$ rpki-client -vvf krill.47272.net/repo/HYEHOST/5/AS205941.roa File: AS205941.roa (raw, json) Hash identifier: jWW1g476WbmDHBfSCru/o9L6ydJxihEn01f9VVNkWno= Subject key identifier: 63:14:46:CA:8B:92:FC:A7:F9:95:0E:23:C1:EE:0D:9B:3F:28:06:43 Certificate issuer: /CN=C3CF41898936CB9C573DB1EAAB94C6E669951FD7 Certificate serial: 0A9E6CD685AD3FCB89307E5B843C9863B7E0C277 Authority key identifier: C3:CF:41:89:89:36:CB:9C:57:3D:B1:EA:AB:94:C6:E6:69:95:1F:D7 Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer Subject info access: rsync://krill.47272.net/repo/HYEHOST/5/AS205941.roa Signing time: Sun 28 Jun 2026 18:55:51 +0000 ROA not before: Sun 28 Jun 2026 18:50:51 +0000 ROA not after: Sun 27 Jun 2027 18:55:51 +0000 asID: 205941 IP address blocks: 2a0a:6044:a190::/44 maxlen: 48 Validation: OK Signature path: rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.crl rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 11 Jul 2026 08:00:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0a:9e:6c:d6:85:ad:3f:cb:89:30:7e:5b:84:3c:98:63:b7:e0:c2:77 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C3CF41898936CB9C573DB1EAAB94C6E669951FD7 Validity Not Before: Jun 28 18:50:51 2026 GMT Not After : Jun 27 18:55:51 2027 GMT Subject: CN=631446CA8B92FCA7F9950E23C1EE0D9B3F280643 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:2e:b6:c9:3b:c2:0b:2e:8a:5a:41:18:5b:f9: 00:b6:1f:54:46:a5:d6:d5:c3:14:63:e7:ed:b7:fe: 93:11:cc:d7:bf:3c:79:05:4f:7e:63:c4:b3:6b:38: 27:3b:18:e6:41:7b:1c:a8:d5:0c:ce:79:fe:00:78: 2b:d2:17:8c:ae:0a:9e:c3:7d:ee:a2:ab:fd:be:56: bb:0a:4b:ce:3e:cc:25:c9:94:8c:d8:a2:69:a7:d3: 23:9d:e3:28:56:1f:60:e0:10:1d:58:d4:55:38:88: 4a:62:0d:42:2c:0c:64:bf:6d:9a:d0:8d:2a:c7:89: df:f3:65:c3:2a:94:dc:88:97:99:cf:0c:73:15:18: 32:82:3d:a4:12:95:11:ac:2e:3e:e3:05:81:69:34: 02:3b:dd:44:ff:b5:ec:b4:15:20:2b:da:0f:22:3a: 48:ec:be:b6:01:ef:0e:cd:08:7a:6f:c2:e4:d5:5c: 30:37:93:fd:a6:d2:11:ef:cf:35:e6:63:7d:27:4c: cc:c5:a4:12:fe:e0:29:2f:b4:69:81:ee:84:a7:a6: e4:dc:d5:12:a9:5a:08:96:30:78:f1:83:8f:16:c1: 34:be:17:1b:2d:be:c9:b2:cd:d4:15:65:0f:b8:c9: 59:49:52:7f:5c:bb:66:25:8d:04:47:a0:80:ca:46: 68:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:14:46:CA:8B:92:FC:A7:F9:95:0E:23:C1:EE:0D:9B:3F:28:06:43 X509v3 Authority Key Identifier: keyid:C3:CF:41:89:89:36:CB:9C:57:3D:B1:EA:AB:94:C6:E6:69:95:1F:D7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer Subject Information Access: Signed Object - URI:rsync://krill.47272.net/repo/HYEHOST/5/AS205941.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0a:6044:a190::/44 Signature Algorithm: sha256WithRSAEncryption 7e:6e:00:d2:5e:94:e4:6a:95:40:d1:11:b9:cd:87:47:1b:3e: c4:7b:01:60:64:33:d8:93:44:55:ca:27:2c:13:a4:2b:c9:60: 56:e9:57:e1:e0:dd:38:34:d7:5d:a8:e1:ae:06:b0:c4:04:5f: c0:b6:ac:29:bd:07:99:9d:04:f0:0d:9e:59:1a:bb:97:5c:d8: d3:b3:a8:70:fb:a4:43:10:84:3b:8c:e2:52:83:26:c0:32:ba: 91:ef:0e:ff:84:a8:38:2c:d4:0c:4c:3b:5a:0c:21:71:39:9c: aa:49:0d:d2:0b:96:cd:78:dc:f6:2c:fb:d1:f0:32:75:bf:cc: a1:81:dc:9e:48:95:a9:3e:f3:de:9e:f4:41:77:88:ef:82:5e: 4c:8a:ba:e2:bc:77:d0:c7:9b:b4:a3:54:58:3e:37:f2:de:90: 53:6f:5f:c0:5c:8a:10:22:20:b9:2a:f0:c4:52:fe:a5:83:f3: 29:f6:63:72:2d:fe:9d:72:a7:1b:2b:ea:71:5f:ff:7f:bf:96: 71:66:8d:4d:b1:4e:77:3c:40:05:90:a9:54:88:d7:ee:14:5a: f5:ac:c1:10:e6:14:f9:3f:63:66:22:3b:9e:e4:c8:c2:3f:f1: d2:26:ce:0d:b3:bb:d1:5d:91:54:ad:35:49:8c:80:5d:a1:0f: 80:c4:85:82 -----BEGIN CERTIFICATE----- MIIE1TCCA72gAwIBAgIUCp5s1oWtP8uJMH5bhDyYY7fgwncwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzNDRjQxODk4OTM2Q0I5QzU3M0RCMUVBQUI5NEM2RTY2 OTk1MUZENzAeFw0yNjA2MjgxODUwNTFaFw0yNzA2MjcxODU1NTFaMDMxMTAvBgNV BAMTKDYzMTQ0NkNBOEI5MkZDQTdGOTk1MEUyM0MxRUUwRDlCM0YyODA2NDMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCTLrbJO8ILLopaQRhb+QC2H1RG pdbVwxRj5+23/pMRzNe/PHkFT35jxLNrOCc7GOZBexyo1QzOef4AeCvSF4yuCp7D fe6iq/2+VrsKS84+zCXJlIzYommn0yOd4yhWH2DgEB1Y1FU4iEpiDUIsDGS/bZrQ jSrHid/zZcMqlNyIl5nPDHMVGDKCPaQSlRGsLj7jBYFpNAI73UT/tey0FSAr2g8i OkjsvrYB7w7NCHpvwuTVXDA3k/2m0hHvzzXmY30nTMzFpBL+4CkvtGmB7oSnpuTc 1RKpWgiWMHjxg48WwTS+FxstvsmyzdQVZQ+4yVlJUn9cu2YljQRHoIDKRmjNAgMB AAGjggHfMIIB2zAdBgNVHQ4EFgQUYxRGyouS/Kf5lQ4jwe4Nmz8oBkMwHwYDVR0j BBgwFoAUw89BiYk2y5xXPbHqq5TG5mmVH9cwDgYDVR0PAQH/BAQDAgeAMGQGA1Ud HwRdMFswWaBXoFWGU3JzeW5jOi8va3JpbGwuNDcyNzIubmV0L3JlcG8vSFlFSE9T VC81L0MzQ0Y0MTg5ODkzNkNCOUM1NzNEQjFFQUFCOTRDNkU2Njk5NTFGRDcuY3Js MIGTBggrBgEFBQcBAQSBhjCBgzCBgAYIKwYBBQUHMAKGdHJzeW5jOi8vcnBraS1y cHMuYXJpbi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZjg1MGQwNjNlMDE4NTc1NWM5 MWJlM2Y5ZC83L0MzQ0Y0MTg5ODkzNkNCOUM1NzNEQjFFQUFCOTRDNkU2Njk5NTFG RDcuY2VyME8GCCsGAQUFBwELBEMwQTA/BggrBgEFBQcwC4YzcnN5bmM6Ly9rcmls bC40NzI3Mi5uZXQvcmVwby9IWUVIT1NULzUvQVMyMDU5NDEucm9hMBgGA1UdIAEB /wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwQq CmBEoZAwDQYJKoZIhvcNAQELBQADggEBAH5uANJelORqlUDREbnNh0cbPsR7AWBk M9iTRFXKJywTpCvJYFbpV+Hg3Tg0112o4a4GsMQEX8C2rCm9B5mdBPANnlkau5dc 2NOzqHD7pEMQhDuM4lKDJsAyupHvDv+EqDgs1AxMO1oMIXE5nKpJDdILls143PYs +9HwMnW/zKGB3J5Ilak+896e9EF3iO+CXkyKuuK8d9DHm7SjVFg+N/LekFNvX8Bc ihAiILkq8MRS/qWD8yn2Y3It/p1ypxsr6nFf/3+/lnFmjU2xTnc8QAWQqVSI1+4U WvWswRDmFPk/Y2YiO57kyMI/8dImzg2zu9FdkVStNUmMgF2hD4DEhYI= -----END CERTIFICATE-----Generated at Fri Jul 10 16:12:54 2026 by rpki-client