$ rpki-client -vvvf krill.byhill.de/repo/byhill-ca/1/326131333a633863343a373130303a3a2f34302d3430203d3e20323032333538.roa File: 326131333a633863343a373130303a3a2f34302d3430203d3e20323032333538.roa (raw, json) Hash identifier: +5vmSShPqibD6CizbItH99GgQDoqBJxfQkfJAS27hSs= Subject key identifier: AA:90:47:0D:87:A1:0B:09:2D:74:98:59:42:A8:48:10:0A:86:23:2F Certificate issuer: /CN=F55C2745322CEC1805815DCD65BC6AFFD99168DA Certificate serial: 5D0F42843A649A8A42088A6E3AAE079E51F38C68 Authority key identifier: F5:5C:27:45:32:2C:EC:18:05:81:5D:CD:65:BC:6A:FF:D9:91:68:DA Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/002f8ee6-abe7-4ae8-964c-788bb98c975c/1/F55C2745322CEC1805815DCD65BC6AFFD99168DA.cer Subject info access: rsync://krill.byhill.de/repo/byhill-ca/1/326131333a633863343a373130303a3a2f34302d3430203d3e20323032333538.roa Signing time: Tue 06 Oct 2026 20:39:25 +0000 ROA not before: Tue 06 Oct 2026 20:34:25 +0000 ROA not after: Tue 05 Oct 2027 20:39:25 +0000 asID: 202358 IP address blocks: 2a13:c8c4:7100::/40 maxlen: 40 Validation: OK Signature path: rsync://krill.byhill.de/repo/byhill-ca/1/F55C2745322CEC1805815DCD65BC6AFFD99168DA.crl rsync://krill.byhill.de/repo/byhill-ca/1/F55C2745322CEC1805815DCD65BC6AFFD99168DA.mft rsync://rsync.paas.rpki.ripe.net/repository/002f8ee6-abe7-4ae8-964c-788bb98c975c/1/F55C2745322CEC1805815DCD65BC6AFFD99168DA.cer rsync://rsync.paas.rpki.ripe.net/repository/002f8ee6-abe7-4ae8-964c-788bb98c975c/1/1E74494683D8D2A4E029AAD4573928D2A55FA411.crl rsync://rsync.paas.rpki.ripe.net/repository/002f8ee6-abe7-4ae8-964c-788bb98c975c/1/1E74494683D8D2A4E029AAD4573928D2A55FA411.mft rsync://rsync.paas.rpki.ripe.net/repository/6c43d3a6-7d13-4895-959d-419b9a6eb34b/4/1E74494683D8D2A4E029AAD4573928D2A55FA411.cer rsync://rsync.paas.rpki.ripe.net/repository/6c43d3a6-7d13-4895-959d-419b9a6eb34b/4/ACB5DFF8A45DF5CDAFA2A95C715F10C5FE5F91A3.crl rsync://rsync.paas.rpki.ripe.net/repository/6c43d3a6-7d13-4895-959d-419b9a6eb34b/4/ACB5DFF8A45DF5CDAFA2A95C715F10C5FE5F91A3.mft rsync://rpki.ripe.net/repository/DEFAULT/rLXf-KRd9c2voqlccV8Qxf5fkaM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 09 Oct 2026 05:46:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5d:0f:42:84:3a:64:9a:8a:42:08:8a:6e:3a:ae:07:9e:51:f3:8c:68 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F55C2745322CEC1805815DCD65BC6AFFD99168DA Validity Not Before: Oct 6 20:34:25 2026 GMT Not After : Oct 5 20:39:25 2027 GMT Subject: CN=AA90470D87A10B092D74985942A848100A86232F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:08:60:9f:00:10:5f:b1:de:b5:52:21:ba:e8: 61:cf:de:07:ba:d3:06:2f:80:93:12:9d:83:43:83: 6e:83:2e:0f:3a:50:55:4e:71:92:a0:3a:95:78:fe: 89:69:ae:8a:c9:8f:d7:95:42:0d:54:b9:91:f5:f6: 3f:44:ec:1d:21:e8:1b:96:2d:ab:63:55:c0:ae:85: a6:a4:b8:1a:be:ba:ab:e0:0a:de:13:5f:77:90:44: f2:87:ff:71:83:b8:3b:0e:d1:01:16:1c:f7:12:2b: bd:a2:dc:63:05:1c:1f:bf:fd:19:a5:0e:33:68:c8: 53:f2:16:87:90:b4:53:d1:32:2e:85:48:34:40:7a: 72:6b:10:41:d8:cf:99:55:e1:31:73:e3:b6:f3:c0: 7d:61:f5:9d:10:96:d8:f4:6e:d5:31:3d:70:94:5a: 99:5b:b3:11:3a:a2:b2:e6:f1:8b:78:e9:95:5a:d0: 25:3d:cf:61:80:14:56:50:19:da:41:9b:d7:ba:71: 92:d2:b6:df:63:4a:ea:9c:8d:0b:73:2a:8a:53:dd: 01:2b:6a:7d:c5:a7:2c:3c:39:b0:f3:59:cd:11:37: 8f:f0:ce:27:22:2f:cc:bd:04:47:e7:46:44:7b:03: 70:cb:27:d1:41:66:b2:07:f0:46:6c:75:80:f9:06: a3:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:90:47:0D:87:A1:0B:09:2D:74:98:59:42:A8:48:10:0A:86:23:2F X509v3 Authority Key Identifier: keyid:F5:5C:27:45:32:2C:EC:18:05:81:5D:CD:65:BC:6A:FF:D9:91:68:DA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://krill.byhill.de/repo/byhill-ca/1/F55C2745322CEC1805815DCD65BC6AFFD99168DA.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/002f8ee6-abe7-4ae8-964c-788bb98c975c/1/F55C2745322CEC1805815DCD65BC6AFFD99168DA.cer Subject Information Access: Signed Object - URI:rsync://krill.byhill.de/repo/byhill-ca/1/326131333a633863343a373130303a3a2f34302d3430203d3e20323032333538.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a13:c8c4:7100::/40 Signature Algorithm: sha256WithRSAEncryption 6f:7f:8a:dd:5c:ff:2c:72:32:e5:c1:a4:5e:bf:7e:67:52:9a: 92:9f:c8:0a:ef:71:75:6a:20:d5:b2:30:50:d2:10:81:eb:92: 5e:74:c3:7f:ca:f1:04:19:67:2c:44:28:b8:11:21:a6:70:76: 4f:fd:c1:70:18:d9:56:be:a0:a2:1b:8f:09:f7:23:4d:51:f9: fe:c5:c3:7c:7e:c1:74:c9:2a:44:ef:1b:48:1a:34:6b:e2:bb: 31:da:af:a3:ee:e4:67:5a:56:fa:36:03:65:f6:5a:a2:51:89: 17:83:fb:20:7e:f4:14:49:ef:48:cd:0e:74:ce:54:af:7b:90: 3b:56:c1:0c:39:38:f2:8d:4b:92:2a:e2:81:be:f5:27:ea:9d: 0c:b8:13:41:95:17:85:33:33:2b:a4:56:f9:35:0a:57:89:28: b5:f1:50:fd:d9:10:2f:68:6c:19:b8:ce:06:ef:30:88:fa:ca: 61:05:49:bb:51:18:ba:50:99:40:43:f9:90:a1:0b:c7:2d:3a: 44:54:ad:f3:aa:cb:1a:93:c0:0a:82:a8:82:69:49:87:60:71: 68:cd:98:92:18:b5:c4:cd:4a:60:37:52:b1:8d:43:47:5f:37: d9:7c:84:07:2a:2e:29:10:67:99:a0:6b:75:09:cc:6a:2c:85: 20:17:31:25 -----BEGIN CERTIFICATE----- MIIFHDCCBASgAwIBAgIUXQ9ChDpkmopCCIpuOq4HnlHzjGgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjU1QzI3NDUzMjJDRUMxODA1ODE1RENENjVCQzZBRkZE OTkxNjhEQTAeFw0yNjEwMDYyMDM0MjVaFw0yNzEwMDUyMDM5MjVaMDMxMTAvBgNV BAMTKEFBOTA0NzBEODdBMTBCMDkyRDc0OTg1OTQyQTg0ODEwMEE4NjIzMkYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCgCGCfABBfsd61UiG66GHP3ge6 0wYvgJMSnYNDg26DLg86UFVOcZKgOpV4/olprorJj9eVQg1UuZH19j9E7B0h6BuW LatjVcCuhaakuBq+uqvgCt4TX3eQRPKH/3GDuDsO0QEWHPcSK72i3GMFHB+//Rml DjNoyFPyFoeQtFPRMi6FSDRAenJrEEHYz5lV4TFz47bzwH1h9Z0Qltj0btUxPXCU WplbsxE6orLm8Yt46ZVa0CU9z2GAFFZQGdpBm9e6cZLStt9jSuqcjQtzKopT3QEr an3Fpyw8ObDzWc0RN4/wziciL8y9BEfnRkR7A3DLJ9FBZrIH8EZsdYD5BqOtAgMB AAGjggImMIICIjAdBgNVHQ4EFgQUqpBHDYehCwktdJhZQqhIEAqGIy8wHwYDVR0j BBgwFoAU9VwnRTIs7BgFgV3NZbxq/9mRaNowDgYDVR0PAQH/BAQDAgeAMGYGA1Ud HwRfMF0wW6BZoFeGVXJzeW5jOi8va3JpbGwuYnloaWxsLmRlL3JlcG8vYnloaWxs LWNhLzEvRjU1QzI3NDUzMjJDRUMxODA1ODE1RENENjVCQzZBRkZEOTkxNjhEQS5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS8wMDJmOGVlNi1hYmU3LTRh ZTgtOTY0Yy03ODhiYjk4Yzk3NWMvMS9GNTVDMjc0NTMyMkNFQzE4MDU4MTVEQ0Q2 NUJDNkFGRkQ5OTE2OERBLmNlcjCBiQYIKwYBBQUHAQsEfTB7MHkGCCsGAQUFBzAL hm1yc3luYzovL2tyaWxsLmJ5aGlsbC5kZS9yZXBvL2J5aGlsbC1jYS8xLzMyNjEz MTMzM2E2MzM4NjMzNDNhMzczMTMwMzAzYTNhMmYzNDMwMmQzNDMwMjAzZDNlMjAz MjMwMzIzMzM1Mzgucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYB BQUHAQcBAf8EEjAQMA4EAgACMAgDBgAqE8jEcTANBgkqhkiG9w0BAQsFAAOCAQEA b3+K3Vz/LHIy5cGkXr9+Z1Kakp/ICu9xdWog1bIwUNIQgeuSXnTDf8rxBBlnLEQo uBEhpnB2T/3BcBjZVr6gohuPCfcjTVH5/sXDfH7BdMkqRO8bSBo0a+K7Mdqvo+7k Z1pW+jYDZfZaolGJF4P7IH70FEnvSM0OdM5Ur3uQO1bBDDk48o1Lkirigb71J+qd DLgTQZUXhTMzK6RW+TUKV4kotfFQ/dkQL2hsGbjOBu8wiPrKYQVJu1EYulCZQEP5 kKELxy06RFSt86rLGpPACoKogmlJh2BxaM2Ykhi1xM1KYDdSsY1DR1832XyEByou KRBnmaBrdQnMaiyFIBcxJQ== -----END CERTIFICATE-----Generated at Fri Oct 9 00:30:19 2026 by rpki-client