$ rpki-client -vvvf krill.47272.net/repo/HYEHOST/5/AS206098.roa File: AS206098.roa (raw, json) Hash identifier: L2XSUGfQ++LuPkg3ckA+KKgYSmZHsDksRXipz5QiSY8= Subject key identifier: D4:57:B4:BB:75:65:05:AA:43:01:85:DF:16:DD:7C:2F:D3:CB:22:F7 Certificate issuer: /CN=C3CF41898936CB9C573DB1EAAB94C6E669951FD7 Certificate serial: 0FDE5C191EC47C3FE500F0435827E2B4AADA428B Authority key identifier: C3:CF:41:89:89:36:CB:9C:57:3D:B1:EA:AB:94:C6:E6:69:95:1F:D7 Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer Subject info access: rsync://krill.47272.net/repo/HYEHOST/5/AS206098.roa Signing time: Mon 21 Sep 2026 15:16:18 +0000 ROA not before: Mon 21 Sep 2026 15:11:18 +0000 ROA not after: Mon 20 Sep 2027 15:16:18 +0000 asID: 206098 IP address blocks: 2a0f:6280:1008::/48 maxlen: 48 2a0f:6280:100d::/48 maxlen: 48 Validation: OK Signature path: rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.crl rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 24 Sep 2026 14:12:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0f:de:5c:19:1e:c4:7c:3f:e5:00:f0:43:58:27:e2:b4:aa:da:42:8b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C3CF41898936CB9C573DB1EAAB94C6E669951FD7 Validity Not Before: Sep 21 15:11:18 2026 GMT Not After : Sep 20 15:16:18 2027 GMT Subject: CN=D457B4BB756505AA430185DF16DD7C2FD3CB22F7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:6f:de:fd:99:73:2a:66:08:83:ac:79:d8:7a: 8d:f3:13:6a:1e:4b:c0:e7:06:3f:ff:30:ed:7d:d6: 43:02:9c:c6:55:f8:b7:f3:a6:1c:a4:49:f4:53:a2: 10:ee:8c:c4:ea:43:59:f0:d3:13:a3:67:85:7a:93: 67:9d:d7:6f:34:c5:5f:22:da:7a:6e:57:07:85:e0: 37:37:c3:1f:f3:2c:8e:8d:1f:e2:55:f4:33:92:b6: 9e:69:f7:0b:36:55:8c:7e:d0:8f:f1:76:2d:b3:35: b2:02:b7:a3:00:22:02:87:10:05:d2:8d:b8:f2:6d: 34:a2:cf:61:6b:ff:97:e7:86:1a:c4:f5:60:8c:0f: b3:e6:a6:2f:38:93:15:b3:98:04:5f:9d:c6:c4:d8: 9e:80:b7:29:fb:0c:40:df:ba:c6:b6:6b:a8:5d:65: bd:29:33:08:53:58:36:76:ef:86:63:ea:47:af:cd: 0d:c8:ca:f6:fd:b5:fb:32:62:b3:3c:3a:8c:95:e7: 3f:c2:3c:8b:70:d4:e6:d6:fe:89:75:69:21:3a:52: dd:29:dc:92:90:06:fa:8e:6c:64:6c:26:20:d2:9e: 79:c4:ce:9b:ed:19:67:fb:a3:11:e5:b1:0b:d5:ac: 4f:62:eb:bd:92:92:c1:58:4a:1d:e1:4a:e0:bb:af: 3c:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:57:B4:BB:75:65:05:AA:43:01:85:DF:16:DD:7C:2F:D3:CB:22:F7 X509v3 Authority Key Identifier: keyid:C3:CF:41:89:89:36:CB:9C:57:3D:B1:EA:AB:94:C6:E6:69:95:1F:D7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer Subject Information Access: Signed Object - URI:rsync://krill.47272.net/repo/HYEHOST/5/AS206098.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0f:6280:1008::/48 2a0f:6280:100d::/48 Signature Algorithm: sha256WithRSAEncryption 94:1a:02:d3:c2:04:9d:d0:3a:64:44:0c:da:83:4c:88:e3:14: 3c:15:82:b1:d6:70:02:1a:5d:b5:ae:40:3e:f5:a4:83:7f:94: f8:58:7f:66:35:8f:5e:42:bc:92:30:d3:94:52:9a:fc:44:5c: 66:74:6b:d2:17:dc:b2:54:31:f5:ef:b4:69:c2:45:14:37:e1: e4:8f:53:7a:77:03:a6:2d:fa:e7:b1:de:93:d5:05:fb:80:c4: cf:d3:44:b7:15:fd:ba:83:e9:84:3b:e0:aa:3a:3d:d8:96:05: 32:63:b0:fb:8b:b6:05:53:b8:5c:8a:37:17:f4:7a:77:c2:98: 08:80:2e:31:90:2d:1c:51:0c:2e:dc:c0:7c:dc:a8:b1:33:05: 0e:78:17:fd:aa:1a:27:97:e8:b2:44:8d:40:27:82:da:9e:74: 94:3f:2b:d6:b7:1e:4e:d4:9c:e2:7d:ce:fa:64:0b:34:b3:99: 2c:b6:41:0a:b2:ee:fa:45:50:7f:02:a7:42:b5:a0:61:1f:0c: 26:72:cb:c9:41:7a:ef:50:cc:4e:2f:a5:8e:02:0b:30:52:ee: 5a:09:d3:01:88:de:9e:4d:f0:5f:f9:83:2c:5f:af:d0:48:08: 11:a0:f4:51:0f:aa:54:a2:30:3a:47:ab:26:a9:57:49:0f:17: 8d:72:65:6a -----BEGIN CERTIFICATE----- MIIE3jCCA8agAwIBAgIUD95cGR7EfD/lAPBDWCfitKraQoswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzNDRjQxODk4OTM2Q0I5QzU3M0RCMUVBQUI5NEM2RTY2 OTk1MUZENzAeFw0yNjA5MjExNTExMThaFw0yNzA5MjAxNTE2MThaMDMxMTAvBgNV BAMTKEQ0NTdCNEJCNzU2NTA1QUE0MzAxODVERjE2REQ3QzJGRDNDQjIyRjcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4b979mXMqZgiDrHnYeo3zE2oe S8DnBj//MO191kMCnMZV+LfzphykSfRTohDujMTqQ1nw0xOjZ4V6k2ed1280xV8i 2npuVweF4Dc3wx/zLI6NH+JV9DOStp5p9ws2VYx+0I/xdi2zNbICt6MAIgKHEAXS jbjybTSiz2Fr/5fnhhrE9WCMD7Pmpi84kxWzmARfncbE2J6Atyn7DEDfusa2a6hd Zb0pMwhTWDZ274Zj6kevzQ3Iyvb9tfsyYrM8OoyV5z/CPItw1ObW/ol1aSE6Ut0p 3JKQBvqObGRsJiDSnnnEzpvtGWf7oxHlsQvVrE9i672SksFYSh3hSuC7rzz1AgMB AAGjggHoMIIB5DAdBgNVHQ4EFgQU1Fe0u3VlBapDAYXfFt18L9PLIvcwHwYDVR0j BBgwFoAUw89BiYk2y5xXPbHqq5TG5mmVH9cwDgYDVR0PAQH/BAQDAgeAMGQGA1Ud HwRdMFswWaBXoFWGU3JzeW5jOi8va3JpbGwuNDcyNzIubmV0L3JlcG8vSFlFSE9T VC81L0MzQ0Y0MTg5ODkzNkNCOUM1NzNEQjFFQUFCOTRDNkU2Njk5NTFGRDcuY3Js MIGTBggrBgEFBQcBAQSBhjCBgzCBgAYIKwYBBQUHMAKGdHJzeW5jOi8vcnBraS1y cHMuYXJpbi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZjg1MGQwNjNlMDE4NTc1NWM5 MWJlM2Y5ZC83L0MzQ0Y0MTg5ODkzNkNCOUM1NzNEQjFFQUFCOTRDNkU2Njk5NTFG RDcuY2VyME8GCCsGAQUFBwELBEMwQTA/BggrBgEFBQcwC4YzcnN5bmM6Ly9rcmls bC40NzI3Mi5uZXQvcmVwby9IWUVIT1NULzUvQVMyMDYwOTgucm9hMBgGA1UdIAEB /wQOMAwwCgYIKwYBBQUHDgIwKwYIKwYBBQUHAQcBAf8EHDAaMBgEAgACMBIDBwAq D2KAEAgDBwAqD2KAEA0wDQYJKoZIhvcNAQELBQADggEBAJQaAtPCBJ3QOmREDNqD TIjjFDwVgrHWcAIaXbWuQD71pIN/lPhYf2Y1j15CvJIw05RSmvxEXGZ0a9IX3LJU MfXvtGnCRRQ34eSPU3p3A6Yt+uex3pPVBfuAxM/TRLcV/bqD6YQ74Ko6PdiWBTJj sPuLtgVTuFyKNxf0enfCmAiALjGQLRxRDC7cwHzcqLEzBQ54F/2qGieX6LJEjUAn gtqedJQ/K9a3Hk7UnOJ9zvpkCzSzmSy2QQqy7vpFUH8Cp0K1oGEfDCZyy8lBeu9Q zE4vpY4CCzBS7loJ0wGI3p5N8F/5gyxfr9BICBGg9FEPqlSiMDpHqyapV0kPF41y ZWo= -----END CERTIFICATE-----Generated at Thu Sep 24 01:25:33 2026 by rpki-client