
$ rpki-client -vvvf krill.47272.net/repo/HYEHOST/5/AS219283.roa
File: AS219283.roa (raw, json)
Hash identifier: qQLJ6YevDnFw7df4nyIXVZV//hp0F4Zvap5T5BRpdmc=
Subject key identifier: F4:F7:D8:02:92:B1:AF:07:16:D1:71:AF:22:A4:D9:D3:31:4A:06:90
Certificate issuer: /CN=C3CF41898936CB9C573DB1EAAB94C6E669951FD7
Certificate serial: 6214B5998A9A404DB9127AAFA26818B81C39C374
Authority key identifier: C3:CF:41:89:89:36:CB:9C:57:3D:B1:EA:AB:94:C6:E6:69:95:1F:D7
Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer
Subject info access: rsync://krill.47272.net/repo/HYEHOST/5/AS219283.roa
Signing time: Sun 30 Aug 2026 14:00:45 +0000
ROA not before: Sun 30 Aug 2026 13:55:45 +0000
ROA not after: Sun 29 Aug 2027 14:00:45 +0000
asID: 219283
IP address blocks: 2a0f:6281::/32 maxlen: 48
Validation: OK
Signature path: rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.crl
rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.mft
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 18:12:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
62:14:b5:99:8a:9a:40:4d:b9:12:7a:af:a2:68:18:b8:1c:39:c3:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C3CF41898936CB9C573DB1EAAB94C6E669951FD7
Validity
Not Before: Aug 30 13:55:45 2026 GMT
Not After : Aug 29 14:00:45 2027 GMT
Subject: CN=F4F7D80292B1AF0716D171AF22A4D9D3314A0690
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:02:a5:fc:51:d5:40:6b:18:b2:eb:42:a5:78:
f4:f1:44:6b:c8:2a:6b:7c:16:77:af:b9:06:f1:3d:
c0:82:7c:c1:af:68:3d:0b:fc:14:8e:e8:49:8f:ab:
2b:fa:66:88:76:9d:89:21:aa:c6:10:b8:6a:86:ca:
b6:4d:ee:05:47:25:63:54:a7:65:3b:95:72:dc:bf:
65:b1:61:53:87:4b:5e:a5:47:a4:5d:f4:60:f3:7d:
ca:06:7f:e1:59:c9:f6:9f:0a:23:bb:16:8f:a8:62:
78:59:dd:c8:27:06:21:19:64:c0:b0:2a:95:3b:c9:
65:5a:b6:b3:30:52:6e:3a:cb:c2:ae:d2:07:82:27:
2f:bb:bd:c7:f6:98:a7:e2:1a:fb:0a:74:61:f6:09:
09:a1:47:93:cb:51:a2:5b:13:5d:ce:d0:f0:cd:e8:
dd:15:c8:81:74:6d:d9:eb:fb:3f:a9:68:0f:d8:82:
1c:a7:81:7e:be:84:ad:c9:04:b4:5d:76:1e:c3:01:
ac:95:eb:32:a8:6e:17:3f:ee:bd:cc:8e:84:0c:68:
2b:50:11:ce:0c:02:eb:9f:b6:af:7f:e1:5a:e4:da:
19:23:d9:65:53:cb:8b:c8:c4:1a:1d:a8:fa:18:a6:
dd:4b:f3:c3:d0:26:d3:cf:3d:75:9f:d6:49:d6:57:
ed:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:F7:D8:02:92:B1:AF:07:16:D1:71:AF:22:A4:D9:D3:31:4A:06:90
X509v3 Authority Key Identifier:
keyid:C3:CF:41:89:89:36:CB:9C:57:3D:B1:EA:AB:94:C6:E6:69:95:1F:D7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer
Subject Information Access:
Signed Object - URI:rsync://krill.47272.net/repo/HYEHOST/5/AS219283.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:6281::/32
Signature Algorithm: sha256WithRSAEncryption
22:8a:98:5a:77:0d:a4:8f:56:17:16:8e:60:4d:61:cc:5d:e7:
91:ca:85:03:4d:0e:10:49:e7:a6:1c:0e:6a:7f:45:76:ef:d2:
63:21:30:61:da:83:7f:d0:f4:6a:38:24:53:ca:f4:85:94:1d:
54:d9:fa:e6:10:4f:86:69:93:c3:f5:90:eb:16:b1:48:04:4d:
b0:58:a5:ef:6f:0c:01:df:fd:3f:cf:c2:84:f7:0d:c5:44:64:
75:ef:cf:ae:a7:02:1e:4f:b0:3c:ef:17:aa:8b:1f:0d:81:39:
35:68:ff:2d:e2:67:ce:9e:c9:ed:a6:22:23:7b:32:8f:32:7f:
c6:32:f8:8b:2a:b7:43:9b:3d:2f:ca:89:a4:00:0a:36:f5:a1:
b5:60:4f:33:3b:c6:08:04:cb:41:0c:b6:5b:ad:b4:ad:30:f6:
68:b2:44:07:14:18:53:d6:4a:40:83:2f:3b:6d:67:01:bb:68:
20:d5:cb:a6:b3:78:f7:69:a8:58:5a:13:59:9d:ef:2d:9d:fb:
a6:fa:c9:52:ce:cc:e1:fc:4b:89:7b:4e:8b:6d:1e:c7:14:54:
16:87:12:0c:9e:ae:8a:10:0d:b0:35:a9:ce:08:a5:03:3f:0c:
ec:36:4d:96:67:03:74:3e:0f:93:e0:c7:3d:7f:87:8f:2e:4f:
6b:a3:e4:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 04:33:04 2026 by rpki-client