$ rpki-client -vvvf krill.47272.net/repo/HYEHOST/5/AS219208.roa File: AS219208.roa (raw, json) Hash identifier: BCrsD8Mzqn2TSJA/07sLCp0whPfR/FUYm58pLcGTJf0= Subject key identifier: 57:C2:4F:AF:E5:89:5D:44:13:B9:C3:6C:BC:92:59:11:4D:2C:A5:CB Certificate issuer: /CN=C3CF41898936CB9C573DB1EAAB94C6E669951FD7 Certificate serial: 418524E616F61C6847DCAA364ACCFCA640EDF082 Authority key identifier: C3:CF:41:89:89:36:CB:9C:57:3D:B1:EA:AB:94:C6:E6:69:95:1F:D7 Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer Subject info access: rsync://krill.47272.net/repo/HYEHOST/5/AS219208.roa Signing time: Sat 17 Oct 2026 10:16:08 +0000 ROA not before: Sat 17 Oct 2026 10:11:08 +0000 ROA not after: Sat 16 Oct 2027 10:16:08 +0000 asID: 219208 IP address blocks: 2a0f:6280:7000::/36 maxlen: 48 Validation: OK Signature path: rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.crl rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Oct 2026 12:55:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 41:85:24:e6:16:f6:1c:68:47:dc:aa:36:4a:cc:fc:a6:40:ed:f0:82 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C3CF41898936CB9C573DB1EAAB94C6E669951FD7 Validity Not Before: Oct 17 10:11:08 2026 GMT Not After : Oct 16 10:16:08 2027 GMT Subject: CN=57C24FAFE5895D4413B9C36CBC9259114D2CA5CB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:34:62:4a:04:a1:ec:d4:93:52:fd:cd:cb:57: 12:db:60:79:49:4e:3f:07:6a:e6:70:0f:00:c4:1f: a2:93:6c:ec:d2:b3:7d:60:9b:06:b2:9d:f6:1a:44: 76:6b:64:a6:4c:3a:c9:bf:1a:07:07:9b:5a:16:74: 19:87:2a:82:da:54:a7:40:d3:c7:47:07:ba:39:8d: 30:99:e0:d7:55:58:03:55:9a:6d:9e:27:21:fc:ec: 34:92:05:c3:5c:f3:c5:4d:42:4f:ba:48:f8:ff:b2: f3:1e:23:53:54:aa:3d:58:5a:ab:bb:42:5a:19:bf: 6a:e9:bf:d3:e2:8e:19:9e:ea:e7:0b:a6:c0:fa:a7: 9b:a4:de:e1:54:f6:1a:7f:a5:a7:0c:45:22:34:1f: a5:6b:b0:fa:64:53:88:45:61:2d:e3:e9:e4:22:f0: 87:70:de:c2:68:22:7c:7d:3f:c6:a7:d1:86:03:1f: 7a:3b:f4:f0:fc:e7:36:7b:3c:ba:4b:c4:7f:00:33: 7c:45:1e:5c:be:85:1a:2e:7c:83:87:df:dd:90:3d: 4f:03:05:90:ab:85:f7:39:9e:a7:75:70:f3:f3:2f: 36:53:1a:3e:1f:14:46:cb:53:6d:24:c7:c3:b9:32: e3:62:9e:47:29:9a:bd:43:b5:a3:4b:a8:25:11:78: 02:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:C2:4F:AF:E5:89:5D:44:13:B9:C3:6C:BC:92:59:11:4D:2C:A5:CB X509v3 Authority Key Identifier: keyid:C3:CF:41:89:89:36:CB:9C:57:3D:B1:EA:AB:94:C6:E6:69:95:1F:D7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer Subject Information Access: Signed Object - URI:rsync://krill.47272.net/repo/HYEHOST/5/AS219208.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0f:6280:7000::/36 Signature Algorithm: sha256WithRSAEncryption 00:5a:db:96:a3:dd:24:40:4e:5c:37:1d:ad:0d:d6:9a:e4:0b: 2a:d7:79:9f:72:ce:7d:03:df:ab:05:fb:bb:ea:0e:c3:49:8f: 58:89:3f:28:82:d0:61:a9:6d:d3:d0:7a:c8:49:23:f9:a4:a4: ca:4a:67:ab:9f:af:a1:a6:8f:58:f1:20:f9:ff:84:67:ff:22: 53:7d:15:61:f4:10:cd:ca:fc:70:63:f0:fa:6e:85:7b:c9:35: fc:1a:33:2e:27:5e:f6:a3:fb:03:ff:5e:29:32:0d:3b:a8:9e: b6:8c:2c:a0:a1:57:51:04:41:12:84:16:e6:b1:13:49:cf:c7: 29:89:c8:c5:3b:27:67:0f:6e:bc:ea:b9:6f:bb:77:f1:ab:fe: d5:0a:2f:b6:5d:b4:9b:36:81:f9:d5:8c:16:f7:41:6f:2d:a6: 16:4c:ab:cd:61:05:da:ab:3c:87:a3:12:7a:87:af:81:fd:48: 22:d1:d8:1b:0f:ec:80:91:3d:77:50:fc:45:df:e9:69:9b:c1: 1c:2b:c4:7a:96:a8:0a:47:6a:35:a4:02:ca:93:b8:c8:99:7c: 43:11:14:32:16:05:9c:d0:c5:8a:dc:99:cf:41:23:ad:c0:98: 9b:32:e4:4e:23:d1:23:72:e7:ea:a3:ec:99:ad:df:61:77:15: 7f:4e:83:8d -----BEGIN CERTIFICATE----- MIIE1DCCA7ygAwIBAgIUQYUk5hb2HGhH3Ko2Ssz8pkDt8IIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzNDRjQxODk4OTM2Q0I5QzU3M0RCMUVBQUI5NEM2RTY2 OTk1MUZENzAeFw0yNjEwMTcxMDExMDhaFw0yNzEwMTYxMDE2MDhaMDMxMTAvBgNV BAMTKDU3QzI0RkFGRTU4OTVENDQxM0I5QzM2Q0JDOTI1OTExNEQyQ0E1Q0IwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCJNGJKBKHs1JNS/c3LVxLbYHlJ Tj8HauZwDwDEH6KTbOzSs31gmwaynfYaRHZrZKZMOsm/GgcHm1oWdBmHKoLaVKdA 08dHB7o5jTCZ4NdVWANVmm2eJyH87DSSBcNc88VNQk+6SPj/svMeI1NUqj1YWqu7 QloZv2rpv9Pijhme6ucLpsD6p5uk3uFU9hp/pacMRSI0H6VrsPpkU4hFYS3j6eQi 8Idw3sJoInx9P8an0YYDH3o79PD85zZ7PLpLxH8AM3xFHly+hRoufIOH392QPU8D BZCrhfc5nqd1cPPzLzZTGj4fFEbLU20kx8O5MuNinkcpmr1DtaNLqCUReALnAgMB AAGjggHeMIIB2jAdBgNVHQ4EFgQUV8JPr+WJXUQTucNsvJJZEU0spcswHwYDVR0j BBgwFoAUw89BiYk2y5xXPbHqq5TG5mmVH9cwDgYDVR0PAQH/BAQDAgeAMGQGA1Ud HwRdMFswWaBXoFWGU3JzeW5jOi8va3JpbGwuNDcyNzIubmV0L3JlcG8vSFlFSE9T VC81L0MzQ0Y0MTg5ODkzNkNCOUM1NzNEQjFFQUFCOTRDNkU2Njk5NTFGRDcuY3Js MIGTBggrBgEFBQcBAQSBhjCBgzCBgAYIKwYBBQUHMAKGdHJzeW5jOi8vcnBraS1y cHMuYXJpbi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZjg1MGQwNjNlMDE4NTc1NWM5 MWJlM2Y5ZC83L0MzQ0Y0MTg5ODkzNkNCOUM1NzNEQjFFQUFCOTRDNkU2Njk5NTFG RDcuY2VyME8GCCsGAQUFBwELBEMwQTA/BggrBgEFBQcwC4YzcnN5bmM6Ly9rcmls bC40NzI3Mi5uZXQvcmVwby9IWUVIT1NULzUvQVMyMTkyMDgucm9hMBgGA1UdIAEB /wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgACMAgDBgQq D2KAcDANBgkqhkiG9w0BAQsFAAOCAQEAAFrblqPdJEBOXDcdrQ3WmuQLKtd5n3LO fQPfqwX7u+oOw0mPWIk/KILQYalt09B6yEkj+aSkykpnq5+voaaPWPEg+f+EZ/8i U30VYfQQzcr8cGPw+m6Fe8k1/BozLide9qP7A/9eKTINO6ietowsoKFXUQRBEoQW 5rETSc/HKYnIxTsnZw9uvOq5b7t38av+1Qovtl20mzaB+dWMFvdBby2mFkyrzWEF 2qs8h6MSeoevgf1IItHYGw/sgJE9d1D8Rd/paZvBHCvEepaoCkdqNaQCypO4yJl8 QxEUMhYFnNDFityZz0EjrcCYmzLkTiPRI3Ln6qPsma3fYXcVf06DjQ== -----END CERTIFICATE-----Generated at Sun Oct 25 03:16:39 2026 by rpki-client