$ rpki-client -vvf krill.47272.net/repo/HYEHOST/5/AS197963.roa File: AS197963.roa (raw, json) Hash identifier: xMnm5ZIRiVGjQQXmO0ZTL3bwHtYqulvhc1fu5ld8Wbs= Subject key identifier: 8A:B9:94:C9:71:E4:DC:3D:4A:54:A6:C1:F4:83:DA:9B:E4:C6:6D:7A Certificate issuer: /CN=C3CF41898936CB9C573DB1EAAB94C6E669951FD7 Certificate serial: 0F750D4FB762018A1F8010084BB3F4CF7353219B Authority key identifier: C3:CF:41:89:89:36:CB:9C:57:3D:B1:EA:AB:94:C6:E6:69:95:1F:D7 Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer Subject info access: rsync://krill.47272.net/repo/HYEHOST/5/AS197963.roa Signing time: Sun 28 Jun 2026 18:57:37 +0000 ROA not before: Sun 28 Jun 2026 18:52:37 +0000 ROA not after: Sun 27 Jun 2027 18:57:37 +0000 asID: 197963 IP address blocks: 2a0f:6284::/48 maxlen: 48 2a0f:6284:500::/40 maxlen: 40 2a0f:6284:4215::/48 maxlen: 48 Validation: OK Signature path: rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.crl rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 22 Jul 2026 14:18:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0f:75:0d:4f:b7:62:01:8a:1f:80:10:08:4b:b3:f4:cf:73:53:21:9b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C3CF41898936CB9C573DB1EAAB94C6E669951FD7 Validity Not Before: Jun 28 18:52:37 2026 GMT Not After : Jun 27 18:57:37 2027 GMT Subject: CN=8AB994C971E4DC3D4A54A6C1F483DA9BE4C66D7A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:51:18:aa:d9:b6:50:a6:ab:3a:30:25:08:87: f2:58:0e:bd:b8:77:82:4c:1b:cf:aa:0f:f7:e8:55: be:3f:79:33:5c:68:66:fb:df:0b:30:24:68:4a:42: 30:41:88:29:f7:6d:55:b6:b3:08:36:62:87:3f:d9: 0e:eb:5d:dc:7a:50:9c:5f:94:13:9d:bf:b2:25:b9: 59:24:c2:13:ab:33:8d:1e:fc:e3:a1:5d:41:6c:7a: f3:62:e1:9f:98:f6:d8:25:35:2a:7f:c3:84:28:10: 08:fe:6d:a5:64:d3:0a:4e:a5:63:fd:68:45:da:f9: 99:92:9b:ea:cb:ba:09:96:85:e7:3d:54:15:04:78: e1:4c:6d:6e:06:d3:c2:20:ad:e7:d5:8b:ee:ef:c0: 75:94:46:79:01:cf:38:ad:19:64:a6:43:7a:d2:86: a0:00:84:9e:0a:97:45:39:b3:0b:ec:2e:9a:9d:94: 13:13:f5:55:8b:c1:40:20:40:f8:85:9f:db:a3:d8: 96:b9:8b:86:ec:a3:60:4f:d6:d7:ae:ea:81:74:4e: a2:c5:32:cd:86:ec:85:d1:ea:f9:7f:5a:73:1f:87: c2:b8:32:5a:7a:77:e4:53:b9:e5:07:b5:48:aa:b4: f6:89:7f:20:1f:42:d1:23:0f:10:fa:55:13:b7:a7: 6a:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:B9:94:C9:71:E4:DC:3D:4A:54:A6:C1:F4:83:DA:9B:E4:C6:6D:7A X509v3 Authority Key Identifier: keyid:C3:CF:41:89:89:36:CB:9C:57:3D:B1:EA:AB:94:C6:E6:69:95:1F:D7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer Subject Information Access: Signed Object - URI:rsync://krill.47272.net/repo/HYEHOST/5/AS197963.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0f:6284::/48 2a0f:6284:500::/40 2a0f:6284:4215::/48 Signature Algorithm: sha256WithRSAEncryption 18:27:bb:8a:74:44:7c:86:f4:4a:0d:aa:cb:82:fd:1b:ef:9b: 00:31:fe:14:d7:e4:2d:d2:ff:75:53:93:78:1b:3b:56:00:65: 9c:14:7c:b6:f1:f5:b0:29:c9:a0:d6:25:57:ea:4e:fb:27:fe: b3:67:f3:1d:32:d5:52:ce:80:60:bf:c2:68:04:a5:1b:cc:4f: e5:7a:a9:7f:48:2d:67:2a:9c:90:72:84:ad:b7:05:6f:4a:e7: 2b:f8:0c:27:7d:08:1a:22:7a:89:55:0f:c4:f4:66:ac:00:bf: 27:41:29:d7:36:0c:9a:90:a9:71:57:1f:60:96:76:bb:6f:e3: bc:6f:82:8a:37:ee:bb:f7:25:14:f0:dc:17:0d:50:7f:f6:b1: b6:a0:53:f5:37:cf:6a:63:15:91:27:a3:9f:0f:d3:6a:94:99: 37:2e:7a:97:aa:a6:47:85:10:53:3e:4b:69:fa:b4:a5:0d:10: c2:4c:ab:58:77:5c:63:e9:26:52:30:8c:23:e8:18:13:be:a9: 9c:85:a6:84:35:7b:d1:7a:ab:a0:28:18:c6:2e:f3:4c:e5:d1: 14:5a:25:67:2d:e6:b2:8a:f0:66:2c:a6:23:8e:2a:ec:dc:24: 35:4a:27:43:ce:9f:49:d2:8f:8c:6a:6c:88:7c:49:4b:37:fb: 5d:fb:82:6b -----BEGIN CERTIFICATE----- MIIE5jCCA86gAwIBAgIUD3UNT7diAYofgBAIS7P0z3NTIZswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzNDRjQxODk4OTM2Q0I5QzU3M0RCMUVBQUI5NEM2RTY2 OTk1MUZENzAeFw0yNjA2MjgxODUyMzdaFw0yNzA2MjcxODU3MzdaMDMxMTAvBgNV BAMTKDhBQjk5NEM5NzFFNERDM0Q0QTU0QTZDMUY0ODNEQTlCRTRDNjZEN0EwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCSURiq2bZQpqs6MCUIh/JYDr24 d4JMG8+qD/foVb4/eTNcaGb73wswJGhKQjBBiCn3bVW2swg2Yoc/2Q7rXdx6UJxf lBOdv7IluVkkwhOrM40e/OOhXUFsevNi4Z+Y9tglNSp/w4QoEAj+baVk0wpOpWP9 aEXa+ZmSm+rLugmWhec9VBUEeOFMbW4G08IgrefVi+7vwHWURnkBzzitGWSmQ3rS hqAAhJ4Kl0U5swvsLpqdlBMT9VWLwUAgQPiFn9uj2Ja5i4bso2BP1teu6oF0TqLF Ms2G7IXR6vl/WnMfh8K4Mlp6d+RTueUHtUiqtPaJfyAfQtEjDxD6VRO3p2rhAgMB AAGjggHwMIIB7DAdBgNVHQ4EFgQUirmUyXHk3D1KVKbB9IPam+TGbXowHwYDVR0j BBgwFoAUw89BiYk2y5xXPbHqq5TG5mmVH9cwDgYDVR0PAQH/BAQDAgeAMGQGA1Ud HwRdMFswWaBXoFWGU3JzeW5jOi8va3JpbGwuNDcyNzIubmV0L3JlcG8vSFlFSE9T VC81L0MzQ0Y0MTg5ODkzNkNCOUM1NzNEQjFFQUFCOTRDNkU2Njk5NTFGRDcuY3Js MIGTBggrBgEFBQcBAQSBhjCBgzCBgAYIKwYBBQUHMAKGdHJzeW5jOi8vcnBraS1y cHMuYXJpbi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZjg1MGQwNjNlMDE4NTc1NWM5 MWJlM2Y5ZC83L0MzQ0Y0MTg5ODkzNkNCOUM1NzNEQjFFQUFCOTRDNkU2Njk5NTFG RDcuY2VyME8GCCsGAQUFBwELBEMwQTA/BggrBgEFBQcwC4YzcnN5bmM6Ly9rcmls bC40NzI3Mi5uZXQvcmVwby9IWUVIT1NULzUvQVMxOTc5NjMucm9hMBgGA1UdIAEB /wQOMAwwCgYIKwYBBQUHDgIwMwYIKwYBBQUHAQcBAf8EJDAiMCAEAgACMBoDBwAq D2KEAAADBgAqD2KEBQMHACoPYoRCFTANBgkqhkiG9w0BAQsFAAOCAQEAGCe7inRE fIb0Sg2qy4L9G++bADH+FNfkLdL/dVOTeBs7VgBlnBR8tvH1sCnJoNYlV+pO+yf+ s2fzHTLVUs6AYL/CaASlG8xP5Xqpf0gtZyqckHKErbcFb0rnK/gMJ30IGiJ6iVUP xPRmrAC/J0Ep1zYMmpCpcVcfYJZ2u2/jvG+Cijfuu/clFPDcFw1Qf/axtqBT9TfP amMVkSejnw/TapSZNy56l6qmR4UQUz5Lafq0pQ0QwkyrWHdcY+kmUjCMI+gYE76p nIWmhDV70XqroCgYxi7zTOXRFFolZy3msorwZiymI44q7NwkNUonQ86fSdKPjGps iHxJSzf7XfuCaw== -----END CERTIFICATE-----Generated at Tue Jul 21 20:30:39 2026 by rpki-client