$ rpki-client -vvvf krill.47272.net/repo/HYEHOST/5/AS212762.roa File: AS212762.roa (raw, json) Hash identifier: FbanMA9xWZl3+O9q8GdXZffbTRLQL0wcLZk0TpTru/Y= Subject key identifier: F1:E5:85:4C:2C:03:BA:C3:AC:BE:29:6B:B2:7A:4E:24:4B:4E:8D:74 Certificate issuer: /CN=C3CF41898936CB9C573DB1EAAB94C6E669951FD7 Certificate serial: 255698E5571868FF3D0DB2147E3575AFE6EE5FB1 Authority key identifier: C3:CF:41:89:89:36:CB:9C:57:3D:B1:EA:AB:94:C6:E6:69:95:1F:D7 Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer Subject info access: rsync://krill.47272.net/repo/HYEHOST/5/AS212762.roa Signing time: Fri 07 Aug 2026 15:04:48 +0000 ROA not before: Fri 07 Aug 2026 14:59:48 +0000 ROA not after: Fri 06 Aug 2027 15:04:48 +0000 asID: 212762 IP address blocks: 2a0f:6280:1500::/40 maxlen: 48 Validation: OK Signature path: rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.crl rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 26 Aug 2026 13:10:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 25:56:98:e5:57:18:68:ff:3d:0d:b2:14:7e:35:75:af:e6:ee:5f:b1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C3CF41898936CB9C573DB1EAAB94C6E669951FD7 Validity Not Before: Aug 7 14:59:48 2026 GMT Not After : Aug 6 15:04:48 2027 GMT Subject: CN=F1E5854C2C03BAC3ACBE296BB27A4E244B4E8D74 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:91:0e:65:c4:6e:95:ca:2b:62:46:2e:e3:b2: ad:38:73:f2:d8:bd:ca:4e:04:c5:e4:35:48:d4:3a: 6e:0f:b4:45:86:ee:63:0c:db:e5:b4:b5:e6:27:5c: 8d:27:d6:90:39:69:0b:6e:7b:f2:0c:b7:b3:ec:33: c1:40:a5:96:31:59:c7:59:c4:df:32:e9:cf:16:7b: 79:e4:a4:a5:36:f5:ad:58:c7:8e:ea:2b:fe:de:1f: a8:83:1d:45:17:dd:9e:f3:b5:b3:12:d5:fb:66:3e: 65:51:a0:4a:c9:a4:b6:86:3a:d6:44:e4:ea:d1:73: 18:fd:8e:e4:04:c9:47:f4:d7:52:bf:13:f0:5b:73: 24:25:a0:02:71:db:e7:05:d0:68:52:54:d6:9b:96: af:77:05:c6:e6:36:59:7f:a8:93:1d:f5:b5:4a:26: d5:76:e7:ef:31:3d:24:83:54:f3:7d:af:0c:ac:9d: 90:30:73:40:63:fa:ec:b7:28:81:2c:0e:1e:4f:82: 83:65:9f:51:92:95:68:f8:2a:83:47:52:e7:ab:40: a5:ea:f1:77:71:7e:98:de:cc:a0:61:d4:99:7d:fb: 37:05:40:e8:92:44:3b:9f:c0:64:04:60:dd:92:24: 6d:e0:d2:0c:7c:75:a4:66:57:c2:60:35:3b:24:64: d0:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:E5:85:4C:2C:03:BA:C3:AC:BE:29:6B:B2:7A:4E:24:4B:4E:8D:74 X509v3 Authority Key Identifier: keyid:C3:CF:41:89:89:36:CB:9C:57:3D:B1:EA:AB:94:C6:E6:69:95:1F:D7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer Subject Information Access: Signed Object - URI:rsync://krill.47272.net/repo/HYEHOST/5/AS212762.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0f:6280:1500::/40 Signature Algorithm: sha256WithRSAEncryption 55:87:22:21:1b:af:b5:de:7e:2e:16:78:71:11:ce:87:6a:be: ce:fa:4f:e5:74:55:fd:dd:11:33:3e:8a:52:cd:91:b8:6e:23: 30:81:08:56:17:75:35:4f:ed:f5:b4:4a:16:2a:01:e9:7d:5e: 59:82:4b:d9:f4:52:ef:76:05:5e:1a:9d:23:8d:5a:66:e2:82: 57:f5:25:83:16:f5:b0:66:f8:58:a9:b6:2e:63:c9:f4:84:69: 5b:0b:94:15:6e:c8:9d:18:01:66:10:78:d2:b6:9e:c2:e4:fe: 75:31:52:45:12:d0:f9:11:54:49:00:30:00:9a:46:b5:ea:ab: f2:ff:05:fd:70:e7:ba:80:15:64:8a:8f:63:54:de:b5:25:35: e2:13:74:a9:26:95:80:d4:59:7f:c3:20:a7:ba:80:54:89:9d: cb:99:1d:27:88:89:51:0d:71:e4:b0:c6:33:fd:84:da:79:76: 06:39:07:ca:67:d3:2d:1d:d3:17:c6:9a:f1:2c:e8:be:db:bf: 42:55:02:d0:7e:1f:86:3d:ba:0e:ce:06:7a:68:dc:01:19:6a: 4d:9e:1f:da:e5:f5:17:f5:c6:e0:3b:ac:bd:23:50:85:eb:c3: 1f:03:65:68:33:86:a9:21:9c:f4:69:d7:0b:8f:f4:af:41:77: 99:5e:45:7a -----BEGIN CERTIFICATE----- MIIE1DCCA7ygAwIBAgIUJVaY5VcYaP89DbIUfjV1r+buX7EwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzNDRjQxODk4OTM2Q0I5QzU3M0RCMUVBQUI5NEM2RTY2 OTk1MUZENzAeFw0yNjA4MDcxNDU5NDhaFw0yNzA4MDYxNTA0NDhaMDMxMTAvBgNV BAMTKEYxRTU4NTRDMkMwM0JBQzNBQ0JFMjk2QkIyN0E0RTI0NEI0RThENzQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDDkQ5lxG6VyitiRi7jsq04c/LY vcpOBMXkNUjUOm4PtEWG7mMM2+W0teYnXI0n1pA5aQtue/IMt7PsM8FApZYxWcdZ xN8y6c8We3nkpKU29a1Yx47qK/7eH6iDHUUX3Z7ztbMS1ftmPmVRoErJpLaGOtZE 5OrRcxj9juQEyUf011K/E/BbcyQloAJx2+cF0GhSVNablq93BcbmNll/qJMd9bVK JtV25+8xPSSDVPN9rwysnZAwc0Bj+uy3KIEsDh5PgoNln1GSlWj4KoNHUuerQKXq 8XdxfpjezKBh1Jl9+zcFQOiSRDufwGQEYN2SJG3g0gx8daRmV8JgNTskZND5AgMB AAGjggHeMIIB2jAdBgNVHQ4EFgQU8eWFTCwDusOsvilrsnpOJEtOjXQwHwYDVR0j BBgwFoAUw89BiYk2y5xXPbHqq5TG5mmVH9cwDgYDVR0PAQH/BAQDAgeAMGQGA1Ud HwRdMFswWaBXoFWGU3JzeW5jOi8va3JpbGwuNDcyNzIubmV0L3JlcG8vSFlFSE9T VC81L0MzQ0Y0MTg5ODkzNkNCOUM1NzNEQjFFQUFCOTRDNkU2Njk5NTFGRDcuY3Js MIGTBggrBgEFBQcBAQSBhjCBgzCBgAYIKwYBBQUHMAKGdHJzeW5jOi8vcnBraS1y cHMuYXJpbi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZjg1MGQwNjNlMDE4NTc1NWM5 MWJlM2Y5ZC83L0MzQ0Y0MTg5ODkzNkNCOUM1NzNEQjFFQUFCOTRDNkU2Njk5NTFG RDcuY2VyME8GCCsGAQUFBwELBEMwQTA/BggrBgEFBQcwC4YzcnN5bmM6Ly9rcmls bC40NzI3Mi5uZXQvcmVwby9IWUVIT1NULzUvQVMyMTI3NjIucm9hMBgGA1UdIAEB /wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgACMAgDBgAq D2KAFTANBgkqhkiG9w0BAQsFAAOCAQEAVYciIRuvtd5+LhZ4cRHOh2q+zvpP5XRV /d0RMz6KUs2RuG4jMIEIVhd1NU/t9bRKFioB6X1eWYJL2fRS73YFXhqdI41aZuKC V/Ulgxb1sGb4WKm2LmPJ9IRpWwuUFW7InRgBZhB40raewuT+dTFSRRLQ+RFUSQAw AJpGteqr8v8F/XDnuoAVZIqPY1TetSU14hN0qSaVgNRZf8Mgp7qAVImdy5kdJ4iJ UQ1x5LDGM/2E2nl2BjkHymfTLR3TF8aa8Szovtu/QlUC0H4fhj26Ds4GemjcARlq TZ4f2uX1F/XG4DusvSNQhevDHwNlaDOGqSGc9GnXC4/0r0F3mV5Feg== -----END CERTIFICATE-----Generated at Wed Aug 26 02:53:58 2026 by rpki-client