$ rpki-client -vvvf krill.47272.net/repo/HYEHOST/5/AS218890.roa File: AS218890.roa (raw, json) Hash identifier: 8HK11s5BnFplaTSB9FSKH76A/0qNzztBdUErGR2NQz4= Subject key identifier: 5B:7F:5A:BB:E0:EB:E2:3A:19:ED:B9:33:03:07:B7:61:A2:C2:4B:73 Certificate issuer: /CN=C3CF41898936CB9C573DB1EAAB94C6E669951FD7 Certificate serial: 24943A14115F2549AF79BD55DF138C60C03F9432 Authority key identifier: C3:CF:41:89:89:36:CB:9C:57:3D:B1:EA:AB:94:C6:E6:69:95:1F:D7 Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer Subject info access: rsync://krill.47272.net/repo/HYEHOST/5/AS218890.roa Signing time: Sat 29 Aug 2026 17:49:21 +0000 ROA not before: Sat 29 Aug 2026 17:44:21 +0000 ROA not after: Sat 28 Aug 2027 17:49:21 +0000 asID: 218890 IP address blocks: 2a0f:6280:1800::/40 maxlen: 48 Validation: OK Signature path: rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.crl rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 05 Sep 2026 16:00:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 24:94:3a:14:11:5f:25:49:af:79:bd:55:df:13:8c:60:c0:3f:94:32 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C3CF41898936CB9C573DB1EAAB94C6E669951FD7 Validity Not Before: Aug 29 17:44:21 2026 GMT Not After : Aug 28 17:49:21 2027 GMT Subject: CN=5B7F5ABBE0EBE23A19EDB9330307B761A2C24B73 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:6a:aa:22:3a:37:e7:db:99:73:5e:20:6f:fe: 6f:ee:a6:55:6e:7b:90:9b:b1:62:df:4a:d4:04:01: f5:bb:70:a1:aa:fd:8e:65:89:5a:ff:5c:03:cb:4b: c3:b3:9b:cb:85:32:86:4b:04:fc:d6:99:e4:de:81: d9:25:a2:d5:4e:6d:d7:aa:ba:b9:ea:7f:ce:23:4d: d0:fd:f6:0c:39:c8:15:82:a0:35:71:a2:10:84:a9: 75:2e:83:2e:40:69:26:e7:27:94:20:d1:a8:74:15: 40:b4:5c:58:24:6d:bf:25:ff:1b:00:47:2e:6b:a9: ec:fd:2a:e0:09:8a:dc:0e:0b:69:64:65:c3:37:f4: 5e:fd:01:c5:68:46:cf:28:7e:2c:ed:bd:f6:5a:dd: 9d:10:d6:eb:15:53:56:83:db:e5:7b:8d:33:f0:a4: 42:6f:19:ae:39:1d:e3:89:c7:7c:7c:61:05:18:50: f8:d7:3a:58:5b:6e:8c:79:e1:ab:ed:4f:d3:ca:55: 8f:71:fb:e7:9f:46:c6:26:19:ba:c5:92:13:30:f5: d3:e1:84:fa:31:5e:11:c4:69:66:e1:a6:82:60:cb: 5e:ab:0f:d2:8e:94:63:ac:8e:0d:17:50:3b:08:1b: 2b:30:1c:cb:f1:03:8e:7e:07:69:36:90:f4:d8:55: be:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:7F:5A:BB:E0:EB:E2:3A:19:ED:B9:33:03:07:B7:61:A2:C2:4B:73 X509v3 Authority Key Identifier: keyid:C3:CF:41:89:89:36:CB:9C:57:3D:B1:EA:AB:94:C6:E6:69:95:1F:D7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer Subject Information Access: Signed Object - URI:rsync://krill.47272.net/repo/HYEHOST/5/AS218890.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0f:6280:1800::/40 Signature Algorithm: sha256WithRSAEncryption 03:59:5e:17:5f:f9:0c:11:7e:59:7c:99:bc:db:d7:d0:8b:9b: 74:e9:a8:83:a3:3b:00:f1:de:0a:37:ff:93:49:b1:8a:6e:97: 32:c2:7c:ce:18:da:bc:d0:5a:e8:47:3f:d7:b2:a8:70:7d:df: 46:4d:fd:df:d0:8f:e4:37:c8:c5:12:24:42:9d:ec:96:c3:37: 91:d4:5e:77:0f:5f:24:54:ae:88:bc:76:3f:9b:19:f1:49:7a: 3e:57:dc:d1:a0:50:80:88:73:0b:a3:fb:42:00:8c:c9:6f:a0: 96:94:d2:e8:e8:d7:dc:06:0e:c1:88:88:bd:72:e2:05:75:e6: a2:40:85:21:09:5b:fa:c6:77:1f:80:4f:a9:bc:41:88:3e:08: ac:f2:a5:56:23:b3:1c:ea:2b:a2:6a:26:88:28:5f:5a:b4:82: 99:82:1c:02:97:57:6f:56:c1:0e:9c:8f:80:c6:cd:d6:7d:85: 44:cb:5c:be:56:d9:03:1e:f4:25:8a:15:b0:aa:8e:c0:1b:98: 1f:86:e6:2e:e8:77:d7:e6:60:91:2d:05:74:35:ff:66:03:e6: 26:01:fc:76:38:e2:3d:09:61:48:69:00:29:6d:cc:f7:b7:1f: c3:79:19:95:4b:c6:ce:4b:50:17:8e:83:6a:3a:15:11:2b:d8: d7:da:35:f8 -----BEGIN CERTIFICATE----- MIIE1DCCA7ygAwIBAgIUJJQ6FBFfJUmveb1V3xOMYMA/lDIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzNDRjQxODk4OTM2Q0I5QzU3M0RCMUVBQUI5NEM2RTY2 OTk1MUZENzAeFw0yNjA4MjkxNzQ0MjFaFw0yNzA4MjgxNzQ5MjFaMDMxMTAvBgNV BAMTKDVCN0Y1QUJCRTBFQkUyM0ExOUVEQjkzMzAzMDdCNzYxQTJDMjRCNzMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2aqoiOjfn25lzXiBv/m/uplVu e5CbsWLfStQEAfW7cKGq/Y5liVr/XAPLS8Ozm8uFMoZLBPzWmeTegdklotVObdeq urnqf84jTdD99gw5yBWCoDVxohCEqXUugy5AaSbnJ5Qg0ah0FUC0XFgkbb8l/xsA Ry5rqez9KuAJitwOC2lkZcM39F79AcVoRs8ofiztvfZa3Z0Q1usVU1aD2+V7jTPw pEJvGa45HeOJx3x8YQUYUPjXOlhbbox54avtT9PKVY9x++efRsYmGbrFkhMw9dPh hPoxXhHEaWbhpoJgy16rD9KOlGOsjg0XUDsIGyswHMvxA45+B2k2kPTYVb7rAgMB AAGjggHeMIIB2jAdBgNVHQ4EFgQUW39au+Dr4joZ7bkzAwe3YaLCS3MwHwYDVR0j BBgwFoAUw89BiYk2y5xXPbHqq5TG5mmVH9cwDgYDVR0PAQH/BAQDAgeAMGQGA1Ud HwRdMFswWaBXoFWGU3JzeW5jOi8va3JpbGwuNDcyNzIubmV0L3JlcG8vSFlFSE9T VC81L0MzQ0Y0MTg5ODkzNkNCOUM1NzNEQjFFQUFCOTRDNkU2Njk5NTFGRDcuY3Js MIGTBggrBgEFBQcBAQSBhjCBgzCBgAYIKwYBBQUHMAKGdHJzeW5jOi8vcnBraS1y cHMuYXJpbi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZjg1MGQwNjNlMDE4NTc1NWM5 MWJlM2Y5ZC83L0MzQ0Y0MTg5ODkzNkNCOUM1NzNEQjFFQUFCOTRDNkU2Njk5NTFG RDcuY2VyME8GCCsGAQUFBwELBEMwQTA/BggrBgEFBQcwC4YzcnN5bmM6Ly9rcmls bC40NzI3Mi5uZXQvcmVwby9IWUVIT1NULzUvQVMyMTg4OTAucm9hMBgGA1UdIAEB /wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgACMAgDBgAq D2KAGDANBgkqhkiG9w0BAQsFAAOCAQEAA1leF1/5DBF+WXyZvNvX0IubdOmog6M7 APHeCjf/k0mxim6XMsJ8zhjavNBa6Ec/17KocH3fRk3939CP5DfIxRIkQp3slsM3 kdRedw9fJFSuiLx2P5sZ8Ul6Plfc0aBQgIhzC6P7QgCMyW+glpTS6OjX3AYOwYiI vXLiBXXmokCFIQlb+sZ3H4BPqbxBiD4IrPKlViOzHOoromomiChfWrSCmYIcApdX b1bBDpyPgMbN1n2FRMtcvlbZAx70JYoVsKqOwBuYH4bmLuh31+ZgkS0FdDX/ZgPm JgH8djjiPQlhSGkAKW3M97cfw3kZlUvGzktQF46DajoVESvY19o1+A== -----END CERTIFICATE-----Generated at Fri Sep 4 23:06:31 2026 by rpki-client