
$ rpki-client -vvvf krill.47272.net/repo/HYEHOST/5/AS198679.roa
File: AS198679.roa (raw, json)
Hash identifier: /UA+boQroFtmPjxWzkGGsDWXT8x/w2bGiCwTUlXBEEU=
Subject key identifier: B5:7E:51:5D:6B:C9:09:BD:3E:0C:C6:86:73:21:DA:AA:6C:A1:69:B0
Certificate issuer: /CN=C3CF41898936CB9C573DB1EAAB94C6E669951FD7
Certificate serial: 5B88576C92022CF9169EF85FB11B311096E80152
Authority key identifier: C3:CF:41:89:89:36:CB:9C:57:3D:B1:EA:AB:94:C6:E6:69:95:1F:D7
Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer
Subject info access: rsync://krill.47272.net/repo/HYEHOST/5/AS198679.roa
Signing time: Tue 10 Nov 2026 13:38:33 +0000
ROA not before: Tue 10 Nov 2026 13:33:33 +0000
ROA not after: Tue 09 Nov 2027 13:38:33 +0000
asID: 198679
IP address blocks: 2a0f:6284:75::/48 maxlen: 48
2a0f:6284:76::/48 maxlen: 48
2a0f:6284:77::/48 maxlen: 48
2a0f:6284:78::/48 maxlen: 48
2a0f:6284:79::/48 maxlen: 48
2a0f:6284:7a::/48 maxlen: 48
2a0f:6284:7b::/48 maxlen: 48
2a0f:6284:7c::/48 maxlen: 48
2a0f:6284:7d::/48 maxlen: 48
2a0f:6284:7e::/48 maxlen: 48
2a0f:6284:7f::/48 maxlen: 48
Validation: OK
Signature path: rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.crl
rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.mft
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 12 Nov 2026 01:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5b:88:57:6c:92:02:2c:f9:16:9e:f8:5f:b1:1b:31:10:96:e8:01:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C3CF41898936CB9C573DB1EAAB94C6E669951FD7
Validity
Not Before: Nov 10 13:33:33 2026 GMT
Not After : Nov 9 13:38:33 2027 GMT
Subject: CN=B57E515D6BC909BD3E0CC6867321DAAA6CA169B0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:9a:2f:23:56:06:d8:7b:3b:d9:7e:52:56:52:
63:b4:57:e8:48:ca:66:bf:f5:a3:d0:79:3d:b6:45:
70:44:91:c7:5b:7c:04:e7:bf:4d:c4:42:7c:cd:67:
ad:53:45:f2:99:3f:94:bd:be:19:d3:8b:5e:19:b0:
62:cf:57:ae:8b:bd:2d:67:cf:23:27:8f:8b:d6:ff:
f5:5c:76:da:d4:95:6f:52:cd:61:81:de:98:14:28:
c6:15:de:79:4b:0e:fe:a5:a2:a2:f9:e8:c4:86:2a:
e5:3c:52:79:a0:e7:95:d7:ff:01:4d:72:4d:40:5d:
c3:e5:f6:68:4a:dc:3b:d7:87:74:fb:d7:5c:d9:42:
fd:2c:5c:cf:9c:3e:d8:1b:d5:b4:ff:91:6f:9e:4c:
e7:0d:4d:26:f7:06:83:66:3a:93:08:7b:61:27:df:
b0:3d:3d:27:c8:5c:8c:38:e9:9f:21:9e:11:27:9a:
db:3d:c1:6d:a9:58:7c:28:db:38:43:ab:86:e4:1f:
47:e8:01:0a:82:1b:0f:4e:f5:64:c8:2f:86:72:98:
e6:55:14:c1:00:84:2a:9b:9e:6d:7f:56:c8:c1:2e:
f8:a5:05:12:6d:58:af:0a:c7:6b:44:9b:59:54:5a:
af:df:49:f4:6a:06:47:86:95:94:bb:ff:2a:7e:47:
b5:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:7E:51:5D:6B:C9:09:BD:3E:0C:C6:86:73:21:DA:AA:6C:A1:69:B0
X509v3 Authority Key Identifier:
keyid:C3:CF:41:89:89:36:CB:9C:57:3D:B1:EA:AB:94:C6:E6:69:95:1F:D7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer
Subject Information Access:
Signed Object - URI:rsync://krill.47272.net/repo/HYEHOST/5/AS198679.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:6284:75::-2a0f:6284:7f:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
4b:87:5e:f7:19:03:dd:77:12:4b:fa:fa:6a:a6:82:57:25:56:
8a:3f:7d:4f:7e:44:e9:44:c6:37:6f:39:2b:c2:1e:0d:0c:d8:
d4:d6:a9:0e:9b:11:c3:12:e4:48:01:2e:30:d3:5d:c2:06:7a:
83:e6:3d:16:8e:90:eb:b9:85:48:8a:dc:ec:3a:46:ba:50:5e:
89:70:af:30:08:0d:55:d9:95:a7:12:38:d3:b9:e5:62:b2:3c:
83:7c:0a:35:64:0a:00:48:c6:12:45:ec:b1:4a:bf:67:d4:f6:
7b:d4:41:f5:6a:79:d5:5a:14:0c:32:f2:ae:8e:b6:45:f8:18:
57:a3:5b:9b:e1:48:41:81:63:35:ac:f5:56:c8:47:13:2a:16:
7a:88:0b:59:3d:30:a0:cc:29:3a:ad:58:91:5a:49:bb:70:38:
2d:cb:14:5e:f6:4d:b6:c5:1d:6d:8f:c8:6e:a7:9f:f7:63:96:
92:8f:2b:60:a8:00:d5:b2:f9:93:a7:3b:3f:a2:89:16:2e:30:
d6:ad:86:bc:fb:4a:7f:25:e0:40:70:e9:cc:db:b7:d1:58:37:
68:90:6b:6a:44:e1:91:3f:ac:95:47:4d:31:c5:e3:d7:a9:92:
e6:96:c1:bf:b6:76:e4:df:b6:00:02:03:7c:1e:67:24:3c:3d:
8f:b0:6e:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 11 08:21:54 2026 by rpki-client