$ rpki-client -vvf krill.47272.net/repo/HYEHOST/5/AS16509.roa File: AS16509.roa (raw, json) Hash identifier: k2cLrtOD/0tNwwShjsXrTN9JKzZpP06lLozMzByf+oE= Subject key identifier: 26:00:DB:96:1A:BD:7D:6B:9F:20:63:6D:2E:D7:E2:68:A7:59:A4:1E Certificate issuer: /CN=C3CF41898936CB9C573DB1EAAB94C6E669951FD7 Certificate serial: 6ECDD0170727BDD2070BF1B86C186C49C226D777 Authority key identifier: C3:CF:41:89:89:36:CB:9C:57:3D:B1:EA:AB:94:C6:E6:69:95:1F:D7 Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer Subject info access: rsync://krill.47272.net/repo/HYEHOST/5/AS16509.roa Signing time: Wed 29 Jul 2026 09:21:27 +0000 ROA not before: Wed 29 Jul 2026 09:16:27 +0000 ROA not after: Wed 28 Jul 2027 09:21:27 +0000 asID: 16509 IP address blocks: 2a05:dfc3:f740::/44 maxlen: 44 2a05:dfc3:f750::/44 maxlen: 48 2a0f:6280:1110::/48 maxlen: 48 2a0f:6284:4c00::/40 maxlen: 48 Validation: OK Signature path: rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.crl rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 15 Aug 2026 17:54:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6e:cd:d0:17:07:27:bd:d2:07:0b:f1:b8:6c:18:6c:49:c2:26:d7:77 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C3CF41898936CB9C573DB1EAAB94C6E669951FD7 Validity Not Before: Jul 29 09:16:27 2026 GMT Not After : Jul 28 09:21:27 2027 GMT Subject: CN=2600DB961ABD7D6B9F20636D2ED7E268A759A41E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:c8:c5:d6:44:c0:d8:2a:88:5e:3b:ba:88:bf: e4:8f:4b:79:2b:14:03:c4:29:64:3c:c9:3c:de:a0: 47:21:2b:af:81:01:61:9c:96:3f:c5:db:06:f9:14: b0:13:65:aa:6a:91:44:d1:1c:3e:57:40:f6:e5:35: f9:3c:e4:c9:c3:c5:10:83:5d:e0:9a:c2:75:e6:d3: 07:38:fc:b7:55:34:04:a0:c0:b4:67:09:58:11:c5: 6c:c0:f9:8d:06:8d:33:ca:c5:e7:d8:93:20:f8:99: 62:a9:78:66:fc:b3:57:7d:b0:86:20:82:9b:f7:0c: 14:e7:b7:5a:be:31:06:0b:f0:4b:af:50:41:3e:0f: 18:ce:87:8c:a3:e2:d9:d3:9c:f7:40:d7:b1:be:e0: e5:3c:c2:7b:a0:82:41:ba:49:2e:63:ea:fd:3a:5b: 0b:0a:48:3f:d7:23:50:4c:59:f4:9f:5f:43:87:0b: 0f:0c:be:bb:11:df:34:3f:9a:0e:3c:8b:07:4e:23: 93:4f:9f:42:aa:2b:b3:b4:b3:07:83:c5:12:7b:11: 09:31:90:34:88:0b:a9:2c:40:59:c4:56:71:93:4a: bf:9f:cf:a2:63:61:c5:3c:51:08:cb:d4:9c:65:db: 1e:3a:32:44:98:9f:9c:bb:84:b7:7a:58:e0:07:63: 37:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 26:00:DB:96:1A:BD:7D:6B:9F:20:63:6D:2E:D7:E2:68:A7:59:A4:1E X509v3 Authority Key Identifier: keyid:C3:CF:41:89:89:36:CB:9C:57:3D:B1:EA:AB:94:C6:E6:69:95:1F:D7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer Subject Information Access: Signed Object - URI:rsync://krill.47272.net/repo/HYEHOST/5/AS16509.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a05:dfc3:f740::/43 2a0f:6280:1110::/48 2a0f:6284:4c00::/40 Signature Algorithm: sha256WithRSAEncryption 01:ab:94:63:55:6a:dc:93:05:fc:b0:02:ce:22:4a:4f:b7:a4: 71:13:c4:c8:53:1a:26:70:af:ef:a7:62:e9:2a:3a:3d:de:28: f9:b7:4f:2d:6d:7d:ac:0e:28:cb:d8:59:78:a2:65:bd:5b:52: 77:0f:65:a1:4b:7d:fb:1b:e4:63:76:13:45:25:ab:10:6b:4b: 5e:06:e7:d1:6c:d8:06:bc:32:76:f6:2e:a5:71:20:50:f1:73: f6:a5:22:eb:06:c5:6d:68:ce:e3:a2:82:88:a6:0b:14:3f:66: 7b:22:e9:fa:fd:cd:64:8c:7b:79:19:d3:bc:4f:f6:80:0d:d8: 97:b7:57:78:f4:60:33:95:6a:6d:79:6d:f2:13:34:54:72:d1: 35:fe:e6:66:86:6a:2e:13:f4:a8:2d:54:3f:37:c7:43:a8:ef: eb:a9:a9:77:2f:d4:35:96:8c:74:0c:0f:41:8a:46:c9:6a:74: 03:89:18:2b:26:4e:49:31:e7:9a:a3:cc:af:11:16:78:8f:a8: 12:89:c9:00:44:c7:e1:80:34:79:ad:1b:69:95:16:5e:e2:8e: 60:34:80:75:a9:11:58:32:22:e4:90:7e:d2:fe:9b:27:6b:a5: 17:a8:d5:0c:ca:f0:6c:13:a8:9d:0a:75:fa:1d:0c:ed:2f:e8: 8a:b9:6d:2b -----BEGIN CERTIFICATE----- MIIE5TCCA82gAwIBAgIUbs3QFwcnvdIHC/G4bBhsScIm13cwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzNDRjQxODk4OTM2Q0I5QzU3M0RCMUVBQUI5NEM2RTY2 OTk1MUZENzAeFw0yNjA3MjkwOTE2MjdaFw0yNzA3MjgwOTIxMjdaMDMxMTAvBgNV BAMTKDI2MDBEQjk2MUFCRDdENkI5RjIwNjM2RDJFRDdFMjY4QTc1OUE0MUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCmyMXWRMDYKoheO7qIv+SPS3kr FAPEKWQ8yTzeoEchK6+BAWGclj/F2wb5FLATZapqkUTRHD5XQPblNfk85MnDxRCD XeCawnXm0wc4/LdVNASgwLRnCVgRxWzA+Y0GjTPKxefYkyD4mWKpeGb8s1d9sIYg gpv3DBTnt1q+MQYL8EuvUEE+DxjOh4yj4tnTnPdA17G+4OU8wnuggkG6SS5j6v06 WwsKSD/XI1BMWfSfX0OHCw8MvrsR3zQ/mg48iwdOI5NPn0KqK7O0sweDxRJ7EQkx kDSIC6ksQFnEVnGTSr+fz6JjYcU8UQjL1Jxl2x46MkSYn5y7hLd6WOAHYzdnAgMB AAGjggHvMIIB6zAdBgNVHQ4EFgQUJgDblhq9fWufIGNtLtfiaKdZpB4wHwYDVR0j BBgwFoAUw89BiYk2y5xXPbHqq5TG5mmVH9cwDgYDVR0PAQH/BAQDAgeAMGQGA1Ud HwRdMFswWaBXoFWGU3JzeW5jOi8va3JpbGwuNDcyNzIubmV0L3JlcG8vSFlFSE9T VC81L0MzQ0Y0MTg5ODkzNkNCOUM1NzNEQjFFQUFCOTRDNkU2Njk5NTFGRDcuY3Js MIGTBggrBgEFBQcBAQSBhjCBgzCBgAYIKwYBBQUHMAKGdHJzeW5jOi8vcnBraS1y cHMuYXJpbi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZjg1MGQwNjNlMDE4NTc1NWM5 MWJlM2Y5ZC83L0MzQ0Y0MTg5ODkzNkNCOUM1NzNEQjFFQUFCOTRDNkU2Njk5NTFG RDcuY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9rcmls bC40NzI3Mi5uZXQvcmVwby9IWUVIT1NULzUvQVMxNjUwOS5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAzBggrBgEFBQcBBwEB/wQkMCIwIAQCAAIwGgMHBSoF 38P3QAMHACoPYoAREAMGACoPYoRMMA0GCSqGSIb3DQEBCwUAA4IBAQABq5RjVWrc kwX8sALOIkpPt6RxE8TIUxomcK/vp2LpKjo93ij5t08tbX2sDijL2Fl4omW9W1J3 D2WhS337G+RjdhNFJasQa0teBufRbNgGvDJ29i6lcSBQ8XP2pSLrBsVtaM7jooKI pgsUP2Z7Iun6/c1kjHt5GdO8T/aADdiXt1d49GAzlWpteW3yEzRUctE1/uZmhmou E/SoLVQ/N8dDqO/rqal3L9Q1lox0DA9BikbJanQDiRgrJk5JMeeao8yvERZ4j6gS ickARMfhgDR5rRtplRZe4o5gNIB1qRFYMiLkkH7S/psna6UXqNUMyvBsE6idCnX6 HQztL+iKuW0r -----END CERTIFICATE-----Generated at Sat Aug 15 08:27:20 2026 by rpki-client