$ rpki-client -vvf krill.47272.net/repo/HYEHOST/5/AS201269.roa File: AS201269.roa (raw, json) Hash identifier: OoTjxtJlpSWqEhfrfMewnJgZbrRHt0kBIVavbnrh1CM= Subject key identifier: 4F:DB:CF:7D:79:BC:B2:7C:A8:7B:64:15:3E:56:CC:C7:A1:01:F7:68 Certificate issuer: /CN=C3CF41898936CB9C573DB1EAAB94C6E669951FD7 Certificate serial: 4C73323ECEEFBB00F8E74BEE9325F1F24D068F3D Authority key identifier: C3:CF:41:89:89:36:CB:9C:57:3D:B1:EA:AB:94:C6:E6:69:95:1F:D7 Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer Subject info access: rsync://krill.47272.net/repo/HYEHOST/5/AS201269.roa Signing time: Mon 16 Feb 2026 14:16:08 +0000 ROA not before: Mon 16 Feb 2026 14:11:08 +0000 ROA not after: Mon 15 Feb 2027 14:16:08 +0000 asID: 201269 IP address blocks: 2a0f:6282:1000::/36 maxlen: 48 Validation: OK Signature path: rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.crl rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 23 Feb 2026 19:39:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4c:73:32:3e:ce:ef:bb:00:f8:e7:4b:ee:93:25:f1:f2:4d:06:8f:3d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C3CF41898936CB9C573DB1EAAB94C6E669951FD7 Validity Not Before: Feb 16 14:11:08 2026 GMT Not After : Feb 15 14:16:08 2027 GMT Subject: CN=4FDBCF7D79BCB27CA87B64153E56CCC7A101F768 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:9f:8d:5c:a5:63:ac:05:55:02:c7:83:32:98: 7d:db:e9:94:a1:3e:8a:3f:a9:ca:a7:ec:76:ea:bb: fd:80:d7:60:73:97:19:4f:d7:78:e6:ac:25:b0:61: cd:c8:33:b5:a7:b3:d7:00:0a:fb:af:ee:0d:17:7e: 3d:13:f5:f4:ba:c3:84:fb:ae:d6:8d:5a:36:73:1a: 01:85:98:fd:35:a7:c5:de:42:6b:73:88:03:91:cc: e0:46:55:9e:20:5d:1b:bd:b3:2b:42:2c:b8:3b:b1: c1:c6:89:94:5a:7b:33:62:3e:f5:18:da:ed:23:23: 47:50:b6:77:4d:24:68:89:ec:75:0e:2b:2e:6f:d0: d9:66:69:d7:8a:49:98:f7:c7:1a:ad:fd:37:28:46: 26:f8:5b:71:4c:8e:d2:ae:fb:4a:fb:c4:2d:c5:68: 90:e9:93:be:95:4e:73:6c:9a:f9:23:25:0c:c8:88: 09:ef:da:bc:23:12:9b:f8:48:ba:c7:e7:33:f9:b0: 7d:97:66:6b:84:2e:d3:5d:fd:e6:f2:68:30:6d:ea: 95:ca:fc:75:f2:f9:95:6d:1b:12:0b:78:65:40:a3: f1:01:f1:a1:0d:46:52:f9:a9:fb:ca:4d:f9:79:4b: 30:7a:c6:2e:d3:b5:59:e7:a3:5a:c4:d5:97:64:f0: 82:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:DB:CF:7D:79:BC:B2:7C:A8:7B:64:15:3E:56:CC:C7:A1:01:F7:68 X509v3 Authority Key Identifier: keyid:C3:CF:41:89:89:36:CB:9C:57:3D:B1:EA:AB:94:C6:E6:69:95:1F:D7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer Subject Information Access: Signed Object - URI:rsync://krill.47272.net/repo/HYEHOST/5/AS201269.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0f:6282:1000::/36 Signature Algorithm: sha256WithRSAEncryption 5d:d9:61:57:48:8d:ff:41:c3:e2:9b:0e:f0:a2:70:d6:89:1d: 17:f5:17:60:05:5c:05:76:46:d1:be:fe:74:b6:56:fa:e6:94: ed:c8:65:dd:9d:70:ca:99:70:1c:57:19:4c:25:b4:0a:31:2c: c4:dd:63:ca:d6:d1:12:dd:90:75:4a:c0:51:5e:cc:24:3d:0b: 16:f4:e6:1f:80:a8:69:59:82:a9:c9:bb:57:e2:b8:72:6c:27: a0:cd:07:19:97:12:02:2f:0d:27:e5:1e:69:7b:82:69:a5:cc: b6:bb:d4:f1:9f:ed:17:07:6a:a6:e3:9a:02:da:e0:32:31:d7: 28:3c:4c:34:d0:44:8a:cf:c6:55:f5:09:ac:aa:5f:1d:21:58: 2f:de:af:61:7b:ec:1b:22:84:5e:4f:04:cb:51:3d:42:7b:5f: 3a:c1:3c:d9:4a:62:dd:08:35:42:2e:f4:71:22:15:fb:0d:6a: 00:97:1a:6d:4e:8b:d1:eb:c4:7e:53:3c:6f:3c:b7:2d:0b:25: 3a:fb:5c:0e:b3:a3:c4:99:cb:8a:35:42:ef:aa:c6:a2:11:cb: 3d:98:67:41:c1:bd:e7:ce:32:aa:12:d1:e7:39:81:b6:97:18: ac:65:6d:e8:2b:92:25:fa:1f:0d:f8:ed:fa:2f:01:e9:e8:a3: c1:a1:03:19 -----BEGIN CERTIFICATE----- MIIE1DCCA7ygAwIBAgIUTHMyPs7vuwD450vukyXx8k0Gjz0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzNDRjQxODk4OTM2Q0I5QzU3M0RCMUVBQUI5NEM2RTY2 OTk1MUZENzAeFw0yNjAyMTYxNDExMDhaFw0yNzAyMTUxNDE2MDhaMDMxMTAvBgNV BAMTKDRGREJDRjdENzlCQ0IyN0NBODdCNjQxNTNFNTZDQ0M3QTEwMUY3NjgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCMn41cpWOsBVUCx4MymH3b6ZSh Poo/qcqn7Hbqu/2A12BzlxlP13jmrCWwYc3IM7Wns9cACvuv7g0Xfj0T9fS6w4T7 rtaNWjZzGgGFmP01p8XeQmtziAORzOBGVZ4gXRu9sytCLLg7scHGiZRaezNiPvUY 2u0jI0dQtndNJGiJ7HUOKy5v0NlmadeKSZj3xxqt/TcoRib4W3FMjtKu+0r7xC3F aJDpk76VTnNsmvkjJQzIiAnv2rwjEpv4SLrH5zP5sH2XZmuELtNd/ebyaDBt6pXK /HXy+ZVtGxILeGVAo/EB8aENRlL5qfvKTfl5SzB6xi7TtVnno1rE1Zdk8ILfAgMB AAGjggHeMIIB2jAdBgNVHQ4EFgQUT9vPfXm8snyoe2QVPlbMx6EB92gwHwYDVR0j BBgwFoAUw89BiYk2y5xXPbHqq5TG5mmVH9cwDgYDVR0PAQH/BAQDAgeAMGQGA1Ud HwRdMFswWaBXoFWGU3JzeW5jOi8va3JpbGwuNDcyNzIubmV0L3JlcG8vSFlFSE9T VC81L0MzQ0Y0MTg5ODkzNkNCOUM1NzNEQjFFQUFCOTRDNkU2Njk5NTFGRDcuY3Js MIGTBggrBgEFBQcBAQSBhjCBgzCBgAYIKwYBBQUHMAKGdHJzeW5jOi8vcnBraS1y cHMuYXJpbi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZjg1MGQwNjNlMDE4NTc1NWM5 MWJlM2Y5ZC83L0MzQ0Y0MTg5ODkzNkNCOUM1NzNEQjFFQUFCOTRDNkU2Njk5NTFG RDcuY2VyME8GCCsGAQUFBwELBEMwQTA/BggrBgEFBQcwC4YzcnN5bmM6Ly9rcmls bC40NzI3Mi5uZXQvcmVwby9IWUVIT1NULzUvQVMyMDEyNjkucm9hMBgGA1UdIAEB /wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgACMAgDBgQq D2KCEDANBgkqhkiG9w0BAQsFAAOCAQEAXdlhV0iN/0HD4psO8KJw1okdF/UXYAVc BXZG0b7+dLZW+uaU7chl3Z1wyplwHFcZTCW0CjEsxN1jytbREt2QdUrAUV7MJD0L FvTmH4CoaVmCqcm7V+K4cmwnoM0HGZcSAi8NJ+UeaXuCaaXMtrvU8Z/tFwdqpuOa AtrgMjHXKDxMNNBEis/GVfUJrKpfHSFYL96vYXvsGyKEXk8Ey1E9QntfOsE82Upi 3Qg1Qi70cSIV+w1qAJcabU6L0evEflM8bzy3LQslOvtcDrOjxJnLijVC76rGohHL PZhnQcG9584yqhLR5zmBtpcYrGVt6CuSJfofDfjt+i8B6eijwaEDGQ== -----END CERTIFICATE-----Generated at Mon Feb 23 06:29:16 2026 by rpki-client