$ rpki-client -vvvf krill.47272.net/repo/HYEHOST/5/AS197959.roa File: AS197959.roa (raw, json) Hash identifier: WUx2q+HIjPhtfEXA6LUwjqnWpfipIMEoHHbPHNru1Gc= Subject key identifier: 8E:F0:5A:EC:DD:9F:7B:68:D9:99:BF:E9:DC:DD:C2:5A:D0:91:6D:76 Certificate issuer: /CN=C3CF41898936CB9C573DB1EAAB94C6E669951FD7 Certificate serial: 69054233429704DFBA215A3609AE4FA29F724F6C Authority key identifier: C3:CF:41:89:89:36:CB:9C:57:3D:B1:EA:AB:94:C6:E6:69:95:1F:D7 Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer Subject info access: rsync://krill.47272.net/repo/HYEHOST/5/AS197959.roa Signing time: Sun 04 Oct 2026 06:41:55 +0000 ROA not before: Sun 04 Oct 2026 06:36:55 +0000 ROA not after: Sun 03 Oct 2027 06:41:55 +0000 asID: 197959 IP address blocks: 2a0f:6281:8000::/33 maxlen: 33 Validation: OK Signature path: rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.crl rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 10 Oct 2026 14:11:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 69:05:42:33:42:97:04:df:ba:21:5a:36:09:ae:4f:a2:9f:72:4f:6c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C3CF41898936CB9C573DB1EAAB94C6E669951FD7 Validity Not Before: Oct 4 06:36:55 2026 GMT Not After : Oct 3 06:41:55 2027 GMT Subject: CN=8EF05AECDD9F7B68D999BFE9DCDDC25AD0916D76 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:93:b9:a6:e7:4a:27:d7:df:20:a4:54:96:e9: 34:29:5e:81:1e:27:04:58:7b:4a:dc:45:64:26:77: a4:44:50:9c:e1:7e:0d:58:96:3b:e2:0e:b4:9f:49: e5:fc:e9:00:5a:b4:0e:0f:aa:30:f7:07:84:23:85: d0:79:7d:f8:c6:6b:3c:9e:8b:6b:72:70:ef:63:2a: 7f:52:88:f5:c3:36:e0:82:35:db:53:0e:a8:aa:57: 1f:32:5c:4f:d4:32:a6:99:8f:12:67:21:15:61:18: 4b:17:54:1e:80:ec:92:8a:61:fc:25:d2:1f:34:d6: c0:3e:6d:de:97:2c:77:7d:da:bc:64:bb:5f:eb:6a: 54:fa:ae:d8:c9:1c:b6:a8:8a:36:b4:e7:49:9b:97: f0:7e:bb:07:d5:00:f2:f0:58:6f:84:cd:be:36:28: 2e:0d:b6:c4:b6:eb:d9:5f:e8:a0:49:1a:4a:2d:63: fe:b7:a5:62:17:66:e9:20:cf:cf:21:90:60:64:a7: 22:31:41:de:2b:08:39:64:fd:09:a1:67:ba:14:ff: 64:b3:67:ae:91:ba:59:16:6a:53:71:25:03:cc:33: af:41:0e:5c:43:29:25:af:6c:82:9f:e5:6f:b0:5e: 57:6d:15:f2:f6:19:b5:73:e5:d7:b0:d9:3c:bf:ea: 84:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:F0:5A:EC:DD:9F:7B:68:D9:99:BF:E9:DC:DD:C2:5A:D0:91:6D:76 X509v3 Authority Key Identifier: keyid:C3:CF:41:89:89:36:CB:9C:57:3D:B1:EA:AB:94:C6:E6:69:95:1F:D7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer Subject Information Access: Signed Object - URI:rsync://krill.47272.net/repo/HYEHOST/5/AS197959.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0f:6281:8000::/33 Signature Algorithm: sha256WithRSAEncryption 57:d0:fd:b1:22:a6:94:38:55:de:74:cc:a5:76:a3:bb:3b:e5: 6c:e0:c0:f6:1e:ae:d7:09:db:3e:58:53:f8:b4:d3:89:f6:a7: ea:96:cc:29:48:ff:11:14:d5:d1:63:28:4e:48:2d:00:78:af: 9f:63:8e:cd:ce:f9:eb:30:17:3d:e9:90:04:02:1d:13:99:de: 03:b5:84:90:fb:34:65:06:20:dd:77:62:5a:c3:ac:ab:d7:d2: 9f:f2:67:91:59:d8:8d:dc:e4:51:55:4b:4a:4b:3a:15:f4:a0: 97:be:ed:3f:68:69:35:99:62:85:44:4f:44:4b:1e:70:eb:a6: 56:eb:f6:70:ad:e5:d5:95:3b:3f:63:38:40:d6:14:a3:fc:18: c5:a3:0b:dc:3d:01:5f:a4:e3:32:19:fd:b9:06:fc:43:10:00: 1f:af:a2:15:d8:81:21:68:d4:40:e6:6e:e3:50:78:36:5f:72: a7:45:23:6c:52:eb:9d:05:67:6f:d1:44:e8:06:2d:3b:0d:09: 50:08:ff:49:2f:fb:2f:b5:b1:e4:a7:92:d8:85:ef:57:c9:04: 20:52:3c:3a:a5:ac:2c:6c:45:04:11:bc:44:88:52:0e:8f:5d: 30:51:6b:84:b9:89:5d:3e:e4:62:08:ae:55:af:35:0a:27:ae: 69:54:e1:3d -----BEGIN CERTIFICATE----- MIIE1DCCA7ygAwIBAgIUaQVCM0KXBN+6IVo2Ca5Pop9yT2wwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzNDRjQxODk4OTM2Q0I5QzU3M0RCMUVBQUI5NEM2RTY2 OTk1MUZENzAeFw0yNjEwMDQwNjM2NTVaFw0yNzEwMDMwNjQxNTVaMDMxMTAvBgNV BAMTKDhFRjA1QUVDREQ5RjdCNjhEOTk5QkZFOURDRERDMjVBRDA5MTZENzYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCnk7mm50on198gpFSW6TQpXoEe JwRYe0rcRWQmd6REUJzhfg1YljviDrSfSeX86QBatA4PqjD3B4QjhdB5ffjGazye i2tycO9jKn9SiPXDNuCCNdtTDqiqVx8yXE/UMqaZjxJnIRVhGEsXVB6A7JKKYfwl 0h801sA+bd6XLHd92rxku1/ralT6rtjJHLaoija050mbl/B+uwfVAPLwWG+Ezb42 KC4NtsS269lf6KBJGkotY/63pWIXZukgz88hkGBkpyIxQd4rCDlk/QmhZ7oU/2Sz Z66RulkWalNxJQPMM69BDlxDKSWvbIKf5W+wXldtFfL2GbVz5dew2Ty/6oSnAgMB AAGjggHeMIIB2jAdBgNVHQ4EFgQUjvBa7N2fe2jZmb/p3N3CWtCRbXYwHwYDVR0j BBgwFoAUw89BiYk2y5xXPbHqq5TG5mmVH9cwDgYDVR0PAQH/BAQDAgeAMGQGA1Ud HwRdMFswWaBXoFWGU3JzeW5jOi8va3JpbGwuNDcyNzIubmV0L3JlcG8vSFlFSE9T VC81L0MzQ0Y0MTg5ODkzNkNCOUM1NzNEQjFFQUFCOTRDNkU2Njk5NTFGRDcuY3Js MIGTBggrBgEFBQcBAQSBhjCBgzCBgAYIKwYBBQUHMAKGdHJzeW5jOi8vcnBraS1y cHMuYXJpbi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZjg1MGQwNjNlMDE4NTc1NWM5 MWJlM2Y5ZC83L0MzQ0Y0MTg5ODkzNkNCOUM1NzNEQjFFQUFCOTRDNkU2Njk5NTFG RDcuY2VyME8GCCsGAQUFBwELBEMwQTA/BggrBgEFBQcwC4YzcnN5bmM6Ly9rcmls bC40NzI3Mi5uZXQvcmVwby9IWUVIT1NULzUvQVMxOTc5NTkucm9hMBgGA1UdIAEB /wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgACMAgDBgcq D2KBgDANBgkqhkiG9w0BAQsFAAOCAQEAV9D9sSKmlDhV3nTMpXajuzvlbODA9h6u 1wnbPlhT+LTTifan6pbMKUj/ERTV0WMoTkgtAHivn2OOzc756zAXPemQBAIdE5ne A7WEkPs0ZQYg3XdiWsOsq9fSn/JnkVnYjdzkUVVLSks6FfSgl77tP2hpNZlihURP REsecOumVuv2cK3l1ZU7P2M4QNYUo/wYxaML3D0BX6TjMhn9uQb8QxAAH6+iFdiB IWjUQOZu41B4Nl9yp0UjbFLrnQVnb9FE6AYtOw0JUAj/SS/7L7Wx5KeS2IXvV8kE IFI8OqWsLGxFBBG8RIhSDo9dMFFrhLmJXT7kYgiuVa81CieuaVThPQ== -----END CERTIFICATE-----Generated at Sat Oct 10 05:44:01 2026 by rpki-client