$ rpki-client -vvf krill.47272.net/repo/HYEHOST/5/AS207836.roa File: AS207836.roa (raw, json) Hash identifier: L1U0Pfb4y8xE/smQstHPyQk+pZuT5HK9zIj+2btdqnw= Subject key identifier: 37:93:B1:72:CB:FD:92:64:3F:C5:EA:82:FC:B3:D7:49:6F:CE:2D:79 Certificate issuer: /CN=C3CF41898936CB9C573DB1EAAB94C6E669951FD7 Certificate serial: 2C5F56E0AC025B4D055461CB9DDC00B68A0D5FE2 Authority key identifier: C3:CF:41:89:89:36:CB:9C:57:3D:B1:EA:AB:94:C6:E6:69:95:1F:D7 Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer Subject info access: rsync://krill.47272.net/repo/HYEHOST/5/AS207836.roa Signing time: Thu 16 Jul 2026 18:51:56 +0000 ROA not before: Thu 16 Jul 2026 18:46:56 +0000 ROA not after: Thu 15 Jul 2027 18:51:56 +0000 asID: 207836 IP address blocks: 2a0f:6284:4500::/40 maxlen: 48 Validation: OK Signature path: rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.crl rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 22 Jul 2026 14:18:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2c:5f:56:e0:ac:02:5b:4d:05:54:61:cb:9d:dc:00:b6:8a:0d:5f:e2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C3CF41898936CB9C573DB1EAAB94C6E669951FD7 Validity Not Before: Jul 16 18:46:56 2026 GMT Not After : Jul 15 18:51:56 2027 GMT Subject: CN=3793B172CBFD92643FC5EA82FCB3D7496FCE2D79 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:64:c0:68:03:b4:35:e4:92:05:c5:c7:66:68: 89:d4:07:70:e1:7f:0f:6f:c1:47:29:2c:61:c1:2b: 05:65:83:2e:5c:62:29:12:9f:b7:3e:ca:0c:11:9c: 65:fc:5b:94:3a:d2:f7:94:5f:e4:8d:14:f0:b9:c4: 3c:ad:34:e3:4a:b0:96:88:9a:33:bb:95:63:ed:e6: 91:82:ce:8b:1d:ef:b6:82:c7:68:e9:e7:95:b8:0d: 3c:e9:58:3b:38:ab:38:bd:1a:3d:dc:9c:f3:49:e3: 5f:c2:70:af:b5:78:ae:d7:6c:a4:ff:dd:b5:18:74: f3:0b:93:d2:07:e4:86:89:24:4a:cf:8c:9d:a8:2d: 81:2c:be:93:69:22:0b:75:20:d7:96:e4:e4:c9:80: 4d:cf:96:15:12:e1:50:ce:bd:f6:1e:6f:be:15:d4: 16:69:7f:c7:78:29:29:89:19:00:4d:cc:35:08:f6: 9a:26:d0:58:69:97:e4:4a:5f:e7:fb:7e:6f:e1:35: f9:bf:e8:c3:26:ee:8b:dc:e4:91:50:ed:a7:09:9d: 08:50:39:69:8c:ee:66:e2:19:93:80:e9:73:21:15: 3a:0d:cb:94:37:ab:86:7c:45:3b:72:3c:0c:36:fb: 17:b8:6b:27:a6:48:d1:0d:46:ef:40:4f:00:63:fc: be:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:93:B1:72:CB:FD:92:64:3F:C5:EA:82:FC:B3:D7:49:6F:CE:2D:79 X509v3 Authority Key Identifier: keyid:C3:CF:41:89:89:36:CB:9C:57:3D:B1:EA:AB:94:C6:E6:69:95:1F:D7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer Subject Information Access: Signed Object - URI:rsync://krill.47272.net/repo/HYEHOST/5/AS207836.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0f:6284:4500::/40 Signature Algorithm: sha256WithRSAEncryption 8c:d0:27:9a:3e:0d:07:b4:88:e4:da:aa:e1:52:88:94:c2:0e: 26:aa:51:c3:eb:5e:58:28:28:4c:b4:f1:a9:5f:fe:b6:38:d7: 52:a2:66:e8:00:02:5f:79:a0:69:1f:b8:f0:13:87:53:62:aa: 12:10:33:54:46:8a:3f:1c:2f:64:26:cd:c4:58:f9:5b:7c:17: d1:8f:cf:a6:87:78:55:7b:5b:b4:f7:45:1c:43:be:de:ce:b5: 5c:ed:36:bb:21:70:d6:8f:9e:6a:47:43:63:54:27:d5:29:31: 97:ae:77:5d:7c:e4:32:47:d6:a8:d8:df:4c:65:08:e5:23:6c: 87:dd:ee:02:4d:85:aa:cb:ba:d4:9f:c3:68:aa:1e:10:d1:9b: 2e:8a:c1:ca:c4:fb:6c:a9:b8:6e:3e:19:ee:f9:e3:ce:85:ec: eb:5d:43:da:6c:27:f5:60:2f:2b:43:43:a4:b0:b7:90:11:a4: e7:c8:c7:a6:62:db:72:75:3e:75:97:33:3b:c2:94:dd:38:c0: 51:eb:c5:d7:09:c2:02:57:2c:50:1d:28:3d:57:96:8e:2d:16: a4:b3:be:58:5f:26:ed:d9:f3:99:20:da:30:94:1a:48:36:49: 3d:2d:40:6c:3a:3e:c7:2c:ee:90:87:9a:70:5c:4a:8e:b9:51: 02:4b:ec:91 -----BEGIN CERTIFICATE----- MIIE1DCCA7ygAwIBAgIULF9W4KwCW00FVGHLndwAtooNX+IwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzNDRjQxODk4OTM2Q0I5QzU3M0RCMUVBQUI5NEM2RTY2 OTk1MUZENzAeFw0yNjA3MTYxODQ2NTZaFw0yNzA3MTUxODUxNTZaMDMxMTAvBgNV BAMTKDM3OTNCMTcyQ0JGRDkyNjQzRkM1RUE4MkZDQjNENzQ5NkZDRTJENzkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCfZMBoA7Q15JIFxcdmaInUB3Dh fw9vwUcpLGHBKwVlgy5cYikSn7c+ygwRnGX8W5Q60veUX+SNFPC5xDytNONKsJaI mjO7lWPt5pGCzosd77aCx2jp55W4DTzpWDs4qzi9Gj3cnPNJ41/CcK+1eK7XbKT/ 3bUYdPMLk9IH5IaJJErPjJ2oLYEsvpNpIgt1INeW5OTJgE3PlhUS4VDOvfYeb74V 1BZpf8d4KSmJGQBNzDUI9pom0Fhpl+RKX+f7fm/hNfm/6MMm7ovc5JFQ7acJnQhQ OWmM7mbiGZOA6XMhFToNy5Q3q4Z8RTtyPAw2+xe4ayemSNENRu9ATwBj/L7PAgMB AAGjggHeMIIB2jAdBgNVHQ4EFgQUN5Oxcsv9kmQ/xeqC/LPXSW/OLXkwHwYDVR0j BBgwFoAUw89BiYk2y5xXPbHqq5TG5mmVH9cwDgYDVR0PAQH/BAQDAgeAMGQGA1Ud HwRdMFswWaBXoFWGU3JzeW5jOi8va3JpbGwuNDcyNzIubmV0L3JlcG8vSFlFSE9T VC81L0MzQ0Y0MTg5ODkzNkNCOUM1NzNEQjFFQUFCOTRDNkU2Njk5NTFGRDcuY3Js MIGTBggrBgEFBQcBAQSBhjCBgzCBgAYIKwYBBQUHMAKGdHJzeW5jOi8vcnBraS1y cHMuYXJpbi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZjg1MGQwNjNlMDE4NTc1NWM5 MWJlM2Y5ZC83L0MzQ0Y0MTg5ODkzNkNCOUM1NzNEQjFFQUFCOTRDNkU2Njk5NTFG RDcuY2VyME8GCCsGAQUFBwELBEMwQTA/BggrBgEFBQcwC4YzcnN5bmM6Ly9rcmls bC40NzI3Mi5uZXQvcmVwby9IWUVIT1NULzUvQVMyMDc4MzYucm9hMBgGA1UdIAEB /wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgACMAgDBgAq D2KERTANBgkqhkiG9w0BAQsFAAOCAQEAjNAnmj4NB7SI5Nqq4VKIlMIOJqpRw+te WCgoTLTxqV/+tjjXUqJm6AACX3mgaR+48BOHU2KqEhAzVEaKPxwvZCbNxFj5W3wX 0Y/Ppod4VXtbtPdFHEO+3s61XO02uyFw1o+eakdDY1Qn1Skxl653XXzkMkfWqNjf TGUI5SNsh93uAk2Fqsu61J/DaKoeENGbLorBysT7bKm4bj4Z7vnjzoXs611D2mwn 9WAvK0NDpLC3kBGk58jHpmLbcnU+dZczO8KU3TjAUevF1wnCAlcsUB0oPVeWji0W pLO+WF8m7dnzmSDaMJQaSDZJPS1AbDo+xyzukIeacFxKjrlRAkvskQ== -----END CERTIFICATE-----Generated at Tue Jul 21 20:30:37 2026 by rpki-client