$ rpki-client -vvvf krill.47272.net/repo/HYEHOST/5/AS62425.roa File: AS62425.roa (raw, json) Hash identifier: BJvXlHdkVpijLZceIlOrGAUOxCUuDw+KvCLhtfE1bvc= Subject key identifier: 17:DF:27:BA:42:4D:FA:02:E7:83:BE:45:E3:F4:6B:02:D6:39:B2:3D Certificate issuer: /CN=C3CF41898936CB9C573DB1EAAB94C6E669951FD7 Certificate serial: 4A401A2208FF1687B58099900CEB424CC6A940FB Authority key identifier: C3:CF:41:89:89:36:CB:9C:57:3D:B1:EA:AB:94:C6:E6:69:95:1F:D7 Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer Subject info access: rsync://krill.47272.net/repo/HYEHOST/5/AS62425.roa Signing time: Sun 02 Aug 2026 01:22:52 +0000 ROA not before: Sun 02 Aug 2026 01:17:52 +0000 ROA not after: Sun 01 Aug 2027 01:22:52 +0000 asID: 62425 IP address blocks: 2a0f:6280:1000::/48 maxlen: 48 Validation: OK Signature path: rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.crl rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 27 Aug 2026 03:13:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4a:40:1a:22:08:ff:16:87:b5:80:99:90:0c:eb:42:4c:c6:a9:40:fb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C3CF41898936CB9C573DB1EAAB94C6E669951FD7 Validity Not Before: Aug 2 01:17:52 2026 GMT Not After : Aug 1 01:22:52 2027 GMT Subject: CN=17DF27BA424DFA02E783BE45E3F46B02D639B23D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:b4:bd:bc:b9:17:7d:f7:f6:15:c2:ea:ef:c1: d2:fc:02:1d:d2:b3:95:eb:f1:25:8e:f8:5b:c5:65: b6:d0:83:21:b1:26:d7:05:fd:88:cf:62:5a:fc:02: 1a:81:88:c1:b9:f4:8a:88:3a:70:bb:a3:20:0c:70: 9b:bc:8e:77:7a:5f:f6:11:e4:ce:fc:9e:93:f8:a8: 91:ee:52:b6:bb:0f:33:b8:63:e4:4b:93:fe:af:ca: d5:3e:da:79:98:cf:c7:47:95:b3:95:64:ad:76:47: c6:bf:75:c2:38:2b:89:b6:27:f1:f4:68:33:91:92: dd:e8:bb:e5:c6:65:c5:2c:34:9b:52:c7:cd:6c:cf: d8:a7:21:47:7f:c2:f8:53:e7:ff:88:21:50:06:d1: 65:0e:0c:8b:54:6f:47:ae:11:b0:ef:9c:fa:e7:cb: 2b:40:c2:a3:97:80:aa:96:a6:2d:a7:0d:bb:a5:cd: 4c:bb:71:3d:6d:f1:cd:81:d7:6b:cb:4d:11:d1:e8: 80:6f:0e:29:49:bf:e0:8d:ae:a5:73:34:f4:00:0f: fc:67:ff:ce:4f:20:37:4e:5b:c4:2b:62:c7:12:66: 33:9d:e3:13:d3:72:8c:07:f2:52:1e:18:1f:0c:c2: 30:eb:ff:c0:00:76:41:04:c9:02:fc:e5:a1:33:ed: 25:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:DF:27:BA:42:4D:FA:02:E7:83:BE:45:E3:F4:6B:02:D6:39:B2:3D X509v3 Authority Key Identifier: keyid:C3:CF:41:89:89:36:CB:9C:57:3D:B1:EA:AB:94:C6:E6:69:95:1F:D7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer Subject Information Access: Signed Object - URI:rsync://krill.47272.net/repo/HYEHOST/5/AS62425.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0f:6280:1000::/48 Signature Algorithm: sha256WithRSAEncryption 08:e6:43:c1:20:a0:6b:02:6d:38:f4:74:11:1a:d0:67:09:82: 5a:21:c9:0c:4d:26:b7:b3:c3:77:34:6f:01:bf:5b:57:ea:b0: cb:84:1e:50:51:55:e6:36:cb:6d:0a:0d:73:7d:ab:96:c7:0f: fa:f2:21:96:57:b2:c1:9c:94:7c:dc:d6:5c:ed:59:5c:31:07: 0a:eb:2e:d3:6e:ff:24:53:41:f8:86:bf:7a:52:6c:2d:cc:5b: 4f:39:bc:29:b5:a4:bb:8c:55:03:6d:8b:80:24:88:f3:1e:56: c3:98:d6:73:aa:d7:d3:31:d3:ea:17:df:5f:8e:21:e4:10:f1: 11:fc:ee:c1:06:9e:4e:00:d5:af:ba:6b:9c:aa:71:11:c8:9f: bb:48:79:de:93:7b:0a:d8:f8:3f:90:23:25:ac:e9:9b:62:42: d0:6d:25:d1:2f:38:ec:28:4e:63:4b:ca:9f:85:98:c8:4c:47: 8c:a9:46:93:e8:ae:c0:03:d7:72:83:18:5b:e2:40:2e:e3:70: 4f:5d:47:6d:16:c9:09:76:57:25:61:61:99:f4:35:6e:d8:f1: a2:c9:6d:3b:ef:a4:70:2c:12:4e:cc:91:19:3e:f2:3d:21:62: bf:3d:33:a0:52:09:3e:22:14:66:cd:6c:f4:cb:bd:5d:b8:24: 52:ca:a7:b2 -----BEGIN CERTIFICATE----- MIIE1DCCA7ygAwIBAgIUSkAaIgj/Foe1gJmQDOtCTMapQPswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzNDRjQxODk4OTM2Q0I5QzU3M0RCMUVBQUI5NEM2RTY2 OTk1MUZENzAeFw0yNjA4MDIwMTE3NTJaFw0yNzA4MDEwMTIyNTJaMDMxMTAvBgNV BAMTKDE3REYyN0JBNDI0REZBMDJFNzgzQkU0NUUzRjQ2QjAyRDYzOUIyM0QwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCntL28uRd99/YVwurvwdL8Ah3S s5Xr8SWO+FvFZbbQgyGxJtcF/YjPYlr8AhqBiMG59IqIOnC7oyAMcJu8jnd6X/YR 5M78npP4qJHuUra7DzO4Y+RLk/6vytU+2nmYz8dHlbOVZK12R8a/dcI4K4m2J/H0 aDORkt3ou+XGZcUsNJtSx81sz9inIUd/wvhT5/+IIVAG0WUODItUb0euEbDvnPrn yytAwqOXgKqWpi2nDbulzUy7cT1t8c2B12vLTRHR6IBvDilJv+CNrqVzNPQAD/xn /85PIDdOW8QrYscSZjOd4xPTcowH8lIeGB8MwjDr/8AAdkEEyQL85aEz7SXnAgMB AAGjggHeMIIB2jAdBgNVHQ4EFgQUF98nukJN+gLng75F4/RrAtY5sj0wHwYDVR0j BBgwFoAUw89BiYk2y5xXPbHqq5TG5mmVH9cwDgYDVR0PAQH/BAQDAgeAMGQGA1Ud HwRdMFswWaBXoFWGU3JzeW5jOi8va3JpbGwuNDcyNzIubmV0L3JlcG8vSFlFSE9T VC81L0MzQ0Y0MTg5ODkzNkNCOUM1NzNEQjFFQUFCOTRDNkU2Njk5NTFGRDcuY3Js MIGTBggrBgEFBQcBAQSBhjCBgzCBgAYIKwYBBQUHMAKGdHJzeW5jOi8vcnBraS1y cHMuYXJpbi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZjg1MGQwNjNlMDE4NTc1NWM5 MWJlM2Y5ZC83L0MzQ0Y0MTg5ODkzNkNCOUM1NzNEQjFFQUFCOTRDNkU2Njk5NTFG RDcuY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9rcmls bC40NzI3Mi5uZXQvcmVwby9IWUVIT1NULzUvQVM2MjQyNS5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACoP YoAQADANBgkqhkiG9w0BAQsFAAOCAQEACOZDwSCgawJtOPR0ERrQZwmCWiHJDE0m t7PDdzRvAb9bV+qwy4QeUFFV5jbLbQoNc32rlscP+vIhlleywZyUfNzWXO1ZXDEH Cusu027/JFNB+Ia/elJsLcxbTzm8KbWku4xVA22LgCSI8x5Ww5jWc6rX0zHT6hff X44h5BDxEfzuwQaeTgDVr7prnKpxEcifu0h53pN7Ctj4P5AjJazpm2JC0G0l0S84 7ChOY0vKn4WYyExHjKlGk+iuwAPXcoMYW+JALuNwT11HbRbJCXZXJWFhmfQ1btjx osltO++kcCwSTsyRGT7yPSFivz0zoFIJPiIUZs1s9Mu9XbgkUsqnsg== -----END CERTIFICATE-----Generated at Wed Aug 26 17:22:33 2026 by rpki-client