$ rpki-client -vvf krill.47272.net/repo/HYEHOST/5/AS215692.roa File: AS215692.roa (raw, json) Hash identifier: xIPIlHQE9yaLMWuhhRspV6xZ4WatZhMj9vqKVrSmUaE= Subject key identifier: 69:F3:EB:C0:5B:35:6B:74:53:E7:73:8B:20:D7:3D:9A:CF:1A:E7:1D Certificate issuer: /CN=C3CF41898936CB9C573DB1EAAB94C6E669951FD7 Certificate serial: 0D60D767D5CDD2363ED307B2593A07B8C5E9C3AE Authority key identifier: C3:CF:41:89:89:36:CB:9C:57:3D:B1:EA:AB:94:C6:E6:69:95:1F:D7 Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer Subject info access: rsync://krill.47272.net/repo/HYEHOST/5/AS215692.roa Signing time: Fri 19 Jun 2026 03:51:53 +0000 ROA not before: Fri 19 Jun 2026 03:46:53 +0000 ROA not after: Fri 18 Jun 2027 03:51:53 +0000 asID: 215692 IP address blocks: 2a0a:6044:aa06::/48 maxlen: 48 Validation: OK Signature path: rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.crl rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 11 Jul 2026 08:00:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0d:60:d7:67:d5:cd:d2:36:3e:d3:07:b2:59:3a:07:b8:c5:e9:c3:ae Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C3CF41898936CB9C573DB1EAAB94C6E669951FD7 Validity Not Before: Jun 19 03:46:53 2026 GMT Not After : Jun 18 03:51:53 2027 GMT Subject: CN=69F3EBC05B356B7453E7738B20D73D9ACF1AE71D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:17:ec:63:72:95:46:a7:67:57:80:3d:a8:72: 42:fe:ce:48:e0:1f:28:f2:cd:61:04:71:b3:2e:b0: 41:16:69:52:75:fe:bf:6e:9a:85:b7:00:d1:02:a3: d9:8b:85:40:6e:8b:59:39:7f:9e:15:c7:24:ac:6b: 08:67:d7:2c:f4:67:43:43:0f:17:10:1f:82:a6:b7: b6:03:40:af:2c:4c:52:d4:19:eb:97:f0:7c:25:03: cd:be:50:c9:1b:ec:c6:85:8d:e8:dd:47:a4:ea:ab: 49:0b:e8:60:a8:40:8b:b1:26:62:4a:66:a7:72:87: d6:a5:31:cd:ee:ee:1f:f6:51:e7:a2:34:22:e4:ee: 77:73:e0:58:eb:4e:80:77:6f:54:0c:c4:5a:20:e7: 8e:fe:f2:97:97:65:84:6f:f4:a8:38:dd:62:9f:16: 49:e2:9d:15:a1:de:af:f1:bc:d0:28:a1:e7:7f:c6: bb:a0:57:2d:8f:7c:86:0b:35:37:0b:bb:cf:37:9f: e1:ee:a6:fd:10:a4:2e:00:27:d9:8c:01:5f:66:dc: 58:53:33:8c:f5:a9:0c:67:ec:a7:a1:15:e1:b8:9c: 06:24:f8:c1:04:1f:3e:d8:4c:7d:cd:6c:25:fe:95: 8a:b2:9b:3a:30:3b:8c:1d:42:a4:a5:b1:70:02:c0: 48:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:F3:EB:C0:5B:35:6B:74:53:E7:73:8B:20:D7:3D:9A:CF:1A:E7:1D X509v3 Authority Key Identifier: keyid:C3:CF:41:89:89:36:CB:9C:57:3D:B1:EA:AB:94:C6:E6:69:95:1F:D7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer Subject Information Access: Signed Object - URI:rsync://krill.47272.net/repo/HYEHOST/5/AS215692.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0a:6044:aa06::/48 Signature Algorithm: sha256WithRSAEncryption 8f:7b:96:1a:80:ad:64:c5:5a:61:a9:f7:a2:da:92:a1:ab:e8: 74:69:a1:7a:01:46:cf:ee:ee:ca:fe:59:23:bb:b4:25:39:7a: 84:24:c1:76:04:88:36:95:4b:00:e6:3f:fb:ea:de:1f:c9:01: fe:d6:be:c9:e7:e2:53:b3:2d:b3:94:79:97:d3:ba:08:52:da: 3a:04:72:23:13:ef:9f:0a:bd:48:39:9b:6b:ec:aa:0a:5b:e7: 44:37:ab:41:6e:c2:b0:a3:d2:3a:20:8e:71:94:fa:38:d8:f9: 85:8c:3a:49:e2:aa:89:f4:1f:41:08:6f:57:2d:4f:b2:46:d3: 59:80:10:aa:7d:9c:83:80:9e:51:eb:ef:1b:f2:5c:44:e3:95: ae:95:72:56:ab:ae:3a:d6:93:57:2b:62:e4:cd:c5:ce:1d:8f: 08:2a:5d:31:52:55:89:d8:56:27:06:47:b2:6c:2f:54:ee:59: 5a:25:08:59:e1:f4:51:e3:f0:b6:b2:0f:be:15:f0:fa:59:d7: e9:ae:b1:2d:92:3b:7a:a5:52:d9:19:b1:41:c9:3a:40:3a:7a: 65:09:35:19:17:a7:9f:e7:0d:6e:c1:94:d4:99:89:14:ff:23: 9f:91:8e:38:01:0a:83:4d:9a:05:a2:9b:51:fe:62:d2:1e:7e: 57:cd:a0:c5 -----BEGIN CERTIFICATE----- MIIE1TCCA72gAwIBAgIUDWDXZ9XN0jY+0weyWToHuMXpw64wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzNDRjQxODk4OTM2Q0I5QzU3M0RCMUVBQUI5NEM2RTY2 OTk1MUZENzAeFw0yNjA2MTkwMzQ2NTNaFw0yNzA2MTgwMzUxNTNaMDMxMTAvBgNV BAMTKDY5RjNFQkMwNUIzNTZCNzQ1M0U3NzM4QjIwRDczRDlBQ0YxQUU3MUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDcF+xjcpVGp2dXgD2ockL+zkjg HyjyzWEEcbMusEEWaVJ1/r9umoW3ANECo9mLhUBui1k5f54VxySsawhn1yz0Z0ND DxcQH4Kmt7YDQK8sTFLUGeuX8HwlA82+UMkb7MaFjejdR6Tqq0kL6GCoQIuxJmJK Zqdyh9alMc3u7h/2UeeiNCLk7ndz4FjrToB3b1QMxFog547+8peXZYRv9Kg43WKf FkninRWh3q/xvNAooed/xrugVy2PfIYLNTcLu883n+Hupv0QpC4AJ9mMAV9m3FhT M4z1qQxn7KehFeG4nAYk+MEEHz7YTH3NbCX+lYqymzowO4wdQqSlsXACwEjTAgMB AAGjggHfMIIB2zAdBgNVHQ4EFgQUafPrwFs1a3RT53OLINc9ms8a5x0wHwYDVR0j BBgwFoAUw89BiYk2y5xXPbHqq5TG5mmVH9cwDgYDVR0PAQH/BAQDAgeAMGQGA1Ud HwRdMFswWaBXoFWGU3JzeW5jOi8va3JpbGwuNDcyNzIubmV0L3JlcG8vSFlFSE9T VC81L0MzQ0Y0MTg5ODkzNkNCOUM1NzNEQjFFQUFCOTRDNkU2Njk5NTFGRDcuY3Js MIGTBggrBgEFBQcBAQSBhjCBgzCBgAYIKwYBBQUHMAKGdHJzeW5jOi8vcnBraS1y cHMuYXJpbi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZjg1MGQwNjNlMDE4NTc1NWM5 MWJlM2Y5ZC83L0MzQ0Y0MTg5ODkzNkNCOUM1NzNEQjFFQUFCOTRDNkU2Njk5NTFG RDcuY2VyME8GCCsGAQUFBwELBEMwQTA/BggrBgEFBQcwC4YzcnN5bmM6Ly9rcmls bC40NzI3Mi5uZXQvcmVwby9IWUVIT1NULzUvQVMyMTU2OTIucm9hMBgGA1UdIAEB /wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwAq CmBEqgYwDQYJKoZIhvcNAQELBQADggEBAI97lhqArWTFWmGp96LakqGr6HRpoXoB Rs/u7sr+WSO7tCU5eoQkwXYEiDaVSwDmP/vq3h/JAf7Wvsnn4lOzLbOUeZfTughS 2joEciMT758KvUg5m2vsqgpb50Q3q0FuwrCj0jogjnGU+jjY+YWMOkniqon0H0EI b1ctT7JG01mAEKp9nIOAnlHr7xvyXETjla6VclarrjrWk1crYuTNxc4djwgqXTFS VYnYVicGR7JsL1TuWVolCFnh9FHj8LayD74V8PpZ1+musS2SO3qlUtkZsUHJOkA6 emUJNRkXp5/nDW7BlNSZiRT/I5+RjjgBCoNNmgWim1H+YtIeflfNoMU= -----END CERTIFICATE-----Generated at Fri Jul 10 16:14:04 2026 by rpki-client