$ rpki-client -vvf krill.47272.net/repo/HYEHOST/5/AS200950.roa File: AS200950.roa (raw, json) Hash identifier: 1Md6Ibpj9QNECW7qzo96QIirEu2DPYDvNsytX/X+P+g= Subject key identifier: F8:56:B2:8F:A0:C8:B9:A2:66:EA:17:C8:47:C0:6B:88:A3:8F:73:54 Certificate issuer: /CN=C3CF41898936CB9C573DB1EAAB94C6E669951FD7 Certificate serial: 2F2D86A2D4C7EA5589E4E616028E69AEFF910663 Authority key identifier: C3:CF:41:89:89:36:CB:9C:57:3D:B1:EA:AB:94:C6:E6:69:95:1F:D7 Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer Subject info access: rsync://krill.47272.net/repo/HYEHOST/5/AS200950.roa Signing time: Wed 13 May 2026 11:25:25 +0000 ROA not before: Wed 13 May 2026 11:20:25 +0000 ROA not after: Wed 12 May 2027 11:25:25 +0000 asID: 200950 IP address blocks: 2a06:1281:70::/44 maxlen: 44 2a06:1281:70::/44 maxlen: 48 2a0f:6284:f00::/40 maxlen: 40 2a0f:6284:1200::/40 maxlen: 40 Validation: OK Signature path: rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.crl rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 14 May 2026 06:33:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2f:2d:86:a2:d4:c7:ea:55:89:e4:e6:16:02:8e:69:ae:ff:91:06:63 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C3CF41898936CB9C573DB1EAAB94C6E669951FD7 Validity Not Before: May 13 11:20:25 2026 GMT Not After : May 12 11:25:25 2027 GMT Subject: CN=F856B28FA0C8B9A266EA17C847C06B88A38F7354 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:e6:6e:c9:12:5d:f2:47:12:ef:2a:df:ae:02: 8a:04:d0:b1:15:e9:b5:94:59:aa:da:06:aa:87:e4: 1b:2f:8e:dd:6c:07:65:be:7b:be:a9:7d:b1:16:08: c6:c2:b1:b7:9f:8b:40:97:d4:ac:bd:4f:c4:09:d7: 9c:7e:19:41:01:90:3d:06:6f:39:86:f4:f2:54:5f: 52:b6:56:33:a2:38:32:82:7d:30:f5:0a:25:ab:ec: f8:b5:8c:cc:90:65:61:de:72:6b:f7:fe:53:50:e3: c8:11:c7:20:25:28:09:95:09:01:fb:a0:e8:ea:2b: d6:17:a2:42:bd:cf:a1:e1:57:f5:c2:9a:9e:91:d1: 2f:4d:21:23:45:2d:3d:c0:bf:95:16:40:f6:b1:09: ab:6e:57:98:98:84:27:64:10:f4:b2:f5:89:53:3b: 17:43:49:7b:26:ba:46:5e:79:03:3f:56:f7:55:78: 1a:38:9a:da:d2:d4:2b:5b:c9:c3:71:29:5a:db:eb: 8a:03:ac:d8:f0:56:73:53:21:b2:bd:08:fd:29:54: bd:20:90:65:75:9e:16:ce:49:3d:fd:a2:c1:d6:bd: 21:fd:a5:1e:fb:8f:ca:c3:72:75:cc:7c:7e:6b:a6: c5:bb:1c:b4:4e:4d:38:02:85:a5:2b:9e:5b:b9:53: 90:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:56:B2:8F:A0:C8:B9:A2:66:EA:17:C8:47:C0:6B:88:A3:8F:73:54 X509v3 Authority Key Identifier: keyid:C3:CF:41:89:89:36:CB:9C:57:3D:B1:EA:AB:94:C6:E6:69:95:1F:D7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer Subject Information Access: Signed Object - URI:rsync://krill.47272.net/repo/HYEHOST/5/AS200950.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a06:1281:70::/44 2a0f:6284:f00::/40 2a0f:6284:1200::/40 Signature Algorithm: sha256WithRSAEncryption 49:21:f5:d2:2c:7d:08:73:cb:34:cd:49:27:49:8d:4b:93:59: 46:43:46:ab:5d:5a:a0:a2:77:18:de:2f:0e:55:cb:01:57:8e: de:43:d7:af:93:a2:93:45:d7:3e:f4:ee:14:fb:d3:86:b1:4e: d4:dd:3b:de:cc:4c:65:79:4e:52:89:12:ee:2a:db:14:c3:be: 2b:21:33:1b:ae:98:7e:63:58:a2:35:52:ad:74:c3:c6:7c:60: d0:82:8f:d7:d4:fc:cc:32:c9:5e:ad:2c:1d:10:a9:31:eb:9c: 07:66:79:9d:1b:07:49:8d:cd:a6:1f:01:3e:5a:ed:6b:1f:a1: 6e:dc:bb:e7:e3:7c:bf:0d:2e:48:30:f7:07:47:78:69:a4:f0: b5:b4:ab:f4:5f:ab:0b:2e:ed:56:58:8a:10:0d:51:fc:1e:b7: 33:57:42:0c:83:fb:14:22:40:54:6e:9d:49:a2:e0:f9:ca:8e: 1f:e6:bc:89:0e:3b:23:80:d1:2d:c6:b1:06:57:b2:87:bf:13: c8:7d:83:d3:30:ec:d3:f1:1a:d1:c3:98:0f:b4:a3:90:b8:c2: 6c:fa:aa:51:f7:0e:fb:bc:23:ed:67:62:98:4d:46:82:4f:cb: 92:3a:37:b0:39:b2:6c:a1:25:e4:dd:82:4e:7a:fd:07:10:48: b3:79:9b:26 -----BEGIN CERTIFICATE----- MIIE5TCCA82gAwIBAgIULy2GotTH6lWJ5OYWAo5prv+RBmMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzNDRjQxODk4OTM2Q0I5QzU3M0RCMUVBQUI5NEM2RTY2 OTk1MUZENzAeFw0yNjA1MTMxMTIwMjVaFw0yNzA1MTIxMTI1MjVaMDMxMTAvBgNV BAMTKEY4NTZCMjhGQTBDOEI5QTI2NkVBMTdDODQ3QzA2Qjg4QTM4RjczNTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC75m7JEl3yRxLvKt+uAooE0LEV 6bWUWaraBqqH5Bsvjt1sB2W+e76pfbEWCMbCsbefi0CX1Ky9T8QJ15x+GUEBkD0G bzmG9PJUX1K2VjOiODKCfTD1CiWr7Pi1jMyQZWHecmv3/lNQ48gRxyAlKAmVCQH7 oOjqK9YXokK9z6HhV/XCmp6R0S9NISNFLT3Av5UWQPaxCatuV5iYhCdkEPSy9YlT OxdDSXsmukZeeQM/VvdVeBo4mtrS1CtbycNxKVrb64oDrNjwVnNTIbK9CP0pVL0g kGV1nhbOST39osHWvSH9pR77j8rDcnXMfH5rpsW7HLROTTgChaUrnlu5U5BfAgMB AAGjggHvMIIB6zAdBgNVHQ4EFgQU+Fayj6DIuaJm6hfIR8BriKOPc1QwHwYDVR0j BBgwFoAUw89BiYk2y5xXPbHqq5TG5mmVH9cwDgYDVR0PAQH/BAQDAgeAMGQGA1Ud HwRdMFswWaBXoFWGU3JzeW5jOi8va3JpbGwuNDcyNzIubmV0L3JlcG8vSFlFSE9T VC81L0MzQ0Y0MTg5ODkzNkNCOUM1NzNEQjFFQUFCOTRDNkU2Njk5NTFGRDcuY3Js MIGTBggrBgEFBQcBAQSBhjCBgzCBgAYIKwYBBQUHMAKGdHJzeW5jOi8vcnBraS1y cHMuYXJpbi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZjg1MGQwNjNlMDE4NTc1NWM5 MWJlM2Y5ZC83L0MzQ0Y0MTg5ODkzNkNCOUM1NzNEQjFFQUFCOTRDNkU2Njk5NTFG RDcuY2VyME8GCCsGAQUFBwELBEMwQTA/BggrBgEFBQcwC4YzcnN5bmM6Ly9rcmls bC40NzI3Mi5uZXQvcmVwby9IWUVIT1NULzUvQVMyMDA5NTAucm9hMBgGA1UdIAEB /wQOMAwwCgYIKwYBBQUHDgIwMgYIKwYBBQUHAQcBAf8EIzAhMB8EAgACMBkDBwQq BhKBAHADBgAqD2KEDwMGACoPYoQSMA0GCSqGSIb3DQEBCwUAA4IBAQBJIfXSLH0I c8s0zUknSY1Lk1lGQ0arXVqgoncY3i8OVcsBV47eQ9evk6KTRdc+9O4U+9OGsU7U 3TvezExleU5SiRLuKtsUw74rITMbrph+Y1iiNVKtdMPGfGDQgo/X1PzMMslerSwd EKkx65wHZnmdGwdJjc2mHwE+Wu1rH6Fu3Lvn43y/DS5IMPcHR3hppPC1tKv0X6sL Lu1WWIoQDVH8HrczV0IMg/sUIkBUbp1JouD5yo4f5ryJDjsjgNEtxrEGV7KHvxPI fYPTMOzT8RrRw5gPtKOQuMJs+qpR9w77vCPtZ2KYTUaCT8uSOjewObJsoSXk3YJO ev0HEEizeZsm -----END CERTIFICATE-----Generated at Wed May 13 16:08:40 2026 by rpki-client