
$ rpki-client -vvf krill.47272.net/repo/HYEHOST/5/AS205141.roa
File: AS205141.roa (raw, json)
Hash identifier: VrPLrF4Jwe5MR4KLl9XZhC3kp4MrxiCWERODJsEjAFc=
Subject key identifier: 8F:5A:29:15:CF:6D:DC:63:D1:8F:A6:45:5E:99:A9:99:B0:F4:83:20
Certificate issuer: /CN=C3CF41898936CB9C573DB1EAAB94C6E669951FD7
Certificate serial: 3CC58BDE6C60C7BE323B13ACAB7F7484FE1596E2
Authority key identifier: C3:CF:41:89:89:36:CB:9C:57:3D:B1:EA:AB:94:C6:E6:69:95:1F:D7
Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer
Subject info access: rsync://krill.47272.net/repo/HYEHOST/5/AS205141.roa
Signing time: Sun 08 Feb 2026 17:39:09 +0000
ROA not before: Sun 08 Feb 2026 17:34:09 +0000
ROA not after: Sun 07 Feb 2027 17:39:09 +0000
asID: 205141
IP address blocks: 2a0f:6284:40::/44 maxlen: 44
2a0f:6284:40::/48 maxlen: 48
2a0f:6284:41::/48 maxlen: 48
2a0f:6284:42::/48 maxlen: 48
2a0f:6284:43::/48 maxlen: 48
2a0f:6284:44::/48 maxlen: 48
2a0f:6284:45::/48 maxlen: 48
2a0f:6284:46::/48 maxlen: 48
Validation: OK
Signature path: rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.crl
rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.mft
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 22 Feb 2026 03:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3c:c5:8b:de:6c:60:c7:be:32:3b:13:ac:ab:7f:74:84:fe:15:96:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C3CF41898936CB9C573DB1EAAB94C6E669951FD7
Validity
Not Before: Feb 8 17:34:09 2026 GMT
Not After : Feb 7 17:39:09 2027 GMT
Subject: CN=8F5A2915CF6DDC63D18FA6455E99A999B0F48320
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:59:7f:a9:0f:b5:e2:57:a5:09:9b:ba:01:35:
51:c1:5c:87:84:82:5e:af:dc:f5:93:2b:86:f4:45:
dc:93:9a:1c:ff:e1:4b:d3:25:b6:f5:0d:09:37:34:
d3:cc:a2:e9:4d:ab:2c:6c:83:6f:91:78:09:71:ee:
d3:ee:65:5f:d5:20:d9:28:0e:24:51:6c:17:a8:1c:
52:b8:5c:f9:fa:23:b8:db:9d:cf:7d:1f:fe:8d:8e:
51:65:17:9d:c1:0d:8a:a6:92:1a:29:e2:71:2c:24:
59:d3:15:27:45:d2:28:fa:79:6e:62:ab:ce:0f:30:
b7:a4:ff:06:31:3e:0d:84:65:9c:da:af:50:58:e0:
79:71:a3:3f:c0:7e:c6:ad:87:56:be:b3:ca:0c:78:
a3:bb:57:45:8e:c1:ad:ae:a9:4d:39:f6:07:14:d2:
90:e4:05:b6:db:0d:60:7b:ff:0a:66:8e:38:82:18:
76:8b:b2:14:61:28:3e:74:4b:f3:db:13:06:8c:27:
a4:f5:aa:4d:21:c0:61:ae:4f:f5:77:8d:fa:18:69:
b7:e9:d6:d8:41:65:85:76:39:9e:e4:84:dd:53:03:
d1:33:d4:a3:d1:11:dc:7b:61:fe:b0:28:73:62:b0:
e0:47:dc:dd:a8:d7:dc:be:79:de:31:da:a6:d9:22:
49:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:5A:29:15:CF:6D:DC:63:D1:8F:A6:45:5E:99:A9:99:B0:F4:83:20
X509v3 Authority Key Identifier:
keyid:C3:CF:41:89:89:36:CB:9C:57:3D:B1:EA:AB:94:C6:E6:69:95:1F:D7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer
Subject Information Access:
Signed Object - URI:rsync://krill.47272.net/repo/HYEHOST/5/AS205141.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:6284:40::/44
Signature Algorithm: sha256WithRSAEncryption
47:1c:c0:d4:6f:2c:35:a5:5c:53:40:fc:ee:5a:e6:4e:70:7d:
d0:1e:c5:79:2f:19:96:86:d3:cf:d3:4d:6b:3a:f7:82:36:d4:
9b:af:78:b3:8c:6f:b8:8f:26:88:24:34:6b:7f:be:eb:ba:a8:
46:19:4e:07:d2:47:c5:10:c9:4a:08:2e:28:eb:4e:28:fb:93:
32:95:90:b9:f5:57:d3:36:19:58:36:ba:34:6f:99:03:84:4a:
d4:91:09:78:9c:c6:d5:ca:57:e1:31:96:59:02:99:12:88:4f:
b0:13:a2:fb:c1:f3:79:83:1e:4f:8b:7b:13:27:04:30:b8:15:
6a:3f:61:15:58:62:6f:3f:c9:7e:02:8b:9c:41:bc:8d:2c:c9:
f3:65:ed:69:03:15:00:4b:65:79:95:2f:ee:da:04:01:42:0a:
11:67:d8:63:21:b6:fe:bd:d0:8d:fa:5c:43:8d:bc:1a:0c:02:
22:fe:3e:ba:0c:d4:35:d5:11:a1:6b:68:4b:5c:68:f7:8d:74:
ff:fd:8a:ef:49:72:d5:bc:f8:cf:93:08:c9:43:27:15:88:75:
d0:36:8d:85:d4:b8:12:ef:03:7b:3d:ac:22:3b:f1:40:6b:3f:
ba:4a:03:6d:0d:a6:f2:45:7f:5a:40:8a:18:d3:b2:37:7d:23:
1c:8b:a7:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Feb 21 12:22:57 2026 by rpki-client