$ rpki-client -vvf krill.47272.net/repo/HYEHOST/5/AS200201.roa File: AS200201.roa (raw, json) Hash identifier: 4VZRjX13nJZip3Lv+HBFlEo68kbzuVzob/fov67Mzzk= Subject key identifier: 59:A1:12:55:10:7A:9A:FD:72:98:BD:99:00:37:80:00:5D:56:35:74 Certificate issuer: /CN=C3CF41898936CB9C573DB1EAAB94C6E669951FD7 Certificate serial: 254204BD13B17A7AEC014C607E8A6707D719C156 Authority key identifier: C3:CF:41:89:89:36:CB:9C:57:3D:B1:EA:AB:94:C6:E6:69:95:1F:D7 Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer Subject info access: rsync://krill.47272.net/repo/HYEHOST/5/AS200201.roa Signing time: Sun 28 Jun 2026 18:55:38 +0000 ROA not before: Sun 28 Jun 2026 18:50:38 +0000 ROA not after: Sun 27 Jun 2027 18:55:38 +0000 asID: 200201 IP address blocks: 2a0a:6044:b900::/40 maxlen: 40 Validation: OK Signature path: rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.crl rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 11 Jul 2026 08:00:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 25:42:04:bd:13:b1:7a:7a:ec:01:4c:60:7e:8a:67:07:d7:19:c1:56 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C3CF41898936CB9C573DB1EAAB94C6E669951FD7 Validity Not Before: Jun 28 18:50:38 2026 GMT Not After : Jun 27 18:55:38 2027 GMT Subject: CN=59A11255107A9AFD7298BD99003780005D563574 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:82:f7:77:33:a0:db:a6:a5:86:ee:fa:f5:23: 42:95:06:93:64:b5:75:4e:c2:52:7a:c8:f2:6a:c5: 69:e6:bb:08:45:47:12:98:01:75:cb:c9:67:6d:35: 62:d7:2f:e4:da:4c:cf:5d:d7:bc:e7:54:f5:44:a1: ad:db:42:48:e6:80:8f:be:0b:8f:72:2e:90:16:c8: d5:dc:1f:bb:7f:6d:c5:fc:e3:00:c0:4b:b0:f5:b2: 56:55:54:eb:e4:8e:5b:c9:80:a6:87:d2:0a:bc:db: 40:08:8b:88:11:df:3b:7a:cb:c0:5b:f3:6a:10:db: 4b:86:01:55:e1:3f:02:47:80:bc:59:30:99:80:64: 1b:60:00:1b:c4:9f:6c:1c:b7:69:af:b6:60:12:9d: f9:c1:6b:dd:96:d9:c7:4e:21:f2:1b:0f:fb:98:d3: 85:ba:80:80:b9:63:87:f1:c2:7b:f3:37:c3:9d:4e: 79:e2:5d:00:94:2d:17:bc:06:36:6d:ea:c6:0d:19: 73:0f:a8:97:b2:43:cf:26:9b:6b:d1:bc:69:72:c4: ee:de:ef:db:65:03:b7:45:ed:c4:20:d2:36:42:6b: 86:92:4b:2f:0e:1a:cd:91:65:1e:a3:cf:5a:64:6f: 94:43:c7:30:9b:9e:bd:5d:42:42:92:34:ec:a8:12: 34:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:A1:12:55:10:7A:9A:FD:72:98:BD:99:00:37:80:00:5D:56:35:74 X509v3 Authority Key Identifier: keyid:C3:CF:41:89:89:36:CB:9C:57:3D:B1:EA:AB:94:C6:E6:69:95:1F:D7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer Subject Information Access: Signed Object - URI:rsync://krill.47272.net/repo/HYEHOST/5/AS200201.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0a:6044:b900::/40 Signature Algorithm: sha256WithRSAEncryption 0a:ef:f7:b5:e9:6d:39:2e:b3:1c:f0:2d:6c:67:a2:dd:ae:b7: 1d:b6:a4:37:68:96:26:2d:c3:87:d8:ea:47:e9:de:0c:39:02: 89:34:c0:3f:0a:7e:92:c8:00:53:db:15:96:2a:a1:35:4a:4c: eb:d5:66:17:2c:f3:2b:33:5d:84:5c:bf:bc:9b:3d:5e:5a:6a: 21:7c:de:62:b6:7c:63:b8:2a:d1:89:c7:3e:ae:51:6b:9b:0a: 46:d2:91:25:1f:50:95:00:c5:48:26:38:92:7e:72:7c:0e:d9: fc:5c:6a:3f:e2:d3:f2:8a:7c:6e:d2:6c:c7:91:98:5d:3d:d1: 37:ff:48:65:7c:85:8c:c7:23:f8:0e:b1:42:2c:2e:f4:60:da: b4:d6:d0:b6:41:47:f2:44:da:b5:50:76:7a:ae:2d:7e:20:86: e4:9f:49:da:30:ec:9e:66:0e:7a:c1:34:d8:ec:e7:b6:b2:ef: f4:42:78:cd:9e:d0:c3:6c:10:36:b1:77:b5:19:79:48:82:99: ac:ac:c2:3c:c0:7a:81:4f:21:a9:0f:ac:bd:70:d6:8e:c3:38: 5f:58:0e:ca:a4:06:83:81:d6:44:ef:fa:98:dd:e2:3b:63:0c: 84:e4:22:75:e0:2e:7e:63:00:f1:ac:b4:8c:a8:cc:f5:3a:59: 9f:df:46:ff -----BEGIN CERTIFICATE----- MIIE1DCCA7ygAwIBAgIUJUIEvROxenrsAUxgfopnB9cZwVYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzNDRjQxODk4OTM2Q0I5QzU3M0RCMUVBQUI5NEM2RTY2 OTk1MUZENzAeFw0yNjA2MjgxODUwMzhaFw0yNzA2MjcxODU1MzhaMDMxMTAvBgNV BAMTKDU5QTExMjU1MTA3QTlBRkQ3Mjk4QkQ5OTAwMzc4MDAwNUQ1NjM1NzQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0gvd3M6DbpqWG7vr1I0KVBpNk tXVOwlJ6yPJqxWnmuwhFRxKYAXXLyWdtNWLXL+TaTM9d17znVPVEoa3bQkjmgI++ C49yLpAWyNXcH7t/bcX84wDAS7D1slZVVOvkjlvJgKaH0gq820AIi4gR3zt6y8Bb 82oQ20uGAVXhPwJHgLxZMJmAZBtgABvEn2wct2mvtmASnfnBa92W2cdOIfIbD/uY 04W6gIC5Y4fxwnvzN8OdTnniXQCULRe8BjZt6sYNGXMPqJeyQ88mm2vRvGlyxO7e 79tlA7dF7cQg0jZCa4aSSy8OGs2RZR6jz1pkb5RDxzCbnr1dQkKSNOyoEjSBAgMB AAGjggHeMIIB2jAdBgNVHQ4EFgQUWaESVRB6mv1ymL2ZADeAAF1WNXQwHwYDVR0j BBgwFoAUw89BiYk2y5xXPbHqq5TG5mmVH9cwDgYDVR0PAQH/BAQDAgeAMGQGA1Ud HwRdMFswWaBXoFWGU3JzeW5jOi8va3JpbGwuNDcyNzIubmV0L3JlcG8vSFlFSE9T VC81L0MzQ0Y0MTg5ODkzNkNCOUM1NzNEQjFFQUFCOTRDNkU2Njk5NTFGRDcuY3Js MIGTBggrBgEFBQcBAQSBhjCBgzCBgAYIKwYBBQUHMAKGdHJzeW5jOi8vcnBraS1y cHMuYXJpbi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZjg1MGQwNjNlMDE4NTc1NWM5 MWJlM2Y5ZC83L0MzQ0Y0MTg5ODkzNkNCOUM1NzNEQjFFQUFCOTRDNkU2Njk5NTFG RDcuY2VyME8GCCsGAQUFBwELBEMwQTA/BggrBgEFBQcwC4YzcnN5bmM6Ly9rcmls bC40NzI3Mi5uZXQvcmVwby9IWUVIT1NULzUvQVMyMDAyMDEucm9hMBgGA1UdIAEB /wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgACMAgDBgAq CmBEuTANBgkqhkiG9w0BAQsFAAOCAQEACu/3teltOS6zHPAtbGei3a63HbakN2iW Ji3Dh9jqR+neDDkCiTTAPwp+ksgAU9sVliqhNUpM69VmFyzzKzNdhFy/vJs9Xlpq IXzeYrZ8Y7gq0YnHPq5Ra5sKRtKRJR9QlQDFSCY4kn5yfA7Z/FxqP+LT8op8btJs x5GYXT3RN/9IZXyFjMcj+A6xQiwu9GDatNbQtkFH8kTatVB2eq4tfiCG5J9J2jDs nmYOesE02OzntrLv9EJ4zZ7Qw2wQNrF3tRl5SIKZrKzCPMB6gU8hqQ+svXDWjsM4 X1gOyqQGg4HWRO/6mN3iO2MMhOQideAufmMA8ay0jKjM9TpZn99G/w== -----END CERTIFICATE-----Generated at Fri Jul 10 16:09:58 2026 by rpki-client