$ rpki-client -vvvf krill.47272.net/repo/HYEHOST/5/AS197963.roa File: AS197963.roa (raw, json) Hash identifier: utZ5pZsErkUG9B1Bjaqau9rtQ6zwiAE4O1xIwIM43f8= Subject key identifier: FB:E2:A8:90:77:10:25:0F:BC:45:9E:7C:6C:D5:73:38:FE:6A:1C:D4 Certificate issuer: /CN=C3CF41898936CB9C573DB1EAAB94C6E669951FD7 Certificate serial: 2ABA991421A3466D9411292EFF63C2C6D25A0852 Authority key identifier: C3:CF:41:89:89:36:CB:9C:57:3D:B1:EA:AB:94:C6:E6:69:95:1F:D7 Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer Subject info access: rsync://krill.47272.net/repo/HYEHOST/5/AS197963.roa Signing time: Tue 18 Aug 2026 18:00:27 +0000 ROA not before: Tue 18 Aug 2026 17:55:27 +0000 ROA not after: Tue 17 Aug 2027 18:00:27 +0000 asID: 197963 IP address blocks: 2a0f:6284:500::/40 maxlen: 40 2a0f:6284:4215::/48 maxlen: 48 Validation: OK Signature path: rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.crl rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 05 Sep 2026 18:12:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2a:ba:99:14:21:a3:46:6d:94:11:29:2e:ff:63:c2:c6:d2:5a:08:52 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C3CF41898936CB9C573DB1EAAB94C6E669951FD7 Validity Not Before: Aug 18 17:55:27 2026 GMT Not After : Aug 17 18:00:27 2027 GMT Subject: CN=FBE2A8907710250FBC459E7C6CD57338FE6A1CD4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:11:b1:b1:b2:e2:8c:90:d9:d7:91:d0:9d:57: 50:58:dd:ec:80:e3:c0:83:65:98:40:2d:24:82:fb: 2c:92:52:e7:2f:af:32:3b:4b:9b:e6:f0:76:5a:58: 4a:a9:ff:44:83:78:77:10:c0:4e:76:57:cb:79:25: 09:3c:69:81:0e:d4:e5:92:30:5f:67:1c:c0:2b:7d: 67:e1:4e:18:a1:02:0f:ca:37:f0:b4:d2:2a:5e:d0: d3:98:08:67:73:be:69:40:ee:e1:02:a6:8a:be:b4: 48:81:b6:08:20:e8:46:68:e1:0f:16:e8:b6:75:24: 50:52:bd:8b:b4:f7:49:18:15:00:82:61:d3:3e:69: 2a:1f:fa:36:0a:f7:9d:49:2e:85:0c:d3:14:32:f5: f4:e8:7c:71:3a:05:ea:bb:d8:29:a1:12:dc:bb:1c: f4:73:5b:bf:51:0a:71:f5:4b:97:9e:4a:73:14:0b: cb:5a:52:f0:74:79:b3:c3:fe:59:f9:4b:14:bf:98: 04:1c:b7:b7:a3:c9:77:c4:9a:f3:12:b6:49:77:05: 7f:58:08:a9:0a:81:d5:73:33:a2:9e:b1:d5:6a:17: 07:04:14:30:ad:bd:cd:0a:0e:60:a0:31:cd:3c:05: ac:47:81:15:cc:a5:29:f5:4d:15:77:44:75:be:d3: ab:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:E2:A8:90:77:10:25:0F:BC:45:9E:7C:6C:D5:73:38:FE:6A:1C:D4 X509v3 Authority Key Identifier: keyid:C3:CF:41:89:89:36:CB:9C:57:3D:B1:EA:AB:94:C6:E6:69:95:1F:D7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer Subject Information Access: Signed Object - URI:rsync://krill.47272.net/repo/HYEHOST/5/AS197963.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0f:6284:500::/40 2a0f:6284:4215::/48 Signature Algorithm: sha256WithRSAEncryption 0f:a1:20:9a:3a:f2:db:5d:cd:ee:66:e2:79:bc:42:65:96:63: 6d:a9:53:bc:f1:f8:20:d1:5b:2c:6f:25:81:bc:e2:f9:ea:6e: 51:89:1e:1e:28:80:64:ec:4f:e0:ac:69:f7:17:18:e0:90:12: e6:ec:1c:ba:0f:ea:d6:49:6c:a8:eb:c0:58:97:69:59:7f:e7: 77:89:e4:8c:68:d2:af:9b:d3:87:1b:23:de:82:a2:29:c2:4e: 59:5c:69:e5:3e:1e:6c:2e:8b:bf:51:29:76:6a:25:75:68:35: 62:bf:ee:c1:0c:76:71:24:4f:0c:d1:aa:b8:a1:c3:c1:8d:0a: ac:13:f5:5d:d0:d2:fa:29:08:d8:1a:29:e5:a5:4e:24:e5:72: ac:d8:30:bc:ef:6e:57:71:04:47:38:bf:6a:ac:80:bc:eb:bf: 93:0c:17:f1:2b:78:50:7b:4c:77:1e:fa:9c:e0:ed:c3:43:d0: c0:4b:f3:d0:3c:65:2f:44:34:e9:ce:30:09:1e:90:43:48:bb: f8:e7:10:e2:1a:43:97:e8:6a:3a:38:8c:d0:00:fc:aa:7c:51: ad:f8:b5:b8:d0:d3:ee:db:a3:cd:bf:d3:36:c0:ea:0d:64:16: 59:63:8c:13:ae:fd:0d:64:64:de:c8:be:ed:11:20:c1:62:e0: cc:03:0c:89 -----BEGIN CERTIFICATE----- MIIE3TCCA8WgAwIBAgIUKrqZFCGjRm2UESku/2PCxtJaCFIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzNDRjQxODk4OTM2Q0I5QzU3M0RCMUVBQUI5NEM2RTY2 OTk1MUZENzAeFw0yNjA4MTgxNzU1MjdaFw0yNzA4MTcxODAwMjdaMDMxMTAvBgNV BAMTKEZCRTJBODkwNzcxMDI1MEZCQzQ1OUU3QzZDRDU3MzM4RkU2QTFDRDQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDdEbGxsuKMkNnXkdCdV1BY3eyA 48CDZZhALSSC+yySUucvrzI7S5vm8HZaWEqp/0SDeHcQwE52V8t5JQk8aYEO1OWS MF9nHMArfWfhThihAg/KN/C00ipe0NOYCGdzvmlA7uECpoq+tEiBtggg6EZo4Q8W 6LZ1JFBSvYu090kYFQCCYdM+aSof+jYK951JLoUM0xQy9fTofHE6Beq72CmhEty7 HPRzW79RCnH1S5eeSnMUC8taUvB0ebPD/ln5SxS/mAQct7ejyXfEmvMStkl3BX9Y CKkKgdVzM6KesdVqFwcEFDCtvc0KDmCgMc08BaxHgRXMpSn1TRV3RHW+06tlAgMB AAGjggHnMIIB4zAdBgNVHQ4EFgQU++KokHcQJQ+8RZ58bNVzOP5qHNQwHwYDVR0j BBgwFoAUw89BiYk2y5xXPbHqq5TG5mmVH9cwDgYDVR0PAQH/BAQDAgeAMGQGA1Ud HwRdMFswWaBXoFWGU3JzeW5jOi8va3JpbGwuNDcyNzIubmV0L3JlcG8vSFlFSE9T VC81L0MzQ0Y0MTg5ODkzNkNCOUM1NzNEQjFFQUFCOTRDNkU2Njk5NTFGRDcuY3Js MIGTBggrBgEFBQcBAQSBhjCBgzCBgAYIKwYBBQUHMAKGdHJzeW5jOi8vcnBraS1y cHMuYXJpbi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZjg1MGQwNjNlMDE4NTc1NWM5 MWJlM2Y5ZC83L0MzQ0Y0MTg5ODkzNkNCOUM1NzNEQjFFQUFCOTRDNkU2Njk5NTFG RDcuY2VyME8GCCsGAQUFBwELBEMwQTA/BggrBgEFBQcwC4YzcnN5bmM6Ly9rcmls bC40NzI3Mi5uZXQvcmVwby9IWUVIT1NULzUvQVMxOTc5NjMucm9hMBgGA1UdIAEB /wQOMAwwCgYIKwYBBQUHDgIwKgYIKwYBBQUHAQcBAf8EGzAZMBcEAgACMBEDBgAq D2KEBQMHACoPYoRCFTANBgkqhkiG9w0BAQsFAAOCAQEAD6Egmjry213N7mbiebxC ZZZjbalTvPH4INFbLG8lgbzi+epuUYkeHiiAZOxP4Kxp9xcY4JAS5uwcug/q1kls qOvAWJdpWX/nd4nkjGjSr5vThxsj3oKiKcJOWVxp5T4ebC6Lv1EpdmoldWg1Yr/u wQx2cSRPDNGquKHDwY0KrBP1XdDS+ikI2Bop5aVOJOVyrNgwvO9uV3EERzi/aqyA vOu/kwwX8St4UHtMdx76nODtw0PQwEvz0DxlL0Q06c4wCR6QQ0i7+OcQ4hpDl+hq OjiM0AD8qnxRrfi1uNDT7tujzb/TNsDqDWQWWWOME679DWRk3si+7REgwWLgzAMM iQ== -----END CERTIFICATE-----Generated at Sat Sep 5 06:31:07 2026 by rpki-client