$ rpki-client -vvvf krill.47272.net/repo/HYEHOST/5/AS215191.roa File: AS215191.roa (raw, json) Hash identifier: RK8IS7FnAMthKpM5XkUvv7y8WNpDOTJE1Zx/9WUYpbg= Subject key identifier: 88:A5:01:73:64:AE:48:F7:F5:5D:F1:2B:A2:9B:71:D6:99:59:FD:4D Certificate issuer: /CN=C3CF41898936CB9C573DB1EAAB94C6E669951FD7 Certificate serial: 7F7A309DB3D68E35DB36D2CC6ADD24A89299CFFF Authority key identifier: C3:CF:41:89:89:36:CB:9C:57:3D:B1:EA:AB:94:C6:E6:69:95:1F:D7 Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer Subject info access: rsync://krill.47272.net/repo/HYEHOST/5/AS215191.roa Signing time: Tue 20 Oct 2026 03:49:33 +0000 ROA not before: Tue 20 Oct 2026 03:44:33 +0000 ROA not after: Tue 19 Oct 2027 03:49:33 +0000 asID: 215191 IP address blocks: 2a0f:6280:1088::/48 maxlen: 48 Validation: OK Signature path: rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.crl rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Oct 2026 06:24:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7f:7a:30:9d:b3:d6:8e:35:db:36:d2:cc:6a:dd:24:a8:92:99:cf:ff Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C3CF41898936CB9C573DB1EAAB94C6E669951FD7 Validity Not Before: Oct 20 03:44:33 2026 GMT Not After : Oct 19 03:49:33 2027 GMT Subject: CN=88A5017364AE48F7F55DF12BA29B71D69959FD4D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:07:02:8d:c8:b9:fe:78:92:ee:1c:63:91:ba: 0c:64:c6:d7:e2:4f:67:da:41:b4:9c:65:2f:52:fe: 13:56:a9:79:d7:17:94:a4:86:84:a4:ac:ad:94:53: d5:81:06:41:c5:dc:de:fc:b5:b9:01:28:f7:c1:5c: fe:da:ea:62:00:b1:04:45:4b:af:9b:62:3b:93:f7: 41:db:e8:94:28:cc:4d:60:de:dc:98:8d:74:08:5e: 1a:2f:fe:6b:7b:50:c8:8c:1b:a4:b3:33:f5:24:c4: 86:f3:b2:b1:07:11:47:af:a8:7a:3d:3d:25:b0:2e: 2d:00:09:70:d7:7e:77:d3:86:02:07:ad:e3:35:41: 17:ff:84:56:12:ec:f7:6d:ba:76:a4:3d:37:6e:5d: 3a:0d:bc:cc:8d:96:2f:dc:6a:dc:93:9b:b1:6c:c8: 4e:62:b6:1e:66:ec:73:b6:0a:fb:0d:67:03:b3:4c: 9c:1e:1b:b8:e3:9c:a6:95:2b:b0:2e:29:9a:f5:74: a9:63:e9:42:06:3a:e4:d0:ea:29:37:2c:75:24:0d: f4:58:6e:97:45:ba:df:a4:28:78:66:25:a1:d2:d6: 3c:c8:cd:d7:dd:0e:ea:d4:cf:98:37:1a:af:33:a5: 30:35:e8:80:4d:06:6a:72:e2:6a:d7:eb:bd:13:91: 19:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:A5:01:73:64:AE:48:F7:F5:5D:F1:2B:A2:9B:71:D6:99:59:FD:4D X509v3 Authority Key Identifier: keyid:C3:CF:41:89:89:36:CB:9C:57:3D:B1:EA:AB:94:C6:E6:69:95:1F:D7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer Subject Information Access: Signed Object - URI:rsync://krill.47272.net/repo/HYEHOST/5/AS215191.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0f:6280:1088::/48 Signature Algorithm: sha256WithRSAEncryption 1e:84:eb:40:93:ac:c6:5d:fa:64:cc:c1:f9:fa:0f:59:45:16: d4:78:6f:6f:49:94:fd:ea:00:49:81:94:21:f8:b2:75:90:08: cc:58:87:eb:e4:db:86:65:98:84:38:5a:46:d4:7f:17:de:ea: 8e:4a:84:1e:7d:54:bf:9b:61:cc:a0:e2:6d:92:ae:8b:41:32: a1:d3:31:c8:e1:f2:13:c5:d2:56:f9:72:22:48:cc:59:91:61: ff:d1:51:5f:83:8b:86:dd:4f:88:94:59:87:46:b1:88:46:66: 2e:40:7d:7d:30:5a:d3:1b:82:c6:50:ab:30:c0:0e:74:92:a0: 98:cb:cd:fe:c6:ab:28:8b:f8:21:63:6f:cf:99:a6:82:c4:e2: 5e:51:3c:3d:81:b9:61:0f:04:19:22:6c:a4:85:b0:24:3b:c8: 24:b5:73:93:32:24:d4:02:0b:9c:e5:0d:98:05:4d:cb:e8:90: 61:b2:07:ca:db:13:cc:f3:8d:c8:b5:ba:79:6b:7c:af:50:55: 7b:86:15:a5:6d:5f:a0:61:46:82:95:f9:9a:c1:df:59:7e:01: 89:32:c2:93:57:95:61:53:1d:1d:3a:d9:68:05:f8:a0:5b:9b: 91:c9:f9:ce:36:34:a2:e1:8d:e3:50:e0:5d:c0:4e:4c:24:79: a7:ef:54:a8 -----BEGIN CERTIFICATE----- MIIE1TCCA72gAwIBAgIUf3ownbPWjjXbNtLMat0kqJKZz/8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzNDRjQxODk4OTM2Q0I5QzU3M0RCMUVBQUI5NEM2RTY2 OTk1MUZENzAeFw0yNjEwMjAwMzQ0MzNaFw0yNzEwMTkwMzQ5MzNaMDMxMTAvBgNV BAMTKDg4QTUwMTczNjRBRTQ4RjdGNTVERjEyQkEyOUI3MUQ2OTk1OUZENEQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3BwKNyLn+eJLuHGORugxkxtfi T2faQbScZS9S/hNWqXnXF5SkhoSkrK2UU9WBBkHF3N78tbkBKPfBXP7a6mIAsQRF S6+bYjuT90Hb6JQozE1g3tyYjXQIXhov/mt7UMiMG6SzM/UkxIbzsrEHEUevqHo9 PSWwLi0ACXDXfnfThgIHreM1QRf/hFYS7PdtunakPTduXToNvMyNli/catyTm7Fs yE5ith5m7HO2CvsNZwOzTJweG7jjnKaVK7AuKZr1dKlj6UIGOuTQ6ik3LHUkDfRY bpdFut+kKHhmJaHS1jzIzdfdDurUz5g3Gq8zpTA16IBNBmpy4mrX670TkRl9AgMB AAGjggHfMIIB2zAdBgNVHQ4EFgQUiKUBc2SuSPf1XfEroptx1plZ/U0wHwYDVR0j BBgwFoAUw89BiYk2y5xXPbHqq5TG5mmVH9cwDgYDVR0PAQH/BAQDAgeAMGQGA1Ud HwRdMFswWaBXoFWGU3JzeW5jOi8va3JpbGwuNDcyNzIubmV0L3JlcG8vSFlFSE9T VC81L0MzQ0Y0MTg5ODkzNkNCOUM1NzNEQjFFQUFCOTRDNkU2Njk5NTFGRDcuY3Js MIGTBggrBgEFBQcBAQSBhjCBgzCBgAYIKwYBBQUHMAKGdHJzeW5jOi8vcnBraS1y cHMuYXJpbi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZjg1MGQwNjNlMDE4NTc1NWM5 MWJlM2Y5ZC83L0MzQ0Y0MTg5ODkzNkNCOUM1NzNEQjFFQUFCOTRDNkU2Njk5NTFG RDcuY2VyME8GCCsGAQUFBwELBEMwQTA/BggrBgEFBQcwC4YzcnN5bmM6Ly9rcmls bC40NzI3Mi5uZXQvcmVwby9IWUVIT1NULzUvQVMyMTUxOTEucm9hMBgGA1UdIAEB /wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwAq D2KAEIgwDQYJKoZIhvcNAQELBQADggEBAB6E60CTrMZd+mTMwfn6D1lFFtR4b29J lP3qAEmBlCH4snWQCMxYh+vk24ZlmIQ4WkbUfxfe6o5KhB59VL+bYcyg4m2SrotB MqHTMcjh8hPF0lb5ciJIzFmRYf/RUV+Di4bdT4iUWYdGsYhGZi5AfX0wWtMbgsZQ qzDADnSSoJjLzf7GqyiL+CFjb8+ZpoLE4l5RPD2BuWEPBBkibKSFsCQ7yCS1c5My JNQCC5zlDZgFTcvokGGyB8rbE8zzjci1unlrfK9QVXuGFaVtX6BhRoKV+ZrB31l+ AYkywpNXlWFTHR062WgF+KBbm5HJ+c42NKLhjeNQ4F3ATkwkeafvVKg= -----END CERTIFICATE-----Generated at Wed Oct 21 22:03:41 2026 by rpki-client