
$ rpki-client -vvf krill.47272.net/repo/HYEHOST/5/AS205141.roa
File: AS205141.roa (raw, json)
Hash identifier: MNHx9A1KW3R7JFdBf8Ehauhk0UcuqT91mReAel1CZq4=
Subject key identifier: D0:66:2A:46:71:27:CB:0B:67:17:DD:B3:18:95:DD:BC:47:89:B7:F3
Certificate issuer: /CN=C3CF41898936CB9C573DB1EAAB94C6E669951FD7
Certificate serial: 2FAE55CFEE0EC77D0BB9F23D28C31F9FEF86C152
Authority key identifier: C3:CF:41:89:89:36:CB:9C:57:3D:B1:EA:AB:94:C6:E6:69:95:1F:D7
Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer
Subject info access: rsync://krill.47272.net/repo/HYEHOST/5/AS205141.roa
Signing time: Sun 28 Jun 2026 18:57:51 +0000
ROA not before: Sun 28 Jun 2026 18:52:51 +0000
ROA not after: Sun 27 Jun 2027 18:57:51 +0000
asID: 205141
IP address blocks: 2a0f:6284:40::/44 maxlen: 44
2a0f:6284:40::/48 maxlen: 48
2a0f:6284:41::/48 maxlen: 48
2a0f:6284:42::/48 maxlen: 48
2a0f:6284:43::/48 maxlen: 48
2a0f:6284:44::/48 maxlen: 48
2a0f:6284:45::/48 maxlen: 48
2a0f:6284:46::/48 maxlen: 48
Validation: OK
Signature path: rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.crl
rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.mft
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 11 Jul 2026 08:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2f:ae:55:cf:ee:0e:c7:7d:0b:b9:f2:3d:28:c3:1f:9f:ef:86:c1:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C3CF41898936CB9C573DB1EAAB94C6E669951FD7
Validity
Not Before: Jun 28 18:52:51 2026 GMT
Not After : Jun 27 18:57:51 2027 GMT
Subject: CN=D0662A467127CB0B6717DDB31895DDBC4789B7F3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:f1:b5:c7:77:4f:a5:26:f6:d6:8b:f1:a8:3e:
75:85:af:19:b6:9e:26:88:83:24:11:ef:03:46:02:
12:04:de:47:48:0a:36:84:21:c4:5b:ce:b1:43:01:
d7:e2:72:b1:df:f6:69:e3:8a:5f:d9:28:fc:3e:72:
73:ec:3e:72:35:0d:86:62:f9:17:3b:a4:b8:ea:db:
f2:5c:16:6a:6e:ec:34:cf:c9:f9:d5:56:cb:31:de:
de:53:22:95:b6:de:99:5a:ee:d5:01:bc:87:bf:50:
40:cc:de:7f:bd:2f:50:31:cf:88:d7:66:29:eb:f2:
df:e3:87:6f:90:c0:d9:2f:ab:5a:1a:63:c4:69:da:
93:71:2f:42:0f:e7:de:1d:36:fc:4a:11:19:fa:ee:
64:5d:bf:85:69:20:ba:70:38:72:49:80:c4:07:5c:
e0:71:b9:29:d2:bf:bc:24:38:a4:b9:3e:d9:2d:b7:
7e:b3:45:c6:02:f0:38:44:92:06:96:14:35:65:04:
0c:92:32:4a:f9:b6:8b:23:7c:2c:2c:cb:41:50:6a:
2c:dc:ce:9f:dd:b0:06:ed:28:09:5e:fd:44:e9:e0:
fc:09:55:e4:59:b7:0a:a6:74:d7:15:20:94:07:99:
e3:ad:41:d5:2a:b9:a2:4e:50:81:b7:6e:38:b7:dc:
78:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:66:2A:46:71:27:CB:0B:67:17:DD:B3:18:95:DD:BC:47:89:B7:F3
X509v3 Authority Key Identifier:
keyid:C3:CF:41:89:89:36:CB:9C:57:3D:B1:EA:AB:94:C6:E6:69:95:1F:D7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer
Subject Information Access:
Signed Object - URI:rsync://krill.47272.net/repo/HYEHOST/5/AS205141.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:6284:40::/44
Signature Algorithm: sha256WithRSAEncryption
03:26:51:a9:34:e0:87:cc:b6:16:4d:c2:86:e4:c3:ed:70:d6:
51:08:dd:e4:94:fc:ff:57:4b:00:3b:87:03:80:b2:15:3a:cf:
f6:3e:67:2d:7a:53:51:a1:53:c8:e3:29:31:d4:61:6c:aa:9a:
c6:6c:ed:18:da:83:08:0c:eb:2c:2c:c9:e2:da:d6:08:76:ab:
71:f0:7c:c6:2d:2c:d5:38:c5:81:4e:97:65:fd:3f:f9:2b:83:
fc:6d:57:02:05:33:3c:09:2f:4e:25:27:a3:ef:3f:5c:55:68:
8a:6f:ce:29:9f:ac:6a:58:99:a6:a4:45:c8:a4:6b:d3:7d:9f:
a9:ad:7b:79:de:73:3c:63:aa:7f:eb:de:75:67:fe:b1:01:30:
a8:88:b2:5d:33:8a:4f:f2:d5:54:ed:bb:26:70:95:6d:07:b2:
a4:ba:04:18:cf:71:e3:d1:a6:bc:49:d7:a9:c2:0b:98:69:0e:
44:28:5d:f9:d1:25:ec:32:0c:fe:57:a8:c7:1f:01:2d:b5:e0:
85:27:8b:53:9a:6c:cf:ba:09:1f:4c:25:c8:26:e6:21:45:0a:
f5:90:e5:fe:bd:7e:ef:11:84:5f:cb:c8:be:b1:db:06:42:d2:
fd:f1:53:bf:71:14:b7:d8:bc:2c:ef:ac:26:6a:1c:16:34:62:
fc:0d:2c:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 10 16:11:32 2026 by rpki-client