
$ rpki-client -vvf krill.47272.net/repo/HYEHOST/5/AS57110.roa
File: AS57110.roa (raw, json)
Hash identifier: 92pWlrTOnE+U+DL5/2bTTM/Ss7K10XEeYylbWzybKAc=
Subject key identifier: 60:3B:7D:B7:31:14:DA:32:B4:51:A9:62:F9:F1:0F:2F:98:14:F0:B5
Certificate issuer: /CN=C3CF41898936CB9C573DB1EAAB94C6E669951FD7
Certificate serial: 4EDB9BE2BDDCA8CA49E6F77A7AE201AE8DEB902E
Authority key identifier: C3:CF:41:89:89:36:CB:9C:57:3D:B1:EA:AB:94:C6:E6:69:95:1F:D7
Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer
Subject info access: rsync://krill.47272.net/repo/HYEHOST/5/AS57110.roa
Signing time: Sun 17 May 2026 15:26:09 +0000
ROA not before: Sun 17 May 2026 15:21:09 +0000
ROA not after: Sun 16 May 2027 15:26:09 +0000
asID: 57110
IP address blocks: 2a0a:6044:3000::/40 maxlen: 40
2a0a:6044:3001::/48 maxlen: 48
2a0f:6283:1101::/48 maxlen: 48
2a0f:6283:1120::/44 maxlen: 48
2a0f:6284:4001::/48 maxlen: 48
Validation: OK
Signature path: rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.crl
rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.mft
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 26 May 2026 01:19:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4e:db:9b:e2:bd:dc:a8:ca:49:e6:f7:7a:7a:e2:01:ae:8d:eb:90:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C3CF41898936CB9C573DB1EAAB94C6E669951FD7
Validity
Not Before: May 17 15:21:09 2026 GMT
Not After : May 16 15:26:09 2027 GMT
Subject: CN=603B7DB73114DA32B451A962F9F10F2F9814F0B5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:00:1d:f4:ab:c3:14:1e:94:3f:78:16:e4:8e:
9e:15:e3:a6:19:0e:e6:95:32:6f:2a:b4:d1:05:d5:
e2:8a:9e:f2:32:ab:85:23:3c:86:8c:42:76:14:5e:
75:00:7c:4c:cc:08:f4:59:4a:82:f1:de:62:6a:a5:
ad:63:4d:55:80:08:4a:e0:70:20:b7:ca:1b:a5:b0:
78:e3:e2:0e:b9:e4:d2:9c:6e:df:9b:e3:e0:1a:17:
bf:b5:45:b9:21:ef:7e:44:13:38:29:f3:95:6c:68:
35:69:21:e0:a2:00:58:ba:9f:0b:6d:eb:9e:c4:43:
82:20:ef:19:76:d9:12:54:15:1e:41:f4:54:8b:5d:
b2:38:40:1b:12:a9:16:d6:f1:a9:72:10:0b:aa:83:
8d:8e:54:af:27:89:a1:04:79:ce:53:c8:78:a2:bb:
89:8a:53:4d:0b:de:b1:08:2c:c7:5b:aa:1b:e1:30:
17:1d:29:f0:ef:a4:8f:72:02:47:eb:d8:a3:83:c4:
b5:70:d0:d3:94:38:c0:f6:f0:56:3c:d3:86:ff:71:
5b:56:65:1c:21:2d:77:85:38:a7:81:e5:14:2b:0e:
e6:ac:60:bd:f8:1f:7e:23:0d:dc:52:3f:cc:8f:52:
45:fe:84:77:93:03:5f:3d:7e:f4:6d:bc:d0:f1:68:
23:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:3B:7D:B7:31:14:DA:32:B4:51:A9:62:F9:F1:0F:2F:98:14:F0:B5
X509v3 Authority Key Identifier:
keyid:C3:CF:41:89:89:36:CB:9C:57:3D:B1:EA:AB:94:C6:E6:69:95:1F:D7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer
Subject Information Access:
Signed Object - URI:rsync://krill.47272.net/repo/HYEHOST/5/AS57110.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0a:6044:3000::/40
2a0f:6283:1101::/48
2a0f:6283:1120::/44
2a0f:6284:4001::/48
Signature Algorithm: sha256WithRSAEncryption
8c:1d:6e:c6:27:96:cf:e5:95:23:ec:00:88:f4:d5:62:3f:0f:
cb:65:9f:b6:2c:17:07:d8:81:8f:a3:3a:8f:60:51:fb:32:77:
12:63:9f:99:58:25:f5:d1:ec:1d:d2:6f:2a:a4:5e:60:3f:53:
2f:ed:d5:69:8b:02:6d:12:59:70:9e:ca:f6:3e:0e:1c:72:ba:
3e:5a:b6:b1:e4:a0:6f:26:1a:40:4c:34:85:0c:3a:56:f4:f0:
cf:a7:01:a8:cc:d4:12:cf:2e:e9:4e:e2:94:52:67:ce:4b:39:
da:4e:ed:73:f3:27:84:0c:e7:65:c7:2b:5c:d2:3d:00:9e:55:
3c:c7:b5:f8:80:bd:3a:cf:01:b4:59:5b:97:3f:fb:2a:72:e0:
3b:d2:4d:06:0d:96:2e:da:c0:a7:1b:77:e1:82:47:80:2e:f1:
84:40:03:a8:5b:75:b4:32:08:ca:21:31:c2:21:e7:f2:cc:a8:
89:e2:8e:e9:54:b1:0e:3b:1e:18:4e:c0:f2:07:0a:9b:c3:0c:
03:f4:29:7d:5c:31:fa:1a:16:c1:60:32:20:81:70:ab:06:ff:
be:79:c3:ba:21:1f:42:a6:6c:39:03:0f:7d:13:29:f4:ee:e3:
4b:43:39:2e:72:b8:dc:a4:c2:5a:34:11:f2:44:f3:1d:d0:3a:
cd:5d:db:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 25 14:59:54 2026 by rpki-client