$ rpki-client -vvf krill.47272.net/repo/HYEHOST/5/AS215363.roa File: AS215363.roa (raw, json) Hash identifier: XSysLeiChpUpiYllduscpBpnIlmdHDfh3v72KTmXJVw= Subject key identifier: 25:2B:EC:BC:04:3B:40:08:16:9A:E7:0D:67:76:C2:F7:CC:EC:5F:80 Certificate issuer: /CN=C3CF41898936CB9C573DB1EAAB94C6E669951FD7 Certificate serial: 08F43BE1E417D19841CD55E5C062A4A36E006EC9 Authority key identifier: C3:CF:41:89:89:36:CB:9C:57:3D:B1:EA:AB:94:C6:E6:69:95:1F:D7 Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer Subject info access: rsync://krill.47272.net/repo/HYEHOST/5/AS215363.roa Signing time: Sun 28 Jun 2026 18:56:15 +0000 ROA not before: Sun 28 Jun 2026 18:51:15 +0000 ROA not after: Sun 27 Jun 2027 18:56:15 +0000 asID: 215363 IP address blocks: 2a0a:6044:aa08::/48 maxlen: 48 2a0a:6044:aa09::/48 maxlen: 48 Validation: OK Signature path: rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.crl rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 11 Jul 2026 08:00:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 08:f4:3b:e1:e4:17:d1:98:41:cd:55:e5:c0:62:a4:a3:6e:00:6e:c9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C3CF41898936CB9C573DB1EAAB94C6E669951FD7 Validity Not Before: Jun 28 18:51:15 2026 GMT Not After : Jun 27 18:56:15 2027 GMT Subject: CN=252BECBC043B4008169AE70D6776C2F7CCEC5F80 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:62:02:df:da:dc:40:74:14:8b:0d:82:c4:9e: 2e:1d:b4:0d:b2:86:df:72:c0:dd:05:82:fb:e8:8b: c8:01:1b:77:ce:24:7e:1a:bb:4e:c1:de:c6:af:df: 04:25:b9:17:d4:f1:39:fb:d0:73:2a:2d:ec:18:5c: 77:1b:46:15:5c:e8:6f:07:58:21:8f:88:02:4d:10: 1a:42:39:69:42:88:e3:b5:39:4f:d8:f7:2e:a6:57: 1a:b3:40:6a:88:79:b5:f3:56:4e:5b:b1:8a:1d:b1: d0:08:35:ae:28:a2:ce:57:16:b7:25:82:aa:1a:f6: 41:33:dc:02:79:33:4f:5f:70:5b:f4:20:1e:f6:20: 51:a3:70:ea:d3:3a:5d:34:5d:c5:d3:4c:bb:62:9d: 3a:5f:19:65:36:1c:c0:2d:6b:e9:f4:c3:b1:63:86: 9d:63:22:e8:41:d8:f5:7a:fd:55:db:5e:24:9b:b3: f9:1a:a3:eb:8d:d1:b3:3d:44:54:dc:1d:49:0c:12: d7:85:1b:73:24:4c:94:3e:55:af:8f:0f:f2:f7:7b: 31:48:c9:6b:2f:fa:49:d5:b3:cf:25:bf:44:2a:81: 7d:5d:31:1b:71:9c:b6:26:ec:f6:67:4a:a3:5b:d9: 3e:da:3c:c9:f6:3c:4b:bd:f7:69:0a:17:c9:73:16: 45:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:2B:EC:BC:04:3B:40:08:16:9A:E7:0D:67:76:C2:F7:CC:EC:5F:80 X509v3 Authority Key Identifier: keyid:C3:CF:41:89:89:36:CB:9C:57:3D:B1:EA:AB:94:C6:E6:69:95:1F:D7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer Subject Information Access: Signed Object - URI:rsync://krill.47272.net/repo/HYEHOST/5/AS215363.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0a:6044:aa08::/47 Signature Algorithm: sha256WithRSAEncryption 8a:ae:c8:87:c4:4d:22:a4:c9:cf:2a:4b:41:ac:b3:1c:84:1d: a5:87:7a:ab:1c:cc:db:34:8f:b0:b9:d9:24:ac:a8:dc:21:cc: 79:08:bd:a5:38:34:54:f5:e2:ae:f6:53:6c:d8:95:d8:6e:45: 61:41:34:99:e5:69:88:8e:bc:4c:4a:3a:4f:76:95:88:b6:c4: 29:80:63:04:6f:d9:bc:a2:5d:48:26:2a:e5:43:72:3c:77:fa: 3d:31:72:fe:db:62:ce:e0:de:ce:fe:5b:c4:bd:ab:d6:be:2a: 03:4d:eb:5c:92:be:44:57:9e:3e:cb:01:24:45:0d:59:e5:e1: 75:fc:56:f9:4f:1f:34:e1:ae:27:b1:32:00:ef:9c:56:f3:cb: e2:a4:0e:14:91:e1:b6:7f:2d:d4:e3:c0:96:67:f4:59:b8:6e: 8c:7c:f3:f9:91:a7:2e:83:a2:26:42:83:12:2a:0a:40:3c:86: 62:b7:ff:d3:47:d3:7d:ee:7d:0b:16:d9:b0:75:5b:89:43:cb: 2f:00:c7:73:02:c4:61:9b:33:61:28:e8:16:41:61:ce:64:d0: e2:43:89:b7:15:7a:18:8e:bc:2d:6c:c8:12:2e:d0:6d:f9:f4: 71:f6:e8:f0:45:75:c1:35:71:53:cf:03:e0:68:f6:31:3e:dc: f0:1b:5c:cc -----BEGIN CERTIFICATE----- MIIE1TCCA72gAwIBAgIUCPQ74eQX0ZhBzVXlwGKko24AbskwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzNDRjQxODk4OTM2Q0I5QzU3M0RCMUVBQUI5NEM2RTY2 OTk1MUZENzAeFw0yNjA2MjgxODUxMTVaFw0yNzA2MjcxODU2MTVaMDMxMTAvBgNV BAMTKDI1MkJFQ0JDMDQzQjQwMDgxNjlBRTcwRDY3NzZDMkY3Q0NFQzVGODAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCyYgLf2txAdBSLDYLEni4dtA2y ht9ywN0Fgvvoi8gBG3fOJH4au07B3sav3wQluRfU8Tn70HMqLewYXHcbRhVc6G8H WCGPiAJNEBpCOWlCiOO1OU/Y9y6mVxqzQGqIebXzVk5bsYodsdAINa4oos5XFrcl gqoa9kEz3AJ5M09fcFv0IB72IFGjcOrTOl00XcXTTLtinTpfGWU2HMAta+n0w7Fj hp1jIuhB2PV6/VXbXiSbs/kao+uN0bM9RFTcHUkMEteFG3MkTJQ+Va+PD/L3ezFI yWsv+knVs88lv0QqgX1dMRtxnLYm7PZnSqNb2T7aPMn2PEu992kKF8lzFkXBAgMB AAGjggHfMIIB2zAdBgNVHQ4EFgQUJSvsvAQ7QAgWmucNZ3bC98zsX4AwHwYDVR0j BBgwFoAUw89BiYk2y5xXPbHqq5TG5mmVH9cwDgYDVR0PAQH/BAQDAgeAMGQGA1Ud HwRdMFswWaBXoFWGU3JzeW5jOi8va3JpbGwuNDcyNzIubmV0L3JlcG8vSFlFSE9T VC81L0MzQ0Y0MTg5ODkzNkNCOUM1NzNEQjFFQUFCOTRDNkU2Njk5NTFGRDcuY3Js MIGTBggrBgEFBQcBAQSBhjCBgzCBgAYIKwYBBQUHMAKGdHJzeW5jOi8vcnBraS1y cHMuYXJpbi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZjg1MGQwNjNlMDE4NTc1NWM5 MWJlM2Y5ZC83L0MzQ0Y0MTg5ODkzNkNCOUM1NzNEQjFFQUFCOTRDNkU2Njk5NTFG RDcuY2VyME8GCCsGAQUFBwELBEMwQTA/BggrBgEFBQcwC4YzcnN5bmM6Ly9rcmls bC40NzI3Mi5uZXQvcmVwby9IWUVIT1NULzUvQVMyMTUzNjMucm9hMBgGA1UdIAEB /wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwEq CmBEqggwDQYJKoZIhvcNAQELBQADggEBAIquyIfETSKkyc8qS0GssxyEHaWHeqsc zNs0j7C52SSsqNwhzHkIvaU4NFT14q72U2zYldhuRWFBNJnlaYiOvExKOk92lYi2 xCmAYwRv2byiXUgmKuVDcjx3+j0xcv7bYs7g3s7+W8S9q9a+KgNN61ySvkRXnj7L ASRFDVnl4XX8VvlPHzThriexMgDvnFbzy+KkDhSR4bZ/LdTjwJZn9Fm4box88/mR py6DoiZCgxIqCkA8hmK3/9NH033ufQsW2bB1W4lDyy8Ax3MCxGGbM2Eo6BZBYc5k 0OJDibcVehiOvC1syBIu0G359HH26PBFdcE1cVPPA+Bo9jE+3PAbXMw= -----END CERTIFICATE-----Generated at Fri Jul 10 16:10:34 2026 by rpki-client