.paas.rpki.ripe.net/repository/6c43d3a6-7d13-4895-959d-419b9a6eb34b/4/ACB5DFF8A45DF5CDAFA2A95C715F10C5FE5F91A3.mft rsync://rpki.ripe.net/repository/DEFAULT/rLXf-KRd9c2voqlccV8Qxf5fkaM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 21 Sep 2026 02:02:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3a:a3:d0:7c:87:3a:d9:fe:f1:2a:3f:63:6a:2f:cd:6a:a8:dd:0c:5c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F55C2745322CEC1805815DCD65BC6AFFD99168DA Validity Not Before: Sep 16 22:21:13 2026 GMT Not After : Sep 15 22:26:13 2027 GMT Subject: CN=1F652FD31C9BC3D8D3A7E23D8495B8EF347B2880 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:06:c8:81:88:f7:d5:17:94:b5:40:87:a4:1b: 65:71:a9:fe:33:5f:dd:ea:21:17:f4:c6:33:dc:c1: 43:82:da:dd:94:cd:5a:14:59:72:e0:0a:1c:57:f9: 18:bc:d1:17:4c:14:fb:01:27:dc:34:5a:98:e5:63: 9b:a0:f2:65:24:9f:bc:82:5a:d8:43:28:b8:9a:6a: c6:4e:8f:a6:7f:4e:c0:f2:0b:4e:0c:ab:80:9e:56: ec:e2:93:33:3a:27:10:86:67:b1:70:11:e7:91:9c: e1:86:4a:6f:81:e6:5f:e1:dc:6e:4b:6d:63:d1:6d: 1e:73:e4:c0:9f:cd:63:3d:0c:d8:12:98:a9:ab:75: 9b:3e:0c:4b:30:00:73:32:c3:3e:ef:67:61:8c:32: 51:56:a8:c6:15:b7:73:cb:65:eb:24:65:fe:d3:e0: cc:be:d8:6e:6e:4d:30:86:70:cf:fa:af:5d:3d:d3: 3a:a2:d6:e4:19:c3:94:e3:3d:79:8e:31:65:60:3f: 70:11:3d:bb:26:db:2a:33:40:dc:8e:ae:c9:cc:ed: 79:7f:b0:25:4e:26:70:6f:82:ab:a7:f0:ad:7d:45: 0c:3b:5b:d2:48:0c:9d:3f:2d:32:f2:b6:df:5b:70: 51:3c:00:76:24:98:32:12:73:95:72:78:ad:40:27: 45:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:65:2F:D3:1C:9B:C3:D8:D3:A7:E2:3D:84:95:B8:EF:34:7B:28:80 X509v3 Authority Key Identifier: keyid:F5:5C:27:45:32:2C:EC:18:05:81:5D:CD:65:BC:6A:FF:D9:91:68:DA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://krill.byhill.de/repo/byhill-ca/1/F55C2745322CEC1805815DCD65BC6AFFD99168DA.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/002f8ee6-abe7-4ae8-964c-788bb98c975c/1/F55C2745322CEC1805815DCD65BC6AFFD99168DA.cer Subject Information Access: Signed Object - URI:rsync://krill.byhill.de/repo/byhill-ca/1/326131333a633863343a373130303a3a2f34302d3430203d3e20323135313130.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a13:c8c4:7100::/40 Signature Algorithm: sha256WithRSAEncryption db:7e:48:b6:65:96:36:90:50:29:23:3c:30:ae:38:e7:f2:5a: 7e:3d:f4:4e:a0:4a:65:5e:d9:cb:bb:12:f0:78:3d:20:87:28: ee:a2:45:fb:0d:38:2a:ce:74:94:f1:ff:2b:a7:89:e5:2e:1f: 52:d5:89:6b:ce:34:47:c2:1e:32:26:9f:a6:80:af:06:2b:82: 48:71:d2:a4:76:55:28:38:2e:bf:4c:bf:57:09:b4:e3:14:8c: 24:8c:a6:93:c9:78:67:89:19:79:68:5d:e5:8d:72:fd:fa:71: 72:ef:f0:f1:1b:4f:5d:d3:39:cf:d6:31:e2:cb:bd:30:12:6a: 5c:9d:4d:32:c0:fa:b7:87:89:de:b4:d0:8a:0e:f3:2d:c9:57: 41:ee:5e:69:7b:cb:25:7d:d9:78:c0:0b:03:11:8e:ce:95:b7: 8f:8d:88:ef:48:dc:9b:a8:8f:9a:2b:19:f3:a3:39:4c:3d:02: d8:92:ed:4c:9c:38:a6:3f:e3:8b:21:a1:9e:1e:8f:f5:c5:58: e3:51:fc:9b:e4:ca:bb:49:59:fa:b5:73:7c:65:86:fa:5f:a3: 4b:04:f0:09:be:fd:be:41:e8:14:9a:61:8f:15:b4:47:d3:73: 8d:d4:0e:e3:1a:51:5a:1f:05:d9:46:01:04:35:97:55:67:81: 4e:8a:d5:f8 -----BEGIN CERTIFICATE----- MIIFHDCCBASgAwIBAgIUOqPQfIc62f7xKj9jai/NaqjdDFwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjU1QzI3NDUzMjJDRUMxODA1ODE1RENENjVCQzZBRkZE OTkxNjhEQTAeFw0yNjA5MTYyMjIxMTNaFw0yNzA5MTUyMjI2MTNaMDMxMTAvBgNV BAMTKDFGNjUyRkQzMUM5QkMzRDhEM0E3RTIzRDg0OTVCOEVGMzQ3QjI4ODAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6BsiBiPfVF5S1QIekG2Vxqf4z X93qIRf0xjPcwUOC2t2UzVoUWXLgChxX+Ri80RdMFPsBJ9w0WpjlY5ug8mUkn7yC WthDKLiaasZOj6Z/TsDyC04Mq4CeVuzikzM6JxCGZ7FwEeeRnOGGSm+B5l/h3G5L bWPRbR5z5MCfzWM9DNgSmKmrdZs+DEswAHMywz7vZ2GMMlFWqMYVt3PLZeskZf7T 4My+2G5uTTCGcM/6r1090zqi1uQZw5TjPXmOMWVgP3ARPbsm2yozQNyOrsnM7Xl/ sCVOJnBvgqun8K19RQw7W9JIDJ0/LTLytt9bcFE8AHYkmDISc5VyeK1AJ0W3AgMB AAGjggImMIICIjAdBgNVHQ4EFgQUH2Uv0xybw9jTp+I9hJW47zR7KIAwHwYDVR0j BBgwFoAU9VwnRTIs7BgFgV3NZbxq/9mRaNowDgYDVR0PAQH/BAQDAgeAMGYGA1Ud HwRfMF0wW6BZoFeGVXJzeW5jOi8va3JpbGwuYnloaWxsLmRlL3JlcG8vYnloaWxs LWNhLzEvRjU1QzI3NDUzMjJDRUMxODA1ODE1RENENjVCQzZBRkZEOTkxNjhEQS5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS8wMDJmOGVlNi1hYmU3LTRh ZTgtOTY0Yy03ODhiYjk4Yzk3NWMvMS9GNTVDMjc0NTMyMkNFQzE4MDU4MTVEQ0Q2 NUJDNkFGRkQ5OTE2OERBLmNlcjCBiQYIKwYBBQUHAQsEfTB7MHkGCCsGAQUFBzAL hm1yc3luYzovL2tyaWxsLmJ5aGlsbC5kZS9yZXBvL2J5aGlsbC1jYS8xLzMyNjEz MTMzM2E2MzM4NjMzNDNhMzczMTMwMzAzYTNhMmYzNDMwMmQzNDMwMjAzZDNlMjAz MjMxMzUzMTMxMzAucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYB BQUHAQcBAf8EEjAQMA4EAgACMAgDBgAqE8jEcTANBgkqhkiG9w0BAQsFAAOCAQEA 235ItmWWNpBQKSM8MK445/Jafj30TqBKZV7Zy7sS8Hg9IIco7qJF+w04Ks50lPH/ K6eJ5S4fUtWJa840R8IeMiafpoCvBiuCSHHSpHZVKDguv0y/Vwm04xSMJIymk8l4 Z4kZeWhd5Y1y/fpxcu/w8RtPXdM5z9Yx4su9MBJqXJ1NMsD6t4eJ3rTQig7zLclX Qe5eaXvLJX3ZeMALAxGOzpW3j42I70jcm6iPmisZ86M5TD0C2JLtTJw4pj/jiyGh nh6P9cVY41H8m+TKu0lZ+rVzfGWG+l+jSwTwCb79vkHoFJphjxW0R9NzjdQO4xpR Wh8F2UYBBDWXVWeBTorV+A== -----END CERTIFICATE-----Generated at Sun Sep 20 10:21:45 2026 by rpki-client