$ rpki-client -vvvf krill.47272.net/repo/HYEHOST/5/AS204882.roa File: AS204882.roa (raw, json) Hash identifier: xkWqi9EEdTaStOXvX3W646XJnqivfuyTcrELKhKZkok= Subject key identifier: 7D:FF:D7:FF:D3:CB:8C:71:E3:51:3C:C6:5C:13:39:28:17:E8:9D:0D Certificate issuer: /CN=C3CF41898936CB9C573DB1EAAB94C6E669951FD7 Certificate serial: 2D1DB174CC00C2B91B19C65D3E54C7A520680A4A Authority key identifier: C3:CF:41:89:89:36:CB:9C:57:3D:B1:EA:AB:94:C6:E6:69:95:1F:D7 Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer Subject info access: rsync://krill.47272.net/repo/HYEHOST/5/AS204882.roa Signing time: Sat 31 Oct 2026 20:50:19 +0000 ROA not before: Sat 31 Oct 2026 20:45:19 +0000 ROA not after: Sat 30 Oct 2027 20:50:19 +0000 asID: 204882 IP address blocks: 2a0f:6280:1120::/44 maxlen: 48 Validation: OK Signature path: rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.crl rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 12 Nov 2026 21:16:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2d:1d:b1:74:cc:00:c2:b9:1b:19:c6:5d:3e:54:c7:a5:20:68:0a:4a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C3CF41898936CB9C573DB1EAAB94C6E669951FD7 Validity Not Before: Oct 31 20:45:19 2026 GMT Not After : Oct 30 20:50:19 2027 GMT Subject: CN=7DFFD7FFD3CB8C71E3513CC65C13392817E89D0D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:7f:fa:7f:bb:98:af:3b:28:74:9f:1c:ec:9b: 34:fb:dc:c3:79:2f:2c:11:2c:8e:1f:e3:57:42:ca: 5a:c8:9f:d4:29:68:d1:d6:b6:5e:f0:29:46:76:86: 1b:8d:ed:d8:61:ba:d9:88:c5:0a:b0:e4:5e:6b:18: f5:3e:3e:9b:fd:7c:0d:d1:34:22:a7:1d:81:02:af: e4:b6:aa:26:91:c0:09:44:3b:fe:37:50:1d:9a:ee: 26:d8:ce:a3:4d:c6:55:35:d7:f2:20:91:37:bf:68: 0e:04:97:28:35:8f:93:43:42:28:9e:a8:21:4c:a8: 1a:b0:01:f5:4d:f9:04:27:4a:f0:5e:e2:eb:1b:2e: bf:95:ac:e8:e9:17:3b:39:e6:61:8e:cc:1c:24:f3: 7a:66:78:3a:a1:28:f5:f0:14:da:90:a9:14:4e:80: ec:b6:c0:20:8a:22:9c:ba:f3:dd:a1:9b:ee:25:01: 84:7e:ff:f6:a3:3d:da:11:08:9f:b6:e8:0f:d0:e3: 30:ec:d8:10:f2:10:9a:92:60:7c:0e:09:a4:c6:d7: 9a:dc:7c:ce:65:b8:ae:74:da:2c:cc:d3:40:31:ec: fc:5b:1d:b7:65:c6:9a:b3:8e:fd:d3:12:88:9d:e7: 90:2d:17:8e:9f:3e:3d:46:1b:de:6f:f4:bc:39:1e: 78:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:FF:D7:FF:D3:CB:8C:71:E3:51:3C:C6:5C:13:39:28:17:E8:9D:0D X509v3 Authority Key Identifier: keyid:C3:CF:41:89:89:36:CB:9C:57:3D:B1:EA:AB:94:C6:E6:69:95:1F:D7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer Subject Information Access: Signed Object - URI:rsync://krill.47272.net/repo/HYEHOST/5/AS204882.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0f:6280:1120::/44 Signature Algorithm: sha256WithRSAEncryption 1a:25:ff:7d:38:48:b2:7f:4e:b9:e4:9a:6b:4a:ba:c6:ec:78: d8:95:4a:90:28:1f:a4:8a:76:ca:26:05:d3:cf:eb:34:e1:86: 78:a6:18:46:bc:4e:d5:6c:be:9c:3b:0a:21:d2:c5:ee:31:c2: 17:bb:47:73:99:b5:7d:b8:bb:d1:ca:90:06:93:76:d6:ff:2f: 0b:3a:74:b0:34:4d:2c:d3:ee:70:08:ac:61:43:63:7e:13:7d: 1c:02:48:08:a4:eb:46:8d:b9:62:1b:73:66:c0:9e:a3:77:2b: be:52:b5:41:5e:3d:f4:0d:dc:34:12:f1:31:4f:d9:23:64:ea: aa:85:79:bb:fe:50:61:0e:41:45:63:19:02:70:44:95:04:7b: 36:46:2d:e6:5c:8a:1a:86:76:f7:cb:6b:1d:d0:e0:66:b1:38: 87:f6:50:2e:ab:74:91:f3:a4:16:59:7a:c7:3e:e8:8c:d7:e2: fd:fa:e2:88:eb:ab:ad:20:50:67:42:fc:53:95:d3:b3:0c:2a: 27:0a:4f:f4:95:21:5e:d6:c2:ad:90:d5:5d:00:f7:94:08:22: 54:93:96:a1:3f:7e:75:94:d9:c0:fd:22:c2:e7:e0:ac:2f:ce: 4d:c7:3b:5b:f6:b0:1d:3c:46:df:c4:f7:33:e3:df:25:83:39: 36:a9:05:44 -----BEGIN CERTIFICATE----- MIIE1TCCA72gAwIBAgIULR2xdMwAwrkbGcZdPlTHpSBoCkowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzNDRjQxODk4OTM2Q0I5QzU3M0RCMUVBQUI5NEM2RTY2 OTk1MUZENzAeFw0yNjEwMzEyMDQ1MTlaFw0yNzEwMzAyMDUwMTlaMDMxMTAvBgNV BAMTKDdERkZEN0ZGRDNDQjhDNzFFMzUxM0NDNjVDMTMzOTI4MTdFODlEMEQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCDf/p/u5ivOyh0nxzsmzT73MN5 LywRLI4f41dCylrIn9QpaNHWtl7wKUZ2hhuN7dhhutmIxQqw5F5rGPU+Ppv9fA3R NCKnHYECr+S2qiaRwAlEO/43UB2a7ibYzqNNxlU11/IgkTe/aA4Elyg1j5NDQiie qCFMqBqwAfVN+QQnSvBe4usbLr+VrOjpFzs55mGOzBwk83pmeDqhKPXwFNqQqRRO gOy2wCCKIpy6892hm+4lAYR+//ajPdoRCJ+26A/Q4zDs2BDyEJqSYHwOCaTG15rc fM5luK502izM00Ax7PxbHbdlxpqzjv3TEoid55AtF46fPj1GG95v9Lw5HniPAgMB AAGjggHfMIIB2zAdBgNVHQ4EFgQUff/X/9PLjHHjUTzGXBM5KBfonQ0wHwYDVR0j BBgwFoAUw89BiYk2y5xXPbHqq5TG5mmVH9cwDgYDVR0PAQH/BAQDAgeAMGQGA1Ud HwRdMFswWaBXoFWGU3JzeW5jOi8va3JpbGwuNDcyNzIubmV0L3JlcG8vSFlFSE9T VC81L0MzQ0Y0MTg5ODkzNkNCOUM1NzNEQjFFQUFCOTRDNkU2Njk5NTFGRDcuY3Js MIGTBggrBgEFBQcBAQSBhjCBgzCBgAYIKwYBBQUHMAKGdHJzeW5jOi8vcnBraS1y cHMuYXJpbi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZjg1MGQwNjNlMDE4NTc1NWM5 MWJlM2Y5ZC83L0MzQ0Y0MTg5ODkzNkNCOUM1NzNEQjFFQUFCOTRDNkU2Njk5NTFG RDcuY2VyME8GCCsGAQUFBwELBEMwQTA/BggrBgEFBQcwC4YzcnN5bmM6Ly9rcmls bC40NzI3Mi5uZXQvcmVwby9IWUVIT1NULzUvQVMyMDQ4ODIucm9hMBgGA1UdIAEB /wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwQq D2KAESAwDQYJKoZIhvcNAQELBQADggEBABol/304SLJ/TrnkmmtKusbseNiVSpAo H6SKdsomBdPP6zThhnimGEa8TtVsvpw7CiHSxe4xwhe7R3OZtX24u9HKkAaTdtb/ Lws6dLA0TSzT7nAIrGFDY34TfRwCSAik60aNuWIbc2bAnqN3K75StUFePfQN3DQS 8TFP2SNk6qqFebv+UGEOQUVjGQJwRJUEezZGLeZcihqGdvfLax3Q4GaxOIf2UC6r dJHzpBZZesc+6IzX4v364ojrq60gUGdC/FOV07MMKicKT/SVIV7Wwq2Q1V0A95QI IlSTlqE/fnWU2cD9IsLn4Kwvzk3HO1v2sB08Rt/E9zPj3yWDOTapBUQ= -----END CERTIFICATE-----Generated at Thu Nov 12 09:54:18 2026 by rpki-client