$ rpki-client -vvf krill.47272.net/repo/HYEHOST/5/AS215196.roa File: AS215196.roa (raw, json) Hash identifier: FsfNjbEJeeOQ3DHP26yoRaYJC4+yLohv810vLsmrkbs= Subject key identifier: 08:0E:A4:57:4F:56:F5:03:F0:EE:F7:FD:66:7F:8E:91:02:6A:51:BF Certificate issuer: /CN=C3CF41898936CB9C573DB1EAAB94C6E669951FD7 Certificate serial: 448B03CD6D5025BC9527239F21122DCB5329F0 Authority key identifier: C3:CF:41:89:89:36:CB:9C:57:3D:B1:EA:AB:94:C6:E6:69:95:1F:D7 Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer Subject info access: rsync://krill.47272.net/repo/HYEHOST/5/AS215196.roa Signing time: Sun 28 Jun 2026 18:56:01 +0000 ROA not before: Sun 28 Jun 2026 18:51:01 +0000 ROA not after: Sun 27 Jun 2027 18:56:01 +0000 asID: 215196 IP address blocks: 2a0f:6284:4214::/48 maxlen: 48 Validation: OK Signature path: rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.crl rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 22 Jul 2026 14:18:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 44:8b:03:cd:6d:50:25:bc:95:27:23:9f:21:12:2d:cb:53:29:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C3CF41898936CB9C573DB1EAAB94C6E669951FD7 Validity Not Before: Jun 28 18:51:01 2026 GMT Not After : Jun 27 18:56:01 2027 GMT Subject: CN=080EA4574F56F503F0EEF7FD667F8E91026A51BF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:f0:01:4f:7c:af:f0:b0:46:46:39:8c:aa:c5: 4b:d7:e5:0e:e9:4d:ea:a1:6a:f8:ef:2b:2a:bc:de: 12:7e:b6:16:1f:50:51:15:e9:79:35:f2:9e:63:6f: b4:02:74:7c:cc:cb:44:8c:83:18:04:14:d3:d5:46: 81:f2:5e:56:2f:90:e0:a3:f6:3e:75:ae:2b:b0:43: 66:15:81:e0:5f:f2:f2:18:8e:0c:f6:70:a1:46:3e: c1:20:69:a7:12:72:cc:ee:49:4d:92:08:f5:6c:1a: 3c:ca:7c:d7:07:d6:de:21:27:2e:13:9e:6f:37:e3: a9:13:36:5c:2e:7a:9c:9b:f4:cb:80:27:23:42:71: 40:93:ab:c8:2a:b7:e5:5d:33:43:68:f3:3e:ee:9a: d6:4b:21:ae:65:e0:7e:8f:7e:29:a4:ae:2d:44:40: 73:d4:bf:69:b3:ba:0f:fd:30:3c:8d:00:ec:b8:ef: dd:68:1f:43:e0:c3:c6:5d:6f:b3:96:76:00:1a:bd: 3b:b1:e0:83:08:e0:e6:c4:da:6f:b0:11:c7:96:33: 8f:89:84:84:b5:b2:19:2d:75:c2:1c:32:f1:84:e9: 9d:aa:00:a6:70:f3:3b:49:e9:1c:d7:ae:2f:7a:f8: fa:26:3f:52:52:b3:27:92:b0:14:6c:4d:35:20:92: 24:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:0E:A4:57:4F:56:F5:03:F0:EE:F7:FD:66:7F:8E:91:02:6A:51:BF X509v3 Authority Key Identifier: keyid:C3:CF:41:89:89:36:CB:9C:57:3D:B1:EA:AB:94:C6:E6:69:95:1F:D7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer Subject Information Access: Signed Object - URI:rsync://krill.47272.net/repo/HYEHOST/5/AS215196.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0f:6284:4214::/48 Signature Algorithm: sha256WithRSAEncryption 34:04:af:81:6e:7f:3f:0b:d9:91:6c:d6:dc:63:77:a2:59:16: 52:c5:af:2e:f5:e1:24:15:36:be:e7:8c:da:da:8d:59:df:3e: 44:a1:d9:a0:4e:6b:e8:2f:6c:2d:9b:3e:a4:8d:a1:b5:ea:d2: c3:ae:f4:99:1a:71:87:38:db:42:89:6c:bd:4a:09:bb:94:70: 18:aa:58:54:5f:72:12:d7:08:12:27:77:00:56:bf:60:31:b4: 0e:58:00:3f:57:f2:d6:2c:ef:7d:6d:0e:c3:29:6f:24:02:a4: 97:45:13:3e:20:0d:44:ad:35:51:55:e8:c3:a6:02:34:d6:9a: 71:44:aa:4e:58:64:36:ce:8b:7e:95:98:8e:e1:92:1e:06:9a: a8:65:3b:1c:bc:01:ea:33:d9:aa:86:47:c0:0a:13:5e:6a:44: f6:f0:bd:ac:b9:1e:b7:48:99:d8:48:5e:d1:7a:06:a8:4b:bf: ba:55:79:7f:dd:32:22:a3:d8:c0:cd:9c:ec:86:a7:ef:bc:20: 32:8f:f1:e2:3c:c4:9c:1b:16:a1:f3:05:cc:36:53:a7:da:32: 96:7e:fb:08:6d:86:19:d0:16:06:6c:66:41:4b:9e:a4:be:ec: e6:c2:0a:a9:fa:d3:c7:65:17:83:42:ab:87:93:1b:84:79:d8: f8:27:98:77 -----BEGIN CERTIFICATE----- MIIE1DCCA7ygAwIBAgITRIsDzW1QJbyVJyOfIRIty1Mp8DANBgkqhkiG9w0BAQsF ADAzMTEwLwYDVQQDEyhDM0NGNDE4OTg5MzZDQjlDNTczREIxRUFBQjk0QzZFNjY5 OTUxRkQ3MB4XDTI2MDYyODE4NTEwMVoXDTI3MDYyNzE4NTYwMVowMzExMC8GA1UE AxMoMDgwRUE0NTc0RjU2RjUwM0YwRUVGN0ZENjY3RjhFOTEwMjZBNTFCRjCCASIw DQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBANjwAU98r/CwRkY5jKrFS9flDulN 6qFq+O8rKrzeEn62Fh9QURXpeTXynmNvtAJ0fMzLRIyDGAQU09VGgfJeVi+Q4KP2 PnWuK7BDZhWB4F/y8hiODPZwoUY+wSBppxJyzO5JTZII9WwaPMp81wfW3iEnLhOe bzfjqRM2XC56nJv0y4AnI0JxQJOryCq35V0zQ2jzPu6a1kshrmXgfo9+KaSuLURA c9S/abO6D/0wPI0A7Ljv3WgfQ+DDxl1vs5Z2ABq9O7Hggwjg5sTab7ARx5Yzj4mE hLWyGS11whwy8YTpnaoApnDzO0npHNeuL3r4+iY/UlKzJ5KwFGxNNSCSJJ0CAwEA AaOCAd8wggHbMB0GA1UdDgQWBBQIDqRXT1b1A/Du9/1mf46RAmpRvzAfBgNVHSME GDAWgBTDz0GJiTbLnFc9seqrlMbmaZUf1zAOBgNVHQ8BAf8EBAMCB4AwZAYDVR0f BF0wWzBZoFegVYZTcnN5bmM6Ly9rcmlsbC40NzI3Mi5uZXQvcmVwby9IWUVIT1NU LzUvQzNDRjQxODk4OTM2Q0I5QzU3M0RCMUVBQUI5NEM2RTY2OTk1MUZENy5jcmww gZMGCCsGAQUFBwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5bmM6Ly9ycGtpLXJw cy5hcmluLm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2M2UwMTg1NzU1Yzkx YmUzZjlkLzcvQzNDRjQxODk4OTM2Q0I5QzU3M0RCMUVBQUI5NEM2RTY2OTk1MUZE Ny5jZXIwTwYIKwYBBQUHAQsEQzBBMD8GCCsGAQUFBzALhjNyc3luYzovL2tyaWxs LjQ3MjcyLm5ldC9yZXBvL0hZRUhPU1QvNS9BUzIxNTE5Ni5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACoP YoRCFDANBgkqhkiG9w0BAQsFAAOCAQEANASvgW5/PwvZkWzW3GN3olkWUsWvLvXh JBU2vueM2tqNWd8+RKHZoE5r6C9sLZs+pI2hterSw670mRpxhzjbQolsvUoJu5Rw GKpYVF9yEtcIEid3AFa/YDG0DlgAP1fy1izvfW0OwylvJAKkl0UTPiANRK01UVXo w6YCNNaacUSqTlhkNs6LfpWYjuGSHgaaqGU7HLwB6jPZqoZHwAoTXmpE9vC9rLke t0iZ2Ehe0XoGqEu/ulV5f90yIqPYwM2c7Ian77wgMo/x4jzEnBsWofMFzDZTp9oy ln77CG2GGdAWBmxmQUuepL7s5sIKqfrTx2UXg0Krh5MbhHnY+CeYdw== -----END CERTIFICATE-----Generated at Tue Jul 21 20:30:38 2026 by rpki-client