$ rpki-client -vvf krill.47272.net/repo/HYEHOST/5/AS213535.roa File: AS213535.roa (raw, json) Hash identifier: pyNOf9NKrH0MdULyNewKkTEL0VtENQ8vvI4zHVN0uCI= Subject key identifier: 1A:33:6F:8C:6E:3B:CB:17:8C:F7:14:55:00:D8:26:C2:E9:97:97:C8 Certificate issuer: /CN=C3CF41898936CB9C573DB1EAAB94C6E669951FD7 Certificate serial: 2DDD797043FC19366BE2B54EE4AAB4EAC233BE68 Authority key identifier: C3:CF:41:89:89:36:CB:9C:57:3D:B1:EA:AB:94:C6:E6:69:95:1F:D7 Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer Subject info access: rsync://krill.47272.net/repo/HYEHOST/5/AS213535.roa Signing time: Thu 07 May 2026 16:00:35 +0000 ROA not before: Thu 07 May 2026 15:55:35 +0000 ROA not after: Thu 06 May 2027 16:00:35 +0000 asID: 213535 IP address blocks: 2a0f:6284:50::/48 maxlen: 48 2a0f:6284:60::/48 maxlen: 48 2a0f:6284:61::/48 maxlen: 48 2a0f:6284:62::/48 maxlen: 48 2a0f:6284:63::/48 maxlen: 48 2a0f:6284:64::/48 maxlen: 48 2a0f:6284:67::/48 maxlen: 48 2a0f:6284:68::/48 maxlen: 48 Validation: OK Signature path: rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.crl rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 13 May 2026 14:18:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2d:dd:79:70:43:fc:19:36:6b:e2:b5:4e:e4:aa:b4:ea:c2:33:be:68 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C3CF41898936CB9C573DB1EAAB94C6E669951FD7 Validity Not Before: May 7 15:55:35 2026 GMT Not After : May 6 16:00:35 2027 GMT Subject: CN=1A336F8C6E3BCB178CF7145500D826C2E99797C8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:b5:5e:9f:b6:c4:46:8d:0e:5c:a4:ce:4c:51: 4e:e9:7f:60:c2:2c:3f:8c:97:6f:ae:c2:a5:2b:7c: 17:4d:3f:7f:19:d3:87:ef:3a:59:70:52:cb:38:e2: df:d7:42:18:4b:69:b9:3f:20:c6:25:ff:22:5c:57: 09:e6:59:3d:ff:f4:9e:c3:a1:10:c6:13:c8:71:31: fc:77:f1:0f:10:ca:5b:70:6e:b9:eb:4e:f2:b5:14: b4:a8:a4:e8:59:f8:77:1b:e3:98:50:5d:1f:ea:50: 11:40:ba:cb:6e:b9:39:82:fe:86:37:8b:65:77:1f: 8f:59:51:c9:e2:c8:27:89:f7:60:e7:19:17:19:2e: 2a:e1:3f:23:e1:c0:c7:ca:f0:69:43:33:5a:f5:d7: a1:3d:3d:ad:dd:18:67:9d:b2:e8:9d:94:47:63:05: ee:9d:81:78:c6:79:a5:49:69:ac:4f:91:ef:c5:ca: 10:b5:c0:bf:14:f6:5b:f8:1e:4c:ef:cc:d3:1f:b2: b6:cc:a7:9c:97:09:b3:04:c4:8f:25:f5:96:11:f1: 5f:8b:11:1c:aa:8d:8d:4d:bd:c5:e5:99:02:14:f6: 82:80:73:4d:e1:e3:09:07:17:70:1d:c4:e6:92:e1: 3a:02:5d:25:5a:70:62:e8:35:78:d5:27:5e:d7:c8: 58:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:33:6F:8C:6E:3B:CB:17:8C:F7:14:55:00:D8:26:C2:E9:97:97:C8 X509v3 Authority Key Identifier: keyid:C3:CF:41:89:89:36:CB:9C:57:3D:B1:EA:AB:94:C6:E6:69:95:1F:D7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer Subject Information Access: Signed Object - URI:rsync://krill.47272.net/repo/HYEHOST/5/AS213535.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0f:6284:50::/48 2a0f:6284:60::-2a0f:6284:64:ffff:ffff:ffff:ffff:ffff 2a0f:6284:67::-2a0f:6284:68:ffff:ffff:ffff:ffff:ffff Signature Algorithm: sha256WithRSAEncryption 3a:8f:e6:38:17:3c:a9:37:78:9f:72:37:e0:16:4a:37:99:3a: 5e:e7:1a:de:38:1d:f3:c2:98:10:0b:35:b3:fe:a1:db:ab:6b: ee:32:fa:6e:22:72:2f:6f:1f:c4:f8:8e:9e:1b:8a:8c:62:78: 0b:20:52:53:19:f9:aa:01:74:18:88:f7:76:ab:8f:1c:a5:ed: d4:63:f5:6c:1d:df:48:05:a0:5a:c1:89:44:0d:81:e7:86:1e: ff:c4:4d:2f:1d:8f:f8:20:67:95:b3:48:78:7e:53:e0:6b:b8: ce:1b:43:de:c2:55:57:24:14:dd:90:23:df:53:e6:e0:f6:43: 75:92:eb:91:b9:f9:41:3b:48:70:53:35:c1:3a:2d:62:77:21: 58:45:5d:8a:d2:63:36:54:ec:c1:7b:2b:1a:7c:0b:dd:69:79: 57:3d:c1:de:03:31:fd:ef:14:72:d2:d7:6c:85:78:10:c8:dc: e6:e6:26:f4:12:5e:9d:cc:ff:a2:10:74:50:33:03:f8:5b:f1: 9c:b3:d9:d2:2f:36:11:24:e7:b1:ea:9d:4e:02:01:47:fd:c2: ea:72:04:93:15:f7:23:38:51:3a:9a:f3:8a:8a:3d:41:2e:60: c4:d9:c2:1d:47:33:1c:47:f5:c5:59:d7:dc:db:43:48:19:05: a3:d7:9a:bf -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgIULd15cEP8GTZr4rVO5Kq06sIzvmgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzNDRjQxODk4OTM2Q0I5QzU3M0RCMUVBQUI5NEM2RTY2 OTk1MUZENzAeFw0yNjA1MDcxNTU1MzVaFw0yNzA1MDYxNjAwMzVaMDMxMTAvBgNV BAMTKDFBMzM2RjhDNkUzQkNCMTc4Q0Y3MTQ1NTAwRDgyNkMyRTk5Nzk3QzgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCdtV6ftsRGjQ5cpM5MUU7pf2DC LD+Ml2+uwqUrfBdNP38Z04fvOllwUss44t/XQhhLabk/IMYl/yJcVwnmWT3/9J7D oRDGE8hxMfx38Q8QyltwbrnrTvK1FLSopOhZ+Hcb45hQXR/qUBFAustuuTmC/oY3 i2V3H49ZUcniyCeJ92DnGRcZLirhPyPhwMfK8GlDM1r116E9Pa3dGGedsuidlEdj Be6dgXjGeaVJaaxPke/FyhC1wL8U9lv4HkzvzNMfsrbMp5yXCbMExI8l9ZYR8V+L ERyqjY1NvcXlmQIU9oKAc03h4wkHF3AdxOaS4ToCXSVacGLoNXjVJ17XyFj9AgMB AAGjggIHMIICAzAdBgNVHQ4EFgQUGjNvjG47yxeM9xRVANgmwumXl8gwHwYDVR0j BBgwFoAUw89BiYk2y5xXPbHqq5TG5mmVH9cwDgYDVR0PAQH/BAQDAgeAMGQGA1Ud HwRdMFswWaBXoFWGU3JzeW5jOi8va3JpbGwuNDcyNzIubmV0L3JlcG8vSFlFSE9T VC81L0MzQ0Y0MTg5ODkzNkNCOUM1NzNEQjFFQUFCOTRDNkU2Njk5NTFGRDcuY3Js MIGTBggrBgEFBQcBAQSBhjCBgzCBgAYIKwYBBQUHMAKGdHJzeW5jOi8vcnBraS1y cHMuYXJpbi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZjg1MGQwNjNlMDE4NTc1NWM5 MWJlM2Y5ZC83L0MzQ0Y0MTg5ODkzNkNCOUM1NzNEQjFFQUFCOTRDNkU2Njk5NTFG RDcuY2VyME8GCCsGAQUFBwELBEMwQTA/BggrBgEFBQcwC4YzcnN5bmM6Ly9rcmls bC40NzI3Mi5uZXQvcmVwby9IWUVIT1NULzUvQVMyMTM1MzUucm9hMBgGA1UdIAEB /wQOMAwwCgYIKwYBBQUHDgIwSgYIKwYBBQUHAQcBAf8EOzA5MDcEAgACMDEDBwAq D2KEAFAwEgMHBSoPYoQAYAMHACoPYoQAZDASAwcAKg9ihABnAwcAKg9ihABoMA0G CSqGSIb3DQEBCwUAA4IBAQA6j+Y4FzypN3ifcjfgFko3mTpe5xreOB3zwpgQCzWz /qHbq2vuMvpuInIvbx/E+I6eG4qMYngLIFJTGfmqAXQYiPd2q48cpe3UY/VsHd9I BaBawYlEDYHnhh7/xE0vHY/4IGeVs0h4flPga7jOG0PewlVXJBTdkCPfU+bg9kN1 kuuRuflBO0hwUzXBOi1idyFYRV2K0mM2VOzBeysafAvdaXlXPcHeAzH97xRy0tds hXgQyNzm5ib0El6dzP+iEHRQMwP4W/Gcs9nSLzYRJOex6p1OAgFH/cLqcgSTFfcj OFE6mvOKij1BLmDE2cIdRzMcR/XFWdfc20NIGQWj15q/ -----END CERTIFICATE-----Generated at Wed May 13 00:14:50 2026 by rpki-client