$ rpki-client -vvvf krill.47272.net/repo/HYEHOST/5/AS213799.roa File: AS213799.roa (raw, json) Hash identifier: FF/OvRupNzNKnzlcpTkmqvnVM6F2VKxtNjtx3o5lstI= Subject key identifier: BF:5F:17:98:B7:F1:CE:FC:47:EB:FE:0B:11:50:00:0C:B4:7F:C3:6A Certificate issuer: /CN=C3CF41898936CB9C573DB1EAAB94C6E669951FD7 Certificate serial: 3E068DEF94CF6324C75C54403C72425FEF82B9AA Authority key identifier: C3:CF:41:89:89:36:CB:9C:57:3D:B1:EA:AB:94:C6:E6:69:95:1F:D7 Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer Subject info access: rsync://krill.47272.net/repo/HYEHOST/5/AS213799.roa Signing time: Mon 02 Nov 2026 09:40:39 +0000 ROA not before: Mon 02 Nov 2026 09:35:39 +0000 ROA not after: Mon 01 Nov 2027 09:40:39 +0000 asID: 213799 IP address blocks: 2a0f:6280:108c::/48 maxlen: 48 2a0f:6280:2c00::/40 maxlen: 48 Validation: OK Signature path: rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.crl rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 15 Nov 2026 17:01:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3e:06:8d:ef:94:cf:63:24:c7:5c:54:40:3c:72:42:5f:ef:82:b9:aa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C3CF41898936CB9C573DB1EAAB94C6E669951FD7 Validity Not Before: Nov 2 09:35:39 2026 GMT Not After : Nov 1 09:40:39 2027 GMT Subject: CN=BF5F1798B7F1CEFC47EBFE0B1150000CB47FC36A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:30:d4:0c:0f:ef:96:6e:2f:17:b1:d4:c7:a8: b8:b6:ee:55:07:6e:49:71:64:e4:01:e3:f9:56:1b: e0:58:33:c0:d5:10:68:46:fd:88:54:b2:30:ed:4e: 0e:3e:73:ef:e0:b4:21:d0:90:60:46:2a:f2:69:51: 49:d7:a5:cb:b7:1e:98:4d:00:b8:a3:e1:a4:82:40: 29:0c:fe:f9:0e:29:56:49:88:52:75:8f:8c:21:35: 03:4a:f6:30:d9:14:8f:3e:69:ba:4e:29:bc:e9:78: 21:3e:7f:eb:26:97:a2:24:ec:fe:3e:3d:1c:15:eb: 95:9d:ef:fd:df:8b:33:3d:ab:38:72:fb:58:5f:f8: 3e:4f:ba:49:a8:9d:65:b8:11:a7:87:0c:86:24:bd: 91:ca:7a:90:2d:25:d1:d7:df:2e:f6:84:50:a2:5a: 67:3e:91:a5:e3:5c:57:88:df:e9:3f:14:fb:ee:46: e5:73:ca:b4:a2:1f:53:11:f1:ab:c7:2c:07:a2:20: 2b:c5:25:f3:52:88:a4:15:7e:85:85:f7:8e:d8:3a: 75:e6:36:07:a1:9f:3f:aa:26:2b:00:62:07:ab:20: a0:e2:69:66:4c:78:0d:14:c5:03:87:ff:f8:e1:4a: 7f:b4:f7:4c:18:29:d1:4a:f5:7c:b8:69:b0:24:c8: 60:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:5F:17:98:B7:F1:CE:FC:47:EB:FE:0B:11:50:00:0C:B4:7F:C3:6A X509v3 Authority Key Identifier: keyid:C3:CF:41:89:89:36:CB:9C:57:3D:B1:EA:AB:94:C6:E6:69:95:1F:D7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer Subject Information Access: Signed Object - URI:rsync://krill.47272.net/repo/HYEHOST/5/AS213799.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0f:6280:108c::/48 2a0f:6280:2c00::/40 Signature Algorithm: sha256WithRSAEncryption 1d:93:34:a1:d0:e6:4e:d7:28:cc:e2:2f:d9:6e:a3:9b:06:63: 49:ac:3c:e6:ec:de:ba:21:88:08:c2:17:a8:b4:81:ab:e1:0b: d3:80:20:43:67:7d:4a:6c:0d:65:36:6b:70:d7:2e:26:c8:29: 6c:64:f9:d9:07:a5:50:f1:5e:da:22:21:df:c4:43:2d:f1:49: 6a:63:fb:8e:7d:a9:40:d7:56:a5:8c:b8:a8:34:45:38:1e:e7: a6:8b:fc:2b:30:3a:e0:a7:8c:be:6a:20:c2:ea:a2:cb:7b:ed: e1:b5:8d:bf:bc:44:02:ca:f7:18:d2:fa:88:d7:34:04:f2:f8: aa:58:db:c1:68:f4:c6:21:43:94:8e:f1:51:34:5c:16:df:b9: 48:7f:34:04:99:e9:40:d6:a9:82:00:be:c4:d9:61:d0:cf:8b: 31:78:ea:d7:12:5a:2b:86:a8:d8:b3:40:7b:24:1b:8f:a8:89: cd:ba:4a:69:aa:3e:a3:a9:8c:72:fd:e2:ea:f4:8c:92:8c:22: 2a:75:a4:23:c0:26:76:79:42:20:eb:47:dc:18:82:78:aa:98: 77:46:5c:77:c6:6f:2d:d7:30:c0:be:94:3e:15:52:9a:93:bd: d0:5a:75:da:f1:23:94:0e:0b:db:8c:08:84:0c:94:5e:c6:6a: ce:09:85:bb -----BEGIN CERTIFICATE----- MIIE3TCCA8WgAwIBAgIUPgaN75TPYyTHXFRAPHJCX++CuaowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzNDRjQxODk4OTM2Q0I5QzU3M0RCMUVBQUI5NEM2RTY2 OTk1MUZENzAeFw0yNjExMDIwOTM1MzlaFw0yNzExMDEwOTQwMzlaMDMxMTAvBgNV BAMTKEJGNUYxNzk4QjdGMUNFRkM0N0VCRkUwQjExNTAwMDBDQjQ3RkMzNkEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCvMNQMD++Wbi8XsdTHqLi27lUH bklxZOQB4/lWG+BYM8DVEGhG/YhUsjDtTg4+c+/gtCHQkGBGKvJpUUnXpcu3HphN ALij4aSCQCkM/vkOKVZJiFJ1j4whNQNK9jDZFI8+abpOKbzpeCE+f+sml6Ik7P4+ PRwV65Wd7/3fizM9qzhy+1hf+D5PukmonWW4EaeHDIYkvZHKepAtJdHX3y72hFCi Wmc+kaXjXFeI3+k/FPvuRuVzyrSiH1MR8avHLAeiICvFJfNSiKQVfoWF947YOnXm Ngehnz+qJisAYgerIKDiaWZMeA0UxQOH//jhSn+090wYKdFK9Xy4abAkyGDjAgMB AAGjggHnMIIB4zAdBgNVHQ4EFgQUv18XmLfxzvxH6/4LEVAADLR/w2owHwYDVR0j BBgwFoAUw89BiYk2y5xXPbHqq5TG5mmVH9cwDgYDVR0PAQH/BAQDAgeAMGQGA1Ud HwRdMFswWaBXoFWGU3JzeW5jOi8va3JpbGwuNDcyNzIubmV0L3JlcG8vSFlFSE9T VC81L0MzQ0Y0MTg5ODkzNkNCOUM1NzNEQjFFQUFCOTRDNkU2Njk5NTFGRDcuY3Js MIGTBggrBgEFBQcBAQSBhjCBgzCBgAYIKwYBBQUHMAKGdHJzeW5jOi8vcnBraS1y cHMuYXJpbi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZjg1MGQwNjNlMDE4NTc1NWM5 MWJlM2Y5ZC83L0MzQ0Y0MTg5ODkzNkNCOUM1NzNEQjFFQUFCOTRDNkU2Njk5NTFG RDcuY2VyME8GCCsGAQUFBwELBEMwQTA/BggrBgEFBQcwC4YzcnN5bmM6Ly9rcmls bC40NzI3Mi5uZXQvcmVwby9IWUVIT1NULzUvQVMyMTM3OTkucm9hMBgGA1UdIAEB /wQOMAwwCgYIKwYBBQUHDgIwKgYIKwYBBQUHAQcBAf8EGzAZMBcEAgACMBEDBwAq D2KAEIwDBgAqD2KALDANBgkqhkiG9w0BAQsFAAOCAQEAHZM0odDmTtcozOIv2W6j mwZjSaw85uzeuiGICMIXqLSBq+EL04AgQ2d9SmwNZTZrcNcuJsgpbGT52QelUPFe 2iIh38RDLfFJamP7jn2pQNdWpYy4qDRFOB7npov8KzA64KeMvmogwuqiy3vt4bWN v7xEAsr3GNL6iNc0BPL4qljbwWj0xiFDlI7xUTRcFt+5SH80BJnpQNapggC+xNlh 0M+LMXjq1xJaK4ao2LNAeyQbj6iJzbpKaao+o6mMcv3i6vSMkowiKnWkI8AmdnlC IOtH3BiCeKqYd0Zcd8ZvLdcwwL6UPhVSmpO90Fp12vEjlA4L24wIhAyUXsZqzgmF uw== -----END CERTIFICATE-----Generated at Sun Nov 15 10:40:44 2026 by rpki-client