$ rpki-client -vvf krill.47272.net/repo/HYEHOST/5/AS209944.roa File: AS209944.roa (raw, json) Hash identifier: pKJGm0aVO7v9Pf5pXOq6A/DAw/LoRIBJyJF7Og0BMz8= Subject key identifier: BA:9A:51:9C:2A:8E:71:B8:D5:B3:5D:92:99:73:36:32:1C:C5:15:2C Certificate issuer: /CN=C3CF41898936CB9C573DB1EAAB94C6E669951FD7 Certificate serial: 6262EF929DE28790DA98EB17533565496808E8F5 Authority key identifier: C3:CF:41:89:89:36:CB:9C:57:3D:B1:EA:AB:94:C6:E6:69:95:1F:D7 Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer Subject info access: rsync://krill.47272.net/repo/HYEHOST/5/AS209944.roa Signing time: Sun 22 Feb 2026 14:26:54 +0000 ROA not before: Sun 22 Feb 2026 14:21:54 +0000 ROA not after: Sun 21 Feb 2027 14:26:54 +0000 asID: 209944 IP address blocks: 2a0f:6283:1102::/48 maxlen: 48 2a0f:6284:4219::/48 maxlen: 48 Validation: OK Signature path: rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.crl rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 23 Feb 2026 19:39:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 62:62:ef:92:9d:e2:87:90:da:98:eb:17:53:35:65:49:68:08:e8:f5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C3CF41898936CB9C573DB1EAAB94C6E669951FD7 Validity Not Before: Feb 22 14:21:54 2026 GMT Not After : Feb 21 14:26:54 2027 GMT Subject: CN=BA9A519C2A8E71B8D5B35D92997336321CC5152C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:97:c5:ed:78:de:be:c0:d5:7e:88:29:01:2d: 4f:75:2e:63:ee:22:6e:6f:d6:8c:93:f6:e1:d6:99: bc:37:8b:f7:65:79:fd:f0:84:36:d9:82:c2:82:78: 4d:e2:26:75:44:b5:4e:72:89:e3:8e:68:23:7d:87: 34:a0:0a:d1:b9:7e:bb:86:c3:ae:62:8f:47:f4:4f: de:0f:83:60:01:8e:63:bb:c0:9b:0d:b8:65:cb:50: 6d:29:6d:e9:e2:01:38:04:31:14:bb:17:5d:9b:6a: c9:be:68:a8:99:ef:93:6b:22:8d:90:ca:40:96:02: 4a:74:bb:e2:03:57:c2:fd:4e:28:3a:ea:00:f6:45: e5:93:be:04:39:bb:f2:75:1e:cd:29:ff:c4:f6:b4: d0:02:93:42:0b:a6:2b:8c:f0:b3:9a:39:1f:95:44: 68:59:4e:6b:15:cb:d4:c6:80:51:e9:60:12:b7:93: 5f:1c:9f:3a:47:07:cd:bb:b6:b0:33:66:f3:74:09: 55:90:92:57:c2:76:0a:e2:23:84:a9:1d:06:b3:e9: db:0e:1a:8e:97:d2:b3:09:b1:40:b3:c7:c3:f3:42: f1:db:de:1a:5c:0d:88:67:1a:7d:1d:04:0b:56:0f: 0d:18:b8:9b:d4:86:30:3b:6d:d0:8a:8b:df:ee:51: 34:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:9A:51:9C:2A:8E:71:B8:D5:B3:5D:92:99:73:36:32:1C:C5:15:2C X509v3 Authority Key Identifier: keyid:C3:CF:41:89:89:36:CB:9C:57:3D:B1:EA:AB:94:C6:E6:69:95:1F:D7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer Subject Information Access: Signed Object - URI:rsync://krill.47272.net/repo/HYEHOST/5/AS209944.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0f:6283:1102::/48 2a0f:6284:4219::/48 Signature Algorithm: sha256WithRSAEncryption 5d:de:35:be:75:ad:ca:19:8d:07:ba:68:cd:35:f5:2b:4f:63: b8:5c:83:c4:ad:d3:26:64:da:1b:84:c5:66:75:65:66:1a:3b: da:16:c5:48:03:d6:10:70:c2:ab:02:fe:ac:5e:e5:00:79:a2: f0:58:e8:47:9c:d6:46:28:88:ac:bf:27:c6:74:4f:70:12:84: 5b:40:7c:66:72:5c:47:7d:90:ea:2e:75:97:69:08:11:31:26: 0e:70:3a:fe:cd:d0:f5:3e:17:7e:74:de:d3:30:e8:02:ec:c3: 3a:8d:28:7e:e6:4d:b3:c4:22:bb:60:bb:3b:1d:d3:4b:47:35: f9:09:4b:6f:26:15:4a:0a:ac:7b:55:f9:ae:01:cf:c3:70:6f: 3a:5a:02:09:ed:92:96:f8:ef:31:1c:0c:7a:12:39:8c:cd:76: d4:42:7c:d7:bb:86:55:4c:5d:0b:35:db:34:ba:49:dc:36:ec: fd:8e:aa:40:2d:c0:02:99:33:d9:30:19:fa:3c:d7:33:7c:1a: f5:bb:f0:53:43:1d:46:ba:96:18:e1:da:46:1f:25:15:5c:f6: fe:68:c4:a3:43:13:c8:88:2d:74:e6:b7:63:0b:a8:3d:d7:fd: fb:d2:99:bb:69:56:26:84:6d:fc:cb:e7:af:23:41:8c:bd:33: e6:42:b2:89 -----BEGIN CERTIFICATE----- MIIE3jCCA8agAwIBAgIUYmLvkp3ih5DamOsXUzVlSWgI6PUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzNDRjQxODk4OTM2Q0I5QzU3M0RCMUVBQUI5NEM2RTY2 OTk1MUZENzAeFw0yNjAyMjIxNDIxNTRaFw0yNzAyMjExNDI2NTRaMDMxMTAvBgNV BAMTKEJBOUE1MTlDMkE4RTcxQjhENUIzNUQ5Mjk5NzMzNjMyMUNDNTE1MkMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDSl8XteN6+wNV+iCkBLU91LmPu Im5v1oyT9uHWmbw3i/dlef3whDbZgsKCeE3iJnVEtU5yieOOaCN9hzSgCtG5fruG w65ij0f0T94Pg2ABjmO7wJsNuGXLUG0pbeniATgEMRS7F12basm+aKiZ75NrIo2Q ykCWAkp0u+IDV8L9Tig66gD2ReWTvgQ5u/J1Hs0p/8T2tNACk0ILpiuM8LOaOR+V RGhZTmsVy9TGgFHpYBK3k18cnzpHB827trAzZvN0CVWQklfCdgriI4SpHQaz6dsO Go6X0rMJsUCzx8PzQvHb3hpcDYhnGn0dBAtWDw0YuJvUhjA7bdCKi9/uUTQTAgMB AAGjggHoMIIB5DAdBgNVHQ4EFgQUuppRnCqOcbjVs12SmXM2MhzFFSwwHwYDVR0j BBgwFoAUw89BiYk2y5xXPbHqq5TG5mmVH9cwDgYDVR0PAQH/BAQDAgeAMGQGA1Ud HwRdMFswWaBXoFWGU3JzeW5jOi8va3JpbGwuNDcyNzIubmV0L3JlcG8vSFlFSE9T VC81L0MzQ0Y0MTg5ODkzNkNCOUM1NzNEQjFFQUFCOTRDNkU2Njk5NTFGRDcuY3Js MIGTBggrBgEFBQcBAQSBhjCBgzCBgAYIKwYBBQUHMAKGdHJzeW5jOi8vcnBraS1y cHMuYXJpbi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZjg1MGQwNjNlMDE4NTc1NWM5 MWJlM2Y5ZC83L0MzQ0Y0MTg5ODkzNkNCOUM1NzNEQjFFQUFCOTRDNkU2Njk5NTFG RDcuY2VyME8GCCsGAQUFBwELBEMwQTA/BggrBgEFBQcwC4YzcnN5bmM6Ly9rcmls bC40NzI3Mi5uZXQvcmVwby9IWUVIT1NULzUvQVMyMDk5NDQucm9hMBgGA1UdIAEB /wQOMAwwCgYIKwYBBQUHDgIwKwYIKwYBBQUHAQcBAf8EHDAaMBgEAgACMBIDBwAq D2KDEQIDBwAqD2KEQhkwDQYJKoZIhvcNAQELBQADggEBAF3eNb51rcoZjQe6aM01 9StPY7hcg8St0yZk2huExWZ1ZWYaO9oWxUgD1hBwwqsC/qxe5QB5ovBY6Eec1kYo iKy/J8Z0T3AShFtAfGZyXEd9kOoudZdpCBExJg5wOv7N0PU+F3503tMw6ALswzqN KH7mTbPEIrtguzsd00tHNfkJS28mFUoKrHtV+a4Bz8NwbzpaAgntkpb47zEcDHoS OYzNdtRCfNe7hlVMXQs12zS6Sdw27P2OqkAtwAKZM9kwGfo81zN8GvW78FNDHUa6 lhjh2kYfJRVc9v5oxKNDE8iILXTmt2MLqD3X/fvSmbtpViaEbfzL568jQYy9M+ZC sok= -----END CERTIFICATE-----Generated at Mon Feb 23 06:29:15 2026 by rpki-client