$ rpki-client -vvf krill.47272.net/repo/HYEHOST/5/AS215034.roa File: AS215034.roa (raw, json) Hash identifier: w0acfi0HEXoE0IUWSU0OI5odw4YK6YMkvl5epnwbZo0= Subject key identifier: 6F:9C:E4:D1:35:FC:31:25:27:F5:6A:D5:D6:66:F8:A6:8B:EB:3B:77 Certificate issuer: /CN=C3CF41898936CB9C573DB1EAAB94C6E669951FD7 Certificate serial: 15B4B4B90CEEFC3D1086C1D31FB7F6B6357B88B5 Authority key identifier: C3:CF:41:89:89:36:CB:9C:57:3D:B1:EA:AB:94:C6:E6:69:95:1F:D7 Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer Subject info access: rsync://krill.47272.net/repo/HYEHOST/5/AS215034.roa Signing time: Sun 28 Jun 2026 18:55:37 +0000 ROA not before: Sun 28 Jun 2026 18:50:37 +0000 ROA not after: Sun 27 Jun 2027 18:55:37 +0000 asID: 215034 IP address blocks: 2a0a:6044:6d00::/40 maxlen: 40 Validation: OK Signature path: rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.crl rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 11 Jul 2026 08:00:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 15:b4:b4:b9:0c:ee:fc:3d:10:86:c1:d3:1f:b7:f6:b6:35:7b:88:b5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C3CF41898936CB9C573DB1EAAB94C6E669951FD7 Validity Not Before: Jun 28 18:50:37 2026 GMT Not After : Jun 27 18:55:37 2027 GMT Subject: CN=6F9CE4D135FC312527F56AD5D666F8A68BEB3B77 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:34:06:92:9f:f1:3b:63:d5:7c:5e:51:63:94: c0:0d:e3:fa:5d:e8:e4:5c:55:85:d2:6f:68:25:53: 4f:e0:f3:d4:7c:3a:74:f4:27:00:e8:43:53:e3:1d: 97:8d:22:c3:8c:30:2a:ae:e9:90:ea:55:35:da:2c: 17:fb:fa:ca:f3:ef:55:dc:c5:de:60:ea:cc:4d:a1: df:8a:e2:27:c2:4a:11:ed:b2:41:de:6b:ce:2e:9e: 9d:66:78:c8:7c:98:c5:f3:b8:74:85:c6:a4:41:46: e4:be:cf:51:94:60:92:31:df:9e:a8:97:4b:b8:47: bf:19:5f:a7:6e:ba:9e:b8:6b:2a:ee:63:26:9e:10: a2:11:e3:16:74:73:ae:8e:6d:d3:8d:96:60:04:ba: 80:82:84:51:fa:34:8a:7f:8d:b8:6e:d8:72:04:ef: d4:8e:c6:ff:bd:3c:17:bc:eb:17:1a:c2:5c:49:9c: 41:01:66:f5:a7:77:35:00:a2:45:ce:aa:82:a6:fb: 4e:22:6f:19:8a:6a:da:a2:41:82:f4:0f:03:e0:69: 68:f8:16:9a:58:9e:ac:32:fc:6c:31:3f:60:ac:91: e9:c8:16:f8:4a:d0:2b:36:b8:d3:61:ca:0e:43:91: 6a:61:9f:cc:5c:2b:fc:81:b8:5c:1c:47:d4:a0:e8: 8a:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:9C:E4:D1:35:FC:31:25:27:F5:6A:D5:D6:66:F8:A6:8B:EB:3B:77 X509v3 Authority Key Identifier: keyid:C3:CF:41:89:89:36:CB:9C:57:3D:B1:EA:AB:94:C6:E6:69:95:1F:D7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer Subject Information Access: Signed Object - URI:rsync://krill.47272.net/repo/HYEHOST/5/AS215034.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0a:6044:6d00::/40 Signature Algorithm: sha256WithRSAEncryption 88:0c:f7:39:09:6e:95:7c:e4:10:03:93:2e:ea:c9:31:d8:63: 0a:34:5f:7b:8a:15:b7:97:0f:ab:d6:de:cf:53:30:d9:0c:9d: 56:ee:78:a7:57:4c:2e:5d:8b:64:fd:ed:f8:b0:7c:83:b3:ba: 52:e9:88:56:d3:2f:4c:33:44:5a:82:61:73:68:d9:15:c0:26: 74:cf:8a:7c:fc:5a:c1:89:72:e9:5b:17:3d:da:31:d1:2e:5a: 1f:e6:cb:32:f7:ff:35:4d:44:55:01:1e:37:4b:c2:2e:c4:99: a4:f3:f1:23:41:07:40:65:6c:cb:c3:c3:f9:88:96:4e:dd:e9: 7a:68:cd:e1:41:db:0a:bb:50:0e:5c:b5:76:05:26:56:38:c0: 5b:dc:0a:c7:4e:6d:80:57:23:bf:10:e3:e6:11:c7:11:97:14: 08:42:15:d8:80:9d:ac:85:8b:e4:e9:f5:35:2f:c9:5c:c2:2e: 9e:3a:f5:47:b2:aa:5b:78:28:00:a0:f3:62:8f:05:5f:63:9c: 8d:97:eb:a1:2f:20:f3:3d:9d:2e:9f:d0:25:99:43:f4:ec:68: af:2b:d2:7b:8a:a2:04:52:dd:6e:a9:58:2b:6a:29:fd:d7:b4: f9:d5:63:56:bb:33:ab:7f:5a:ac:cd:94:e9:c6:c3:99:44:3e: e6:cc:af:34 -----BEGIN CERTIFICATE----- MIIE1DCCA7ygAwIBAgIUFbS0uQzu/D0QhsHTH7f2tjV7iLUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzNDRjQxODk4OTM2Q0I5QzU3M0RCMUVBQUI5NEM2RTY2 OTk1MUZENzAeFw0yNjA2MjgxODUwMzdaFw0yNzA2MjcxODU1MzdaMDMxMTAvBgNV BAMTKDZGOUNFNEQxMzVGQzMxMjUyN0Y1NkFENUQ2NjZGOEE2OEJFQjNCNzcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCqNAaSn/E7Y9V8XlFjlMAN4/pd 6ORcVYXSb2glU0/g89R8OnT0JwDoQ1PjHZeNIsOMMCqu6ZDqVTXaLBf7+srz71Xc xd5g6sxNod+K4ifCShHtskHea84unp1meMh8mMXzuHSFxqRBRuS+z1GUYJIx356o l0u4R78ZX6duup64ayruYyaeEKIR4xZ0c66ObdONlmAEuoCChFH6NIp/jbhu2HIE 79SOxv+9PBe86xcawlxJnEEBZvWndzUAokXOqoKm+04ibxmKatqiQYL0DwPgaWj4 FppYnqwy/GwxP2CskenIFvhK0Cs2uNNhyg5DkWphn8xcK/yBuFwcR9Sg6Io9AgMB AAGjggHeMIIB2jAdBgNVHQ4EFgQUb5zk0TX8MSUn9WrV1mb4povrO3cwHwYDVR0j BBgwFoAUw89BiYk2y5xXPbHqq5TG5mmVH9cwDgYDVR0PAQH/BAQDAgeAMGQGA1Ud HwRdMFswWaBXoFWGU3JzeW5jOi8va3JpbGwuNDcyNzIubmV0L3JlcG8vSFlFSE9T VC81L0MzQ0Y0MTg5ODkzNkNCOUM1NzNEQjFFQUFCOTRDNkU2Njk5NTFGRDcuY3Js MIGTBggrBgEFBQcBAQSBhjCBgzCBgAYIKwYBBQUHMAKGdHJzeW5jOi8vcnBraS1y cHMuYXJpbi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZjg1MGQwNjNlMDE4NTc1NWM5 MWJlM2Y5ZC83L0MzQ0Y0MTg5ODkzNkNCOUM1NzNEQjFFQUFCOTRDNkU2Njk5NTFG RDcuY2VyME8GCCsGAQUFBwELBEMwQTA/BggrBgEFBQcwC4YzcnN5bmM6Ly9rcmls bC40NzI3Mi5uZXQvcmVwby9IWUVIT1NULzUvQVMyMTUwMzQucm9hMBgGA1UdIAEB /wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgACMAgDBgAq CmBEbTANBgkqhkiG9w0BAQsFAAOCAQEAiAz3OQlulXzkEAOTLurJMdhjCjRfe4oV t5cPq9bez1Mw2QydVu54p1dMLl2LZP3t+LB8g7O6UumIVtMvTDNEWoJhc2jZFcAm dM+KfPxawYly6VsXPdox0S5aH+bLMvf/NU1EVQEeN0vCLsSZpPPxI0EHQGVsy8PD +YiWTt3pemjN4UHbCrtQDly1dgUmVjjAW9wKx05tgFcjvxDj5hHHEZcUCEIV2ICd rIWL5On1NS/JXMIunjr1R7KqW3goAKDzYo8FX2OcjZfroS8g8z2dLp/QJZlD9Oxo ryvSe4qiBFLdbqlYK2op/de0+dVjVrszq39arM2U6cbDmUQ+5syvNA== -----END CERTIFICATE-----Generated at Fri Jul 10 16:10:24 2026 by rpki-client