$ rpki-client -vvf krill.47272.net/repo/HYEHOST/5/AS212895.roa File: AS212895.roa (raw, json) Hash identifier: drk/+tLZfFWZQVkhIfunWMfaaEpR86vgWvHwGx7VKWM= Subject key identifier: B0:DF:12:F1:38:53:03:E6:2C:4F:03:33:A4:36:69:F4:DB:6D:BD:C6 Certificate issuer: /CN=C3CF41898936CB9C573DB1EAAB94C6E669951FD7 Certificate serial: 1B57377C01B43AFDC0776716E0F1B54654FDF9AD Authority key identifier: C3:CF:41:89:89:36:CB:9C:57:3D:B1:EA:AB:94:C6:E6:69:95:1F:D7 Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer Subject info access: rsync://krill.47272.net/repo/HYEHOST/5/AS212895.roa Signing time: Mon 16 Feb 2026 13:47:29 +0000 ROA not before: Mon 16 Feb 2026 13:42:29 +0000 ROA not after: Mon 15 Feb 2027 13:47:29 +0000 asID: 212895 IP address blocks: 2a0f:6284:d::/48 maxlen: 48 Validation: OK Signature path: rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.crl rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 23 Feb 2026 19:39:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1b:57:37:7c:01:b4:3a:fd:c0:77:67:16:e0:f1:b5:46:54:fd:f9:ad Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C3CF41898936CB9C573DB1EAAB94C6E669951FD7 Validity Not Before: Feb 16 13:42:29 2026 GMT Not After : Feb 15 13:47:29 2027 GMT Subject: CN=B0DF12F1385303E62C4F0333A43669F4DB6DBDC6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:f7:b4:a7:26:d7:6e:be:a9:60:c1:87:98:7e: 07:38:17:08:27:65:12:96:b2:4e:30:3b:31:ad:9c: 28:1c:b8:bc:d4:be:c6:79:1c:7b:06:fb:43:27:35: 42:ec:14:08:c8:62:79:93:9a:42:96:58:70:63:07: e1:c2:fe:a6:ff:4c:57:ed:19:84:b3:a7:55:67:3e: d0:32:d2:66:44:ed:9a:86:ab:d8:f7:87:2e:09:8c: bb:4e:4c:21:a9:d3:84:3c:9c:4c:34:93:03:f7:2d: 57:9c:57:52:5e:53:34:14:8a:6a:58:3a:dd:d4:d2: a0:8a:f7:ec:c2:b2:41:1f:9d:c9:31:13:38:02:ae: 8c:19:47:c7:07:82:d6:fb:19:2d:cb:f9:04:98:42: 3d:a0:2b:30:e7:7c:cb:c5:be:10:b1:82:a8:23:19: 02:72:f3:cf:ef:d1:95:d6:d2:66:2d:d5:70:0a:8d: a7:c9:98:f8:e9:e5:ea:fa:da:66:99:ec:ce:4b:8a: 24:b2:a3:40:7c:cd:c2:df:95:f1:be:50:58:b9:5d: 27:2e:14:71:ac:99:6f:01:4d:ea:f8:f7:ad:a0:b9: 3e:58:c9:23:34:fe:5d:99:2f:be:e7:ba:d7:4c:84: 7b:40:66:b3:58:87:a8:7a:9e:2b:0e:fb:9d:60:11: 87:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:DF:12:F1:38:53:03:E6:2C:4F:03:33:A4:36:69:F4:DB:6D:BD:C6 X509v3 Authority Key Identifier: keyid:C3:CF:41:89:89:36:CB:9C:57:3D:B1:EA:AB:94:C6:E6:69:95:1F:D7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer Subject Information Access: Signed Object - URI:rsync://krill.47272.net/repo/HYEHOST/5/AS212895.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0f:6284:d::/48 Signature Algorithm: sha256WithRSAEncryption 2d:2f:92:0a:97:d1:e1:b4:12:c4:c4:ed:c3:33:af:7f:29:70: 3c:ed:51:5e:f4:d6:8a:5c:b1:af:73:cf:a1:0d:43:ef:70:0c: a1:6b:84:9c:96:63:78:b2:7b:4a:2e:53:19:51:99:3d:86:6d: 54:52:20:a6:0a:98:03:d7:0b:58:5e:8b:55:7d:94:97:52:c8: 24:2e:77:07:6f:64:d7:23:d4:b1:a4:1b:b0:8a:59:4f:a6:7f: fa:56:c6:77:c6:97:ca:f9:41:f3:b3:81:71:26:72:dc:33:4e: 9f:18:51:36:71:1c:56:4c:3c:49:6d:70:39:99:c7:b8:bd:ae: 83:28:4c:a7:ef:f4:d6:0d:7e:9f:65:03:b4:94:a9:cc:44:de: 8d:ab:cb:86:27:94:12:b7:66:9d:db:ea:e7:a8:ea:30:a2:80: 4e:f2:82:fc:19:04:a1:09:f3:d4:be:af:f9:54:32:ae:cd:4b: 3c:b9:7a:c5:aa:49:a4:30:aa:e3:29:ca:3e:e5:f4:ff:2c:16: 6d:b7:3f:9b:a8:ab:7e:42:3f:17:18:ea:ff:dd:1a:24:0f:86: 4f:7d:02:41:80:64:e1:94:18:08:17:0e:ba:40:e7:13:e8:f8: 9a:dc:90:2b:f9:45:89:cc:f5:a6:f5:d3:fa:3c:88:f2:d3:8f: 5c:66:a4:4b -----BEGIN CERTIFICATE----- MIIE1TCCA72gAwIBAgIUG1c3fAG0Ov3Ad2cW4PG1RlT9+a0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzNDRjQxODk4OTM2Q0I5QzU3M0RCMUVBQUI5NEM2RTY2 OTk1MUZENzAeFw0yNjAyMTYxMzQyMjlaFw0yNzAyMTUxMzQ3MjlaMDMxMTAvBgNV BAMTKEIwREYxMkYxMzg1MzAzRTYyQzRGMDMzM0E0MzY2OUY0REI2REJEQzYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC897SnJtduvqlgwYeYfgc4Fwgn ZRKWsk4wOzGtnCgcuLzUvsZ5HHsG+0MnNULsFAjIYnmTmkKWWHBjB+HC/qb/TFft GYSzp1VnPtAy0mZE7ZqGq9j3hy4JjLtOTCGp04Q8nEw0kwP3LVecV1JeUzQUimpY Ot3U0qCK9+zCskEfnckxEzgCrowZR8cHgtb7GS3L+QSYQj2gKzDnfMvFvhCxgqgj GQJy88/v0ZXW0mYt1XAKjafJmPjp5er62maZ7M5LiiSyo0B8zcLflfG+UFi5XScu FHGsmW8BTer4962guT5YySM0/l2ZL77nutdMhHtAZrNYh6h6nisO+51gEYcRAgMB AAGjggHfMIIB2zAdBgNVHQ4EFgQUsN8S8ThTA+YsTwMzpDZp9NttvcYwHwYDVR0j BBgwFoAUw89BiYk2y5xXPbHqq5TG5mmVH9cwDgYDVR0PAQH/BAQDAgeAMGQGA1Ud HwRdMFswWaBXoFWGU3JzeW5jOi8va3JpbGwuNDcyNzIubmV0L3JlcG8vSFlFSE9T VC81L0MzQ0Y0MTg5ODkzNkNCOUM1NzNEQjFFQUFCOTRDNkU2Njk5NTFGRDcuY3Js MIGTBggrBgEFBQcBAQSBhjCBgzCBgAYIKwYBBQUHMAKGdHJzeW5jOi8vcnBraS1y cHMuYXJpbi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZjg1MGQwNjNlMDE4NTc1NWM5 MWJlM2Y5ZC83L0MzQ0Y0MTg5ODkzNkNCOUM1NzNEQjFFQUFCOTRDNkU2Njk5NTFG RDcuY2VyME8GCCsGAQUFBwELBEMwQTA/BggrBgEFBQcwC4YzcnN5bmM6Ly9rcmls bC40NzI3Mi5uZXQvcmVwby9IWUVIT1NULzUvQVMyMTI4OTUucm9hMBgGA1UdIAEB /wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwAq D2KEAA0wDQYJKoZIhvcNAQELBQADggEBAC0vkgqX0eG0EsTE7cMzr38pcDztUV70 1opcsa9zz6ENQ+9wDKFrhJyWY3iye0ouUxlRmT2GbVRSIKYKmAPXC1hei1V9lJdS yCQudwdvZNcj1LGkG7CKWU+mf/pWxnfGl8r5QfOzgXEmctwzTp8YUTZxHFZMPElt cDmZx7i9roMoTKfv9NYNfp9lA7SUqcxE3o2ry4YnlBK3Zp3b6ueo6jCigE7ygvwZ BKEJ89S+r/lUMq7NSzy5esWqSaQwquMpyj7l9P8sFm23P5uoq35CPxcY6v/dGiQP hk99AkGAZOGUGAgXDrpA5xPo+JrckCv5RYnM9ab10/o8iPLTj1xmpEs= -----END CERTIFICATE-----Generated at Mon Feb 23 06:23:39 2026 by rpki-client