
$ rpki-client -vvf krill.47272.net/repo/HYEHOST/5/AS219412.roa
File: AS219412.roa (raw, json)
Hash identifier: 5E5lko0IcTgvGyPXVKGPYg4YnznsEpxJBHHASiiICm8=
Subject key identifier: CD:12:1F:2A:25:13:2C:6E:15:EA:5C:FA:38:0A:B4:42:F1:4D:34:52
Certificate issuer: /CN=C3CF41898936CB9C573DB1EAAB94C6E669951FD7
Certificate serial: 638FAE7B3C141475C5990B74C352FB0F1C937EE1
Authority key identifier: C3:CF:41:89:89:36:CB:9C:57:3D:B1:EA:AB:94:C6:E6:69:95:1F:D7
Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer
Subject info access: rsync://krill.47272.net/repo/HYEHOST/5/AS219412.roa
Signing time: Wed 29 Jul 2026 11:22:40 +0000
ROA not before: Wed 29 Jul 2026 11:17:40 +0000
ROA not after: Wed 28 Jul 2027 11:22:40 +0000
asID: 219412
IP address blocks: 2a05:dfc3:f900::/40 maxlen: 48
2a0f:6280:3000::/36 maxlen: 48
2a0f:6280:5000::/36 maxlen: 48
2a0f:6280:c000::/36 maxlen: 48
2a0f:6284:52::/48 maxlen: 48
Validation: OK
Signature path: rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.crl
rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.mft
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 13 Aug 2026 15:05:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
63:8f:ae:7b:3c:14:14:75:c5:99:0b:74:c3:52:fb:0f:1c:93:7e:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C3CF41898936CB9C573DB1EAAB94C6E669951FD7
Validity
Not Before: Jul 29 11:17:40 2026 GMT
Not After : Jul 28 11:22:40 2027 GMT
Subject: CN=CD121F2A25132C6E15EA5CFA380AB442F14D3452
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:fa:93:fe:62:b0:c4:82:a4:90:aa:af:38:4b:
27:8e:88:42:cf:ad:c3:90:68:d7:79:90:9b:85:b9:
0e:b8:7a:80:d8:d2:5d:19:ab:55:a6:43:ca:5f:62:
db:9d:b1:f9:fc:ac:25:52:bc:8d:01:64:f1:4b:af:
b9:f1:46:13:a1:0c:03:51:b9:b8:18:ac:b3:73:79:
90:13:db:e1:50:6c:fa:0d:65:80:42:f2:14:8a:7b:
5b:c1:42:47:e8:df:37:55:e1:dd:da:b8:f9:0e:2e:
b6:36:9f:84:00:65:5e:9a:b7:55:55:74:ac:76:3e:
6a:4a:ee:8a:71:78:58:38:3d:28:ef:32:93:05:c8:
00:fc:46:17:7b:e4:a8:9e:12:fc:e6:7f:47:3f:d3:
0c:58:64:11:a2:68:12:b0:9e:08:47:ae:d3:cf:d9:
45:fa:68:3d:15:ed:59:61:05:39:f8:5a:b2:fc:1b:
f9:b3:4d:46:b4:a6:a0:bf:44:f6:a2:a8:42:26:ec:
c3:db:0d:c4:c0:be:39:bd:75:d8:cc:f2:b8:5e:a0:
57:7c:a7:3a:c9:ee:6b:e0:8a:94:2f:c8:a5:a9:7f:
f8:3c:bb:dd:c0:32:6a:fd:c4:a4:3f:7c:25:1c:41:
fb:c4:6a:62:ce:2b:6c:80:81:81:0a:9b:50:50:f6:
c8:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:12:1F:2A:25:13:2C:6E:15:EA:5C:FA:38:0A:B4:42:F1:4D:34:52
X509v3 Authority Key Identifier:
keyid:C3:CF:41:89:89:36:CB:9C:57:3D:B1:EA:AB:94:C6:E6:69:95:1F:D7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer
Subject Information Access:
Signed Object - URI:rsync://krill.47272.net/repo/HYEHOST/5/AS219412.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:dfc3:f900::/40
2a0f:6280:3000::/36
2a0f:6280:5000::/36
2a0f:6280:c000::/36
2a0f:6284:52::/48
Signature Algorithm: sha256WithRSAEncryption
75:3b:91:fa:e9:39:bc:60:81:a8:40:63:c9:e3:f8:63:2d:28:
ad:c8:ec:e4:a8:1b:f9:c7:15:e4:86:c6:1c:e6:eb:96:3a:14:
23:9a:7d:cd:db:96:85:1b:bd:a6:e7:c9:e2:35:ea:0f:21:f8:
a0:71:ea:e0:51:b4:1e:99:82:f7:b1:9e:af:b8:40:35:30:9b:
2b:54:e2:7b:26:e5:6d:67:01:43:43:42:e0:0e:11:67:99:51:
4e:49:9a:a6:91:46:4c:92:fc:69:1f:89:7a:d8:1c:a3:8e:bb:
6a:9b:25:c7:5f:18:2c:75:11:37:28:b7:b0:7e:f8:57:93:20:
c4:f2:50:93:fb:4d:b6:09:be:32:5c:8f:33:d3:7b:dc:16:a5:
ce:6e:95:27:b6:34:30:a4:58:26:1a:7d:c1:d3:f6:e8:bf:13:
01:66:61:44:4d:13:50:05:8c:62:e1:88:6d:7f:e2:3c:a6:3c:
b7:6f:74:89:df:4f:57:99:de:6e:2e:76:26:f7:a2:5e:bb:de:
b2:f5:ab:81:03:28:22:a8:ac:a6:7a:e0:66:2c:9d:79:c6:3a:
aa:8c:e4:a2:91:6f:d7:f4:c9:89:fd:ce:36:08:9d:29:c7:26:
91:1c:8b:a2:5a:f2:33:74:3d:3a:0b:a0:d9:2d:1b:99:43:b4:
38:64:8e:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 13 03:04:11 2026 by rpki-client