
$ rpki-client -vvf krill.47272.net/repo/HYEHOST/5/AS200536.roa
File: AS200536.roa (raw, json)
Hash identifier: dT5dK/gxtZyYyVq7J8U3T53MagEucJcHKi2iuST3it0=
Subject key identifier: BD:09:EA:F7:A5:DE:12:F4:1B:28:C0:20:AB:12:F6:DF:53:8E:99:01
Certificate issuer: /CN=C3CF41898936CB9C573DB1EAAB94C6E669951FD7
Certificate serial: 5B9779BA549304E9B8B3B4122B89157E48AA56A4
Authority key identifier: C3:CF:41:89:89:36:CB:9C:57:3D:B1:EA:AB:94:C6:E6:69:95:1F:D7
Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer
Subject info access: rsync://krill.47272.net/repo/HYEHOST/5/AS200536.roa
Signing time: Mon 13 Jul 2026 10:45:46 +0000
ROA not before: Mon 13 Jul 2026 10:40:46 +0000
ROA not after: Mon 12 Jul 2027 10:45:46 +0000
asID: 200536
IP address blocks: 2a0f:6280:1400::/40 maxlen: 48
2a0f:6284:4c00::/40 maxlen: 48
Validation: OK
Signature path: rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.crl
rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.mft
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 12:59:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5b:97:79:ba:54:93:04:e9:b8:b3:b4:12:2b:89:15:7e:48:aa:56:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C3CF41898936CB9C573DB1EAAB94C6E669951FD7
Validity
Not Before: Jul 13 10:40:46 2026 GMT
Not After : Jul 12 10:45:46 2027 GMT
Subject: CN=BD09EAF7A5DE12F41B28C020AB12F6DF538E9901
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:22:45:b6:85:46:5b:87:0f:90:eb:52:df:c3:
39:57:20:af:59:8a:4c:af:c1:67:3d:d1:b7:9d:6c:
b6:fe:5d:5a:ab:e6:9b:d5:82:dd:ff:a2:ce:89:0f:
3d:dc:30:d5:59:ce:2e:00:0e:af:2b:b1:60:fd:4b:
c9:00:d6:1d:05:2f:49:88:d8:ad:81:3e:35:0c:e4:
db:54:65:d5:c9:2d:26:c9:c1:73:97:94:3d:2b:5d:
45:e7:09:be:ac:34:67:c4:e6:64:e2:29:e5:6b:0a:
75:cd:b7:85:eb:60:50:cf:be:c7:a7:67:e7:bb:61:
02:aa:a9:78:03:74:3e:7b:a3:a1:30:12:5f:b3:4e:
0d:bb:55:b3:db:96:be:09:08:73:c3:13:90:ec:4a:
2e:ff:72:1d:4a:33:06:bc:b9:0f:66:a1:60:d4:44:
76:52:a3:2a:b6:48:11:d8:35:79:ee:03:1b:96:94:
18:7b:42:4a:88:b4:b8:07:8b:56:fb:d7:25:14:71:
32:8b:e9:fd:a5:42:e8:49:8d:10:cf:10:85:58:22:
64:35:e0:6c:48:14:eb:85:e2:cf:62:4a:18:f0:75:
fb:8d:e0:66:47:06:c2:68:20:b6:40:1b:df:49:ee:
35:ac:08:a7:52:c1:be:52:d1:7d:09:54:b3:45:9e:
b4:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:09:EA:F7:A5:DE:12:F4:1B:28:C0:20:AB:12:F6:DF:53:8E:99:01
X509v3 Authority Key Identifier:
keyid:C3:CF:41:89:89:36:CB:9C:57:3D:B1:EA:AB:94:C6:E6:69:95:1F:D7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer
Subject Information Access:
Signed Object - URI:rsync://krill.47272.net/repo/HYEHOST/5/AS200536.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:6280:1400::/40
2a0f:6284:4c00::/40
Signature Algorithm: sha256WithRSAEncryption
6b:d3:47:0c:29:f4:57:f1:61:4e:ce:f3:a0:d4:26:b2:3a:55:
f0:f2:51:76:6d:01:e0:6d:07:9f:bf:d1:3d:57:b3:79:88:30:
d0:3d:cd:f3:b0:75:b8:79:5f:c1:08:3a:56:c3:a0:d0:ca:5e:
5f:d5:8f:06:6d:5b:56:22:49:4e:79:a7:89:22:23:d6:8c:af:
47:c3:2e:ba:0d:47:74:2e:e5:d2:d3:58:1e:d3:55:07:a9:26:
1c:9e:70:58:97:63:30:da:f1:bc:79:52:45:53:60:52:8b:e6:
68:82:23:bb:2e:e5:2f:8a:6d:a5:18:36:fe:a9:ae:ae:9a:63:
c0:35:41:df:f2:08:5d:45:7e:50:32:94:0b:a0:39:b3:86:51:
50:b9:6f:c3:df:eb:cf:5a:66:9a:45:7c:13:ff:16:31:b5:0a:
8c:c7:a3:ad:e6:e8:64:05:24:e3:44:f0:86:0b:dd:d9:9d:a8:
3a:7c:db:d5:4e:6c:8b:91:f1:ab:37:ec:fe:00:0e:bb:8d:d9:
0a:57:be:66:4d:32:a1:ab:83:0d:24:8e:58:f5:43:75:1c:77:
df:33:e5:ce:d1:a6:84:35:e5:8c:8c:d2:2d:3a:32:63:3c:10:
9a:74:50:6e:a2:47:dc:ca:c1:d1:91:02:72:53:21:9a:90:29:
d1:cc:ac:29
-----BEGIN CERTIFICATE-----
MIIE3DCCA8SgAwIBAgIUW5d5ulSTBOm4s7QSK4kVfkiqVqQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQzNDRjQxODk4OTM2Q0I5QzU3M0RCMUVBQUI5NEM2RTY2
OTk1MUZENzAeFw0yNjA3MTMxMDQwNDZaFw0yNzA3MTIxMDQ1NDZaMDMxMTAvBgNV
BAMTKEJEMDlFQUY3QTVERTEyRjQxQjI4QzAyMEFCMTJGNkRGNTM4RTk5MDEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCkIkW2hUZbhw+Q61LfwzlXIK9Z
ikyvwWc90bedbLb+XVqr5pvVgt3/os6JDz3cMNVZzi4ADq8rsWD9S8kA1h0FL0mI
2K2BPjUM5NtUZdXJLSbJwXOXlD0rXUXnCb6sNGfE5mTiKeVrCnXNt4XrYFDPvsen
Z+e7YQKqqXgDdD57o6EwEl+zTg27VbPblr4JCHPDE5DsSi7/ch1KMwa8uQ9moWDU
RHZSoyq2SBHYNXnuAxuWlBh7QkqItLgHi1b71yUUcTKL6f2lQuhJjRDPEIVYImQ1
4GxIFOuF4s9iShjwdfuN4GZHBsJoILZAG99J7jWsCKdSwb5S0X0JVLNFnrQTAgMB
AAGjggHmMIIB4jAdBgNVHQ4EFgQUvQnq96XeEvQbKMAgqxL231OOmQEwHwYDVR0j
BBgwFoAUw89BiYk2y5xXPbHqq5TG5mmVH9cwDgYDVR0PAQH/BAQDAgeAMGQGA1Ud
HwRdMFswWaBXoFWGU3JzeW5jOi8va3JpbGwuNDcyNzIubmV0L3JlcG8vSFlFSE9T
VC81L0MzQ0Y0MTg5ODkzNkNCOUM1NzNEQjFFQUFCOTRDNkU2Njk5NTFGRDcuY3Js
MIGTBggrBgEFBQcBAQSBhjCBgzCBgAYIKwYBBQUHMAKGdHJzeW5jOi8vcnBraS1y
cHMuYXJpbi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZjg1MGQwNjNlMDE4NTc1NWM5
MWJlM2Y5ZC83L0MzQ0Y0MTg5ODkzNkNCOUM1NzNEQjFFQUFCOTRDNkU2Njk5NTFG
RDcuY2VyME8GCCsGAQUFBwELBEMwQTA/BggrBgEFBQcwC4YzcnN5bmM6Ly9rcmls
bC40NzI3Mi5uZXQvcmVwby9IWUVIT1NULzUvQVMyMDA1MzYucm9hMBgGA1UdIAEB
/wQOMAwwCgYIKwYBBQUHDgIwKQYIKwYBBQUHAQcBAf8EGjAYMBYEAgACMBADBgAq
D2KAFAMGACoPYoRMMA0GCSqGSIb3DQEBCwUAA4IBAQBr00cMKfRX8WFOzvOg1Cay
OlXw8lF2bQHgbQefv9E9V7N5iDDQPc3zsHW4eV/BCDpWw6DQyl5f1Y8GbVtWIklO
eaeJIiPWjK9Hwy66DUd0LuXS01ge01UHqSYcnnBYl2Mw2vG8eVJFU2BSi+ZogiO7
LuUvim2lGDb+qa6ummPANUHf8ghdRX5QMpQLoDmzhlFQuW/D3+vPWmaaRXwT/xYx
tQqMx6Ot5uhkBSTjRPCGC93Znag6fNvVTmyLkfGrN+z+AA67jdkKV75mTTKhq4MN
JI5Y9UN1HHffM+XO0aaENeWMjNItOjJjPBCadFBuokfcysHRkQJyUyGakCnRzKwp
-----END CERTIFICATE-----
Generated at Fri Jul 24 02:15:28 2026 by rpki-client