$ rpki-client -vvf krill.47272.net/repo/HYEHOST/5/AS214848.roa File: AS214848.roa (raw, json) Hash identifier: lY4/0fpDdD08YEMaNkKYhwlWTv+e279UqP9sNTa8XCg= Subject key identifier: A9:25:07:FF:9F:E0:00:DF:D4:98:FB:86:E3:10:63:F8:72:07:2A:86 Certificate issuer: /CN=C3CF41898936CB9C573DB1EAAB94C6E669951FD7 Certificate serial: 2CF099B70DF3DF5437E5E6919611D7D29949B1C6 Authority key identifier: C3:CF:41:89:89:36:CB:9C:57:3D:B1:EA:AB:94:C6:E6:69:95:1F:D7 Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer Subject info access: rsync://krill.47272.net/repo/HYEHOST/5/AS214848.roa Signing time: Sun 28 Jun 2026 06:02:08 +0000 ROA not before: Sun 28 Jun 2026 05:57:08 +0000 ROA not after: Sun 27 Jun 2027 06:02:08 +0000 asID: 214848 IP address blocks: 2a0f:6282:d000::/36 maxlen: 48 Validation: OK Signature path: rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.crl rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 11 Jul 2026 08:00:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2c:f0:99:b7:0d:f3:df:54:37:e5:e6:91:96:11:d7:d2:99:49:b1:c6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C3CF41898936CB9C573DB1EAAB94C6E669951FD7 Validity Not Before: Jun 28 05:57:08 2026 GMT Not After : Jun 27 06:02:08 2027 GMT Subject: CN=A92507FF9FE000DFD498FB86E31063F872072A86 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:0f:a8:c1:fe:cc:8b:b4:7b:d3:6f:e7:33:bd: a3:14:4a:2b:1a:90:82:6d:48:99:bd:e2:6b:6a:71: 72:bb:8e:27:c0:fb:9e:b0:f2:35:72:c3:bc:c3:aa: c3:9a:d3:95:48:56:08:a5:62:e1:af:6f:ee:3d:74: 32:45:84:25:18:1b:1a:46:c8:11:f9:30:fe:4b:e2: c2:62:07:c7:d1:27:2f:80:d9:ba:46:df:5c:01:30: 87:63:97:a4:3f:cd:8e:27:2c:b5:27:72:89:78:7a: c6:74:e5:76:9a:59:eb:a1:92:56:fe:c5:05:a2:8b: f6:9a:cd:49:a2:66:cc:64:82:93:bc:88:7a:93:5c: 2f:7c:30:6f:83:df:3f:42:76:14:b8:fd:6a:97:67: 6d:e6:4a:06:3c:e1:f7:78:7a:f9:4e:6b:3c:7e:e7: 11:c5:8f:eb:78:f3:a9:6f:c9:a4:2d:b2:ba:86:84: 85:28:1d:63:47:87:e5:75:ee:08:15:fa:d2:76:8e: eb:48:88:96:cc:ff:5d:e3:74:89:96:26:8c:3b:2e: ec:dd:ff:af:21:c0:ef:6a:16:a6:45:fa:3a:d0:3b: 7c:e6:51:e0:61:b4:3c:ff:42:5c:65:70:8f:89:73: 3f:77:83:de:5d:87:ee:16:f2:8b:76:2b:82:3f:f4: 9d:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:25:07:FF:9F:E0:00:DF:D4:98:FB:86:E3:10:63:F8:72:07:2A:86 X509v3 Authority Key Identifier: keyid:C3:CF:41:89:89:36:CB:9C:57:3D:B1:EA:AB:94:C6:E6:69:95:1F:D7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer Subject Information Access: Signed Object - URI:rsync://krill.47272.net/repo/HYEHOST/5/AS214848.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0f:6282:d000::/36 Signature Algorithm: sha256WithRSAEncryption 02:44:a7:50:dd:17:e8:66:8d:3e:37:73:2b:cc:d3:6d:11:36: 45:16:35:ab:c3:5c:17:0c:66:27:6c:ea:0d:df:65:60:65:0c: 2d:a7:0a:12:02:54:50:c7:58:74:e9:e3:d2:d1:d9:f0:ba:44: a8:7a:81:d3:c8:6c:fc:cf:a1:92:ff:34:14:99:cf:b5:a2:c7: d5:b5:c5:80:b7:0d:4a:45:91:3d:5b:51:d1:cc:63:5b:54:41: c0:0d:b2:89:f5:b4:74:37:8d:a0:db:34:f2:41:0d:70:23:87: cd:30:ac:b6:7d:6b:dc:52:a6:34:5f:c7:3f:5a:dd:7c:09:b8: 6f:87:b6:e5:79:a6:d8:b1:ec:07:50:48:32:86:98:49:d3:d8: 31:77:4d:51:17:ad:35:b0:8a:c0:b9:7b:36:5a:ba:93:91:ad: 54:82:32:55:cd:45:83:b5:1d:4e:30:d0:77:aa:df:b9:20:08: a3:a6:ac:f5:04:bc:48:a7:03:be:b7:42:fa:f2:4a:95:5e:44: 12:8d:db:6e:c7:25:6f:3c:5a:ca:93:bd:59:e1:87:46:5e:20: e7:e3:b9:ca:d9:51:3a:a2:59:e5:41:0c:ad:aa:95:d8:14:c6: 94:9a:c1:3b:e1:ac:e6:81:12:7f:3a:bc:6f:6e:2f:f1:c3:6c: f4:17:7b:d6 -----BEGIN CERTIFICATE----- MIIE1DCCA7ygAwIBAgIULPCZtw3z31Q35eaRlhHX0plJscYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzNDRjQxODk4OTM2Q0I5QzU3M0RCMUVBQUI5NEM2RTY2 OTk1MUZENzAeFw0yNjA2MjgwNTU3MDhaFw0yNzA2MjcwNjAyMDhaMDMxMTAvBgNV BAMTKEE5MjUwN0ZGOUZFMDAwREZENDk4RkI4NkUzMTA2M0Y4NzIwNzJBODYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDDD6jB/syLtHvTb+czvaMUSisa kIJtSJm94mtqcXK7jifA+56w8jVyw7zDqsOa05VIVgilYuGvb+49dDJFhCUYGxpG yBH5MP5L4sJiB8fRJy+A2bpG31wBMIdjl6Q/zY4nLLUncol4esZ05XaaWeuhklb+ xQWii/aazUmiZsxkgpO8iHqTXC98MG+D3z9CdhS4/WqXZ23mSgY84fd4evlOazx+ 5xHFj+t486lvyaQtsrqGhIUoHWNHh+V17ggV+tJ2jutIiJbM/13jdImWJow7Luzd /68hwO9qFqZF+jrQO3zmUeBhtDz/QlxlcI+Jcz93g95dh+4W8ot2K4I/9J0nAgMB AAGjggHeMIIB2jAdBgNVHQ4EFgQUqSUH/5/gAN/UmPuG4xBj+HIHKoYwHwYDVR0j BBgwFoAUw89BiYk2y5xXPbHqq5TG5mmVH9cwDgYDVR0PAQH/BAQDAgeAMGQGA1Ud HwRdMFswWaBXoFWGU3JzeW5jOi8va3JpbGwuNDcyNzIubmV0L3JlcG8vSFlFSE9T VC81L0MzQ0Y0MTg5ODkzNkNCOUM1NzNEQjFFQUFCOTRDNkU2Njk5NTFGRDcuY3Js MIGTBggrBgEFBQcBAQSBhjCBgzCBgAYIKwYBBQUHMAKGdHJzeW5jOi8vcnBraS1y cHMuYXJpbi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZjg1MGQwNjNlMDE4NTc1NWM5 MWJlM2Y5ZC83L0MzQ0Y0MTg5ODkzNkNCOUM1NzNEQjFFQUFCOTRDNkU2Njk5NTFG RDcuY2VyME8GCCsGAQUFBwELBEMwQTA/BggrBgEFBQcwC4YzcnN5bmM6Ly9rcmls bC40NzI3Mi5uZXQvcmVwby9IWUVIT1NULzUvQVMyMTQ4NDgucm9hMBgGA1UdIAEB /wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgACMAgDBgQq D2KC0DANBgkqhkiG9w0BAQsFAAOCAQEAAkSnUN0X6GaNPjdzK8zTbRE2RRY1q8Nc FwxmJ2zqDd9lYGUMLacKEgJUUMdYdOnj0tHZ8LpEqHqB08hs/M+hkv80FJnPtaLH 1bXFgLcNSkWRPVtR0cxjW1RBwA2yifW0dDeNoNs08kENcCOHzTCstn1r3FKmNF/H P1rdfAm4b4e25Xmm2LHsB1BIMoaYSdPYMXdNURetNbCKwLl7Nlq6k5GtVIIyVc1F g7UdTjDQd6rfuSAIo6as9QS8SKcDvrdC+vJKlV5EEo3bbsclbzxaypO9WeGHRl4g 5+O5ytlROqJZ5UEMraqV2BTGlJrBO+Gs5oESfzq8b24v8cNs9Bd71g== -----END CERTIFICATE-----Generated at Fri Jul 10 16:11:02 2026 by rpki-client