
$ rpki-client -vvf krill.47272.net/repo/HYEHOST/5/AS212234.roa
File: AS212234.roa (raw, json)
Hash identifier: HblJdTcVy4/xa7KZrwL8YlNO4SwJjReNpjPuD+KdUlI=
Subject key identifier: AF:49:80:33:15:2D:D1:33:70:AC:5A:01:2D:7C:7F:10:E7:DD:06:4D
Certificate issuer: /CN=C3CF41898936CB9C573DB1EAAB94C6E669951FD7
Certificate serial: 6FB2B46AD2E258234E504AA13CA982EEFFAE5D29
Authority key identifier: C3:CF:41:89:89:36:CB:9C:57:3D:B1:EA:AB:94:C6:E6:69:95:1F:D7
Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer
Subject info access: rsync://krill.47272.net/repo/HYEHOST/5/AS212234.roa
Signing time: Fri 13 Feb 2026 21:10:34 +0000
ROA not before: Fri 13 Feb 2026 21:05:34 +0000
ROA not after: Fri 12 Feb 2027 21:10:34 +0000
asID: 212234
IP address blocks: 2a0f:6284:5::/48 maxlen: 48
2a0f:6284:10::/44 maxlen: 44
2a0f:6284:d00::/40 maxlen: 48
2a0f:6284:3200::/40 maxlen: 40
Validation: OK
Signature path: rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.crl
rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.mft
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 23 Feb 2026 19:39:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6f:b2:b4:6a:d2:e2:58:23:4e:50:4a:a1:3c:a9:82:ee:ff:ae:5d:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C3CF41898936CB9C573DB1EAAB94C6E669951FD7
Validity
Not Before: Feb 13 21:05:34 2026 GMT
Not After : Feb 12 21:10:34 2027 GMT
Subject: CN=AF498033152DD13370AC5A012D7C7F10E7DD064D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:53:8a:e0:1d:6f:9c:10:84:54:85:b9:3b:57:
fd:6b:78:8f:fc:21:9c:86:2d:a5:84:2a:f6:ab:38:
54:8c:77:ee:67:83:46:e7:3a:b9:85:bd:a6:a6:e4:
3f:bd:38:f6:b0:5c:a1:f4:3a:d1:15:8a:1e:42:63:
67:5d:62:c0:39:20:ec:04:47:43:53:15:43:2d:b9:
67:50:fe:d3:f9:ff:aa:97:b9:50:58:bc:7a:0f:21:
b3:ed:7e:59:5f:59:86:01:d4:8d:da:92:dc:f0:7c:
db:5b:ae:aa:3b:ce:4a:16:35:92:de:bf:29:6f:85:
0e:14:cb:59:60:75:1d:ec:a7:32:30:e4:6d:20:b6:
fe:e3:49:42:9b:f2:9a:e3:d9:aa:3b:76:22:8e:4f:
b8:cb:58:ad:51:04:a8:66:e6:18:31:02:20:03:98:
dc:66:8f:6b:2c:f5:c0:6e:f3:14:f6:4d:39:db:20:
25:86:f5:7d:c1:36:5f:a1:21:2e:a8:ab:53:34:ac:
c9:b6:2e:a9:b6:13:82:4c:d8:cd:b8:6a:d3:89:ea:
e0:f8:18:5a:1b:db:ac:4c:e7:a7:1b:95:32:b8:b0:
ac:5c:bb:12:33:95:23:90:fb:a3:8e:0a:c8:19:a2:
ef:3a:5b:d9:8b:2f:20:cb:63:06:87:f3:12:16:95:
c7:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:49:80:33:15:2D:D1:33:70:AC:5A:01:2D:7C:7F:10:E7:DD:06:4D
X509v3 Authority Key Identifier:
keyid:C3:CF:41:89:89:36:CB:9C:57:3D:B1:EA:AB:94:C6:E6:69:95:1F:D7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer
Subject Information Access:
Signed Object - URI:rsync://krill.47272.net/repo/HYEHOST/5/AS212234.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:6284:5::/48
2a0f:6284:10::/44
2a0f:6284:d00::/40
2a0f:6284:3200::/40
Signature Algorithm: sha256WithRSAEncryption
29:b8:1f:8f:50:08:ba:9b:7f:bd:67:07:c5:99:2c:9b:c4:74:
87:bc:2a:39:67:55:c4:c2:41:35:8c:51:09:ac:ca:5e:13:37:
24:65:5b:5d:81:16:9e:a9:99:18:61:ed:fc:e5:2d:c0:62:e9:
e5:5d:a0:3c:da:d3:77:d2:e0:42:01:34:46:a3:3f:09:b7:8c:
bf:38:d1:a1:1b:43:24:97:74:e4:73:b6:d6:b7:38:96:f8:e6:
26:2e:6f:0e:69:7c:2a:5f:f8:f9:ce:36:77:c4:ce:95:ea:c8:
ae:4f:3d:da:13:b7:d4:46:e1:2b:0b:13:d5:e1:be:52:31:43:
3b:f6:62:0f:d2:a8:61:00:ce:9e:8f:9e:a7:54:dd:6b:58:af:
48:2b:74:73:76:02:d7:fc:bb:a5:93:c6:0b:cd:1c:01:60:72:
77:4c:f2:8e:0f:37:e8:e2:43:01:39:ae:6b:a6:1e:73:5b:6c:
c5:60:75:ae:ad:99:b3:c1:db:34:5f:75:91:ea:10:fa:b5:68:
93:24:93:ca:6e:f9:65:15:0b:ca:7a:dc:a0:22:1e:89:bc:c9:
3a:f5:53:7c:10:d8:60:82:60:6c:ad:95:2a:2c:9e:1c:cd:09:
ac:e7:58:4e:73:36:61:df:af:07:41:ba:44:79:3f:f7:9b:ec:
0c:e0:79:84
-----BEGIN CERTIFICATE-----
MIIE7jCCA9agAwIBAgIUb7K0atLiWCNOUEqhPKmC7v+uXSkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQzNDRjQxODk4OTM2Q0I5QzU3M0RCMUVBQUI5NEM2RTY2
OTk1MUZENzAeFw0yNjAyMTMyMTA1MzRaFw0yNzAyMTIyMTEwMzRaMDMxMTAvBgNV
BAMTKEFGNDk4MDMzMTUyREQxMzM3MEFDNUEwMTJEN0M3RjEwRTdERDA2NEQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDWU4rgHW+cEIRUhbk7V/1reI/8
IZyGLaWEKvarOFSMd+5ng0bnOrmFvaam5D+9OPawXKH0OtEVih5CY2ddYsA5IOwE
R0NTFUMtuWdQ/tP5/6qXuVBYvHoPIbPtfllfWYYB1I3aktzwfNtbrqo7zkoWNZLe
vylvhQ4Uy1lgdR3spzIw5G0gtv7jSUKb8prj2ao7diKOT7jLWK1RBKhm5hgxAiAD
mNxmj2ss9cBu8xT2TTnbICWG9X3BNl+hIS6oq1M0rMm2Lqm2E4JM2M24atOJ6uD4
GFob26xM56cblTK4sKxcuxIzlSOQ+6OOCsgZou86W9mLLyDLYwaH8xIWlcelAgMB
AAGjggH4MIIB9DAdBgNVHQ4EFgQUr0mAMxUt0TNwrFoBLXx/EOfdBk0wHwYDVR0j
BBgwFoAUw89BiYk2y5xXPbHqq5TG5mmVH9cwDgYDVR0PAQH/BAQDAgeAMGQGA1Ud
HwRdMFswWaBXoFWGU3JzeW5jOi8va3JpbGwuNDcyNzIubmV0L3JlcG8vSFlFSE9T
VC81L0MzQ0Y0MTg5ODkzNkNCOUM1NzNEQjFFQUFCOTRDNkU2Njk5NTFGRDcuY3Js
MIGTBggrBgEFBQcBAQSBhjCBgzCBgAYIKwYBBQUHMAKGdHJzeW5jOi8vcnBraS1y
cHMuYXJpbi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZjg1MGQwNjNlMDE4NTc1NWM5
MWJlM2Y5ZC83L0MzQ0Y0MTg5ODkzNkNCOUM1NzNEQjFFQUFCOTRDNkU2Njk5NTFG
RDcuY2VyME8GCCsGAQUFBwELBEMwQTA/BggrBgEFBQcwC4YzcnN5bmM6Ly9rcmls
bC40NzI3Mi5uZXQvcmVwby9IWUVIT1NULzUvQVMyMTIyMzQucm9hMBgGA1UdIAEB
/wQOMAwwCgYIKwYBBQUHDgIwOwYIKwYBBQUHAQcBAf8ELDAqMCgEAgACMCIDBwAq
D2KEAAUDBwQqD2KEABADBgAqD2KEDQMGACoPYoQyMA0GCSqGSIb3DQEBCwUAA4IB
AQApuB+PUAi6m3+9ZwfFmSybxHSHvCo5Z1XEwkE1jFEJrMpeEzckZVtdgRaeqZkY
Ye385S3AYunlXaA82tN30uBCATRGoz8Jt4y/ONGhG0Mkl3Tkc7bWtziW+OYmLm8O
aXwqX/j5zjZ3xM6V6siuTz3aE7fURuErCxPV4b5SMUM79mIP0qhhAM6ej56nVN1r
WK9IK3RzdgLX/Lulk8YLzRwBYHJ3TPKODzfo4kMBOa5rph5zW2zFYHWurZmzwds0
X3WR6hD6tWiTJJPKbvllFQvKetygIh6JvMk69VN8ENhggmBsrZUqLJ4czQms51hO
czZh368HQbpEeT/3m+wM4HmE
-----END CERTIFICATE-----
Generated at Mon Feb 23 06:26:57 2026 by rpki-client