$ rpki-client -vvf krill.47272.net/repo/HYEHOST/5/AS206604.roa File: AS206604.roa (raw, json) Hash identifier: 35EbzBDVqT6HDwSOkKXFyuPvB+1N+tPI5f2SJvkadqs= Subject key identifier: C5:6F:1B:A3:B9:2D:5B:B6:73:94:3F:1F:47:9D:36:D5:E4:66:F4:C5 Certificate issuer: /CN=C3CF41898936CB9C573DB1EAAB94C6E669951FD7 Certificate serial: 33F6553461525A38CAD98701C1DEE5CD8EB281CF Authority key identifier: C3:CF:41:89:89:36:CB:9C:57:3D:B1:EA:AB:94:C6:E6:69:95:1F:D7 Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer Subject info access: rsync://krill.47272.net/repo/HYEHOST/5/AS206604.roa Signing time: Tue 10 Feb 2026 22:13:25 +0000 ROA not before: Tue 10 Feb 2026 22:08:25 +0000 ROA not after: Tue 09 Feb 2027 22:13:25 +0000 asID: 206604 IP address blocks: 2a0f:6282::/36 maxlen: 48 Validation: OK Signature path: rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.crl rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 23 Feb 2026 19:39:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 33:f6:55:34:61:52:5a:38:ca:d9:87:01:c1:de:e5:cd:8e:b2:81:cf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C3CF41898936CB9C573DB1EAAB94C6E669951FD7 Validity Not Before: Feb 10 22:08:25 2026 GMT Not After : Feb 9 22:13:25 2027 GMT Subject: CN=C56F1BA3B92D5BB673943F1F479D36D5E466F4C5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:59:0a:26:8d:06:57:18:56:1d:4b:12:d0:59: ad:0d:f6:b0:2a:d8:2e:68:1f:cf:e7:91:cd:71:29: da:14:1c:33:f1:6e:12:23:b6:26:9b:8c:79:d6:57: 32:ee:77:65:54:89:0c:36:6a:17:5d:5a:90:48:57: 9f:b5:a6:84:69:a2:f5:bc:d8:8b:4b:91:80:5f:12: af:8c:da:e3:50:bd:4e:f5:37:92:fe:75:b9:15:cc: f3:ac:b5:93:3d:41:6b:01:ce:2e:d4:c8:3d:e4:cc: 08:d3:9c:00:75:88:d8:b9:5d:d3:b0:b6:1e:57:1d: 04:a2:56:31:a1:51:86:e8:16:7f:92:ab:70:7a:7d: 54:3d:f1:a8:b3:fa:39:13:46:09:b7:10:ac:9e:be: d0:7e:34:6f:2f:13:76:4f:2e:92:6c:cd:8c:14:0a: 66:17:71:74:f6:ce:98:0e:51:aa:e7:9b:41:3e:75: 38:b8:b8:a1:9f:f9:1e:fe:ae:fc:00:ca:25:18:b9: 09:cc:b5:1e:ca:af:c3:8f:f1:bf:c0:cd:51:f6:67: 34:2f:98:a5:90:54:cc:cf:df:26:98:d6:e3:f6:f6: 0f:c1:bb:c3:91:35:e2:1f:ee:02:ae:85:08:f4:ed: 60:a2:44:e9:17:56:c9:9c:de:dc:e5:2b:64:dd:62: 1a:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:6F:1B:A3:B9:2D:5B:B6:73:94:3F:1F:47:9D:36:D5:E4:66:F4:C5 X509v3 Authority Key Identifier: keyid:C3:CF:41:89:89:36:CB:9C:57:3D:B1:EA:AB:94:C6:E6:69:95:1F:D7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer Subject Information Access: Signed Object - URI:rsync://krill.47272.net/repo/HYEHOST/5/AS206604.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0f:6282::/36 Signature Algorithm: sha256WithRSAEncryption 71:04:f5:ce:5a:59:9d:47:a0:19:a9:5c:1d:e2:8c:64:45:34: fc:cf:fe:ab:77:61:07:6e:a0:07:75:a5:d7:d2:16:4b:f5:b8: 8f:7d:d9:23:4a:17:8b:ec:0c:48:30:c8:5c:6b:7f:2d:10:c6: 21:c5:31:76:03:42:29:de:ab:ed:e8:fc:d4:87:6c:09:88:2c: 65:be:27:74:f9:67:87:3b:08:b2:e6:a7:e1:db:87:e9:15:9a: 0d:c7:3e:28:02:b3:68:37:fa:36:d4:8d:d5:ea:45:1c:22:94: 87:fb:ab:fb:21:88:97:75:27:18:33:46:fc:5b:c9:d8:f3:25: 6c:31:95:b2:20:d1:86:80:0a:6c:15:bf:33:0c:26:a2:a3:1a: a5:2f:58:62:f3:2e:ec:4a:0d:f7:f8:78:b9:dd:36:3a:03:da: 6a:ae:4d:06:96:72:12:3c:7f:eb:46:d9:b6:1a:50:6a:c3:0d: 40:c3:76:c1:51:ef:43:08:2b:dd:c9:f5:0e:3c:1d:94:b5:0f: 04:64:a6:7c:f0:68:07:76:13:fc:15:1f:11:cb:ca:44:c6:9b: 4c:59:5a:8a:26:87:23:10:ab:46:96:4a:ac:4e:40:3b:ae:6f: c0:16:64:06:e9:58:df:ae:31:00:51:c8:af:ff:b3:94:1c:7e: 83:53:94:b0 -----BEGIN CERTIFICATE----- MIIE1DCCA7ygAwIBAgIUM/ZVNGFSWjjK2YcBwd7lzY6ygc8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzNDRjQxODk4OTM2Q0I5QzU3M0RCMUVBQUI5NEM2RTY2 OTk1MUZENzAeFw0yNjAyMTAyMjA4MjVaFw0yNzAyMDkyMjEzMjVaMDMxMTAvBgNV BAMTKEM1NkYxQkEzQjkyRDVCQjY3Mzk0M0YxRjQ3OUQzNkQ1RTQ2NkY0QzUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDhWQomjQZXGFYdSxLQWa0N9rAq 2C5oH8/nkc1xKdoUHDPxbhIjtiabjHnWVzLud2VUiQw2ahddWpBIV5+1poRpovW8 2ItLkYBfEq+M2uNQvU71N5L+dbkVzPOstZM9QWsBzi7UyD3kzAjTnAB1iNi5XdOw th5XHQSiVjGhUYboFn+Sq3B6fVQ98aiz+jkTRgm3EKyevtB+NG8vE3ZPLpJszYwU CmYXcXT2zpgOUarnm0E+dTi4uKGf+R7+rvwAyiUYuQnMtR7Kr8OP8b/AzVH2ZzQv mKWQVMzP3yaY1uP29g/Bu8ORNeIf7gKuhQj07WCiROkXVsmc3tzlK2TdYhq/AgMB AAGjggHeMIIB2jAdBgNVHQ4EFgQUxW8bo7ktW7ZzlD8fR5021eRm9MUwHwYDVR0j BBgwFoAUw89BiYk2y5xXPbHqq5TG5mmVH9cwDgYDVR0PAQH/BAQDAgeAMGQGA1Ud HwRdMFswWaBXoFWGU3JzeW5jOi8va3JpbGwuNDcyNzIubmV0L3JlcG8vSFlFSE9T VC81L0MzQ0Y0MTg5ODkzNkNCOUM1NzNEQjFFQUFCOTRDNkU2Njk5NTFGRDcuY3Js MIGTBggrBgEFBQcBAQSBhjCBgzCBgAYIKwYBBQUHMAKGdHJzeW5jOi8vcnBraS1y cHMuYXJpbi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZjg1MGQwNjNlMDE4NTc1NWM5 MWJlM2Y5ZC83L0MzQ0Y0MTg5ODkzNkNCOUM1NzNEQjFFQUFCOTRDNkU2Njk5NTFG RDcuY2VyME8GCCsGAQUFBwELBEMwQTA/BggrBgEFBQcwC4YzcnN5bmM6Ly9rcmls bC40NzI3Mi5uZXQvcmVwby9IWUVIT1NULzUvQVMyMDY2MDQucm9hMBgGA1UdIAEB /wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgACMAgDBgQq D2KCADANBgkqhkiG9w0BAQsFAAOCAQEAcQT1zlpZnUegGalcHeKMZEU0/M/+q3dh B26gB3Wl19IWS/W4j33ZI0oXi+wMSDDIXGt/LRDGIcUxdgNCKd6r7ej81IdsCYgs Zb4ndPlnhzsIsuan4duH6RWaDcc+KAKzaDf6NtSN1epFHCKUh/ur+yGIl3UnGDNG /FvJ2PMlbDGVsiDRhoAKbBW/MwwmoqMapS9YYvMu7EoN9/h4ud02OgPaaq5NBpZy Ejx/60bZthpQasMNQMN2wVHvQwgr3cn1DjwdlLUPBGSmfPBoB3YT/BUfEcvKRMab TFlaiiaHIxCrRpZKrE5AO65vwBZkBulY364xAFHIr/+zlBx+g1OUsA== -----END CERTIFICATE-----Generated at Mon Feb 23 06:23:40 2026 by rpki-client