$ rpki-client -vvf krill.47272.net/repo/HYEHOST/5/AS216079.roa File: AS216079.roa (raw, json) Hash identifier: VDdQ6IaPbX9OfDr/dZt9TmJwRorhhs8Jw1gUAccugZI= Subject key identifier: 7B:19:9B:87:D8:53:90:5D:78:6F:5A:2A:30:F1:FF:0F:CB:DA:73:03 Certificate issuer: /CN=C3CF41898936CB9C573DB1EAAB94C6E669951FD7 Certificate serial: 349033ADCAA12D2695AF90D24668C854D2A576D0 Authority key identifier: C3:CF:41:89:89:36:CB:9C:57:3D:B1:EA:AB:94:C6:E6:69:95:1F:D7 Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer Subject info access: rsync://krill.47272.net/repo/HYEHOST/5/AS216079.roa Signing time: Sun 28 Jun 2026 18:57:43 +0000 ROA not before: Sun 28 Jun 2026 18:52:43 +0000 ROA not after: Sun 27 Jun 2027 18:57:43 +0000 asID: 216079 IP address blocks: 2a0f:6284:b00::/40 maxlen: 40 2a0f:6284:b00::/48 maxlen: 48 Validation: OK Signature path: rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.crl rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 11 Jul 2026 08:00:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 34:90:33:ad:ca:a1:2d:26:95:af:90:d2:46:68:c8:54:d2:a5:76:d0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C3CF41898936CB9C573DB1EAAB94C6E669951FD7 Validity Not Before: Jun 28 18:52:43 2026 GMT Not After : Jun 27 18:57:43 2027 GMT Subject: CN=7B199B87D853905D786F5A2A30F1FF0FCBDA7303 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:26:8b:21:3d:b9:07:12:da:e4:bf:b3:7b:a5: cf:10:b0:2d:50:54:2b:a1:d7:05:6d:1a:30:35:7f: c0:5d:b9:20:d7:bc:d3:a6:b2:1f:f9:45:b8:e5:91: 1b:95:69:61:ff:b5:3d:a9:1c:e7:70:47:01:7d:2b: 90:18:ef:d5:20:15:e5:ff:4a:eb:e9:72:d0:12:39: a0:a1:13:8b:34:e0:83:cf:40:5a:8a:c7:57:50:57: 2d:dc:cf:aa:4a:97:91:c5:8b:f4:f2:76:6a:9f:65: 14:6f:2c:a7:c7:d7:53:79:39:7e:3d:18:84:70:a0: ca:c6:06:4f:e6:f0:f8:a9:8c:62:79:ea:39:27:01: 67:ff:85:fd:f6:90:f4:11:a5:6e:ba:d1:ca:ae:26: 34:04:4f:56:0a:17:4e:9d:d3:1b:16:f1:4d:d3:0a: 77:4f:64:69:3d:b3:c3:44:bb:7f:1c:ce:d1:b9:99: 9b:0c:0a:62:e8:30:87:c5:73:3a:14:9c:5b:a3:9e: 7a:1e:ca:07:23:5a:70:6f:7b:d1:77:8e:22:8c:00: 6e:e4:88:34:66:04:61:b2:8e:f5:48:07:9f:12:93: ae:77:54:1f:a0:c4:de:55:37:e2:96:aa:e7:87:0e: 33:4f:bf:90:65:ab:e5:85:29:2d:8c:fc:de:9f:a0: 85:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:19:9B:87:D8:53:90:5D:78:6F:5A:2A:30:F1:FF:0F:CB:DA:73:03 X509v3 Authority Key Identifier: keyid:C3:CF:41:89:89:36:CB:9C:57:3D:B1:EA:AB:94:C6:E6:69:95:1F:D7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer Subject Information Access: Signed Object - URI:rsync://krill.47272.net/repo/HYEHOST/5/AS216079.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0f:6284:b00::/40 Signature Algorithm: sha256WithRSAEncryption 30:7b:eb:77:26:06:d4:58:03:ca:09:bd:e0:73:91:fd:bc:32: c6:f5:df:77:c9:09:22:6b:05:97:d2:ac:26:12:df:43:9a:b1: cd:0a:30:1c:6a:d3:14:38:46:82:1b:48:f4:e5:d3:87:d0:b2: 91:d0:53:c8:9a:9e:dc:97:d9:07:91:e2:ae:df:b1:4a:1a:42: 2f:fc:b9:cc:23:bd:a7:09:e5:fd:85:51:e8:0a:0c:32:cc:62: c1:82:ae:16:16:bd:d8:eb:d7:c6:07:01:22:02:44:dc:45:7a: c8:8d:72:e1:be:be:ba:f9:a0:7e:cb:6b:54:bc:dc:bd:53:84: 0c:6e:c5:7a:95:d3:ff:c3:14:0e:17:31:7e:fa:13:28:24:da: 3f:28:87:0a:e2:5b:ab:97:af:44:86:03:d2:66:1e:e0:9d:e2: f1:93:00:74:0f:c7:ca:b7:f1:ae:bb:9a:b1:92:e2:e4:22:cd: 79:04:e7:e5:14:ca:d4:49:a6:8c:1f:62:ac:59:29:c2:06:b2: f1:84:45:75:bd:25:aa:84:ad:ae:e4:61:8d:52:52:31:51:fb: bf:43:3f:8e:cc:4f:e8:0b:a3:08:05:f4:e4:07:ed:70:03:07: 43:2f:8d:7a:da:36:f8:0a:52:eb:3c:13:98:08:f5:63:9f:47: c3:80:43:b3 -----BEGIN CERTIFICATE----- MIIE1DCCA7ygAwIBAgIUNJAzrcqhLSaVr5DSRmjIVNKldtAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzNDRjQxODk4OTM2Q0I5QzU3M0RCMUVBQUI5NEM2RTY2 OTk1MUZENzAeFw0yNjA2MjgxODUyNDNaFw0yNzA2MjcxODU3NDNaMDMxMTAvBgNV BAMTKDdCMTk5Qjg3RDg1MzkwNUQ3ODZGNUEyQTMwRjFGRjBGQ0JEQTczMDMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCqJoshPbkHEtrkv7N7pc8QsC1Q VCuh1wVtGjA1f8BduSDXvNOmsh/5RbjlkRuVaWH/tT2pHOdwRwF9K5AY79UgFeX/ SuvpctASOaChE4s04IPPQFqKx1dQVy3cz6pKl5HFi/TydmqfZRRvLKfH11N5OX49 GIRwoMrGBk/m8PipjGJ56jknAWf/hf32kPQRpW660cquJjQET1YKF06d0xsW8U3T CndPZGk9s8NEu38cztG5mZsMCmLoMIfFczoUnFujnnoeygcjWnBve9F3jiKMAG7k iDRmBGGyjvVIB58Sk653VB+gxN5VN+KWqueHDjNPv5Blq+WFKS2M/N6foIWLAgMB AAGjggHeMIIB2jAdBgNVHQ4EFgQUexmbh9hTkF14b1oqMPH/D8vacwMwHwYDVR0j BBgwFoAUw89BiYk2y5xXPbHqq5TG5mmVH9cwDgYDVR0PAQH/BAQDAgeAMGQGA1Ud HwRdMFswWaBXoFWGU3JzeW5jOi8va3JpbGwuNDcyNzIubmV0L3JlcG8vSFlFSE9T VC81L0MzQ0Y0MTg5ODkzNkNCOUM1NzNEQjFFQUFCOTRDNkU2Njk5NTFGRDcuY3Js MIGTBggrBgEFBQcBAQSBhjCBgzCBgAYIKwYBBQUHMAKGdHJzeW5jOi8vcnBraS1y cHMuYXJpbi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZjg1MGQwNjNlMDE4NTc1NWM5 MWJlM2Y5ZC83L0MzQ0Y0MTg5ODkzNkNCOUM1NzNEQjFFQUFCOTRDNkU2Njk5NTFG RDcuY2VyME8GCCsGAQUFBwELBEMwQTA/BggrBgEFBQcwC4YzcnN5bmM6Ly9rcmls bC40NzI3Mi5uZXQvcmVwby9IWUVIT1NULzUvQVMyMTYwNzkucm9hMBgGA1UdIAEB /wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgACMAgDBgAq D2KECzANBgkqhkiG9w0BAQsFAAOCAQEAMHvrdyYG1FgDygm94HOR/bwyxvXfd8kJ ImsFl9KsJhLfQ5qxzQowHGrTFDhGghtI9OXTh9CykdBTyJqe3JfZB5Hirt+xShpC L/y5zCO9pwnl/YVR6AoMMsxiwYKuFha92OvXxgcBIgJE3EV6yI1y4b6+uvmgfstr VLzcvVOEDG7FepXT/8MUDhcxfvoTKCTaPyiHCuJbq5evRIYD0mYe4J3i8ZMAdA/H yrfxrruasZLi5CLNeQTn5RTK1EmmjB9irFkpwgay8YRFdb0lqoStruRhjVJSMVH7 v0M/jsxP6AujCAX05AftcAMHQy+Neto2+ApS6zwTmAj1Y59Hw4BDsw== -----END CERTIFICATE-----Generated at Fri Jul 10 16:13:14 2026 by rpki-client