$ rpki-client -vvf krill.47272.net/repo/HYEHOST/5/AS219383.roa File: AS219383.roa (raw, json) Hash identifier: 8VH4Yl2/opJY6XefntjObulnPNvFQs6zZjCIvWrvFpo= Subject key identifier: F8:BB:44:85:1A:AD:A5:51:E7:7D:A3:9B:BB:F2:62:84:B8:DB:36:C7 Certificate issuer: /CN=C3CF41898936CB9C573DB1EAAB94C6E669951FD7 Certificate serial: 63C8FA3F05C171E80F5484657A3FBEC0FBE86974 Authority key identifier: C3:CF:41:89:89:36:CB:9C:57:3D:B1:EA:AB:94:C6:E6:69:95:1F:D7 Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer Subject info access: rsync://krill.47272.net/repo/HYEHOST/5/AS219383.roa Signing time: Sun 19 Jul 2026 01:44:03 +0000 ROA not before: Sun 19 Jul 2026 01:39:03 +0000 ROA not after: Sun 18 Jul 2027 01:44:03 +0000 asID: 219383 IP address blocks: 2a0f:6280:1130::/44 maxlen: 48 Validation: OK Signature path: rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.crl rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 22 Jul 2026 14:18:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 63:c8:fa:3f:05:c1:71:e8:0f:54:84:65:7a:3f:be:c0:fb:e8:69:74 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C3CF41898936CB9C573DB1EAAB94C6E669951FD7 Validity Not Before: Jul 19 01:39:03 2026 GMT Not After : Jul 18 01:44:03 2027 GMT Subject: CN=F8BB44851AADA551E77DA39BBBF26284B8DB36C7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:de:b6:ce:96:a8:65:58:f1:b8:19:6c:90:21: 48:b4:33:5a:ef:9a:a7:95:f0:57:7c:e6:c5:7e:9d: 59:6d:c5:ee:4f:c2:dd:52:3f:15:e8:a1:bb:06:0f: 60:df:53:58:12:9e:a6:42:9d:ab:e1:41:cf:29:f9: 8d:05:09:ed:8f:47:0f:2f:e5:ce:82:fa:a1:83:90: 61:26:7c:43:89:21:af:05:be:09:4c:3a:53:20:16: 67:4b:a8:5e:07:93:e7:4d:80:85:d7:f7:43:98:36: a1:b1:20:13:83:53:13:c9:e4:77:b7:3f:fe:56:ae: e0:77:aa:c9:25:5b:7b:8d:24:2c:ba:05:1e:f3:37: 2f:7b:38:f2:ef:06:3f:73:67:68:9b:ba:57:ad:16: bf:ec:b2:e1:c7:37:92:63:69:d9:ad:10:ac:67:14: 9a:4f:24:cf:8b:c0:98:df:1f:fb:cb:c7:e7:01:be: d3:1f:9b:db:c0:b8:74:0c:84:30:b8:78:01:a4:ae: a2:78:bf:fd:1e:d7:ad:89:a1:0b:65:76:3d:bf:89: eb:97:2f:2a:88:4c:c1:dc:53:fa:3d:fe:22:c8:80: 1c:65:74:ff:6d:4a:d1:20:2f:79:50:72:9d:5a:ee: 30:d6:24:c5:d2:a8:58:19:62:7c:53:12:3c:ef:40: 5f:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:BB:44:85:1A:AD:A5:51:E7:7D:A3:9B:BB:F2:62:84:B8:DB:36:C7 X509v3 Authority Key Identifier: keyid:C3:CF:41:89:89:36:CB:9C:57:3D:B1:EA:AB:94:C6:E6:69:95:1F:D7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer Subject Information Access: Signed Object - URI:rsync://krill.47272.net/repo/HYEHOST/5/AS219383.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0f:6280:1130::/44 Signature Algorithm: sha256WithRSAEncryption 0f:39:17:fc:e6:a7:c4:e6:07:9d:a0:a4:04:86:cb:d2:31:c3: 16:f1:6a:e7:f5:5e:5d:00:34:62:36:d6:e9:2c:c1:8b:23:48: 36:a3:0f:41:d4:8a:0f:11:28:a2:77:09:35:36:a4:d9:e8:0a: 91:f9:43:b8:25:66:50:ac:46:94:b8:43:97:4a:a1:4d:df:a0: a4:8d:20:54:8a:f6:15:c2:4e:ed:95:b1:fb:9a:c2:8c:e1:d8: f9:32:f1:de:15:9c:7f:a8:81:42:45:35:74:b7:51:e0:af:ed: 7e:12:9e:7c:32:0b:9b:dd:49:c3:99:9b:e0:c9:87:e9:4b:4d: 60:ac:52:ea:d1:db:f2:b1:05:e4:ee:a9:25:5e:ee:c3:23:03: 7e:b8:3a:b6:2e:46:cf:26:e1:16:7a:14:4f:c3:92:65:8b:c8: 47:73:c9:06:24:04:49:ac:8e:95:84:d9:2e:61:50:1e:fe:0f: 1c:12:20:2e:27:92:35:bd:de:50:01:fa:ba:ce:39:58:81:b7: 26:8f:1f:15:0c:1e:57:0e:65:9c:a2:76:4a:09:53:79:b3:54: af:e0:f9:46:75:0e:9f:9c:7b:21:2e:bf:da:81:ba:dd:e6:1e: 3f:2b:6e:24:1c:00:e5:be:82:1d:72:4d:45:af:16:37:42:56: fa:24:06:2e -----BEGIN CERTIFICATE----- MIIE1TCCA72gAwIBAgIUY8j6PwXBcegPVIRlej++wPvoaXQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzNDRjQxODk4OTM2Q0I5QzU3M0RCMUVBQUI5NEM2RTY2 OTk1MUZENzAeFw0yNjA3MTkwMTM5MDNaFw0yNzA3MTgwMTQ0MDNaMDMxMTAvBgNV BAMTKEY4QkI0NDg1MUFBREE1NTFFNzdEQTM5QkJCRjI2Mjg0QjhEQjM2QzcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCp3rbOlqhlWPG4GWyQIUi0M1rv mqeV8Fd85sV+nVltxe5Pwt1SPxXoobsGD2DfU1gSnqZCnavhQc8p+Y0FCe2PRw8v 5c6C+qGDkGEmfEOJIa8FvglMOlMgFmdLqF4Hk+dNgIXX90OYNqGxIBODUxPJ5He3 P/5WruB3qsklW3uNJCy6BR7zNy97OPLvBj9zZ2ibuletFr/ssuHHN5JjadmtEKxn FJpPJM+LwJjfH/vLx+cBvtMfm9vAuHQMhDC4eAGkrqJ4v/0e162JoQtldj2/ieuX LyqITMHcU/o9/iLIgBxldP9tStEgL3lQcp1a7jDWJMXSqFgZYnxTEjzvQF+tAgMB AAGjggHfMIIB2zAdBgNVHQ4EFgQU+LtEhRqtpVHnfaObu/JihLjbNscwHwYDVR0j BBgwFoAUw89BiYk2y5xXPbHqq5TG5mmVH9cwDgYDVR0PAQH/BAQDAgeAMGQGA1Ud HwRdMFswWaBXoFWGU3JzeW5jOi8va3JpbGwuNDcyNzIubmV0L3JlcG8vSFlFSE9T VC81L0MzQ0Y0MTg5ODkzNkNCOUM1NzNEQjFFQUFCOTRDNkU2Njk5NTFGRDcuY3Js MIGTBggrBgEFBQcBAQSBhjCBgzCBgAYIKwYBBQUHMAKGdHJzeW5jOi8vcnBraS1y cHMuYXJpbi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZjg1MGQwNjNlMDE4NTc1NWM5 MWJlM2Y5ZC83L0MzQ0Y0MTg5ODkzNkNCOUM1NzNEQjFFQUFCOTRDNkU2Njk5NTFG RDcuY2VyME8GCCsGAQUFBwELBEMwQTA/BggrBgEFBQcwC4YzcnN5bmM6Ly9rcmls bC40NzI3Mi5uZXQvcmVwby9IWUVIT1NULzUvQVMyMTkzODMucm9hMBgGA1UdIAEB /wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwQq D2KAETAwDQYJKoZIhvcNAQELBQADggEBAA85F/zmp8TmB52gpASGy9Ixwxbxauf1 Xl0ANGI21ukswYsjSDajD0HUig8RKKJ3CTU2pNnoCpH5Q7glZlCsRpS4Q5dKoU3f oKSNIFSK9hXCTu2Vsfuawozh2Pky8d4VnH+ogUJFNXS3UeCv7X4SnnwyC5vdScOZ m+DJh+lLTWCsUurR2/KxBeTuqSVe7sMjA364OrYuRs8m4RZ6FE/DkmWLyEdzyQYk BEmsjpWE2S5hUB7+DxwSIC4nkjW93lAB+rrOOViBtyaPHxUMHlcOZZyidkoJU3mz VK/g+UZ1Dp+ceyEuv9qBut3mHj8rbiQcAOW+gh1yTUWvFjdCVvokBi4= -----END CERTIFICATE-----Generated at Tue Jul 21 20:29:59 2026 by rpki-client