$ rpki-client -vvf krill.47272.net/repo/HYEHOST/5/AS20473.roa File: AS20473.roa (raw, json) Hash identifier: r74J9PiuqycUpRs+KbZJf3dLkdHhJHhHx5S9TAi++Fo= Subject key identifier: FF:91:87:2C:BF:07:8D:34:22:84:5E:17:8A:40:8B:EB:90:BC:86:05 Certificate issuer: /CN=C3CF41898936CB9C573DB1EAAB94C6E669951FD7 Certificate serial: 106B82D3C8E03EACE18E5BA14B51453369129DC3 Authority key identifier: C3:CF:41:89:89:36:CB:9C:57:3D:B1:EA:AB:94:C6:E6:69:95:1F:D7 Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer Subject info access: rsync://krill.47272.net/repo/HYEHOST/5/AS20473.roa Signing time: Sun 28 Jun 2026 18:57:44 +0000 ROA not before: Sun 28 Jun 2026 18:52:44 +0000 ROA not after: Sun 27 Jun 2027 18:57:44 +0000 asID: 20473 IP address blocks: 2a06:1281:10::/44 maxlen: 48 2a0a:6044:6600::/40 maxlen: 48 2a0a:6044:7300::/40 maxlen: 40 2a0a:6044:ac60::/44 maxlen: 48 Validation: OK Signature path: rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.crl rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 24 Jul 2026 12:59:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10:6b:82:d3:c8:e0:3e:ac:e1:8e:5b:a1:4b:51:45:33:69:12:9d:c3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C3CF41898936CB9C573DB1EAAB94C6E669951FD7 Validity Not Before: Jun 28 18:52:44 2026 GMT Not After : Jun 27 18:57:44 2027 GMT Subject: CN=FF91872CBF078D3422845E178A408BEB90BC8605 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f4:48:dd:70:3a:1e:62:c8:15:c1:6a:6b:f1:f5: 2e:fc:da:d2:41:25:23:a4:e5:1b:ec:ae:40:81:98: f3:e7:51:31:51:93:d5:d2:c0:c5:b0:d1:20:50:67: bb:e6:13:e7:3f:d6:a4:9a:05:42:d6:05:84:b2:4d: 58:9b:e1:45:bc:41:17:06:7c:0a:2b:f8:f2:37:92: 54:d2:8d:fa:34:24:20:b5:a7:97:f5:ee:97:62:20: 2b:62:64:3d:18:42:08:50:bd:08:3c:ce:42:8a:c6: 6f:8d:8d:1e:fd:29:68:d3:a6:93:8b:19:f0:4f:8a: 88:4d:79:d9:6a:5b:43:82:fa:f8:7a:55:b7:d5:a3: 70:27:4c:e3:a1:a0:54:3f:e7:16:2c:20:10:d3:96: 4a:c7:22:31:8f:5f:13:ea:ee:84:d5:63:c6:c8:e0: 1d:59:89:ba:f2:96:23:a8:37:0f:0c:72:a4:5a:ad: 09:f9:9f:02:19:2b:5a:b2:be:86:59:95:3b:21:8e: be:a4:bd:30:0d:e1:44:f0:ac:10:49:c0:51:fa:da: 35:4d:38:53:b7:cb:08:fd:89:9c:1b:d9:26:6c:22: 54:db:7b:3a:ae:b6:f1:ad:3b:b5:75:b6:2b:e3:31: 57:ab:b1:af:31:3f:2d:63:ba:ef:5b:5a:d1:28:22: a6:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:91:87:2C:BF:07:8D:34:22:84:5E:17:8A:40:8B:EB:90:BC:86:05 X509v3 Authority Key Identifier: keyid:C3:CF:41:89:89:36:CB:9C:57:3D:B1:EA:AB:94:C6:E6:69:95:1F:D7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer Subject Information Access: Signed Object - URI:rsync://krill.47272.net/repo/HYEHOST/5/AS20473.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a06:1281:10::/44 2a0a:6044:6600::/40 2a0a:6044:7300::/40 2a0a:6044:ac60::/44 Signature Algorithm: sha256WithRSAEncryption 8e:91:1b:40:78:d5:18:71:45:67:c2:52:71:1a:01:ec:d8:9a: 09:8b:57:bd:98:1e:3b:9d:27:9a:32:63:4c:17:2e:ca:fc:df: 12:d4:50:0d:79:78:1b:ae:17:0d:60:3e:71:69:d5:e0:9b:0c: 15:9a:7e:b6:22:1e:3e:77:91:29:e0:53:3d:43:57:6d:a1:92: 66:7d:a5:7b:af:16:34:0d:9b:da:0c:90:7e:5f:ed:2f:f2:96: 37:9d:e6:f0:2c:f8:d7:76:32:67:7c:30:1b:d8:18:bb:a3:00: 84:8a:7d:d4:2b:69:35:e8:14:7e:1b:62:69:f9:38:e9:38:1e: d0:2b:b5:c0:0e:3a:6a:84:81:55:be:b6:4b:ad:5e:92:b9:e7: 33:e8:a9:79:ad:c3:1f:6f:a4:f3:5b:36:c1:ff:50:bd:2d:83: 43:fa:bf:d2:9b:82:c8:f7:09:4d:88:9c:21:d7:35:da:48:ee: 64:36:21:4e:d5:83:ca:0e:bb:12:05:97:3a:22:d7:8a:ee:90: c7:e7:b6:04:3f:24:9d:8b:05:87:fc:b7:bc:de:62:0a:c3:76: 21:28:bc:9f:8a:d4:a9:56:17:e7:d7:55:01:56:2e:67:60:3c: 72:f8:70:80:a6:40:66:2f:fe:f4:d1:76:13:a0:b4:8f:44:ae: e8:fd:6a:30 -----BEGIN CERTIFICATE----- MIIE7TCCA9WgAwIBAgIUEGuC08jgPqzhjluhS1FFM2kSncMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzNDRjQxODk4OTM2Q0I5QzU3M0RCMUVBQUI5NEM2RTY2 OTk1MUZENzAeFw0yNjA2MjgxODUyNDRaFw0yNzA2MjcxODU3NDRaMDMxMTAvBgNV BAMTKEZGOTE4NzJDQkYwNzhEMzQyMjg0NUUxNzhBNDA4QkVCOTBCQzg2MDUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD0SN1wOh5iyBXBamvx9S782tJB JSOk5RvsrkCBmPPnUTFRk9XSwMWw0SBQZ7vmE+c/1qSaBULWBYSyTVib4UW8QRcG fAor+PI3klTSjfo0JCC1p5f17pdiICtiZD0YQghQvQg8zkKKxm+NjR79KWjTppOL GfBPiohNedlqW0OC+vh6VbfVo3AnTOOhoFQ/5xYsIBDTlkrHIjGPXxPq7oTVY8bI 4B1ZibryliOoNw8McqRarQn5nwIZK1qyvoZZlTshjr6kvTAN4UTwrBBJwFH62jVN OFO3ywj9iZwb2SZsIlTbezqutvGtO7V1tivjMVersa8xPy1juu9bWtEoIqYZAgMB AAGjggH3MIIB8zAdBgNVHQ4EFgQU/5GHLL8HjTQihF4XikCL65C8hgUwHwYDVR0j BBgwFoAUw89BiYk2y5xXPbHqq5TG5mmVH9cwDgYDVR0PAQH/BAQDAgeAMGQGA1Ud HwRdMFswWaBXoFWGU3JzeW5jOi8va3JpbGwuNDcyNzIubmV0L3JlcG8vSFlFSE9T VC81L0MzQ0Y0MTg5ODkzNkNCOUM1NzNEQjFFQUFCOTRDNkU2Njk5NTFGRDcuY3Js MIGTBggrBgEFBQcBAQSBhjCBgzCBgAYIKwYBBQUHMAKGdHJzeW5jOi8vcnBraS1y cHMuYXJpbi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZjg1MGQwNjNlMDE4NTc1NWM5 MWJlM2Y5ZC83L0MzQ0Y0MTg5ODkzNkNCOUM1NzNEQjFFQUFCOTRDNkU2Njk5NTFG RDcuY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9rcmls bC40NzI3Mi5uZXQvcmVwby9IWUVIT1NULzUvQVMyMDQ3My5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjA7BggrBgEFBQcBBwEB/wQsMCowKAQCAAIwIgMHBCoG EoEAEAMGACoKYERmAwYAKgpgRHMDBwQqCmBErGAwDQYJKoZIhvcNAQELBQADggEB AI6RG0B41RhxRWfCUnEaAezYmgmLV72YHjudJ5oyY0wXLsr83xLUUA15eBuuFw1g PnFp1eCbDBWafrYiHj53kSngUz1DV22hkmZ9pXuvFjQNm9oMkH5f7S/yljed5vAs +Nd2Mmd8MBvYGLujAISKfdQraTXoFH4bYmn5OOk4HtArtcAOOmqEgVW+tkutXpK5 5zPoqXmtwx9vpPNbNsH/UL0tg0P6v9Kbgsj3CU2InCHXNdpI7mQ2IU7Vg8oOuxIF lzoi14rukMfntgQ/JJ2LBYf8t7zeYgrDdiEovJ+K1KlWF+fXVQFWLmdgPHL4cICm QGYv/vTRdhOgtI9Eruj9ajA= -----END CERTIFICATE-----Generated at Thu Jul 23 23:50:19 2026 by rpki-client