
$ rpki-client -vvvf krill.47272.net/repo/HYEHOST/5/AS213036.roa
File: AS213036.roa (raw, json)
Hash identifier: gCcuRf9LAkkTlPq/8A27Ivru6oibft7xwEChrrlz3DE=
Subject key identifier: BA:5F:AF:5B:04:02:F6:85:B3:50:F9:CC:A4:02:9D:60:83:DC:8A:9D
Certificate issuer: /CN=C3CF41898936CB9C573DB1EAAB94C6E669951FD7
Certificate serial: 0EF69CB280ED906A50EC5F6ABC745FFB0C56C8EC
Authority key identifier: C3:CF:41:89:89:36:CB:9C:57:3D:B1:EA:AB:94:C6:E6:69:95:1F:D7
Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer
Subject info access: rsync://krill.47272.net/repo/HYEHOST/5/AS213036.roa
Signing time: Sun 18 Oct 2026 06:34:10 +0000
ROA not before: Sun 18 Oct 2026 06:29:10 +0000
ROA not after: Sun 17 Oct 2027 06:34:10 +0000
asID: 213036
IP address blocks: 2a06:1281:60::/44 maxlen: 48
Validation: OK
Signature path: rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.crl
rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.mft
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 23 Oct 2026 08:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0e:f6:9c:b2:80:ed:90:6a:50:ec:5f:6a:bc:74:5f:fb:0c:56:c8:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C3CF41898936CB9C573DB1EAAB94C6E669951FD7
Validity
Not Before: Oct 18 06:29:10 2026 GMT
Not After : Oct 17 06:34:10 2027 GMT
Subject: CN=BA5FAF5B0402F685B350F9CCA4029D6083DC8A9D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:67:28:ee:e4:ef:a3:8c:d4:42:91:99:50:cb:
f8:f8:f1:94:07:af:f9:e4:c1:20:5b:f3:c5:69:19:
46:6f:b1:b9:ab:3c:4d:1b:b6:21:e0:27:15:b2:bd:
d5:87:9d:b8:1d:33:66:cf:d9:09:b6:f7:43:33:df:
06:78:69:1e:f0:dd:50:19:dc:3d:a1:ac:90:15:71:
57:03:1a:f5:1e:67:d8:70:9f:f2:27:28:8b:ab:e1:
27:16:aa:a6:00:58:da:1d:a1:14:f4:72:58:54:0d:
09:94:ab:63:76:5d:d1:10:96:bc:0b:f6:15:37:74:
1e:7d:53:a2:ec:5f:8f:21:06:99:ed:7c:94:c0:24:
0f:b4:71:e8:a6:03:f9:0a:2f:3f:22:a4:00:28:26:
34:33:97:0a:11:cd:d7:0f:81:0f:ae:4c:de:d0:31:
8f:dc:e3:a1:83:ab:6e:3b:29:07:4b:10:1a:7f:ed:
f8:3c:0f:0e:a7:54:d4:74:e3:93:3c:88:4d:c0:bc:
d5:81:0c:b9:ee:1c:56:3c:5f:a4:2f:19:93:f9:7a:
22:f6:69:d3:15:15:09:b7:84:e6:07:8a:bc:ef:40:
86:fa:25:83:7c:26:e1:73:7c:51:4f:33:ac:68:0a:
3d:93:58:5e:c1:27:2f:17:da:fa:99:84:39:e3:8e:
17:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:5F:AF:5B:04:02:F6:85:B3:50:F9:CC:A4:02:9D:60:83:DC:8A:9D
X509v3 Authority Key Identifier:
keyid:C3:CF:41:89:89:36:CB:9C:57:3D:B1:EA:AB:94:C6:E6:69:95:1F:D7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer
Subject Information Access:
Signed Object - URI:rsync://krill.47272.net/repo/HYEHOST/5/AS213036.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:1281:60::/44
Signature Algorithm: sha256WithRSAEncryption
55:34:ce:b5:5e:a2:ac:10:2f:e3:1b:98:f1:45:8f:a2:31:87:
1e:6e:ab:02:32:5e:61:3c:cc:7c:96:1a:05:06:73:36:6d:fe:
ed:e8:6b:de:b9:c3:45:ee:a9:7b:7d:8a:d1:b5:31:cd:c2:cc:
58:8d:2f:ae:fb:c1:ca:83:df:ac:87:93:a1:0d:3c:fa:9e:00:
d8:9f:8d:89:ed:a3:2b:1d:f6:7c:da:20:ed:c3:6f:a1:2a:c6:
52:73:a0:0d:bf:c1:45:1f:21:0a:e6:c8:37:9d:a9:62:08:0c:
de:c4:99:91:11:fc:69:67:73:86:01:f9:e3:83:30:4b:91:a5:
5f:6d:24:04:9f:c0:af:d3:1d:c3:92:6f:a6:b1:e8:25:15:93:
ad:ff:49:b9:05:20:66:f2:c9:01:20:26:d5:80:10:4f:64:04:
db:a4:e1:e5:d6:17:18:fd:6d:b4:4b:66:d2:8a:d7:ca:43:d8:
37:68:f0:52:19:76:ec:da:1d:08:17:97:6d:a4:39:d3:0f:b2:
2e:1c:d3:69:d4:2e:50:1c:0e:88:a5:ef:05:a2:cd:f4:20:64:
fd:ac:95:28:ed:bd:8d:75:e6:d1:c2:84:9e:a2:7a:70:a2:69:
3c:8f:7d:8f:1b:ad:68:02:6b:6e:c4:9a:94:82:b7:73:96:ff:
e9:4b:d4:3c
-----BEGIN CERTIFICATE-----
MIIE1TCCA72gAwIBAgIUDvacsoDtkGpQ7F9qvHRf+wxWyOwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQzNDRjQxODk4OTM2Q0I5QzU3M0RCMUVBQUI5NEM2RTY2
OTk1MUZENzAeFw0yNjEwMTgwNjI5MTBaFw0yNzEwMTcwNjM0MTBaMDMxMTAvBgNV
BAMTKEJBNUZBRjVCMDQwMkY2ODVCMzUwRjlDQ0E0MDI5RDYwODNEQzhBOUQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7Zyju5O+jjNRCkZlQy/j48ZQH
r/nkwSBb88VpGUZvsbmrPE0btiHgJxWyvdWHnbgdM2bP2Qm290Mz3wZ4aR7w3VAZ
3D2hrJAVcVcDGvUeZ9hwn/InKIur4ScWqqYAWNodoRT0clhUDQmUq2N2XdEQlrwL
9hU3dB59U6LsX48hBpntfJTAJA+0ceimA/kKLz8ipAAoJjQzlwoRzdcPgQ+uTN7Q
MY/c46GDq247KQdLEBp/7fg8Dw6nVNR045M8iE3AvNWBDLnuHFY8X6QvGZP5eiL2
adMVFQm3hOYHirzvQIb6JYN8JuFzfFFPM6xoCj2TWF7BJy8X2vqZhDnjjhcxAgMB
AAGjggHfMIIB2zAdBgNVHQ4EFgQUul+vWwQC9oWzUPnMpAKdYIPcip0wHwYDVR0j
BBgwFoAUw89BiYk2y5xXPbHqq5TG5mmVH9cwDgYDVR0PAQH/BAQDAgeAMGQGA1Ud
HwRdMFswWaBXoFWGU3JzeW5jOi8va3JpbGwuNDcyNzIubmV0L3JlcG8vSFlFSE9T
VC81L0MzQ0Y0MTg5ODkzNkNCOUM1NzNEQjFFQUFCOTRDNkU2Njk5NTFGRDcuY3Js
MIGTBggrBgEFBQcBAQSBhjCBgzCBgAYIKwYBBQUHMAKGdHJzeW5jOi8vcnBraS1y
cHMuYXJpbi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZjg1MGQwNjNlMDE4NTc1NWM5
MWJlM2Y5ZC83L0MzQ0Y0MTg5ODkzNkNCOUM1NzNEQjFFQUFCOTRDNkU2Njk5NTFG
RDcuY2VyME8GCCsGAQUFBwELBEMwQTA/BggrBgEFBQcwC4YzcnN5bmM6Ly9rcmls
bC40NzI3Mi5uZXQvcmVwby9IWUVIT1NULzUvQVMyMTMwMzYucm9hMBgGA1UdIAEB
/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwQq
BhKBAGAwDQYJKoZIhvcNAQELBQADggEBAFU0zrVeoqwQL+MbmPFFj6Ixhx5uqwIy
XmE8zHyWGgUGczZt/u3oa965w0XuqXt9itG1Mc3CzFiNL677wcqD36yHk6ENPPqe
ANifjYntoysd9nzaIO3Db6EqxlJzoA2/wUUfIQrmyDedqWIIDN7EmZER/Glnc4YB
+eODMEuRpV9tJASfwK/THcOSb6ax6CUVk63/SbkFIGbyyQEgJtWAEE9kBNuk4eXW
Fxj9bbRLZtKK18pD2Ddo8FIZduzaHQgXl22kOdMPsi4c02nULlAcDoil7wWizfQg
ZP2slSjtvY115tHChJ6ienCiaTyPfY8brWgCa27EmpSCt3OW/+lL1Dw=
-----END CERTIFICATE-----
Generated at Thu Oct 22 18:22:18 2026 by rpki-client