$ rpki-client -vvvf krill.47272.net/repo/HYEHOST/5/AS219207.roa File: AS219207.roa (raw, json) Hash identifier: 5dGqF9gyPCsVTbyYbz3W4bCLhV9EszK2UhlAkbaAs8s= Subject key identifier: DE:F6:EC:3A:77:93:7C:5E:61:13:D9:D2:13:82:75:CC:D1:84:47:B6 Certificate issuer: /CN=C3CF41898936CB9C573DB1EAAB94C6E669951FD7 Certificate serial: 5ABB499132112592646B696AB20BF0833E83F1E9 Authority key identifier: C3:CF:41:89:89:36:CB:9C:57:3D:B1:EA:AB:94:C6:E6:69:95:1F:D7 Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer Subject info access: rsync://krill.47272.net/repo/HYEHOST/5/AS219207.roa Signing time: Wed 26 Aug 2026 16:00:53 +0000 ROA not before: Wed 26 Aug 2026 15:55:53 +0000 ROA not after: Wed 25 Aug 2027 16:00:53 +0000 asID: 219207 IP address blocks: 2a0f:6281::/32 maxlen: 48 Validation: OK Signature path: rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.crl rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 05 Sep 2026 18:12:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5a:bb:49:91:32:11:25:92:64:6b:69:6a:b2:0b:f0:83:3e:83:f1:e9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C3CF41898936CB9C573DB1EAAB94C6E669951FD7 Validity Not Before: Aug 26 15:55:53 2026 GMT Not After : Aug 25 16:00:53 2027 GMT Subject: CN=DEF6EC3A77937C5E6113D9D2138275CCD18447B6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:7b:b3:06:5e:b0:40:6f:66:f2:44:2e:4c:a8: 14:7f:16:ce:4a:86:1b:9c:5e:e7:85:09:b6:d8:3f: aa:a2:38:c8:c9:1f:2e:21:de:9e:10:e7:67:fe:e6: d8:92:43:8c:5d:2d:88:6a:28:2e:a5:42:d7:ae:8f: 4e:1a:5c:6a:55:58:42:f4:8d:82:0b:12:08:55:05: a3:bf:cf:8e:72:48:57:e0:34:39:9c:77:48:45:31: fd:67:b1:3c:ca:40:0e:a0:73:aa:31:43:f1:38:40: f5:97:7a:09:c1:e5:b0:bd:4e:bc:80:0e:4b:5e:c0: 82:9f:20:b8:1f:d0:75:47:99:dc:51:64:5b:6e:cc: 69:bc:85:26:56:16:9d:63:03:8f:8a:8b:3f:6d:8c: 1e:30:52:db:cd:a4:e8:35:05:06:ba:4b:d5:af:56: 0b:7c:d2:da:b0:ff:fb:ec:47:73:a5:3b:0d:1b:a2: 1b:11:a2:a0:4b:10:fa:cd:ed:db:b9:bd:7b:1a:d2: e5:78:69:8d:86:69:d3:2d:8f:bb:fc:0b:8b:ce:47: 9a:81:7b:bb:02:6c:50:17:73:83:b6:5f:8f:a3:69: 62:92:b4:bc:fb:f0:dd:1a:f0:30:76:34:d1:b5:0d: 35:54:c2:c8:c8:e6:0f:2e:ce:e1:57:32:48:a4:83: bd:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:F6:EC:3A:77:93:7C:5E:61:13:D9:D2:13:82:75:CC:D1:84:47:B6 X509v3 Authority Key Identifier: keyid:C3:CF:41:89:89:36:CB:9C:57:3D:B1:EA:AB:94:C6:E6:69:95:1F:D7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer Subject Information Access: Signed Object - URI:rsync://krill.47272.net/repo/HYEHOST/5/AS219207.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0f:6281::/32 Signature Algorithm: sha256WithRSAEncryption 2e:2a:98:72:6a:15:1b:3e:10:15:b0:78:10:50:be:a9:a7:16: ad:d5:6f:ed:8b:e0:c5:5d:e0:9f:f1:ce:7c:b2:e0:10:f1:b9: 3e:fb:81:48:6e:cc:db:40:a4:08:2b:62:a4:e0:42:7e:61:e3: f7:c2:95:1e:c9:ac:a9:f3:75:a9:77:4f:db:f0:e5:0c:63:0e: 5e:99:0c:a1:55:ac:e4:53:42:46:2e:5a:ba:98:2c:c2:5f:0f: 4e:14:23:0a:90:09:00:3d:c9:d0:0e:29:a5:5d:9b:16:83:ed: 27:f2:c5:54:48:ec:2f:f9:7a:8a:4d:32:54:60:22:2a:24:0a: 7f:72:54:9e:2b:d9:1c:74:53:b0:fd:cf:29:56:d5:7e:20:f4: c3:81:c4:78:10:f9:67:f0:f4:da:f4:61:1a:16:6b:f4:9b:78: e1:f4:8d:7f:14:22:b1:5c:9e:4b:ba:99:14:6c:3f:fd:f5:1d: fd:c5:f6:11:ff:50:2f:de:9e:6c:90:4c:d5:2f:0d:0f:53:3e: fa:68:ff:02:79:9a:1e:81:93:de:55:07:58:3b:07:c2:52:c6: 21:e3:80:e3:6f:e4:6b:ab:58:f6:68:07:13:f8:61:53:ce:80: db:89:c2:1e:9e:5b:53:11:bc:b1:03:43:11:55:42:88:93:0e: f0:76:10:7c -----BEGIN CERTIFICATE----- MIIE0zCCA7ugAwIBAgIUWrtJkTIRJZJka2lqsgvwgz6D8ekwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzNDRjQxODk4OTM2Q0I5QzU3M0RCMUVBQUI5NEM2RTY2 OTk1MUZENzAeFw0yNjA4MjYxNTU1NTNaFw0yNzA4MjUxNjAwNTNaMDMxMTAvBgNV BAMTKERFRjZFQzNBNzc5MzdDNUU2MTEzRDlEMjEzODI3NUNDRDE4NDQ3QjYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7e7MGXrBAb2byRC5MqBR/Fs5K hhucXueFCbbYP6qiOMjJHy4h3p4Q52f+5tiSQ4xdLYhqKC6lQteuj04aXGpVWEL0 jYILEghVBaO/z45ySFfgNDmcd0hFMf1nsTzKQA6gc6oxQ/E4QPWXegnB5bC9TryA DktewIKfILgf0HVHmdxRZFtuzGm8hSZWFp1jA4+Kiz9tjB4wUtvNpOg1BQa6S9Wv Vgt80tqw//vsR3OlOw0bohsRoqBLEPrN7du5vXsa0uV4aY2GadMtj7v8C4vOR5qB e7sCbFAXc4O2X4+jaWKStLz78N0a8DB2NNG1DTVUwsjI5g8uzuFXMkikg71bAgMB AAGjggHdMIIB2TAdBgNVHQ4EFgQU3vbsOneTfF5hE9nSE4J1zNGER7YwHwYDVR0j BBgwFoAUw89BiYk2y5xXPbHqq5TG5mmVH9cwDgYDVR0PAQH/BAQDAgeAMGQGA1Ud HwRdMFswWaBXoFWGU3JzeW5jOi8va3JpbGwuNDcyNzIubmV0L3JlcG8vSFlFSE9T VC81L0MzQ0Y0MTg5ODkzNkNCOUM1NzNEQjFFQUFCOTRDNkU2Njk5NTFGRDcuY3Js MIGTBggrBgEFBQcBAQSBhjCBgzCBgAYIKwYBBQUHMAKGdHJzeW5jOi8vcnBraS1y cHMuYXJpbi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZjg1MGQwNjNlMDE4NTc1NWM5 MWJlM2Y5ZC83L0MzQ0Y0MTg5ODkzNkNCOUM1NzNEQjFFQUFCOTRDNkU2Njk5NTFG RDcuY2VyME8GCCsGAQUFBwELBEMwQTA/BggrBgEFBQcwC4YzcnN5bmM6Ly9rcmls bC40NzI3Mi5uZXQvcmVwby9IWUVIT1NULzUvQVMyMTkyMDcucm9hMBgGA1UdIAEB /wQOMAwwCgYIKwYBBQUHDgIwIAYIKwYBBQUHAQcBAf8EETAPMA0EAgACMAcDBQAq D2KBMA0GCSqGSIb3DQEBCwUAA4IBAQAuKphyahUbPhAVsHgQUL6ppxat1W/ti+DF XeCf8c58suAQ8bk++4FIbszbQKQIK2Kk4EJ+YeP3wpUeyayp83Wpd0/b8OUMYw5e mQyhVazkU0JGLlq6mCzCXw9OFCMKkAkAPcnQDimlXZsWg+0n8sVUSOwv+XqKTTJU YCIqJAp/clSeK9kcdFOw/c8pVtV+IPTDgcR4EPln8PTa9GEaFmv0m3jh9I1/FCKx XJ5LupkUbD/99R39xfYR/1Av3p5skEzVLw0PUz76aP8CeZoegZPeVQdYOwfCUsYh 44Djb+Rrq1j2aAcT+GFTzoDbicIenltTEbyxA0MRVUKIkw7wdhB8 -----END CERTIFICATE-----Generated at Sat Sep 5 04:33:04 2026 by rpki-client