$ rpki-client -vvf krill.byhill.de/repo/byhill-ca/1/326131333a633863343a373031383a3a2f34382d3438203d3e20323139343138.roa File: 326131333a633863343a373031383a3a2f34382d3438203d3e20323139343138.roa (raw, json) Hash identifier: ZyEmmv2NtM1cJBidwRboYBKa7EjRkpw/Hw7NvcYUYx4= Subject key identifier: 7B:FF:21:5B:70:D8:2B:41:2F:6C:1F:E9:7F:1A:8E:32:FB:D7:80:95 Certificate issuer: /CN=F55C2745322CEC1805815DCD65BC6AFFD99168DA Certificate serial: 60FBC61AE8D4A8734FB15804E4346E7892FA3A4E Authority key identifier: F5:5C:27:45:32:2C:EC:18:05:81:5D:CD:65:BC:6A:FF:D9:91:68:DA Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/002f8ee6-abe7-4ae8-964c-788bb98c975c/1/F55C2745322CEC1805815DCD65BC6AFFD99168DA.cer Subject info access: rsync://krill.byhill.de/repo/byhill-ca/1/326131333a633863343a373031383a3a2f34382d3438203d3e20323139343138.roa Signing time: Wed 17 Jun 2026 12:30:51 +0000 ROA not before: Wed 17 Jun 2026 12:25:51 +0000 ROA not after: Wed 16 Jun 2027 12:30:51 +0000 asID: 219418 IP address blocks: 2a13:c8c4:7018::/48 maxlen: 48 Validation: OK Signature path: rsync://krill.byhill.de/repo/byhill-ca/1/F55C2745322CEC1805815DCD65BC6AFFD99168DA.crl rsync://krill.byhill.de/repo/byhill-ca/1/F55C2745322CEC1805815DCD65BC6AFFD99168DA.mft rsync://rsync.paas.rpki.ripe.net/repository/002f8ee6-abe7-4ae8-964c-788bb98c975c/1/F55C2745322CEC1805815DCD65BC6AFFD99168DA.cer rsync://rsync.paas.rpki.ripe.net/repository/002f8ee6-abe7-4ae8-964c-788bb98c975c/1/1E74494683D8D2A4E029AAD4573928D2A55FA411.crl rsync://rsync.paas.rpki.ripe.net/repository/002f8ee6-abe7-4ae8-964c-788bb98c975c/1/1E74494683D8D2A4E029AAD4573928D2A55FA411.mft rsync://rsync.paas.rpki.ripe.net/repository/6c43d3a6-7d13-4895-959d-419b9a6eb34b/4/1E74494683D8D2A4E029AAD4573928D2A55FA411.cer rsync://rsync.paas.rpki.ripe.net/repository/6c43d3a6-7d13-4895-959d-419b9a6eb34b/4/ACB5DFF8A45DF5CDAFA2A95C715F10C5FE5F91A3.crl rsync://rsync.paas.rpki.ripe.net/repository/6c43d3a6-7d13-4895-959d-419b9a6eb34b/4/ACB5DFF8A45DF5CDAFA2A95C715F10C5FE5F91A3.mft rsync://rpki.ripe.net/repository/DEFAULT/rLXf-KRd9c2voqlccV8Qxf5fkaM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 29 Jun 2026 21:28:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 60:fb:c6:1a:e8:d4:a8:73:4f:b1:58:04:e4:34:6e:78:92:fa:3a:4e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F55C2745322CEC1805815DCD65BC6AFFD99168DA Validity Not Before: Jun 17 12:25:51 2026 GMT Not After : Jun 16 12:30:51 2027 GMT Subject: CN=7BFF215B70D82B412F6C1FE97F1A8E32FBD78095 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:94:f8:e1:80:1f:06:8a:27:e3:d2:87:e9:39: 69:a2:4d:1e:2d:a9:b2:2e:f3:25:33:1d:17:00:71: 0f:15:af:5a:53:4f:56:b7:b1:cf:13:af:4c:ab:74: 8f:c0:e6:11:74:fe:b9:23:2e:45:37:0e:65:12:3e: 02:c4:6e:9a:96:ae:4a:a0:7e:b6:06:a8:04:20:56: 97:3d:8e:22:c4:47:9f:82:72:23:a8:4a:6f:f1:87: 15:df:fe:8a:59:50:af:5d:5e:bb:cc:cd:98:03:aa: 80:d4:2c:16:d7:ae:d5:fd:b5:99:4d:88:4c:66:33: f6:41:a1:53:de:79:78:26:e6:5b:40:1d:99:dc:9e: 04:cb:81:a2:65:0a:15:e0:dd:6a:af:aa:c4:7b:69: a3:ae:c8:d8:80:3b:20:42:75:6a:73:8e:8e:27:1d: 1b:4f:2e:80:f1:75:6d:fc:d8:0c:5d:4e:d8:51:7a: 94:ee:2a:86:9d:10:13:5e:17:df:ec:4c:26:c6:66: 55:78:fb:6a:26:7f:a2:19:a7:70:2d:19:77:35:7a: 86:19:7f:fd:fa:19:a0:19:de:7f:57:6a:67:cb:c8: 2c:ac:48:2c:91:32:79:e9:7b:14:33:b5:1b:6c:03: 8c:f3:91:73:89:c0:ca:9b:0e:65:9a:21:34:4b:a3: fa:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:FF:21:5B:70:D8:2B:41:2F:6C:1F:E9:7F:1A:8E:32:FB:D7:80:95 X509v3 Authority Key Identifier: keyid:F5:5C:27:45:32:2C:EC:18:05:81:5D:CD:65:BC:6A:FF:D9:91:68:DA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://krill.byhill.de/repo/byhill-ca/1/F55C2745322CEC1805815DCD65BC6AFFD99168DA.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/002f8ee6-abe7-4ae8-964c-788bb98c975c/1/F55C2745322CEC1805815DCD65BC6AFFD99168DA.cer Subject Information Access: Signed Object - URI:rsync://krill.byhill.de/repo/byhill-ca/1/326131333a633863343a373031383a3a2f34382d3438203d3e20323139343138.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a13:c8c4:7018::/48 Signature Algorithm: sha256WithRSAEncryption b3:0e:d4:6f:27:7b:00:9c:80:91:52:0b:38:5f:3a:5a:90:6a: 08:c3:eb:a9:47:30:10:6e:15:34:8a:31:92:b5:61:b3:aa:ce: a1:aa:34:87:b5:af:1b:65:dc:54:40:76:ba:f9:12:d5:08:00: a2:00:61:3d:16:32:9b:fd:be:23:3d:3d:8d:7e:3e:70:12:35: ed:0f:72:91:23:50:3f:65:72:db:d5:6e:23:12:5d:ec:32:31: d1:e4:17:bf:62:f5:cd:35:28:b1:c9:95:fd:c1:56:93:05:60: 11:57:df:cc:bc:f8:fc:1a:08:7c:57:7a:55:dd:62:0c:a1:06: 1f:bf:a6:f5:15:65:d7:18:f7:d1:32:85:d9:25:b3:3f:75:b0: 0e:e5:99:cb:a7:8c:d1:09:c0:85:d3:fd:f6:0b:8b:b6:51:de: f0:2e:97:2e:1d:86:f2:26:da:9c:97:5f:67:c3:01:9b:7f:b7: cf:a3:62:c6:76:6d:dd:18:9d:36:97:34:e1:7f:06:f0:25:90: 6a:78:09:a6:5d:50:d1:5c:12:c2:06:c3:e4:b6:51:75:36:f7: a9:c9:57:a4:1d:d8:97:a7:cc:db:2e:87:a3:b2:bf:5a:c1:a5: 15:5c:35:f0:f6:fb:05:a4:f9:03:b5:a5:6c:b3:0e:01:23:4c: f3:9e:50:00 -----BEGIN CERTIFICATE----- MIIFHTCCBAWgAwIBAgIUYPvGGujUqHNPsVgE5DRueJL6Ok4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjU1QzI3NDUzMjJDRUMxODA1ODE1RENENjVCQzZBRkZE OTkxNjhEQTAeFw0yNjA2MTcxMjI1NTFaFw0yNzA2MTYxMjMwNTFaMDMxMTAvBgNV BAMTKDdCRkYyMTVCNzBEODJCNDEyRjZDMUZFOTdGMUE4RTMyRkJENzgwOTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDKlPjhgB8Giifj0ofpOWmiTR4t qbIu8yUzHRcAcQ8Vr1pTT1a3sc8Tr0yrdI/A5hF0/rkjLkU3DmUSPgLEbpqWrkqg frYGqAQgVpc9jiLER5+CciOoSm/xhxXf/opZUK9dXrvMzZgDqoDULBbXrtX9tZlN iExmM/ZBoVPeeXgm5ltAHZncngTLgaJlChXg3WqvqsR7aaOuyNiAOyBCdWpzjo4n HRtPLoDxdW382AxdTthRepTuKoadEBNeF9/sTCbGZlV4+2omf6IZp3AtGXc1eoYZ f/36GaAZ3n9XamfLyCysSCyRMnnpexQztRtsA4zzkXOJwMqbDmWaITRLo/pxAgMB AAGjggInMIICIzAdBgNVHQ4EFgQUe/8hW3DYK0EvbB/pfxqOMvvXgJUwHwYDVR0j BBgwFoAU9VwnRTIs7BgFgV3NZbxq/9mRaNowDgYDVR0PAQH/BAQDAgeAMGYGA1Ud HwRfMF0wW6BZoFeGVXJzeW5jOi8va3JpbGwuYnloaWxsLmRlL3JlcG8vYnloaWxs LWNhLzEvRjU1QzI3NDUzMjJDRUMxODA1ODE1RENENjVCQzZBRkZEOTkxNjhEQS5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS8wMDJmOGVlNi1hYmU3LTRh ZTgtOTY0Yy03ODhiYjk4Yzk3NWMvMS9GNTVDMjc0NTMyMkNFQzE4MDU4MTVEQ0Q2 NUJDNkFGRkQ5OTE2OERBLmNlcjCBiQYIKwYBBQUHAQsEfTB7MHkGCCsGAQUFBzAL hm1yc3luYzovL2tyaWxsLmJ5aGlsbC5kZS9yZXBvL2J5aGlsbC1jYS8xLzMyNjEz MTMzM2E2MzM4NjMzNDNhMzczMDMxMzgzYTNhMmYzNDM4MmQzNDM4MjAzZDNlMjAz MjMxMzkzNDMxMzgucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYB BQUHAQcBAf8EEzARMA8EAgACMAkDBwAqE8jEcBgwDQYJKoZIhvcNAQELBQADggEB ALMO1G8newCcgJFSCzhfOlqQagjD66lHMBBuFTSKMZK1YbOqzqGqNIe1rxtl3FRA drr5EtUIAKIAYT0WMpv9viM9PY1+PnASNe0PcpEjUD9lctvVbiMSXewyMdHkF79i 9c01KLHJlf3BVpMFYBFX38y8+PwaCHxXelXdYgyhBh+/pvUVZdcY99Eyhdklsz91 sA7lmcunjNEJwIXT/fYLi7ZR3vAuly4dhvIm2pyXX2fDAZt/t8+jYsZ2bd0YnTaX NOF/BvAlkGp4CaZdUNFcEsIGw+S2UXU296nJV6Qd2JenzNsuh6Oyv1rBpRVcNfD2 +wWk+QO1pWyzDgEjTPOeUAA= -----END CERTIFICATE-----Generated at Mon Jun 29 10:32:25 2026 by rpki-client