$ rpki-client -vvf krill.47272.net/repo/HYEHOST/5/AS209944.roa File: AS209944.roa (raw, json) Hash identifier: vb4l3WbSWn9kZbtw71d7/BXFFC2CKYWDz9cNaCFczbw= Subject key identifier: 4E:58:0E:93:6B:1A:0B:8A:16:48:D6:5F:ED:29:DC:57:5F:9C:29:44 Certificate issuer: /CN=C3CF41898936CB9C573DB1EAAB94C6E669951FD7 Certificate serial: 495A2E7D6DB5A5BB2255253004B3FACE32698898 Authority key identifier: C3:CF:41:89:89:36:CB:9C:57:3D:B1:EA:AB:94:C6:E6:69:95:1F:D7 Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer Subject info access: rsync://krill.47272.net/repo/HYEHOST/5/AS209944.roa Signing time: Mon 15 Jun 2026 17:06:15 +0000 ROA not before: Mon 15 Jun 2026 17:01:15 +0000 ROA not after: Mon 14 Jun 2027 17:06:15 +0000 asID: 209944 IP address blocks: 2a0f:6284:1::/48 maxlen: 48 Validation: OK Signature path: rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.crl rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 11 Jul 2026 08:00:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 49:5a:2e:7d:6d:b5:a5:bb:22:55:25:30:04:b3:fa:ce:32:69:88:98 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C3CF41898936CB9C573DB1EAAB94C6E669951FD7 Validity Not Before: Jun 15 17:01:15 2026 GMT Not After : Jun 14 17:06:15 2027 GMT Subject: CN=4E580E936B1A0B8A1648D65FED29DC575F9C2944 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:e4:a2:51:17:70:e8:75:e2:c7:ad:f3:32:bf: 1c:aa:5c:6f:72:7c:8c:fc:ac:a2:1f:25:10:e2:c6: 6a:ca:ed:01:db:af:07:62:ef:af:6b:b0:25:b1:39: 4d:a7:aa:b9:39:79:e8:0f:47:49:fb:33:46:14:6c: d1:71:1f:0d:e6:a8:6e:11:a4:e9:bd:f6:60:8a:9b: b9:97:22:30:65:c0:fb:c5:41:fc:a5:59:cf:98:de: 26:c6:ff:cf:89:40:76:39:22:c1:83:5c:ef:f7:f3: bd:ce:c4:8c:51:2c:11:04:15:92:58:2e:c9:0f:ae: 32:dd:d4:d9:52:e8:53:24:d0:cd:5d:aa:4c:a7:90: 59:88:f8:6e:cb:9e:9b:90:9f:db:82:20:a5:1b:13: 98:27:86:ce:5e:ce:9f:54:d9:3e:b1:6a:b0:6e:51: 47:07:81:3c:5c:72:4f:df:87:6a:68:f6:1b:4a:d6: 69:1b:ce:a1:1a:f4:d0:d8:89:ae:fb:65:c9:a9:fc: 78:83:70:e1:e7:d3:6a:bf:67:90:ba:82:e8:36:2d: 30:95:d0:93:1c:62:95:bf:93:20:19:50:20:08:cc: 01:3a:9e:4f:1f:9c:df:9e:ed:e1:67:57:61:46:53: 40:b8:f5:ab:5e:af:f8:dd:af:46:96:3f:f1:28:fd: 1d:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:58:0E:93:6B:1A:0B:8A:16:48:D6:5F:ED:29:DC:57:5F:9C:29:44 X509v3 Authority Key Identifier: keyid:C3:CF:41:89:89:36:CB:9C:57:3D:B1:EA:AB:94:C6:E6:69:95:1F:D7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer Subject Information Access: Signed Object - URI:rsync://krill.47272.net/repo/HYEHOST/5/AS209944.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0f:6284:1::/48 Signature Algorithm: sha256WithRSAEncryption 80:e9:03:3a:30:7d:3e:74:b2:c9:2c:fb:24:a3:13:22:0b:fb: 68:20:e6:57:30:4a:9d:dc:66:43:6d:45:d5:67:6b:8e:b5:da: 2e:33:8d:3c:f9:99:5a:ce:18:37:46:3f:b3:a3:d8:22:c6:4f: c6:a9:34:3b:bd:75:22:e3:27:39:cc:44:94:72:da:94:67:b1: 4a:db:e4:33:d9:68:c6:ba:e3:18:28:78:0d:2e:d6:9e:1e:70: be:76:11:e0:6b:9c:2c:32:56:64:52:16:67:ce:37:cc:35:d4: 8e:ac:9d:b3:0b:f4:a9:4e:35:e6:ee:49:b6:d8:24:9e:0a:78: 95:fc:ec:05:97:95:47:64:06:f3:b3:3b:d3:4a:16:5c:26:a2: 61:a3:eb:dd:9b:d1:9a:63:7b:30:24:24:0e:09:5e:63:ed:14: f7:91:ef:2b:63:d7:11:1a:d3:b8:0e:d9:97:72:3b:d6:98:a3: 9b:54:48:63:af:41:e8:1b:d8:1e:46:66:ec:f5:86:71:bd:ff: e3:d0:17:63:3c:07:cc:d8:d4:54:f8:67:70:0e:96:d4:75:c4: d2:20:4c:8a:66:d8:cb:72:ab:6f:df:44:0e:c8:52:4d:b0:ca: 52:e6:18:9c:c3:07:0a:c3:97:15:80:2c:8b:28:a1:78:4c:b9: 5b:1b:f0:f0 -----BEGIN CERTIFICATE----- MIIE1TCCA72gAwIBAgIUSVoufW21pbsiVSUwBLP6zjJpiJgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzNDRjQxODk4OTM2Q0I5QzU3M0RCMUVBQUI5NEM2RTY2 OTk1MUZENzAeFw0yNjA2MTUxNzAxMTVaFw0yNzA2MTQxNzA2MTVaMDMxMTAvBgNV BAMTKDRFNTgwRTkzNkIxQTBCOEExNjQ4RDY1RkVEMjlEQzU3NUY5QzI5NDQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCe5KJRF3DodeLHrfMyvxyqXG9y fIz8rKIfJRDixmrK7QHbrwdi769rsCWxOU2nqrk5eegPR0n7M0YUbNFxHw3mqG4R pOm99mCKm7mXIjBlwPvFQfylWc+Y3ibG/8+JQHY5IsGDXO/3873OxIxRLBEEFZJY LskPrjLd1NlS6FMk0M1dqkynkFmI+G7LnpuQn9uCIKUbE5gnhs5ezp9U2T6xarBu UUcHgTxcck/fh2po9htK1mkbzqEa9NDYia77Zcmp/HiDcOHn02q/Z5C6gug2LTCV 0JMcYpW/kyAZUCAIzAE6nk8fnN+e7eFnV2FGU0C49ater/jdr0aWP/Eo/R23AgMB AAGjggHfMIIB2zAdBgNVHQ4EFgQUTlgOk2saC4oWSNZf7SncV1+cKUQwHwYDVR0j BBgwFoAUw89BiYk2y5xXPbHqq5TG5mmVH9cwDgYDVR0PAQH/BAQDAgeAMGQGA1Ud HwRdMFswWaBXoFWGU3JzeW5jOi8va3JpbGwuNDcyNzIubmV0L3JlcG8vSFlFSE9T VC81L0MzQ0Y0MTg5ODkzNkNCOUM1NzNEQjFFQUFCOTRDNkU2Njk5NTFGRDcuY3Js MIGTBggrBgEFBQcBAQSBhjCBgzCBgAYIKwYBBQUHMAKGdHJzeW5jOi8vcnBraS1y cHMuYXJpbi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZjg1MGQwNjNlMDE4NTc1NWM5 MWJlM2Y5ZC83L0MzQ0Y0MTg5ODkzNkNCOUM1NzNEQjFFQUFCOTRDNkU2Njk5NTFG RDcuY2VyME8GCCsGAQUFBwELBEMwQTA/BggrBgEFBQcwC4YzcnN5bmM6Ly9rcmls bC40NzI3Mi5uZXQvcmVwby9IWUVIT1NULzUvQVMyMDk5NDQucm9hMBgGA1UdIAEB /wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwAq D2KEAAEwDQYJKoZIhvcNAQELBQADggEBAIDpAzowfT50ssks+ySjEyIL+2gg5lcw Sp3cZkNtRdVna4612i4zjTz5mVrOGDdGP7Oj2CLGT8apNDu9dSLjJznMRJRy2pRn sUrb5DPZaMa64xgoeA0u1p4ecL52EeBrnCwyVmRSFmfON8w11I6snbML9KlONebu SbbYJJ4KeJX87AWXlUdkBvOzO9NKFlwmomGj692b0ZpjezAkJA4JXmPtFPeR7ytj 1xEa07gO2ZdyO9aYo5tUSGOvQegb2B5GZuz1hnG9/+PQF2M8B8zY1FT4Z3AOltR1 xNIgTIpm2Mtyq2/fRA7IUk2wylLmGJzDBwrDlxWALIsooXhMuVsb8PA= -----END CERTIFICATE-----Generated at Fri Jul 10 16:12:05 2026 by rpki-client