$ rpki-client -vvf krill.47272.net/repo/HYEHOST/5/AS219299.roa File: AS219299.roa (raw, json) Hash identifier: LddBu/dAoRnjhO7kao0E42TJMKzOjc7ZY3r2ZmnaCTs= Subject key identifier: 59:91:36:A1:09:B1:3D:80:BF:FD:91:1A:31:F1:84:D3:C5:A6:79:20 Certificate issuer: /CN=C3CF41898936CB9C573DB1EAAB94C6E669951FD7 Certificate serial: 5351296D9CFAD73389948898EE66500F29E1B333 Authority key identifier: C3:CF:41:89:89:36:CB:9C:57:3D:B1:EA:AB:94:C6:E6:69:95:1F:D7 Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer Subject info access: rsync://krill.47272.net/repo/HYEHOST/5/AS219299.roa Signing time: Wed 01 Jul 2026 20:54:36 +0000 ROA not before: Wed 01 Jul 2026 20:49:36 +0000 ROA not after: Wed 30 Jun 2027 20:54:36 +0000 asID: 219299 IP address blocks: 2a0f:6280:6000::/36 maxlen: 48 Validation: OK Signature path: rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.crl rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 11 Jul 2026 08:00:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 53:51:29:6d:9c:fa:d7:33:89:94:88:98:ee:66:50:0f:29:e1:b3:33 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C3CF41898936CB9C573DB1EAAB94C6E669951FD7 Validity Not Before: Jul 1 20:49:36 2026 GMT Not After : Jun 30 20:54:36 2027 GMT Subject: CN=599136A109B13D80BFFD911A31F184D3C5A67920 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:19:92:b0:77:b7:e0:d6:ed:2e:35:d4:9e:2f: d1:40:35:4a:1c:f6:af:87:b0:60:24:4e:97:7e:c3: a4:af:fc:92:ea:b3:e3:b5:c8:5c:6d:d3:c7:10:d8: 59:e7:98:c0:fd:cd:62:4f:81:77:5b:ce:a7:ee:68: 79:12:25:9b:bf:71:10:29:b9:9a:55:ce:c1:af:b2: c8:4e:2f:d5:a5:c5:67:91:1b:48:06:2c:4d:1d:83: bf:8d:2f:94:b9:80:76:78:83:76:bb:16:9e:87:75: 71:b1:f0:18:fc:47:d2:cc:72:ec:c5:0b:01:c4:ec: 59:69:44:ce:27:73:c8:c2:cb:c4:4f:34:a4:a2:42: 7f:dc:1b:c9:52:bb:8a:b9:53:f1:e8:b3:d1:ee:d5: 08:e3:0c:14:b0:90:7a:f0:e9:eb:8f:99:d3:6b:3b: 60:8d:3a:10:a1:2d:0c:e3:8b:cb:56:7d:76:cd:35: 75:25:58:f8:41:32:a8:27:00:2b:f9:a0:15:11:ea: a6:e7:6e:e7:8c:94:85:69:aa:32:c5:2a:21:45:cf: 98:5a:12:b3:5c:bb:39:8e:8e:a8:67:ca:c3:fe:37: 85:b2:f3:50:ed:73:e7:ac:90:98:99:03:37:52:91: bb:75:71:e4:1b:42:71:63:cb:7a:65:19:19:86:eb: 2e:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:91:36:A1:09:B1:3D:80:BF:FD:91:1A:31:F1:84:D3:C5:A6:79:20 X509v3 Authority Key Identifier: keyid:C3:CF:41:89:89:36:CB:9C:57:3D:B1:EA:AB:94:C6:E6:69:95:1F:D7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer Subject Information Access: Signed Object - URI:rsync://krill.47272.net/repo/HYEHOST/5/AS219299.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0f:6280:6000::/36 Signature Algorithm: sha256WithRSAEncryption 42:70:af:40:e7:ed:a7:f1:44:c5:3d:06:a3:2b:f6:aa:f6:20: a3:8b:8a:8d:43:5e:7f:df:2b:7b:42:8e:5b:12:af:56:36:69: 7b:7d:91:8d:66:01:ef:56:27:63:34:c1:a3:1a:b6:d2:f6:8a: e5:32:fd:01:bb:37:b3:92:ed:ab:56:2b:48:9e:19:4d:08:14: 56:99:25:a6:eb:3b:d6:78:df:3f:b4:4d:9e:e2:08:a2:1a:48: fc:06:b0:d3:c3:7b:a3:f7:3b:c5:2b:a0:ed:98:a5:5c:60:40: 3a:d6:54:88:e0:c1:3b:76:81:84:c9:91:3f:58:ab:69:d7:16: d0:4b:51:01:5d:a0:81:49:0d:9d:2f:97:93:4a:f9:58:db:02: 78:7b:67:83:05:3b:e6:ac:4f:f8:2c:97:2d:57:90:5c:26:86: 2a:53:d0:f6:e7:26:c1:64:5c:89:6f:1a:fe:fa:5a:61:1c:de: 7c:d0:fe:c0:a1:52:80:38:48:b6:74:0d:ed:05:28:bd:6b:f1: e9:af:e0:7a:db:fe:d5:8b:4d:ae:b1:c1:8c:2f:a2:d4:54:66: 81:a3:4b:1a:d4:7e:36:ef:74:16:0b:a9:e3:a9:77:89:59:35: 3b:bb:35:45:43:20:35:03:6d:bf:45:c4:e7:3f:96:8f:9d:47: 4e:38:ea:32 -----BEGIN CERTIFICATE----- MIIE1DCCA7ygAwIBAgIUU1EpbZz61zOJlIiY7mZQDynhszMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzNDRjQxODk4OTM2Q0I5QzU3M0RCMUVBQUI5NEM2RTY2 OTk1MUZENzAeFw0yNjA3MDEyMDQ5MzZaFw0yNzA2MzAyMDU0MzZaMDMxMTAvBgNV BAMTKDU5OTEzNkExMDlCMTNEODBCRkZEOTExQTMxRjE4NEQzQzVBNjc5MjAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDOGZKwd7fg1u0uNdSeL9FANUoc 9q+HsGAkTpd+w6Sv/JLqs+O1yFxt08cQ2FnnmMD9zWJPgXdbzqfuaHkSJZu/cRAp uZpVzsGvsshOL9WlxWeRG0gGLE0dg7+NL5S5gHZ4g3a7Fp6HdXGx8Bj8R9LMcuzF CwHE7FlpRM4nc8jCy8RPNKSiQn/cG8lSu4q5U/Hos9Hu1QjjDBSwkHrw6euPmdNr O2CNOhChLQzji8tWfXbNNXUlWPhBMqgnACv5oBUR6qbnbueMlIVpqjLFKiFFz5ha ErNcuzmOjqhnysP+N4Wy81Dtc+eskJiZAzdSkbt1ceQbQnFjy3plGRmG6y69AgMB AAGjggHeMIIB2jAdBgNVHQ4EFgQUWZE2oQmxPYC//ZEaMfGE08WmeSAwHwYDVR0j BBgwFoAUw89BiYk2y5xXPbHqq5TG5mmVH9cwDgYDVR0PAQH/BAQDAgeAMGQGA1Ud HwRdMFswWaBXoFWGU3JzeW5jOi8va3JpbGwuNDcyNzIubmV0L3JlcG8vSFlFSE9T VC81L0MzQ0Y0MTg5ODkzNkNCOUM1NzNEQjFFQUFCOTRDNkU2Njk5NTFGRDcuY3Js MIGTBggrBgEFBQcBAQSBhjCBgzCBgAYIKwYBBQUHMAKGdHJzeW5jOi8vcnBraS1y cHMuYXJpbi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZjg1MGQwNjNlMDE4NTc1NWM5 MWJlM2Y5ZC83L0MzQ0Y0MTg5ODkzNkNCOUM1NzNEQjFFQUFCOTRDNkU2Njk5NTFG RDcuY2VyME8GCCsGAQUFBwELBEMwQTA/BggrBgEFBQcwC4YzcnN5bmM6Ly9rcmls bC40NzI3Mi5uZXQvcmVwby9IWUVIT1NULzUvQVMyMTkyOTkucm9hMBgGA1UdIAEB /wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgACMAgDBgQq D2KAYDANBgkqhkiG9w0BAQsFAAOCAQEAQnCvQOftp/FExT0Goyv2qvYgo4uKjUNe f98re0KOWxKvVjZpe32RjWYB71YnYzTBoxq20vaK5TL9Abs3s5Ltq1YrSJ4ZTQgU Vpklpus71njfP7RNnuIIohpI/Aaw08N7o/c7xSug7ZilXGBAOtZUiODBO3aBhMmR P1iradcW0EtRAV2ggUkNnS+Xk0r5WNsCeHtngwU75qxP+CyXLVeQXCaGKlPQ9ucm wWRciW8a/vpaYRzefND+wKFSgDhItnQN7QUovWvx6a/getv+1YtNrrHBjC+i1FRm gaNLGtR+Nu90Fgup46l3iVk1O7s1RUMgNQNtv0XE5z+Wj51HTjjqMg== -----END CERTIFICATE-----Generated at Fri Jul 10 16:10:09 2026 by rpki-client