$ rpki-client -vvf krill.47272.net/repo/HYEHOST/5/AS200790.roa File: AS200790.roa (raw, json) Hash identifier: wnl+SEG+40J9gN+TmcGEZxOWtaCJYwKgpONGzBeBvPM= Subject key identifier: 76:16:BF:54:61:4D:43:32:C2:A3:F6:2A:D3:08:59:C4:7C:67:65:DE Certificate issuer: /CN=C3CF41898936CB9C573DB1EAAB94C6E669951FD7 Certificate serial: 492C5AEDF9391C0F7A841FB3D0A78D91F0AF93B0 Authority key identifier: C3:CF:41:89:89:36:CB:9C:57:3D:B1:EA:AB:94:C6:E6:69:95:1F:D7 Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer Subject info access: rsync://krill.47272.net/repo/HYEHOST/5/AS200790.roa Signing time: Sun 22 Feb 2026 18:50:54 +0000 ROA not before: Sun 22 Feb 2026 18:45:54 +0000 ROA not after: Sun 21 Feb 2027 18:50:54 +0000 asID: 200790 IP address blocks: 2a0f:6284:8000::/40 maxlen: 48 Validation: OK Signature path: rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.crl rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 23 Feb 2026 19:39:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 49:2c:5a:ed:f9:39:1c:0f:7a:84:1f:b3:d0:a7:8d:91:f0:af:93:b0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C3CF41898936CB9C573DB1EAAB94C6E669951FD7 Validity Not Before: Feb 22 18:45:54 2026 GMT Not After : Feb 21 18:50:54 2027 GMT Subject: CN=7616BF54614D4332C2A3F62AD30859C47C6765DE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:31:8a:5f:89:ef:c4:0d:5c:0e:60:0a:2d:6f: f8:4c:42:a9:8b:a7:01:63:44:86:55:d4:07:bf:d5: bf:b3:fb:54:38:4f:11:08:48:ac:42:ad:6f:d6:2e: 58:d7:61:8c:52:4c:e4:12:71:a7:47:00:c6:45:ea: 5e:49:a7:8a:45:80:78:9f:b8:23:95:c4:49:bb:ec: e9:ca:2b:4c:34:77:c9:6d:06:e4:c2:7f:68:4b:4c: ba:75:71:e9:55:05:76:93:6e:8a:37:f2:a7:fc:23: 12:90:e1:45:ee:8a:88:79:f2:f8:da:6b:1b:4b:dc: c3:2d:61:d8:56:65:5d:d3:d0:3e:53:33:0d:b8:32: c7:7a:ba:af:af:95:64:de:e0:e5:f3:72:c4:c3:bd: 93:cc:ea:f2:6a:5e:4d:d9:6f:8a:ed:09:2f:c8:fe: eb:25:5a:09:b9:0d:e5:40:5f:ad:d2:19:3a:9d:e9: 2e:de:cf:ab:f7:f4:8d:7a:96:6a:89:7f:1a:1d:32: 59:20:b6:0c:6d:d0:c3:dd:5a:80:00:fc:33:2e:7f: 4a:7b:0f:21:f5:a8:95:5f:95:ba:b1:98:5b:ed:4f: e5:33:af:7b:c0:11:db:5c:49:59:3c:3d:b1:01:87: 9c:ba:e1:10:a5:eb:6e:2b:58:c9:03:b3:53:9a:c9: a8:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:16:BF:54:61:4D:43:32:C2:A3:F6:2A:D3:08:59:C4:7C:67:65:DE X509v3 Authority Key Identifier: keyid:C3:CF:41:89:89:36:CB:9C:57:3D:B1:EA:AB:94:C6:E6:69:95:1F:D7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer Subject Information Access: Signed Object - URI:rsync://krill.47272.net/repo/HYEHOST/5/AS200790.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0f:6284:8000::/40 Signature Algorithm: sha256WithRSAEncryption 07:9d:45:69:00:05:4d:3e:60:e8:57:bb:3f:9e:01:80:01:9c: 79:ee:52:8e:e9:e3:20:66:a5:91:4f:8c:b5:86:91:08:3a:af: 34:ef:4c:be:40:ff:5c:ce:d4:4f:32:95:47:77:bd:7c:75:d0: 13:a3:2e:25:40:86:53:36:f1:3e:e3:57:e9:ba:af:1c:fb:a5: c0:ca:84:5a:5a:8f:d2:1a:ae:6a:42:6d:b8:30:06:9b:a4:18: ce:ed:c6:01:33:e7:c6:e5:48:91:48:fe:aa:99:58:a6:54:6f: 32:5e:58:5c:40:d5:91:8c:77:4f:21:c6:11:a0:de:30:eb:aa: 86:5d:64:fe:80:20:e8:8b:fb:11:3f:70:7e:f8:30:f0:4f:26: c7:32:09:08:05:85:59:70:98:ca:bc:df:cb:ad:e6:a9:25:d4: e9:90:1b:84:42:d6:55:18:8e:d8:78:ef:d1:28:b7:47:eb:e6: 5c:bc:af:66:7f:69:a3:da:84:86:82:51:82:ab:dd:ef:49:0a: 6a:68:9b:64:d3:c4:ec:9f:84:2c:14:02:28:0f:92:4e:26:84: fe:2d:f3:db:48:98:b6:e2:a6:78:9b:66:8b:87:0a:1b:5c:38: 3d:2a:da:80:25:9d:5a:04:e2:5c:b0:9f:67:3c:ce:b6:2e:47: 21:68:fb:d0 -----BEGIN CERTIFICATE----- MIIE1DCCA7ygAwIBAgIUSSxa7fk5HA96hB+z0KeNkfCvk7AwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzNDRjQxODk4OTM2Q0I5QzU3M0RCMUVBQUI5NEM2RTY2 OTk1MUZENzAeFw0yNjAyMjIxODQ1NTRaFw0yNzAyMjExODUwNTRaMDMxMTAvBgNV BAMTKDc2MTZCRjU0NjE0RDQzMzJDMkEzRjYyQUQzMDg1OUM0N0M2NzY1REUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCoMYpfie/EDVwOYAotb/hMQqmL pwFjRIZV1Ae/1b+z+1Q4TxEISKxCrW/WLljXYYxSTOQScadHAMZF6l5Jp4pFgHif uCOVxEm77OnKK0w0d8ltBuTCf2hLTLp1celVBXaTboo38qf8IxKQ4UXuioh58vja axtL3MMtYdhWZV3T0D5TMw24Msd6uq+vlWTe4OXzcsTDvZPM6vJqXk3Zb4rtCS/I /uslWgm5DeVAX63SGTqd6S7ez6v39I16lmqJfxodMlkgtgxt0MPdWoAA/DMuf0p7 DyH1qJVflbqxmFvtT+Uzr3vAEdtcSVk8PbEBh5y64RCl624rWMkDs1OayahRAgMB AAGjggHeMIIB2jAdBgNVHQ4EFgQUdha/VGFNQzLCo/Yq0whZxHxnZd4wHwYDVR0j BBgwFoAUw89BiYk2y5xXPbHqq5TG5mmVH9cwDgYDVR0PAQH/BAQDAgeAMGQGA1Ud HwRdMFswWaBXoFWGU3JzeW5jOi8va3JpbGwuNDcyNzIubmV0L3JlcG8vSFlFSE9T VC81L0MzQ0Y0MTg5ODkzNkNCOUM1NzNEQjFFQUFCOTRDNkU2Njk5NTFGRDcuY3Js MIGTBggrBgEFBQcBAQSBhjCBgzCBgAYIKwYBBQUHMAKGdHJzeW5jOi8vcnBraS1y cHMuYXJpbi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZjg1MGQwNjNlMDE4NTc1NWM5 MWJlM2Y5ZC83L0MzQ0Y0MTg5ODkzNkNCOUM1NzNEQjFFQUFCOTRDNkU2Njk5NTFG RDcuY2VyME8GCCsGAQUFBwELBEMwQTA/BggrBgEFBQcwC4YzcnN5bmM6Ly9rcmls bC40NzI3Mi5uZXQvcmVwby9IWUVIT1NULzUvQVMyMDA3OTAucm9hMBgGA1UdIAEB /wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgACMAgDBgAq D2KEgDANBgkqhkiG9w0BAQsFAAOCAQEAB51FaQAFTT5g6Fe7P54BgAGcee5Sjunj IGalkU+MtYaRCDqvNO9MvkD/XM7UTzKVR3e9fHXQE6MuJUCGUzbxPuNX6bqvHPul wMqEWlqP0hquakJtuDAGm6QYzu3GATPnxuVIkUj+qplYplRvMl5YXEDVkYx3TyHG EaDeMOuqhl1k/oAg6Iv7ET9wfvgw8E8mxzIJCAWFWXCYyrzfy63mqSXU6ZAbhELW VRiO2Hjv0Si3R+vmXLyvZn9po9qEhoJRgqvd70kKamibZNPE7J+ELBQCKA+STiaE /i3z20iYtuKmeJtmi4cKG1w4PSragCWdWgTiXLCfZzzOti5HIWj70A== -----END CERTIFICATE-----Generated at Mon Feb 23 06:29:14 2026 by rpki-client