$ rpki-client -vvf krill.47272.net/repo/HYEHOST/5/AS214344.roa File: AS214344.roa (raw, json) Hash identifier: UJqr94C/ACmDD9huJOXuCVwa5c4PodL16FP8MA0bc+g= Subject key identifier: 48:94:A1:CD:0A:20:85:9B:76:57:8E:EB:93:2B:09:4D:23:57:2B:56 Certificate issuer: /CN=C3CF41898936CB9C573DB1EAAB94C6E669951FD7 Certificate serial: 412781F180B3F034BCF3F589940A0E70853D8EB5 Authority key identifier: C3:CF:41:89:89:36:CB:9C:57:3D:B1:EA:AB:94:C6:E6:69:95:1F:D7 Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer Subject info access: rsync://krill.47272.net/repo/HYEHOST/5/AS214344.roa Signing time: Sun 05 Jul 2026 07:08:57 +0000 ROA not before: Sun 05 Jul 2026 07:03:57 +0000 ROA not after: Sun 04 Jul 2027 07:08:57 +0000 asID: 214344 IP address blocks: 2a0f:6280:1120::/48 maxlen: 48 2a0f:6280:1121::/48 maxlen: 48 2a0f:6280:112f::/48 maxlen: 48 Validation: OK Signature path: rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.crl rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 11 Jul 2026 08:00:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 41:27:81:f1:80:b3:f0:34:bc:f3:f5:89:94:0a:0e:70:85:3d:8e:b5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C3CF41898936CB9C573DB1EAAB94C6E669951FD7 Validity Not Before: Jul 5 07:03:57 2026 GMT Not After : Jul 4 07:08:57 2027 GMT Subject: CN=4894A1CD0A20859B76578EEB932B094D23572B56 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:61:40:7b:2d:6d:53:be:81:dd:1b:81:ae:6f: 56:4b:b8:f9:90:5c:0d:1a:df:d8:74:42:09:0d:56: 53:46:89:ab:91:c1:58:5a:42:bd:f9:d1:2d:bc:50: 1e:11:35:95:de:5a:b6:ab:f3:79:b5:b5:0f:d2:f0: 46:f8:60:f6:e4:63:66:7a:51:95:b6:cd:f1:db:bd: 3a:1a:39:80:b5:e3:4b:bd:48:28:b3:58:af:25:88: b8:0d:b1:2f:5a:c0:73:d0:9c:31:7a:df:17:c6:fa: 65:cf:60:69:f1:fd:e8:3b:85:38:11:9b:92:f7:5b: 2e:08:e3:d9:b8:62:c5:ea:fd:46:9d:35:cc:ef:77: f4:95:e4:cd:63:ab:59:fa:c3:a8:59:39:c7:41:da: 75:0d:01:37:9d:15:c4:bb:cd:d0:22:84:b4:1e:36: 77:71:4a:54:a2:5e:c4:e0:32:0a:c9:7e:d1:7a:a9: 1e:c7:1e:60:a9:e4:b0:63:f8:e4:f2:d4:c1:fc:45: 74:19:01:01:84:ce:bc:94:8f:50:c4:5c:1f:a3:63: e0:05:92:0f:f1:48:1d:bf:fb:e0:9a:40:10:c4:85: 97:a7:b6:ab:02:a4:74:e2:33:d6:cb:95:ac:3f:ee: 90:06:cd:4f:0e:58:8a:94:14:c0:0b:6b:58:c0:76: 99:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:94:A1:CD:0A:20:85:9B:76:57:8E:EB:93:2B:09:4D:23:57:2B:56 X509v3 Authority Key Identifier: keyid:C3:CF:41:89:89:36:CB:9C:57:3D:B1:EA:AB:94:C6:E6:69:95:1F:D7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer Subject Information Access: Signed Object - URI:rsync://krill.47272.net/repo/HYEHOST/5/AS214344.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0f:6280:1120::/47 2a0f:6280:112f::/48 Signature Algorithm: sha256WithRSAEncryption 44:75:9d:66:5d:76:15:be:8a:b4:41:8d:a1:2e:fe:49:af:2b: cf:ff:5a:c4:03:2e:e8:41:98:fc:51:e0:f8:31:0f:39:aa:f5: b4:68:7a:25:11:c2:9b:75:7a:7b:2e:71:f6:7c:22:d2:d7:12: 5d:df:a4:c3:9f:5d:c5:83:35:78:02:21:5e:f9:c7:20:96:21: 10:b1:8d:fe:f5:c8:5a:38:2d:71:98:49:82:df:7f:60:68:d9: f9:6b:46:1c:29:95:da:02:d9:64:7f:fa:24:a7:60:42:35:4e: 1e:38:11:3b:76:a5:d8:40:1b:e8:c6:2d:f2:15:67:df:d6:cb: 30:da:f0:79:38:31:fb:bb:21:34:d0:20:48:1d:13:56:45:5b: f5:bb:7a:65:02:58:eb:97:41:b2:9c:2b:e7:b5:56:30:83:37: d1:67:20:35:30:83:a7:0b:34:c0:40:4a:36:91:49:04:af:7f: 23:4d:14:c0:33:a7:d8:81:a9:03:23:60:63:5a:b4:ae:a2:83: 76:8a:12:bf:bb:b9:d9:1b:4e:cc:c8:ba:76:59:d3:2d:6d:05: 93:fb:57:13:a3:14:b1:7a:ba:fd:e3:fa:ad:8e:62:9d:42:d3: 7d:84:ce:30:5e:1c:e1:fe:88:28:1a:73:19:ff:20:1b:ef:15: 75:38:a8:48 -----BEGIN CERTIFICATE----- MIIE3jCCA8agAwIBAgIUQSeB8YCz8DS88/WJlAoOcIU9jrUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzNDRjQxODk4OTM2Q0I5QzU3M0RCMUVBQUI5NEM2RTY2 OTk1MUZENzAeFw0yNjA3MDUwNzAzNTdaFw0yNzA3MDQwNzA4NTdaMDMxMTAvBgNV BAMTKDQ4OTRBMUNEMEEyMDg1OUI3NjU3OEVFQjkzMkIwOTREMjM1NzJCNTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCVYUB7LW1TvoHdG4Gub1ZLuPmQ XA0a39h0QgkNVlNGiauRwVhaQr350S28UB4RNZXeWrar83m1tQ/S8Eb4YPbkY2Z6 UZW2zfHbvToaOYC140u9SCizWK8liLgNsS9awHPQnDF63xfG+mXPYGnx/eg7hTgR m5L3Wy4I49m4YsXq/UadNczvd/SV5M1jq1n6w6hZOcdB2nUNATedFcS7zdAihLQe NndxSlSiXsTgMgrJftF6qR7HHmCp5LBj+OTy1MH8RXQZAQGEzryUj1DEXB+jY+AF kg/xSB2/++CaQBDEhZentqsCpHTiM9bLlaw/7pAGzU8OWIqUFMALa1jAdplLAgMB AAGjggHoMIIB5DAdBgNVHQ4EFgQUSJShzQoghZt2V47rkysJTSNXK1YwHwYDVR0j BBgwFoAUw89BiYk2y5xXPbHqq5TG5mmVH9cwDgYDVR0PAQH/BAQDAgeAMGQGA1Ud HwRdMFswWaBXoFWGU3JzeW5jOi8va3JpbGwuNDcyNzIubmV0L3JlcG8vSFlFSE9T VC81L0MzQ0Y0MTg5ODkzNkNCOUM1NzNEQjFFQUFCOTRDNkU2Njk5NTFGRDcuY3Js MIGTBggrBgEFBQcBAQSBhjCBgzCBgAYIKwYBBQUHMAKGdHJzeW5jOi8vcnBraS1y cHMuYXJpbi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZjg1MGQwNjNlMDE4NTc1NWM5 MWJlM2Y5ZC83L0MzQ0Y0MTg5ODkzNkNCOUM1NzNEQjFFQUFCOTRDNkU2Njk5NTFG RDcuY2VyME8GCCsGAQUFBwELBEMwQTA/BggrBgEFBQcwC4YzcnN5bmM6Ly9rcmls bC40NzI3Mi5uZXQvcmVwby9IWUVIT1NULzUvQVMyMTQzNDQucm9hMBgGA1UdIAEB /wQOMAwwCgYIKwYBBQUHDgIwKwYIKwYBBQUHAQcBAf8EHDAaMBgEAgACMBIDBwEq D2KAESADBwAqD2KAES8wDQYJKoZIhvcNAQELBQADggEBAER1nWZddhW+irRBjaEu /kmvK8//WsQDLuhBmPxR4PgxDzmq9bRoeiURwpt1ensucfZ8ItLXEl3fpMOfXcWD NXgCIV75xyCWIRCxjf71yFo4LXGYSYLff2Bo2flrRhwpldoC2WR/+iSnYEI1Th44 ETt2pdhAG+jGLfIVZ9/WyzDa8Hk4Mfu7ITTQIEgdE1ZFW/W7emUCWOuXQbKcK+e1 VjCDN9FnIDUwg6cLNMBASjaRSQSvfyNNFMAzp9iBqQMjYGNatK6ig3aKEr+7udkb TszIunZZ0y1tBZP7VxOjFLF6uv3j+q2OYp1C032EzjBeHOH+iCgacxn/IBvvFXU4 qEg= -----END CERTIFICATE-----Generated at Fri Jul 10 16:04:34 2026 by rpki-client