
$ rpki-client -vvf krill.47272.net/repo/HYEHOST/5/AS201279.roa
File: AS201279.roa (raw, json)
Hash identifier: pooA0gfXrQtdQ2qydZiRBy+PmVtLYNA8Jyb/iG0LhcQ=
Subject key identifier: 78:81:70:63:48:73:6C:70:92:04:DA:F6:C1:20:FC:D4:C9:79:1A:F1
Certificate issuer: /CN=C3CF41898936CB9C573DB1EAAB94C6E669951FD7
Certificate serial: 763F8CFF5E5E57FECA4F36C466C11DE0A8BA3F7D
Authority key identifier: C3:CF:41:89:89:36:CB:9C:57:3D:B1:EA:AB:94:C6:E6:69:95:1F:D7
Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer
Subject info access: rsync://krill.47272.net/repo/HYEHOST/5/AS201279.roa
Signing time: Tue 10 Feb 2026 22:13:17 +0000
ROA not before: Tue 10 Feb 2026 22:08:17 +0000
ROA not after: Tue 09 Feb 2027 22:13:17 +0000
asID: 201279
IP address blocks: 2a0f:6282::/36 maxlen: 48
Validation: OK
Signature path: rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.crl
rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.mft
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 23 Feb 2026 19:39:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
76:3f:8c:ff:5e:5e:57:fe:ca:4f:36:c4:66:c1:1d:e0:a8:ba:3f:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C3CF41898936CB9C573DB1EAAB94C6E669951FD7
Validity
Not Before: Feb 10 22:08:17 2026 GMT
Not After : Feb 9 22:13:17 2027 GMT
Subject: CN=7881706348736C709204DAF6C120FCD4C9791AF1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:6c:04:d6:40:4d:09:7d:8e:e0:97:81:70:42:
0e:fa:e2:00:c1:75:bc:95:67:2b:31:25:9d:4f:78:
d4:e3:7f:2d:41:05:e6:d7:63:09:df:49:f7:90:48:
16:3f:bc:ae:8a:85:01:b7:fc:90:7c:91:2b:ce:1c:
ce:c4:41:cf:da:ca:ab:14:b4:9d:ce:1d:5d:43:33:
ba:41:32:23:2d:37:f2:7f:3e:40:27:8d:de:e9:8d:
d1:d8:49:7e:56:01:ee:ac:3c:62:31:16:92:3c:9b:
70:6e:d3:0c:aa:6c:5e:d0:a0:36:5b:63:e5:3c:b4:
de:6e:8d:15:f7:0c:51:9c:25:7a:4c:ba:a9:df:7c:
0e:1c:4b:8d:a8:6a:17:64:a6:b7:fa:a2:10:0a:df:
9b:50:a3:d7:45:57:ac:0a:b7:24:23:46:38:b8:d2:
60:ca:42:a8:ad:e4:8b:52:31:cc:b8:c1:96:7d:d0:
4d:49:44:b0:f7:d8:dd:d1:0e:32:8e:68:32:3e:c7:
9b:2c:c8:8e:94:45:28:a3:b8:75:d4:19:78:d8:c0:
5f:8b:a4:8a:45:b6:68:d7:b4:9d:7c:24:1a:5e:27:
16:d0:13:4b:3a:93:a6:cc:fa:ac:6a:46:a2:b1:82:
41:d0:33:fb:70:44:35:12:3c:3d:f7:3c:c9:5a:71:
58:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:81:70:63:48:73:6C:70:92:04:DA:F6:C1:20:FC:D4:C9:79:1A:F1
X509v3 Authority Key Identifier:
keyid:C3:CF:41:89:89:36:CB:9C:57:3D:B1:EA:AB:94:C6:E6:69:95:1F:D7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer
Subject Information Access:
Signed Object - URI:rsync://krill.47272.net/repo/HYEHOST/5/AS201279.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:6282::/36
Signature Algorithm: sha256WithRSAEncryption
6c:10:0a:8b:a1:b3:28:2f:b4:1f:02:4e:10:4f:88:b4:c2:19:
2f:55:d1:29:e0:b8:17:f3:9e:57:97:9c:00:4e:1d:c1:28:5a:
14:cd:25:53:38:df:ab:e1:9d:39:f8:b0:02:cb:d2:a2:0f:07:
47:94:4e:8c:48:5f:3f:d8:4b:78:0a:b2:f7:9a:f3:23:c3:eb:
0e:38:f2:3b:5f:f1:db:45:06:61:8f:85:e0:70:e1:44:a0:17:
71:4c:74:7e:9d:73:be:dc:2f:df:c9:67:d8:82:79:fa:e3:1d:
d7:ff:26:78:23:ba:f1:8a:54:f1:fb:0c:19:e8:3e:4d:6f:29:
65:c1:35:7c:f1:b7:1a:a8:ee:6e:92:4a:eb:ff:da:68:68:1f:
fe:e9:90:67:7a:b8:0f:75:b6:45:9f:17:ab:6e:b5:f5:af:de:
0c:0d:e5:3f:ec:2a:19:56:2a:11:cc:8d:e3:3a:1c:77:c1:d3:
a9:5f:a1:33:bc:4e:e3:42:c4:bb:ec:1a:f9:d5:0d:f5:4c:58:
89:28:6b:78:b1:38:94:3d:67:44:ba:8e:30:30:37:e5:d0:76:
c4:e7:9e:f2:29:17:5e:c7:c9:3c:34:78:f6:b2:57:fd:b5:b3:
ae:6c:7e:e5:35:98:d0:2b:d3:d1:b1:d7:da:ae:71:d5:f0:08:
29:48:9c:c1
-----BEGIN CERTIFICATE-----
MIIE1DCCA7ygAwIBAgIUdj+M/15eV/7KTzbEZsEd4Ki6P30wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQzNDRjQxODk4OTM2Q0I5QzU3M0RCMUVBQUI5NEM2RTY2
OTk1MUZENzAeFw0yNjAyMTAyMjA4MTdaFw0yNzAyMDkyMjEzMTdaMDMxMTAvBgNV
BAMTKDc4ODE3MDYzNDg3MzZDNzA5MjA0REFGNkMxMjBGQ0Q0Qzk3OTFBRjEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDXbATWQE0JfY7gl4FwQg764gDB
dbyVZysxJZ1PeNTjfy1BBebXYwnfSfeQSBY/vK6KhQG3/JB8kSvOHM7EQc/ayqsU
tJ3OHV1DM7pBMiMtN/J/PkAnjd7pjdHYSX5WAe6sPGIxFpI8m3Bu0wyqbF7QoDZb
Y+U8tN5ujRX3DFGcJXpMuqnffA4cS42oahdkprf6ohAK35tQo9dFV6wKtyQjRji4
0mDKQqit5ItSMcy4wZZ90E1JRLD32N3RDjKOaDI+x5ssyI6URSijuHXUGXjYwF+L
pIpFtmjXtJ18JBpeJxbQE0s6k6bM+qxqRqKxgkHQM/twRDUSPD33PMlacViLAgMB
AAGjggHeMIIB2jAdBgNVHQ4EFgQUeIFwY0hzbHCSBNr2wSD81Ml5GvEwHwYDVR0j
BBgwFoAUw89BiYk2y5xXPbHqq5TG5mmVH9cwDgYDVR0PAQH/BAQDAgeAMGQGA1Ud
HwRdMFswWaBXoFWGU3JzeW5jOi8va3JpbGwuNDcyNzIubmV0L3JlcG8vSFlFSE9T
VC81L0MzQ0Y0MTg5ODkzNkNCOUM1NzNEQjFFQUFCOTRDNkU2Njk5NTFGRDcuY3Js
MIGTBggrBgEFBQcBAQSBhjCBgzCBgAYIKwYBBQUHMAKGdHJzeW5jOi8vcnBraS1y
cHMuYXJpbi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZjg1MGQwNjNlMDE4NTc1NWM5
MWJlM2Y5ZC83L0MzQ0Y0MTg5ODkzNkNCOUM1NzNEQjFFQUFCOTRDNkU2Njk5NTFG
RDcuY2VyME8GCCsGAQUFBwELBEMwQTA/BggrBgEFBQcwC4YzcnN5bmM6Ly9rcmls
bC40NzI3Mi5uZXQvcmVwby9IWUVIT1NULzUvQVMyMDEyNzkucm9hMBgGA1UdIAEB
/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgACMAgDBgQq
D2KCADANBgkqhkiG9w0BAQsFAAOCAQEAbBAKi6GzKC+0HwJOEE+ItMIZL1XRKeC4
F/OeV5ecAE4dwShaFM0lUzjfq+GdOfiwAsvSog8HR5ROjEhfP9hLeAqy95rzI8Pr
DjjyO1/x20UGYY+F4HDhRKAXcUx0fp1zvtwv38ln2IJ5+uMd1/8meCO68YpU8fsM
Geg+TW8pZcE1fPG3GqjubpJK6//aaGgf/umQZ3q4D3W2RZ8Xq2619a/eDA3lP+wq
GVYqEcyN4zocd8HTqV+hM7xO40LEu+wa+dUN9UxYiShreLE4lD1nRLqOMDA35dB2
xOee8ikXXsfJPDR49rJX/bWzrmx+5TWY0CvT0bHX2q5x1fAIKUicwQ==
-----END CERTIFICATE-----
Generated at Mon Feb 23 06:24:19 2026 by rpki-client