
$ rpki-client -vvf krill.47272.net/repo/HYEHOST/5/AS205305.roa
File: AS205305.roa (raw, json)
Hash identifier: mGhFg2A6Jh1nfuN62TifsxVQHIPazydRvfSNmrqoQEU=
Subject key identifier: F9:40:2C:59:C3:74:F6:81:D3:5E:97:11:DE:D3:88:75:23:DA:F4:4F
Certificate issuer: /CN=C3CF41898936CB9C573DB1EAAB94C6E669951FD7
Certificate serial: 2DA8B3FF9A2CC987C55A6CA2F1793011EAA51CF3
Authority key identifier: C3:CF:41:89:89:36:CB:9C:57:3D:B1:EA:AB:94:C6:E6:69:95:1F:D7
Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer
Subject info access: rsync://krill.47272.net/repo/HYEHOST/5/AS205305.roa
Signing time: Thu 12 Feb 2026 19:05:58 +0000
ROA not before: Thu 12 Feb 2026 19:00:58 +0000
ROA not after: Thu 11 Feb 2027 19:05:58 +0000
asID: 205305
IP address blocks: 2a0f:6282:6000::/46 maxlen: 46
Validation: OK
Signature path: rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.crl
rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.mft
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 23 Feb 2026 19:39:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2d:a8:b3:ff:9a:2c:c9:87:c5:5a:6c:a2:f1:79:30:11:ea:a5:1c:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C3CF41898936CB9C573DB1EAAB94C6E669951FD7
Validity
Not Before: Feb 12 19:00:58 2026 GMT
Not After : Feb 11 19:05:58 2027 GMT
Subject: CN=F9402C59C374F681D35E9711DED3887523DAF44F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:a1:19:91:69:f3:a5:7e:94:c3:6e:4a:b0:79:
44:13:04:37:64:73:40:12:49:06:c7:8c:d1:f0:94:
90:71:62:81:58:de:8d:a3:bc:0b:82:09:05:72:eb:
2b:23:c5:3e:6b:a9:71:13:e1:d4:e3:16:13:b1:9f:
fe:83:5e:44:7c:f1:6a:03:83:68:3d:04:dd:4f:b7:
78:a4:06:2f:38:64:31:cc:b1:1a:ef:f3:3f:2f:c7:
9c:37:87:0d:02:1e:8b:05:2b:b5:cc:21:8d:50:ea:
fa:c2:53:f1:fe:a8:17:4f:df:c0:c0:de:13:ca:83:
05:bf:e4:3a:fb:db:b0:d5:f5:8a:67:60:84:6f:7b:
f2:ad:b3:84:08:b3:4b:5f:d2:2b:a3:bf:fa:a8:a2:
16:a6:b4:0b:28:15:9b:4e:54:81:18:6e:88:8f:7e:
8a:a4:ad:82:68:61:8e:9a:32:b4:e7:ca:60:fe:4f:
a4:72:ef:60:77:9d:47:8d:28:e3:7f:db:1e:c1:a6:
ea:15:9e:b8:b8:58:1f:c5:88:91:72:13:e4:e6:99:
a0:b8:c6:ed:f2:41:5e:f8:e5:96:ac:b3:fb:c2:d6:
a5:16:02:ce:f7:93:06:a3:ae:e1:4c:fb:4c:fc:6a:
0c:4a:d1:05:09:7f:7a:f4:3c:8e:a6:f4:f7:61:66:
ee:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:40:2C:59:C3:74:F6:81:D3:5E:97:11:DE:D3:88:75:23:DA:F4:4F
X509v3 Authority Key Identifier:
keyid:C3:CF:41:89:89:36:CB:9C:57:3D:B1:EA:AB:94:C6:E6:69:95:1F:D7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer
Subject Information Access:
Signed Object - URI:rsync://krill.47272.net/repo/HYEHOST/5/AS205305.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:6282:6000::/46
Signature Algorithm: sha256WithRSAEncryption
4c:e2:ef:0f:be:cc:83:57:c7:8a:e7:21:f2:88:14:20:b5:b9:
0e:24:76:c8:7b:a6:09:5b:85:71:63:13:9c:22:61:29:f0:44:
f4:b2:89:a8:59:da:72:4b:ea:ca:b6:81:f0:ea:69:32:54:76:
83:3d:48:85:bd:d8:da:fa:0f:40:c3:61:d4:f6:40:88:09:28:
8d:e7:d6:99:0e:09:bb:a9:b7:c3:32:56:59:7c:b2:a3:bd:ae:
c9:cd:c8:38:96:cd:7d:8d:57:4d:03:7e:c2:6a:39:68:d3:15:
07:fb:90:42:44:69:17:da:7b:22:5d:86:e4:db:15:d8:fb:aa:
75:47:a1:8c:4e:36:d9:21:b0:7a:d1:cd:8f:0d:45:21:c7:c4:
68:c0:24:60:21:0f:61:26:2b:cc:66:ee:68:f5:43:e7:cc:b3:
50:a3:10:44:5f:97:04:88:a4:8e:a0:8c:fd:70:f2:65:4b:8d:
cf:9c:6a:74:d4:fe:f0:b9:61:3c:44:e2:32:91:7f:74:27:87:
ab:27:44:ae:d3:27:0f:20:53:36:c7:82:51:60:2e:18:07:1c:
68:61:c7:81:d7:6f:7c:9a:e1:15:4c:da:d2:a1:5a:08:99:c9:
10:0e:49:d2:9c:c8:5c:4b:97:83:49:00:ac:dd:6a:57:ce:8e:
96:a1:2c:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 23 06:29:14 2026 by rpki-client