$ rpki-client -vvf krill.byhill.de/repo/byhill-ca/1/326131333a633863343a373031393a3a2f34382d3438203d3e20323139343138.roa File: 326131333a633863343a373031393a3a2f34382d3438203d3e20323139343138.roa (raw, json) Hash identifier: OcmweSrCgsMNuPf6ZZytHU9NxvCytKfcDUyLD9zAQ1Y= Subject key identifier: A9:44:99:C1:D6:78:F1:13:66:1C:85:73:7D:A3:16:95:1F:11:36:50 Certificate issuer: /CN=F55C2745322CEC1805815DCD65BC6AFFD99168DA Certificate serial: 0E024BBDA4A4E7BC2BCE4DAD04120313FB5E526C Authority key identifier: F5:5C:27:45:32:2C:EC:18:05:81:5D:CD:65:BC:6A:FF:D9:91:68:DA Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/002f8ee6-abe7-4ae8-964c-788bb98c975c/1/F55C2745322CEC1805815DCD65BC6AFFD99168DA.cer Subject info access: rsync://krill.byhill.de/repo/byhill-ca/1/326131333a633863343a373031393a3a2f34382d3438203d3e20323139343138.roa Signing time: Sat 27 Jun 2026 18:43:24 +0000 ROA not before: Sat 27 Jun 2026 18:38:24 +0000 ROA not after: Sat 26 Jun 2027 18:43:24 +0000 asID: 219418 IP address blocks: 2a13:c8c4:7019::/48 maxlen: 48 Validation: OK Signature path: rsync://krill.byhill.de/repo/byhill-ca/1/F55C2745322CEC1805815DCD65BC6AFFD99168DA.crl rsync://krill.byhill.de/repo/byhill-ca/1/F55C2745322CEC1805815DCD65BC6AFFD99168DA.mft rsync://rsync.paas.rpki.ripe.net/repository/002f8ee6-abe7-4ae8-964c-788bb98c975c/1/F55C2745322CEC1805815DCD65BC6AFFD99168DA.cer rsync://rsync.paas.rpki.ripe.net/repository/002f8ee6-abe7-4ae8-964c-788bb98c975c/1/1E74494683D8D2A4E029AAD4573928D2A55FA411.crl rsync://rsync.paas.rpki.ripe.net/repository/002f8ee6-abe7-4ae8-964c-788bb98c975c/1/1E74494683D8D2A4E029AAD4573928D2A55FA411.mft rsync://rsync.paas.rpki.ripe.net/repository/6c43d3a6-7d13-4895-959d-419b9a6eb34b/4/1E74494683D8D2A4E029AAD4573928D2A55FA411.cer rsync://rsync.paas.rpki.ripe.net/repository/6c43d3a6-7d13-4895-959d-419b9a6eb34b/4/ACB5DFF8A45DF5CDAFA2A95C715F10C5FE5F91A3.crl rsync://rsync.paas.rpki.ripe.net/repository/6c43d3a6-7d13-4895-959d-419b9a6eb34b/4/ACB5DFF8A45DF5CDAFA2A95C715F10C5FE5F91A3.mft rsync://rpki.ripe.net/repository/DEFAULT/rLXf-KRd9c2voqlccV8Qxf5fkaM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 29 Jun 2026 21:28:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0e:02:4b:bd:a4:a4:e7:bc:2b:ce:4d:ad:04:12:03:13:fb:5e:52:6c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F55C2745322CEC1805815DCD65BC6AFFD99168DA Validity Not Before: Jun 27 18:38:24 2026 GMT Not After : Jun 26 18:43:24 2027 GMT Subject: CN=A94499C1D678F113661C85737DA316951F113650 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:4b:15:06:be:ce:2c:fa:76:5a:cb:9c:c9:04: 0d:0c:ab:c8:ad:5d:64:93:8b:fd:6a:ac:de:c3:0e: a3:65:2d:f3:c3:fa:f1:31:61:c8:db:e0:c2:0a:18: ac:27:44:df:58:f0:8c:3e:5e:f8:7f:dd:5a:f0:14: 89:46:1a:bd:cf:a2:31:48:e7:fb:fc:ec:73:fe:24: 92:95:06:80:96:55:40:e9:6d:c7:ef:e2:79:fe:84: a2:7e:26:86:94:2d:0a:17:d2:59:11:0f:15:70:09: ab:d7:5a:71:a0:09:7c:2a:e8:b4:0c:04:4f:2b:78: 8f:d5:62:07:e1:53:4a:2a:4f:75:e3:22:fe:61:84: d1:8f:c1:57:33:d7:fa:2c:d9:60:69:51:b4:31:80: 59:9d:95:01:8e:5e:fa:97:6c:14:b4:55:7d:56:59: 51:b8:24:45:df:e8:2a:75:cc:c5:6d:86:bd:b8:50: 16:b4:bc:e0:cf:3a:75:d0:96:5c:64:94:79:db:00: 8d:62:ec:21:83:38:43:dd:7b:54:10:b4:de:5c:93: 0f:e0:57:49:ae:64:09:24:e6:06:d2:7e:e5:b1:cf: 3e:5a:70:60:52:22:29:0c:63:0b:e2:50:11:7b:eb: 4b:c9:dd:3e:4f:39:ad:f8:e8:1d:2a:80:83:f7:19: 39:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:44:99:C1:D6:78:F1:13:66:1C:85:73:7D:A3:16:95:1F:11:36:50 X509v3 Authority Key Identifier: keyid:F5:5C:27:45:32:2C:EC:18:05:81:5D:CD:65:BC:6A:FF:D9:91:68:DA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://krill.byhill.de/repo/byhill-ca/1/F55C2745322CEC1805815DCD65BC6AFFD99168DA.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/002f8ee6-abe7-4ae8-964c-788bb98c975c/1/F55C2745322CEC1805815DCD65BC6AFFD99168DA.cer Subject Information Access: Signed Object - URI:rsync://krill.byhill.de/repo/byhill-ca/1/326131333a633863343a373031393a3a2f34382d3438203d3e20323139343138.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a13:c8c4:7019::/48 Signature Algorithm: sha256WithRSAEncryption e1:d0:ec:7b:c4:b2:d2:60:c2:fb:60:2a:62:53:2e:87:9c:36: e9:ff:4d:63:b6:6d:7f:dc:6e:8f:7d:30:4d:1f:44:94:db:c3: a8:4b:cb:b9:d8:cb:55:6c:5f:13:59:41:29:b4:98:84:7c:12: 88:0e:0d:ed:46:85:3a:6c:67:71:c2:13:32:09:e7:be:2e:97: dc:90:37:0a:ba:8b:8b:91:55:f3:35:7b:d2:ef:42:40:78:18: 17:40:d1:f9:9b:90:8d:40:5c:9c:5b:6b:23:0a:80:f4:a1:e2: a7:c8:0e:a5:b9:0f:05:e4:14:2d:93:cf:d2:de:4d:78:09:81: c0:ad:4e:e9:e8:ee:5a:57:c5:d2:1a:63:3e:69:d1:1d:9b:0d: 26:4d:69:e3:58:1e:89:69:af:1f:d3:ec:2e:e2:ea:39:0f:46: 6b:a1:31:59:94:25:fb:72:b9:3b:83:dd:22:e2:52:e3:08:a0: f8:42:20:57:77:b7:81:ab:dd:a9:6b:cf:3a:25:7a:95:9f:59: 52:78:09:ec:71:e0:99:c9:54:de:d5:50:90:4d:24:5c:73:d7: 1b:b2:da:5c:25:9f:7e:12:7e:6e:5f:0d:ea:4e:6f:70:18:5f: 94:1b:b1:b9:80:ff:d6:d6:d3:22:9e:44:82:8f:7b:4b:b4:a9: 07:98:d5:f5 -----BEGIN CERTIFICATE----- MIIFHTCCBAWgAwIBAgIUDgJLvaSk57wrzk2tBBIDE/teUmwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjU1QzI3NDUzMjJDRUMxODA1ODE1RENENjVCQzZBRkZE OTkxNjhEQTAeFw0yNjA2MjcxODM4MjRaFw0yNzA2MjYxODQzMjRaMDMxMTAvBgNV BAMTKEE5NDQ5OUMxRDY3OEYxMTM2NjFDODU3MzdEQTMxNjk1MUYxMTM2NTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCdSxUGvs4s+nZay5zJBA0Mq8it XWSTi/1qrN7DDqNlLfPD+vExYcjb4MIKGKwnRN9Y8Iw+Xvh/3VrwFIlGGr3PojFI 5/v87HP+JJKVBoCWVUDpbcfv4nn+hKJ+JoaULQoX0lkRDxVwCavXWnGgCXwq6LQM BE8reI/VYgfhU0oqT3XjIv5hhNGPwVcz1/os2WBpUbQxgFmdlQGOXvqXbBS0VX1W WVG4JEXf6Cp1zMVthr24UBa0vODPOnXQllxklHnbAI1i7CGDOEPde1QQtN5ckw/g V0muZAkk5gbSfuWxzz5acGBSIikMYwviUBF760vJ3T5POa346B0qgIP3GTnZAgMB AAGjggInMIICIzAdBgNVHQ4EFgQUqUSZwdZ48RNmHIVzfaMWlR8RNlAwHwYDVR0j BBgwFoAU9VwnRTIs7BgFgV3NZbxq/9mRaNowDgYDVR0PAQH/BAQDAgeAMGYGA1Ud HwRfMF0wW6BZoFeGVXJzeW5jOi8va3JpbGwuYnloaWxsLmRlL3JlcG8vYnloaWxs LWNhLzEvRjU1QzI3NDUzMjJDRUMxODA1ODE1RENENjVCQzZBRkZEOTkxNjhEQS5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS8wMDJmOGVlNi1hYmU3LTRh ZTgtOTY0Yy03ODhiYjk4Yzk3NWMvMS9GNTVDMjc0NTMyMkNFQzE4MDU4MTVEQ0Q2 NUJDNkFGRkQ5OTE2OERBLmNlcjCBiQYIKwYBBQUHAQsEfTB7MHkGCCsGAQUFBzAL hm1yc3luYzovL2tyaWxsLmJ5aGlsbC5kZS9yZXBvL2J5aGlsbC1jYS8xLzMyNjEz MTMzM2E2MzM4NjMzNDNhMzczMDMxMzkzYTNhMmYzNDM4MmQzNDM4MjAzZDNlMjAz MjMxMzkzNDMxMzgucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYB BQUHAQcBAf8EEzARMA8EAgACMAkDBwAqE8jEcBkwDQYJKoZIhvcNAQELBQADggEB AOHQ7HvEstJgwvtgKmJTLoecNun/TWO2bX/cbo99ME0fRJTbw6hLy7nYy1VsXxNZ QSm0mIR8EogODe1GhTpsZ3HCEzIJ574ul9yQNwq6i4uRVfM1e9LvQkB4GBdA0fmb kI1AXJxbayMKgPSh4qfIDqW5DwXkFC2Tz9LeTXgJgcCtTuno7lpXxdIaYz5p0R2b DSZNaeNYHolprx/T7C7i6jkPRmuhMVmUJftyuTuD3SLiUuMIoPhCIFd3t4Gr3alr zzolepWfWVJ4Cexx4JnJVN7VUJBNJFxz1xuy2lwln34Sfm5fDepOb3AYX5QbsbmA /9bW0yKeRIKPe0u0qQeY1fU= -----END CERTIFICATE-----Generated at Mon Jun 29 10:32:25 2026 by rpki-client