$ rpki-client -vvf krill.47272.net/repo/HYEHOST/5/AS213641.roa File: AS213641.roa (raw, json) Hash identifier: maJOSC8VXWBm3ZrKaH6AT9kNedvVDwmRB+3S3fSoltw= Subject key identifier: 26:29:15:F2:EC:51:B2:1C:AE:2B:86:BF:C5:62:89:48:BA:69:88:9F Certificate issuer: /CN=C3CF41898936CB9C573DB1EAAB94C6E669951FD7 Certificate serial: 523C4B9F07413A4877883962D6D6AEFCF66EB6E0 Authority key identifier: C3:CF:41:89:89:36:CB:9C:57:3D:B1:EA:AB:94:C6:E6:69:95:1F:D7 Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer Subject info access: rsync://krill.47272.net/repo/HYEHOST/5/AS213641.roa Signing time: Wed 29 Jul 2026 09:21:22 +0000 ROA not before: Wed 29 Jul 2026 09:16:22 +0000 ROA not after: Wed 28 Jul 2027 09:21:22 +0000 asID: 213641 IP address blocks: 2a05:dfc3:fd50::/44 maxlen: 48 2a05:dfc3:fd50::/48 maxlen: 48 2a05:dfc3:fd51::/48 maxlen: 48 2a05:dfc3:fd52::/48 maxlen: 48 2a05:dfc3:fd53::/48 maxlen: 48 Validation: OK Signature path: rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.crl rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 13 Aug 2026 15:05:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 52:3c:4b:9f:07:41:3a:48:77:88:39:62:d6:d6:ae:fc:f6:6e:b6:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C3CF41898936CB9C573DB1EAAB94C6E669951FD7 Validity Not Before: Jul 29 09:16:22 2026 GMT Not After : Jul 28 09:21:22 2027 GMT Subject: CN=262915F2EC51B21CAE2B86BFC5628948BA69889F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:27:d8:9d:83:3c:82:e0:70:3c:db:5d:50:d7: 0c:58:6f:76:20:f6:76:67:e7:ac:45:06:ba:ec:8f: bb:c3:af:ef:d8:30:cb:cd:4a:1a:11:13:a7:8f:ac: f5:58:40:6c:9c:87:8b:7d:38:ea:26:5c:0b:eb:bb: 0c:b2:f1:56:4e:6c:b1:24:0d:32:ab:ba:2a:9b:f9: 9d:40:79:7a:81:17:f9:27:98:c4:90:77:53:f9:f4: 2a:17:dc:5a:19:a6:75:95:c3:46:7e:c7:cf:31:2a: 97:0d:39:7a:e4:1c:51:0c:c3:51:4d:b6:2a:bb:2b: 0e:06:cc:9e:96:91:d2:2f:76:a7:d1:31:32:9f:04: aa:90:c8:ae:ec:ec:f1:98:4c:55:e2:a6:ac:94:b3: 4f:5b:e9:75:9a:29:06:61:d3:7a:39:83:b3:ff:d0: 17:f6:27:18:78:4a:69:b9:9f:47:87:bc:5c:eb:dd: a9:4b:ba:33:3b:d4:0e:4e:b7:e4:49:ab:98:05:3c: 39:d4:f5:ac:c8:e3:eb:07:00:39:9f:dc:0f:b4:c2: e9:b7:7a:05:bf:3b:e2:b6:d9:97:ac:69:cb:e4:20: ff:e7:46:0f:af:fa:b4:8a:4a:5c:8d:b5:1a:cf:88: d4:81:b5:26:24:90:1f:b4:d6:f7:3d:f7:4f:9f:e7: a9:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 26:29:15:F2:EC:51:B2:1C:AE:2B:86:BF:C5:62:89:48:BA:69:88:9F X509v3 Authority Key Identifier: keyid:C3:CF:41:89:89:36:CB:9C:57:3D:B1:EA:AB:94:C6:E6:69:95:1F:D7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer Subject Information Access: Signed Object - URI:rsync://krill.47272.net/repo/HYEHOST/5/AS213641.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a05:dfc3:fd50::/44 Signature Algorithm: sha256WithRSAEncryption 39:3a:5a:b9:00:9a:9e:81:d5:d5:69:08:cc:b3:59:21:44:36: 03:6b:2a:08:8a:96:9a:e0:c6:cf:5c:51:35:b4:06:b4:34:b9: 8c:61:f5:e3:f6:73:54:79:3d:7c:27:5c:fd:e1:7c:78:9d:e1: 48:e9:21:f1:3c:0f:c5:69:4a:c6:a4:bc:5c:e4:ba:6b:f4:77: b6:ec:1e:88:87:d8:72:da:cc:a0:62:e5:77:24:90:09:c1:bb: ea:6e:29:df:07:b0:66:62:15:29:a2:e8:eb:0b:7c:bc:ea:97: ee:bd:18:1e:6c:2a:1c:55:67:c5:f8:47:6d:3d:09:6c:47:2c: f2:72:f0:bf:13:b3:37:ae:44:7c:50:01:56:31:a0:e5:bb:62: ab:d8:fd:bc:bd:1b:d4:5b:b5:7c:fc:48:4f:bf:44:3d:37:a3: 26:20:9e:ec:03:0c:d9:e4:26:96:97:f3:52:aa:16:3f:0b:1e: c3:66:a2:93:6f:05:ad:85:68:66:21:b6:2e:03:4f:7d:9b:e5: 5b:27:f3:6c:8a:23:e0:f8:92:8c:d7:2e:b7:f6:c8:63:83:a8: 00:8b:a9:52:c2:98:46:47:a1:dd:85:97:b0:6d:37:da:64:95: 45:b2:94:a8:2d:7a:94:7e:f6:62:65:1d:88:aa:b4:2b:bb:81: a0:91:47:d3 -----BEGIN CERTIFICATE----- MIIE1TCCA72gAwIBAgIUUjxLnwdBOkh3iDli1tau/PZutuAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzNDRjQxODk4OTM2Q0I5QzU3M0RCMUVBQUI5NEM2RTY2 OTk1MUZENzAeFw0yNjA3MjkwOTE2MjJaFw0yNzA3MjgwOTIxMjJaMDMxMTAvBgNV BAMTKDI2MjkxNUYyRUM1MUIyMUNBRTJCODZCRkM1NjI4OTQ4QkE2OTg4OUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCjJ9idgzyC4HA8211Q1wxYb3Yg 9nZn56xFBrrsj7vDr+/YMMvNShoRE6ePrPVYQGych4t9OOomXAvruwyy8VZObLEk DTKruiqb+Z1AeXqBF/knmMSQd1P59CoX3FoZpnWVw0Z+x88xKpcNOXrkHFEMw1FN tiq7Kw4GzJ6WkdIvdqfRMTKfBKqQyK7s7PGYTFXipqyUs09b6XWaKQZh03o5g7P/ 0Bf2Jxh4Smm5n0eHvFzr3alLujM71A5Ot+RJq5gFPDnU9azI4+sHADmf3A+0wum3 egW/O+K22ZesacvkIP/nRg+v+rSKSlyNtRrPiNSBtSYkkB+01vc990+f56nbAgMB AAGjggHfMIIB2zAdBgNVHQ4EFgQUJikV8uxRshyuK4a/xWKJSLppiJ8wHwYDVR0j BBgwFoAUw89BiYk2y5xXPbHqq5TG5mmVH9cwDgYDVR0PAQH/BAQDAgeAMGQGA1Ud HwRdMFswWaBXoFWGU3JzeW5jOi8va3JpbGwuNDcyNzIubmV0L3JlcG8vSFlFSE9T VC81L0MzQ0Y0MTg5ODkzNkNCOUM1NzNEQjFFQUFCOTRDNkU2Njk5NTFGRDcuY3Js MIGTBggrBgEFBQcBAQSBhjCBgzCBgAYIKwYBBQUHMAKGdHJzeW5jOi8vcnBraS1y cHMuYXJpbi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZjg1MGQwNjNlMDE4NTc1NWM5 MWJlM2Y5ZC83L0MzQ0Y0MTg5ODkzNkNCOUM1NzNEQjFFQUFCOTRDNkU2Njk5NTFG RDcuY2VyME8GCCsGAQUFBwELBEMwQTA/BggrBgEFBQcwC4YzcnN5bmM6Ly9rcmls bC40NzI3Mi5uZXQvcmVwby9IWUVIT1NULzUvQVMyMTM2NDEucm9hMBgGA1UdIAEB /wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwQq Bd/D/VAwDQYJKoZIhvcNAQELBQADggEBADk6WrkAmp6B1dVpCMyzWSFENgNrKgiK lprgxs9cUTW0BrQ0uYxh9eP2c1R5PXwnXP3hfHid4UjpIfE8D8VpSsakvFzkumv0 d7bsHoiH2HLazKBi5XckkAnBu+puKd8HsGZiFSmi6OsLfLzql+69GB5sKhxVZ8X4 R209CWxHLPJy8L8TszeuRHxQAVYxoOW7YqvY/by9G9RbtXz8SE+/RD03oyYgnuwD DNnkJpaX81KqFj8LHsNmopNvBa2FaGYhti4DT32b5Vsn82yKI+D4kozXLrf2yGOD qACLqVLCmEZHod2Fl7BtN9pklUWylKgtepR+9mJlHYiqtCu7gaCRR9M= -----END CERTIFICATE-----Generated at Thu Aug 13 03:03:51 2026 by rpki-client