$ rpki-client -vvvf krill.47272.net/repo/HYEHOST/5/AS207455.roa File: AS207455.roa (raw, json) Hash identifier: pnLUerflPJrfUrim+DMRrBFmQ2fQRm0YsJ45jnDwkiA= Subject key identifier: 9B:1A:AE:0D:34:3C:0A:2C:DB:25:B0:49:0B:78:24:80:10:48:2F:C4 Certificate issuer: /CN=C3CF41898936CB9C573DB1EAAB94C6E669951FD7 Certificate serial: 0AE1E0790BF27656D54627B5A9F1D7DCDB63533F Authority key identifier: C3:CF:41:89:89:36:CB:9C:57:3D:B1:EA:AB:94:C6:E6:69:95:1F:D7 Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer Subject info access: rsync://krill.47272.net/repo/HYEHOST/5/AS207455.roa Signing time: Mon 10 Aug 2026 08:20:54 +0000 ROA not before: Mon 10 Aug 2026 08:15:54 +0000 ROA not after: Mon 09 Aug 2027 08:20:54 +0000 asID: 207455 IP address blocks: 2a06:1281:90::/44 maxlen: 44 Validation: OK Signature path: rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.crl rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 27 Aug 2026 20:12:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0a:e1:e0:79:0b:f2:76:56:d5:46:27:b5:a9:f1:d7:dc:db:63:53:3f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C3CF41898936CB9C573DB1EAAB94C6E669951FD7 Validity Not Before: Aug 10 08:15:54 2026 GMT Not After : Aug 9 08:20:54 2027 GMT Subject: CN=9B1AAE0D343C0A2CDB25B0490B78248010482FC4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:5f:4a:88:bf:5c:5d:48:f0:c7:cc:85:df:54: 69:6b:1d:a6:08:9f:7f:62:44:ad:a3:06:7b:51:cc: 9e:94:c1:bc:b8:e7:b4:ee:73:01:14:84:82:5b:a8: bb:33:81:86:24:83:7d:e2:22:e8:f3:51:ae:aa:b7: 10:c2:8f:86:28:66:48:a3:5f:6d:79:22:44:76:f6: 28:d8:83:fc:69:54:a7:0d:4a:db:ba:ed:27:0e:bc: 00:87:5d:81:9d:4f:92:de:b5:89:9c:dd:9d:ff:cf: 05:44:3f:df:db:a3:43:fd:3f:b4:3c:b4:36:19:a4: 5f:09:63:d2:30:f5:84:2e:8f:d1:f2:b6:44:2c:a2: eb:c6:e0:ba:1d:0c:de:ed:62:3e:6d:e7:c7:f9:c3: 92:a2:58:3a:5c:1c:44:2d:91:c8:0c:69:58:39:7c: 52:52:76:a7:6c:0a:4d:98:9b:38:9d:9a:bf:c3:64: 26:c6:a0:2e:d8:cb:ea:fd:08:cb:be:cc:39:02:cb: 84:94:4d:dd:8a:35:d1:13:9c:83:d8:14:8a:0b:03: c0:84:7c:1c:79:73:7d:b6:60:6f:37:65:35:4d:9a: 15:03:8b:3f:3b:4f:f5:80:9d:5b:c8:9f:8e:65:b3: 0d:1d:ef:50:e3:a5:4f:8a:a3:85:e2:08:4e:33:0a: 5f:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:1A:AE:0D:34:3C:0A:2C:DB:25:B0:49:0B:78:24:80:10:48:2F:C4 X509v3 Authority Key Identifier: keyid:C3:CF:41:89:89:36:CB:9C:57:3D:B1:EA:AB:94:C6:E6:69:95:1F:D7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer Subject Information Access: Signed Object - URI:rsync://krill.47272.net/repo/HYEHOST/5/AS207455.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a06:1281:90::/44 Signature Algorithm: sha256WithRSAEncryption 0e:55:63:dc:3b:4d:4d:fc:19:69:fc:4d:34:60:00:5b:a0:44: 1c:ec:cd:cd:5e:fc:81:8b:5f:3b:97:17:c0:b3:07:6d:b5:c3: a2:91:19:73:f1:32:26:ee:6d:e3:98:62:f8:56:01:28:03:43: 02:1c:f5:86:3b:82:ce:ff:20:f0:e6:7d:3c:24:27:ab:5a:e2: c0:e7:ae:e3:d1:e4:22:81:0e:76:e6:a0:bd:e5:18:97:1d:98: 7e:99:41:b5:51:ca:41:f8:18:d1:01:46:93:2c:d2:79:4a:e8: fa:e9:16:9b:54:ec:cb:7c:f8:7d:87:52:88:41:50:67:0c:10: 35:b9:88:9a:71:9e:48:69:b5:49:af:48:db:24:1a:dd:ab:3a: b9:50:b8:43:2f:f0:03:2d:25:89:fc:a6:9e:97:2b:45:0b:b3: 6d:c9:b8:bd:41:27:5e:c6:5b:16:6d:f4:b3:99:21:36:21:29: 6e:dc:d7:8a:07:c7:94:2f:be:7a:66:71:3b:0f:52:1d:be:3a: 37:21:01:9b:e3:6f:01:e2:05:1f:34:fd:b8:d7:ed:40:7e:24: 93:6b:6e:4b:50:a2:98:61:3b:ad:ee:9b:90:19:95:72:ac:fa: 60:4f:e5:bb:25:a3:74:2b:0d:8f:80:74:67:12:e6:86:fc:ff: ad:49:08:b4 -----BEGIN CERTIFICATE----- MIIE1TCCA72gAwIBAgIUCuHgeQvydlbVRie1qfHX3NtjUz8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzNDRjQxODk4OTM2Q0I5QzU3M0RCMUVBQUI5NEM2RTY2 OTk1MUZENzAeFw0yNjA4MTAwODE1NTRaFw0yNzA4MDkwODIwNTRaMDMxMTAvBgNV BAMTKDlCMUFBRTBEMzQzQzBBMkNEQjI1QjA0OTBCNzgyNDgwMTA0ODJGQzQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDBX0qIv1xdSPDHzIXfVGlrHaYI n39iRK2jBntRzJ6Uwby457TucwEUhIJbqLszgYYkg33iIujzUa6qtxDCj4YoZkij X215IkR29ijYg/xpVKcNStu67ScOvACHXYGdT5LetYmc3Z3/zwVEP9/bo0P9P7Q8 tDYZpF8JY9Iw9YQuj9HytkQsouvG4LodDN7tYj5t58f5w5KiWDpcHEQtkcgMaVg5 fFJSdqdsCk2Ymzidmr/DZCbGoC7Yy+r9CMu+zDkCy4SUTd2KNdETnIPYFIoLA8CE fBx5c322YG83ZTVNmhUDiz87T/WAnVvIn45lsw0d71DjpU+Ko4XiCE4zCl/FAgMB AAGjggHfMIIB2zAdBgNVHQ4EFgQUmxquDTQ8CizbJbBJC3gkgBBIL8QwHwYDVR0j BBgwFoAUw89BiYk2y5xXPbHqq5TG5mmVH9cwDgYDVR0PAQH/BAQDAgeAMGQGA1Ud HwRdMFswWaBXoFWGU3JzeW5jOi8va3JpbGwuNDcyNzIubmV0L3JlcG8vSFlFSE9T VC81L0MzQ0Y0MTg5ODkzNkNCOUM1NzNEQjFFQUFCOTRDNkU2Njk5NTFGRDcuY3Js MIGTBggrBgEFBQcBAQSBhjCBgzCBgAYIKwYBBQUHMAKGdHJzeW5jOi8vcnBraS1y cHMuYXJpbi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZjg1MGQwNjNlMDE4NTc1NWM5 MWJlM2Y5ZC83L0MzQ0Y0MTg5ODkzNkNCOUM1NzNEQjFFQUFCOTRDNkU2Njk5NTFG RDcuY2VyME8GCCsGAQUFBwELBEMwQTA/BggrBgEFBQcwC4YzcnN5bmM6Ly9rcmls bC40NzI3Mi5uZXQvcmVwby9IWUVIT1NULzUvQVMyMDc0NTUucm9hMBgGA1UdIAEB /wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwQq BhKBAJAwDQYJKoZIhvcNAQELBQADggEBAA5VY9w7TU38GWn8TTRgAFugRBzszc1e /IGLXzuXF8CzB221w6KRGXPxMibubeOYYvhWASgDQwIc9YY7gs7/IPDmfTwkJ6ta 4sDnruPR5CKBDnbmoL3lGJcdmH6ZQbVRykH4GNEBRpMs0nlK6PrpFptU7Mt8+H2H UohBUGcMEDW5iJpxnkhptUmvSNskGt2rOrlQuEMv8AMtJYn8pp6XK0ULs23JuL1B J17GWxZt9LOZITYhKW7c14oHx5QvvnpmcTsPUh2+OjchAZvjbwHiBR80/bjX7UB+ JJNrbktQophhO63um5AZlXKs+mBP5bslo3QrDY+AdGcS5ob8/61JCLQ= -----END CERTIFICATE-----Generated at Thu Aug 27 04:00:30 2026 by rpki-client