$ rpki-client -vvf krill.47272.net/repo/HYEHOST/5/AS202941.roa File: AS202941.roa (raw, json) Hash identifier: BI4bzYtduOaz0j58qq+l05tOSWb1YhXx53sNjJ1XWiI= Subject key identifier: 86:81:8F:22:53:23:39:0C:D6:FB:5F:C6:09:33:ED:AB:18:77:51:B8 Certificate issuer: /CN=C3CF41898936CB9C573DB1EAAB94C6E669951FD7 Certificate serial: 576689F293FE89DCCA210A5615A2B680AA087530 Authority key identifier: C3:CF:41:89:89:36:CB:9C:57:3D:B1:EA:AB:94:C6:E6:69:95:1F:D7 Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer Subject info access: rsync://krill.47272.net/repo/HYEHOST/5/AS202941.roa Signing time: Sun 28 Jun 2026 18:57:36 +0000 ROA not before: Sun 28 Jun 2026 18:52:36 +0000 ROA not after: Sun 27 Jun 2027 18:57:36 +0000 asID: 202941 IP address blocks: 2a0f:6284:200::/40 maxlen: 40 2a0f:6284:200::/48 maxlen: 48 Validation: OK Signature path: rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.crl rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 16 Jul 2026 08:00:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 57:66:89:f2:93:fe:89:dc:ca:21:0a:56:15:a2:b6:80:aa:08:75:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C3CF41898936CB9C573DB1EAAB94C6E669951FD7 Validity Not Before: Jun 28 18:52:36 2026 GMT Not After : Jun 27 18:57:36 2027 GMT Subject: CN=86818F225323390CD6FB5FC60933EDAB187751B8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:d9:5c:a3:43:43:bb:f6:1b:f8:8e:93:73:0e: cc:da:2b:61:32:50:9e:b9:fb:37:16:a7:0d:33:e7: 19:37:66:27:36:e8:b7:fc:99:28:3e:22:a2:c1:b0: 2b:f2:65:ab:3f:6b:bc:29:5a:04:33:d3:02:88:64: 8c:e6:28:75:1e:0b:38:11:02:8c:72:9a:71:4a:e2: b0:ee:3d:a4:89:e1:b5:39:a5:8c:4f:2d:e3:1d:fa: 26:31:91:54:dd:5e:c8:18:c3:50:3b:62:6d:7a:c0: 91:56:d8:70:2f:d3:e6:6e:a6:99:b0:7d:d4:94:a4: be:20:0d:fd:46:d4:b9:ab:8a:a3:71:82:58:26:4e: 46:a5:38:ad:5c:9a:58:09:f0:c5:27:6e:8b:32:d9: 0b:75:5e:84:20:bc:8f:9e:bf:1c:34:73:b2:cb:7a: 10:76:92:9e:9c:8a:9f:24:48:53:2d:f3:0a:aa:6e: a7:34:71:b1:db:50:db:4a:c5:7b:b6:49:b6:ff:1e: 78:f9:ef:e6:71:f0:eb:bb:59:f3:84:9f:5a:9b:5f: e3:0b:db:ef:51:69:81:f2:84:36:7e:a6:83:16:f3: 77:ef:34:cd:cf:bc:41:72:a2:af:86:17:0c:2f:29: e0:28:b7:07:6c:60:3e:b4:81:de:0a:af:a4:69:f4: 08:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:81:8F:22:53:23:39:0C:D6:FB:5F:C6:09:33:ED:AB:18:77:51:B8 X509v3 Authority Key Identifier: keyid:C3:CF:41:89:89:36:CB:9C:57:3D:B1:EA:AB:94:C6:E6:69:95:1F:D7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer Subject Information Access: Signed Object - URI:rsync://krill.47272.net/repo/HYEHOST/5/AS202941.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0f:6284:200::/40 Signature Algorithm: sha256WithRSAEncryption 83:57:6f:2a:15:99:64:71:aa:b9:b9:d4:a6:52:91:4a:49:00: 28:14:8e:7d:3f:3f:39:84:8c:5f:eb:83:65:dc:cb:82:53:61: a0:b5:7f:50:38:df:c0:f6:b2:1c:09:d3:bb:20:60:bb:85:91: 37:27:1e:8a:08:24:4f:b7:fa:73:8b:2f:3e:f2:4a:af:b2:c2: 5d:8c:c5:77:84:a7:8e:21:03:4c:2c:03:85:34:37:66:30:0e: 39:b2:1e:f6:70:2b:b3:5b:0b:b1:11:84:4b:d0:b0:aa:61:80: d7:3b:fd:80:81:7a:49:46:d2:ef:cf:42:b3:a5:45:b9:9c:11: 37:30:d1:6f:0c:38:6d:37:42:a6:ac:76:32:4e:02:46:9e:6f: d1:be:b0:02:8d:58:a8:ef:da:9f:dc:59:08:1f:a9:69:c3:6b: 84:ba:84:e3:f4:3b:9e:0c:69:d6:30:65:11:f6:ee:98:b2:5a: 5c:8f:f4:68:69:3b:d3:07:85:7a:6c:4c:e8:1e:c2:24:88:bf: df:28:2d:5d:db:9f:c0:c3:1a:22:0b:52:dd:4f:31:3d:5a:82: ff:92:4f:12:8a:95:df:95:00:db:00:4f:cb:df:07:ad:f7:ec: 93:d4:05:98:1b:14:88:37:a9:12:2a:92:06:3b:1f:a1:ff:55: 9f:c7:c8:de -----BEGIN CERTIFICATE----- MIIE1DCCA7ygAwIBAgIUV2aJ8pP+idzKIQpWFaK2gKoIdTAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzNDRjQxODk4OTM2Q0I5QzU3M0RCMUVBQUI5NEM2RTY2 OTk1MUZENzAeFw0yNjA2MjgxODUyMzZaFw0yNzA2MjcxODU3MzZaMDMxMTAvBgNV BAMTKDg2ODE4RjIyNTMyMzM5MENENkZCNUZDNjA5MzNFREFCMTg3NzUxQjgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJ2VyjQ0O79hv4jpNzDszaK2Ey UJ65+zcWpw0z5xk3Zic26Lf8mSg+IqLBsCvyZas/a7wpWgQz0wKIZIzmKHUeCzgR AoxymnFK4rDuPaSJ4bU5pYxPLeMd+iYxkVTdXsgYw1A7Ym16wJFW2HAv0+Zuppmw fdSUpL4gDf1G1LmriqNxglgmTkalOK1cmlgJ8MUnbosy2Qt1XoQgvI+evxw0c7LL ehB2kp6cip8kSFMt8wqqbqc0cbHbUNtKxXu2Sbb/Hnj57+Zx8Ou7WfOEn1qbX+ML 2+9RaYHyhDZ+poMW83fvNM3PvEFyoq+GFwwvKeAotwdsYD60gd4Kr6Rp9AhHAgMB AAGjggHeMIIB2jAdBgNVHQ4EFgQUhoGPIlMjOQzW+1/GCTPtqxh3UbgwHwYDVR0j BBgwFoAUw89BiYk2y5xXPbHqq5TG5mmVH9cwDgYDVR0PAQH/BAQDAgeAMGQGA1Ud HwRdMFswWaBXoFWGU3JzeW5jOi8va3JpbGwuNDcyNzIubmV0L3JlcG8vSFlFSE9T VC81L0MzQ0Y0MTg5ODkzNkNCOUM1NzNEQjFFQUFCOTRDNkU2Njk5NTFGRDcuY3Js MIGTBggrBgEFBQcBAQSBhjCBgzCBgAYIKwYBBQUHMAKGdHJzeW5jOi8vcnBraS1y cHMuYXJpbi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZjg1MGQwNjNlMDE4NTc1NWM5 MWJlM2Y5ZC83L0MzQ0Y0MTg5ODkzNkNCOUM1NzNEQjFFQUFCOTRDNkU2Njk5NTFG RDcuY2VyME8GCCsGAQUFBwELBEMwQTA/BggrBgEFBQcwC4YzcnN5bmM6Ly9rcmls bC40NzI3Mi5uZXQvcmVwby9IWUVIT1NULzUvQVMyMDI5NDEucm9hMBgGA1UdIAEB /wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgACMAgDBgAq D2KEAjANBgkqhkiG9w0BAQsFAAOCAQEAg1dvKhWZZHGqubnUplKRSkkAKBSOfT8/ OYSMX+uDZdzLglNhoLV/UDjfwPayHAnTuyBgu4WRNyceiggkT7f6c4svPvJKr7LC XYzFd4SnjiEDTCwDhTQ3ZjAOObIe9nArs1sLsRGES9CwqmGA1zv9gIF6SUbS789C s6VFuZwRNzDRbww4bTdCpqx2Mk4CRp5v0b6wAo1YqO/an9xZCB+pacNrhLqE4/Q7 ngxp1jBlEfbumLJaXI/0aGk70weFemxM6B7CJIi/3ygtXdufwMMaIgtS3U8xPVqC /5JPEoqV35UA2wBPy98Hrffsk9QFmBsUiDepEiqSBjsfof9Vn8fI3g== -----END CERTIFICATE-----Generated at Wed Jul 15 13:36:08 2026 by rpki-client