$ rpki-client -vvf krill.47272.net/repo/HYEHOST/5/AS209944.roa File: AS209944.roa (raw, json) Hash identifier: Ws+Ykd1Iv/CsuCrtSUO+m3pjE78Z4D3rXeDgwNMw3o0= Subject key identifier: 7A:BF:B3:22:16:86:13:DE:7B:85:75:D4:50:1F:8E:0C:38:79:31:EA Certificate issuer: /CN=C3CF41898936CB9C573DB1EAAB94C6E669951FD7 Certificate serial: 213D0C5BBB0CA7B69381BD3E4597AA8B6E2A0D80 Authority key identifier: C3:CF:41:89:89:36:CB:9C:57:3D:B1:EA:AB:94:C6:E6:69:95:1F:D7 Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer Subject info access: rsync://krill.47272.net/repo/HYEHOST/5/AS209944.roa Signing time: Tue 17 Mar 2026 19:49:17 +0000 ROA not before: Tue 17 Mar 2026 19:44:17 +0000 ROA not after: Tue 16 Mar 2027 19:49:17 +0000 asID: 209944 IP address blocks: 2a0f:6283:1102::/48 maxlen: 48 2a0f:6284:4219::/48 maxlen: 48 Validation: OK Signature path: rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.crl rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 29 Mar 2026 00:55:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 21:3d:0c:5b:bb:0c:a7:b6:93:81:bd:3e:45:97:aa:8b:6e:2a:0d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C3CF41898936CB9C573DB1EAAB94C6E669951FD7 Validity Not Before: Mar 17 19:44:17 2026 GMT Not After : Mar 16 19:49:17 2027 GMT Subject: CN=7ABFB322168613DE7B8575D4501F8E0C387931EA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:80:38:92:0d:f3:9a:d4:64:eb:ee:ba:05:00: bc:d9:7d:9d:c2:5a:5f:32:95:5e:99:ea:4a:a5:b9: f2:9b:2c:f2:5a:79:d8:d3:c1:3b:05:c3:d3:a3:fd: bc:78:1a:f2:7d:4d:3b:97:02:c5:db:2b:d6:1c:65: 42:5b:77:fc:50:37:af:61:42:8a:17:c4:e9:0f:16: 9e:ba:63:8a:bd:71:2e:e6:96:b2:34:5b:e0:ce:16: 53:b4:38:53:c0:f9:32:c0:2d:69:31:1b:34:24:f7: 43:d3:31:09:d2:51:8d:12:1a:2a:15:3e:d9:a8:e2: 75:74:de:ca:a3:5b:4d:2e:97:90:f3:3e:e6:66:77: 51:7e:09:33:37:d2:65:4f:15:fe:09:af:54:41:93: 82:eb:c8:05:37:32:e9:f9:70:9a:5d:3f:fe:07:c3: 6b:8b:91:90:1a:d4:72:dd:70:a1:01:90:31:b0:30: af:ae:52:11:7d:dc:a1:c1:5b:6d:37:6c:0f:dd:3b: 71:a4:61:60:68:ba:e7:af:0a:77:4b:d0:a0:26:4f: 86:54:03:82:c7:3d:cf:f9:43:5d:a2:45:a1:9d:e4: 0b:68:6a:a2:1b:3e:10:1a:81:cd:d0:b7:7a:15:41: 60:fe:8d:27:5c:f7:cb:0a:86:9d:3d:eb:eb:ea:ec: 3a:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:BF:B3:22:16:86:13:DE:7B:85:75:D4:50:1F:8E:0C:38:79:31:EA X509v3 Authority Key Identifier: keyid:C3:CF:41:89:89:36:CB:9C:57:3D:B1:EA:AB:94:C6:E6:69:95:1F:D7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer Subject Information Access: Signed Object - URI:rsync://krill.47272.net/repo/HYEHOST/5/AS209944.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0f:6283:1102::/48 2a0f:6284:4219::/48 Signature Algorithm: sha256WithRSAEncryption 0e:5c:9e:7f:9b:90:ef:d3:78:f1:d0:c8:3c:d4:e2:23:12:f1: e8:f1:66:e3:42:5e:28:14:03:12:55:25:b6:19:f8:88:42:4b: ee:20:82:de:3a:28:2d:ce:27:d2:d5:7e:13:92:b5:75:dc:2e: 4f:eb:e0:72:31:a1:e6:03:a5:8e:31:39:86:c8:1b:78:1e:37: d1:a7:df:d9:94:27:a3:32:8a:c0:d1:11:92:d0:84:09:95:30: f2:bc:15:df:3c:35:d9:49:af:d3:f2:4f:62:58:59:2d:bb:1d: 29:b9:eb:d6:cb:1b:56:40:d6:be:4e:6a:87:a4:b9:a2:88:a1: 7a:b4:cb:48:82:d2:28:62:d2:fb:54:d3:9c:a2:cf:34:ee:37: 05:9a:eb:5c:bb:f9:6b:e8:1e:26:05:28:19:d5:ac:50:ab:6c: c3:de:57:45:4f:f1:b8:95:58:f4:4a:ba:0d:b3:36:90:40:1b: 74:7b:a0:b0:74:fb:19:c2:f9:e1:93:e9:2b:89:6f:75:52:86: d8:83:eb:cf:d3:e1:ab:13:0e:5e:ea:ec:34:d3:f3:56:b6:83: e9:7e:da:4e:37:a2:df:8c:1c:89:c7:1e:18:cb:8f:3c:1b:6f: 10:90:d8:a8:1b:a0:b9:7d:2b:6b:61:66:41:9b:b2:0a:04:47: b3:93:f3:de -----BEGIN CERTIFICATE----- MIIE3jCCA8agAwIBAgIUIT0MW7sMp7aTgb0+RZeqi24qDYAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzNDRjQxODk4OTM2Q0I5QzU3M0RCMUVBQUI5NEM2RTY2 OTk1MUZENzAeFw0yNjAzMTcxOTQ0MTdaFw0yNzAzMTYxOTQ5MTdaMDMxMTAvBgNV BAMTKDdBQkZCMzIyMTY4NjEzREU3Qjg1NzVENDUwMUY4RTBDMzg3OTMxRUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCtgDiSDfOa1GTr7roFALzZfZ3C Wl8ylV6Z6kqlufKbLPJaedjTwTsFw9Oj/bx4GvJ9TTuXAsXbK9YcZUJbd/xQN69h QooXxOkPFp66Y4q9cS7mlrI0W+DOFlO0OFPA+TLALWkxGzQk90PTMQnSUY0SGioV Ptmo4nV03sqjW00ul5DzPuZmd1F+CTM30mVPFf4Jr1RBk4LryAU3Mun5cJpdP/4H w2uLkZAa1HLdcKEBkDGwMK+uUhF93KHBW203bA/dO3GkYWBouuevCndL0KAmT4ZU A4LHPc/5Q12iRaGd5AtoaqIbPhAagc3Qt3oVQWD+jSdc98sKhp096+vq7Do5AgMB AAGjggHoMIIB5DAdBgNVHQ4EFgQUer+zIhaGE957hXXUUB+ODDh5MeowHwYDVR0j BBgwFoAUw89BiYk2y5xXPbHqq5TG5mmVH9cwDgYDVR0PAQH/BAQDAgeAMGQGA1Ud HwRdMFswWaBXoFWGU3JzeW5jOi8va3JpbGwuNDcyNzIubmV0L3JlcG8vSFlFSE9T VC81L0MzQ0Y0MTg5ODkzNkNCOUM1NzNEQjFFQUFCOTRDNkU2Njk5NTFGRDcuY3Js MIGTBggrBgEFBQcBAQSBhjCBgzCBgAYIKwYBBQUHMAKGdHJzeW5jOi8vcnBraS1y cHMuYXJpbi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZjg1MGQwNjNlMDE4NTc1NWM5 MWJlM2Y5ZC83L0MzQ0Y0MTg5ODkzNkNCOUM1NzNEQjFFQUFCOTRDNkU2Njk5NTFG RDcuY2VyME8GCCsGAQUFBwELBEMwQTA/BggrBgEFBQcwC4YzcnN5bmM6Ly9rcmls bC40NzI3Mi5uZXQvcmVwby9IWUVIT1NULzUvQVMyMDk5NDQucm9hMBgGA1UdIAEB /wQOMAwwCgYIKwYBBQUHDgIwKwYIKwYBBQUHAQcBAf8EHDAaMBgEAgACMBIDBwAq D2KDEQIDBwAqD2KEQhkwDQYJKoZIhvcNAQELBQADggEBAA5cnn+bkO/TePHQyDzU 4iMS8ejxZuNCXigUAxJVJbYZ+IhCS+4ggt46KC3OJ9LVfhOStXXcLk/r4HIxoeYD pY4xOYbIG3geN9Gn39mUJ6MyisDREZLQhAmVMPK8Fd88NdlJr9PyT2JYWS27HSm5 69bLG1ZA1r5OaoekuaKIoXq0y0iC0ihi0vtU05yizzTuNwWa61y7+WvoHiYFKBnV rFCrbMPeV0VP8biVWPRKug2zNpBAG3R7oLB0+xnC+eGT6SuJb3VShtiD68/T4asT Dl7q7DTT81a2g+l+2k43ot+MHInHHhjLjzwbbxCQ2KgboLl9K2thZkGbsgoER7OT 894= -----END CERTIFICATE-----Generated at Sat Mar 28 10:11:46 2026 by rpki-client