$ rpki-client -vvf krill.47272.net/repo/HYEHOST/5/AS197963.roa File: AS197963.roa (raw, json) Hash identifier: UmtHxCiFKzy6NDgM8neh2MjdZC7nbhndk1AWnVE8kSI= Subject key identifier: 4B:4A:DB:40:49:EF:11:1E:49:B6:2A:67:53:5E:1A:B7:E7:3E:EC:54 Certificate issuer: /CN=C3CF41898936CB9C573DB1EAAB94C6E669951FD7 Certificate serial: 3E5F36C7D1181AE62ED11AB0B37AD986B019F144 Authority key identifier: C3:CF:41:89:89:36:CB:9C:57:3D:B1:EA:AB:94:C6:E6:69:95:1F:D7 Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer Subject info access: rsync://krill.47272.net/repo/HYEHOST/5/AS197963.roa Signing time: Wed 25 Mar 2026 15:13:36 +0000 ROA not before: Wed 25 Mar 2026 15:08:36 +0000 ROA not after: Wed 24 Mar 2027 15:13:36 +0000 asID: 197963 IP address blocks: 2a0f:6284:4215::/48 maxlen: 48 Validation: OK Signature path: rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.crl rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 26 Mar 2026 23:11:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3e:5f:36:c7:d1:18:1a:e6:2e:d1:1a:b0:b3:7a:d9:86:b0:19:f1:44 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C3CF41898936CB9C573DB1EAAB94C6E669951FD7 Validity Not Before: Mar 25 15:08:36 2026 GMT Not After : Mar 24 15:13:36 2027 GMT Subject: CN=4B4ADB4049EF111E49B62A67535E1AB7E73EEC54 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:44:3f:f2:e0:0d:0d:a0:46:76:fd:82:19:82: 0e:11:da:a5:27:a3:51:4c:7e:89:86:b0:92:7f:87: 13:8a:74:73:53:d3:4a:e5:5a:c4:91:c3:18:fd:e3: c7:d1:99:8c:59:74:2d:2a:37:fc:9c:3d:ff:53:6a: ae:0e:09:34:77:42:2a:c5:5f:c0:40:d6:34:37:7e: 42:27:31:be:97:cf:2b:ec:48:90:42:a7:1e:6f:4d: ac:cf:63:e1:52:2e:1a:00:fe:c6:35:5c:a5:87:3f: 38:39:31:cf:29:e5:32:98:d9:6d:49:f3:26:c7:36: f9:b3:53:b1:dc:52:8c:a6:d0:18:59:6f:87:e2:60: 11:d8:db:c9:39:ce:c6:da:6e:4f:27:89:21:1c:bf: 96:13:be:d7:d8:29:c7:b9:67:06:e6:18:0b:42:c9: 4c:7b:54:b0:ab:97:2d:63:b7:c5:01:08:b3:cc:76: 92:77:b6:30:84:f5:4b:eb:e7:e5:73:f1:31:cc:53: 91:c8:47:11:b7:c4:5b:43:3a:0d:37:95:25:cd:d9: eb:34:12:26:23:3a:d1:0b:83:23:c9:85:c4:b7:de: 8f:34:39:9b:2d:1a:a3:4b:d1:63:a9:d8:c6:2a:0a: 56:a1:40:56:1d:84:77:a4:73:76:ec:eb:bf:d1:a2: 92:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:4A:DB:40:49:EF:11:1E:49:B6:2A:67:53:5E:1A:B7:E7:3E:EC:54 X509v3 Authority Key Identifier: keyid:C3:CF:41:89:89:36:CB:9C:57:3D:B1:EA:AB:94:C6:E6:69:95:1F:D7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer Subject Information Access: Signed Object - URI:rsync://krill.47272.net/repo/HYEHOST/5/AS197963.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0f:6284:4215::/48 Signature Algorithm: sha256WithRSAEncryption 79:fa:ea:1c:6c:c7:a1:17:d6:a2:17:d4:7f:1a:0f:ac:e1:77: af:f0:93:2e:bb:e1:8f:23:93:e1:22:d7:b8:1d:a3:6f:d7:9e: d5:9b:c4:0d:cc:cb:cb:8a:f9:d7:9a:32:5e:6d:94:b1:09:20: 1f:d9:2b:a4:70:2e:71:8e:f7:55:60:08:30:89:ad:06:68:d5: 05:5d:59:52:95:a9:d5:a5:e5:32:70:3c:58:da:65:8d:47:58: 2c:7f:38:79:3c:b3:21:ac:82:46:eb:e9:1f:c8:fd:d6:00:dc: 53:ba:39:da:4f:ca:cc:0f:47:9e:d5:a1:01:99:11:2e:66:59: 6d:c1:ea:86:3f:d8:40:77:0f:b4:e9:d4:c8:16:27:7c:81:20: 8f:25:94:6d:a0:c2:0f:bc:60:38:d1:ab:68:65:1c:ec:57:18: 2d:cf:b5:e8:5e:15:84:f2:10:0b:37:09:31:05:86:ca:ea:e5: 06:ba:77:0a:c3:2c:d7:6e:8b:19:10:07:5b:d5:54:1f:db:d8: 2a:5d:3c:c5:a0:54:55:48:e1:0a:1d:8c:52:7b:09:27:74:a7: cf:70:49:23:87:30:6e:02:51:98:8c:39:11:57:d2:6c:06:2b: dc:1b:b8:9d:1e:62:db:3f:d7:65:80:72:f4:76:cd:4e:6d:c0: 4e:3e:ec:83 -----BEGIN CERTIFICATE----- MIIE1TCCA72gAwIBAgIUPl82x9EYGuYu0Rqws3rZhrAZ8UQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzNDRjQxODk4OTM2Q0I5QzU3M0RCMUVBQUI5NEM2RTY2 OTk1MUZENzAeFw0yNjAzMjUxNTA4MzZaFw0yNzAzMjQxNTEzMzZaMDMxMTAvBgNV BAMTKDRCNEFEQjQwNDlFRjExMUU0OUI2MkE2NzUzNUUxQUI3RTczRUVDNTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCeRD/y4A0NoEZ2/YIZgg4R2qUn o1FMfomGsJJ/hxOKdHNT00rlWsSRwxj948fRmYxZdC0qN/ycPf9Taq4OCTR3QirF X8BA1jQ3fkInMb6XzyvsSJBCpx5vTazPY+FSLhoA/sY1XKWHPzg5Mc8p5TKY2W1J 8ybHNvmzU7HcUoym0BhZb4fiYBHY28k5zsbabk8niSEcv5YTvtfYKce5ZwbmGAtC yUx7VLCrly1jt8UBCLPMdpJ3tjCE9Uvr5+Vz8THMU5HIRxG3xFtDOg03lSXN2es0 EiYjOtELgyPJhcS33o80OZstGqNL0WOp2MYqClahQFYdhHekc3bs67/RopINAgMB AAGjggHfMIIB2zAdBgNVHQ4EFgQUS0rbQEnvER5JtipnU14at+c+7FQwHwYDVR0j BBgwFoAUw89BiYk2y5xXPbHqq5TG5mmVH9cwDgYDVR0PAQH/BAQDAgeAMGQGA1Ud HwRdMFswWaBXoFWGU3JzeW5jOi8va3JpbGwuNDcyNzIubmV0L3JlcG8vSFlFSE9T VC81L0MzQ0Y0MTg5ODkzNkNCOUM1NzNEQjFFQUFCOTRDNkU2Njk5NTFGRDcuY3Js MIGTBggrBgEFBQcBAQSBhjCBgzCBgAYIKwYBBQUHMAKGdHJzeW5jOi8vcnBraS1y cHMuYXJpbi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZjg1MGQwNjNlMDE4NTc1NWM5 MWJlM2Y5ZC83L0MzQ0Y0MTg5ODkzNkNCOUM1NzNEQjFFQUFCOTRDNkU2Njk5NTFG RDcuY2VyME8GCCsGAQUFBwELBEMwQTA/BggrBgEFBQcwC4YzcnN5bmM6Ly9rcmls bC40NzI3Mi5uZXQvcmVwby9IWUVIT1NULzUvQVMxOTc5NjMucm9hMBgGA1UdIAEB /wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwAq D2KEQhUwDQYJKoZIhvcNAQELBQADggEBAHn66hxsx6EX1qIX1H8aD6zhd6/wky67 4Y8jk+Ei17gdo2/XntWbxA3My8uK+deaMl5tlLEJIB/ZK6RwLnGO91VgCDCJrQZo 1QVdWVKVqdWl5TJwPFjaZY1HWCx/OHk8syGsgkbr6R/I/dYA3FO6OdpPyswPR57V oQGZES5mWW3B6oY/2EB3D7Tp1MgWJ3yBII8llG2gwg+8YDjRq2hlHOxXGC3Ptehe FYTyEAs3CTEFhsrq5Qa6dwrDLNduixkQB1vVVB/b2CpdPMWgVFVI4QodjFJ7CSd0 p89wSSOHMG4CUZiMORFX0mwGK9wbuJ0eYts/12WAcvR2zU5twE4+7IM= -----END CERTIFICATE-----Generated at Thu Mar 26 05:30:24 2026 by rpki-client