$ rpki-client -vvvf krill.47272.net/repo/HYEHOST/5/AS214172.roa File: AS214172.roa (raw, json) Hash identifier: Y/h51XdavODJA8ECDvXwY2Sn3E7D3LgO9dB0RRkMxIA= Subject key identifier: C1:59:4E:79:35:17:17:19:1F:A2:AA:1F:F0:0E:5B:58:3F:F9:E4:0F Certificate issuer: /CN=C3CF41898936CB9C573DB1EAAB94C6E669951FD7 Certificate serial: 644CAC0EEF79C77F91EDDDD21B9B72CFCC55E069 Authority key identifier: C3:CF:41:89:89:36:CB:9C:57:3D:B1:EA:AB:94:C6:E6:69:95:1F:D7 Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer Subject info access: rsync://krill.47272.net/repo/HYEHOST/5/AS214172.roa Signing time: Sun 08 Nov 2026 12:52:20 +0000 ROA not before: Sun 08 Nov 2026 12:47:20 +0000 ROA not after: Sun 07 Nov 2027 12:52:20 +0000 asID: 214172 IP address blocks: 2a0a:6044:6200::/40 maxlen: 40 Validation: OK Signature path: rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.crl rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 15 Nov 2026 17:01:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 64:4c:ac:0e:ef:79:c7:7f:91:ed:dd:d2:1b:9b:72:cf:cc:55:e0:69 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C3CF41898936CB9C573DB1EAAB94C6E669951FD7 Validity Not Before: Nov 8 12:47:20 2026 GMT Not After : Nov 7 12:52:20 2027 GMT Subject: CN=C1594E79351717191FA2AA1FF00E5B583FF9E40F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:bc:25:3e:8a:9d:3c:aa:cd:25:46:30:16:e7: 32:2f:81:9c:76:1c:9f:5e:2d:4e:e2:19:8a:8b:2c: be:1b:43:b1:45:f1:c9:73:f8:d5:b3:dd:5f:c8:be: 67:39:76:2e:97:ff:66:04:e5:d7:ce:5e:a8:f1:91: e3:c6:12:e8:87:9c:68:b7:06:f9:62:a3:f0:39:b4: 7b:db:b5:4d:75:8f:c6:0d:ae:a2:6b:ca:07:48:bf: c9:51:d6:22:05:07:a7:77:5a:0d:a7:0f:94:1c:97: 13:d9:12:f1:2b:b2:8c:d5:f0:a1:eb:02:a4:b3:45: b9:6c:39:a6:71:57:dd:86:4f:2a:32:cd:45:0e:0c: 35:c4:ef:ad:1c:1b:55:0e:ba:8e:c7:5c:af:3b:27: 1d:23:7a:ef:11:ee:b3:41:f1:2c:05:da:85:de:9a: bd:7b:48:db:96:70:31:3c:77:a6:ea:83:be:cd:46: ba:e1:9b:86:89:15:57:8f:06:d5:44:12:13:d6:c1: 4d:dc:0f:a4:3d:b2:fa:db:07:52:de:58:b9:af:46: ab:5c:f8:28:8c:25:c7:c7:8b:ca:64:5c:6d:33:03: 20:2c:af:1d:8a:c5:5b:b0:1a:c9:78:14:e4:31:58: 74:a2:c5:84:9c:e7:ca:bb:21:4b:4a:32:6f:77:68: 35:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:59:4E:79:35:17:17:19:1F:A2:AA:1F:F0:0E:5B:58:3F:F9:E4:0F X509v3 Authority Key Identifier: keyid:C3:CF:41:89:89:36:CB:9C:57:3D:B1:EA:AB:94:C6:E6:69:95:1F:D7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer Subject Information Access: Signed Object - URI:rsync://krill.47272.net/repo/HYEHOST/5/AS214172.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0a:6044:6200::/40 Signature Algorithm: sha256WithRSAEncryption 6d:49:a3:a4:a9:55:80:57:b0:e6:a8:6a:8a:37:f6:21:21:33: 62:1b:de:11:80:38:41:3d:ae:21:7a:f4:65:b9:dc:9b:28:5c: 7f:cc:e5:f2:22:1b:15:93:e4:1c:0a:e8:6a:4a:7a:47:e7:7c: c6:60:26:34:61:38:45:42:f7:cb:f9:91:39:88:e2:98:82:04: bf:0f:26:5a:5b:ad:40:1d:16:e1:b6:72:c9:27:de:5a:22:65: 24:af:8c:1e:74:47:4b:66:6a:a4:6b:1a:c3:f3:ed:fb:c7:51: 62:97:0e:5a:10:47:20:8a:85:a6:37:b8:99:31:e7:b5:a9:a4: 59:ea:58:f9:47:d7:f6:08:bd:08:c0:72:84:17:b7:ee:2d:1c: ab:60:71:2d:a0:31:f5:8c:f8:13:47:78:c5:2e:29:37:06:ff: 01:d2:6f:79:f2:1f:67:44:9a:e0:ee:b5:cc:c9:83:7e:e3:c6: 09:84:cc:52:b3:c1:5d:62:e1:fa:55:19:41:92:3f:af:b6:a1: 3e:20:c1:cf:1a:6d:c0:40:9e:1f:99:10:b1:9a:3d:b3:c2:6c: 14:4a:5b:3e:a9:a5:1e:84:05:ed:31:a4:3e:a7:be:1e:49:84: 74:7a:31:66:de:05:65:51:a7:f6:bf:52:96:be:d3:a4:7f:04: 5d:6a:ed:65 -----BEGIN CERTIFICATE----- MIIE1DCCA7ygAwIBAgIUZEysDu95x3+R7d3SG5tyz8xV4GkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzNDRjQxODk4OTM2Q0I5QzU3M0RCMUVBQUI5NEM2RTY2 OTk1MUZENzAeFw0yNjExMDgxMjQ3MjBaFw0yNzExMDcxMjUyMjBaMDMxMTAvBgNV BAMTKEMxNTk0RTc5MzUxNzE3MTkxRkEyQUExRkYwMEU1QjU4M0ZGOUU0MEYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCzvCU+ip08qs0lRjAW5zIvgZx2 HJ9eLU7iGYqLLL4bQ7FF8clz+NWz3V/Ivmc5di6X/2YE5dfOXqjxkePGEuiHnGi3 Bvlio/A5tHvbtU11j8YNrqJrygdIv8lR1iIFB6d3Wg2nD5QclxPZEvErsozV8KHr AqSzRblsOaZxV92GTyoyzUUODDXE760cG1UOuo7HXK87Jx0jeu8R7rNB8SwF2oXe mr17SNuWcDE8d6bqg77NRrrhm4aJFVePBtVEEhPWwU3cD6Q9svrbB1LeWLmvRqtc +CiMJcfHi8pkXG0zAyAsrx2KxVuwGsl4FOQxWHSixYSc58q7IUtKMm93aDVRAgMB AAGjggHeMIIB2jAdBgNVHQ4EFgQUwVlOeTUXFxkfoqof8A5bWD/55A8wHwYDVR0j BBgwFoAUw89BiYk2y5xXPbHqq5TG5mmVH9cwDgYDVR0PAQH/BAQDAgeAMGQGA1Ud HwRdMFswWaBXoFWGU3JzeW5jOi8va3JpbGwuNDcyNzIubmV0L3JlcG8vSFlFSE9T VC81L0MzQ0Y0MTg5ODkzNkNCOUM1NzNEQjFFQUFCOTRDNkU2Njk5NTFGRDcuY3Js MIGTBggrBgEFBQcBAQSBhjCBgzCBgAYIKwYBBQUHMAKGdHJzeW5jOi8vcnBraS1y cHMuYXJpbi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZjg1MGQwNjNlMDE4NTc1NWM5 MWJlM2Y5ZC83L0MzQ0Y0MTg5ODkzNkNCOUM1NzNEQjFFQUFCOTRDNkU2Njk5NTFG RDcuY2VyME8GCCsGAQUFBwELBEMwQTA/BggrBgEFBQcwC4YzcnN5bmM6Ly9rcmls bC40NzI3Mi5uZXQvcmVwby9IWUVIT1NULzUvQVMyMTQxNzIucm9hMBgGA1UdIAEB /wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgACMAgDBgAq CmBEYjANBgkqhkiG9w0BAQsFAAOCAQEAbUmjpKlVgFew5qhqijf2ISEzYhveEYA4 QT2uIXr0Zbncmyhcf8zl8iIbFZPkHAroakp6R+d8xmAmNGE4RUL3y/mROYjimIIE vw8mWlutQB0W4bZyySfeWiJlJK+MHnRHS2ZqpGsaw/Pt+8dRYpcOWhBHIIqFpje4 mTHntamkWepY+UfX9gi9CMByhBe37i0cq2BxLaAx9Yz4E0d4xS4pNwb/AdJvefIf Z0Sa4O61zMmDfuPGCYTMUrPBXWLh+lUZQZI/r7ahPiDBzxptwECeH5kQsZo9s8Js FEpbPqmlHoQF7TGkPqe+HkmEdHoxZt4FZVGn9r9Slr7TpH8EXWrtZQ== -----END CERTIFICATE-----Generated at Sun Nov 15 01:00:56 2026 by rpki-client