$ rpki-client -vvf krill.47272.net/repo/HYEHOST/5/AS214299.roa File: AS214299.roa (raw, json) Hash identifier: EhN3NwDd4nOrGz5ghT3xV9t9wtrcml/cPcCdmjQXSRQ= Subject key identifier: AD:12:1E:AC:95:DA:8C:69:F6:88:1B:F5:CA:7F:EB:EE:57:40:2C:6A Certificate issuer: /CN=C3CF41898936CB9C573DB1EAAB94C6E669951FD7 Certificate serial: 7464C8551D7A9025B0E4CC80E5A48C3BD5B708A0 Authority key identifier: C3:CF:41:89:89:36:CB:9C:57:3D:B1:EA:AB:94:C6:E6:69:95:1F:D7 Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer Subject info access: rsync://krill.47272.net/repo/HYEHOST/5/AS214299.roa Signing time: Wed 29 Apr 2026 08:00:20 +0000 ROA not before: Wed 29 Apr 2026 07:55:20 +0000 ROA not after: Wed 28 Apr 2027 08:00:20 +0000 asID: 214299 IP address blocks: 2a05:dfc3:fd40::/44 maxlen: 52 2a05:dfc3:fd40::/48 maxlen: 48 Validation: OK Signature path: rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.crl rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 13 May 2026 14:18:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 74:64:c8:55:1d:7a:90:25:b0:e4:cc:80:e5:a4:8c:3b:d5:b7:08:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C3CF41898936CB9C573DB1EAAB94C6E669951FD7 Validity Not Before: Apr 29 07:55:20 2026 GMT Not After : Apr 28 08:00:20 2027 GMT Subject: CN=AD121EAC95DA8C69F6881BF5CA7FEBEE57402C6A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:87:a2:c7:a5:4d:18:94:4f:34:c4:0c:fb:5f: d2:13:e8:19:27:b8:38:56:51:0f:c6:25:46:8a:47: 00:f2:05:d3:07:16:39:09:4b:d8:e4:ae:a4:31:cc: 0a:66:45:d1:0f:b8:39:9a:24:33:69:9c:61:03:20: 8c:2d:33:b2:55:7b:cb:0d:67:b1:83:ac:74:c3:96: c6:dd:ba:fe:4d:e7:f3:22:df:00:e4:21:5f:4f:2f: 46:a0:b2:0e:fa:4b:00:0e:b2:f8:f1:b9:20:75:39: 2a:77:f6:37:0e:70:6c:e0:4f:ad:27:dd:1e:e2:84: 7e:64:89:79:2a:fd:5a:fe:75:82:a3:70:5d:e9:13: 01:44:3e:ec:a5:c6:8b:77:b5:bc:09:85:f0:ae:65: 7d:bd:3e:c4:a3:42:fc:7f:0f:71:79:8d:ee:2d:82: f7:96:f0:87:c5:30:14:ee:3d:a4:6f:f3:c9:83:1e: 81:cf:93:b1:70:6a:0a:7c:b8:f4:3e:0f:8d:9a:2a: 52:b3:9a:d0:ab:bf:8e:7f:88:e2:b0:e1:24:de:d8: 90:59:90:79:58:39:60:a8:24:08:a6:47:55:49:0a: 99:c4:2e:07:c5:d3:b6:19:d0:2c:c9:49:5c:a4:23: d9:a6:6c:d3:86:bb:39:29:f1:9a:6c:b2:64:7c:16: 20:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:12:1E:AC:95:DA:8C:69:F6:88:1B:F5:CA:7F:EB:EE:57:40:2C:6A X509v3 Authority Key Identifier: keyid:C3:CF:41:89:89:36:CB:9C:57:3D:B1:EA:AB:94:C6:E6:69:95:1F:D7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer Subject Information Access: Signed Object - URI:rsync://krill.47272.net/repo/HYEHOST/5/AS214299.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a05:dfc3:fd40::/44 Signature Algorithm: sha256WithRSAEncryption 0b:dd:9d:38:9b:d4:27:ee:7a:89:eb:0a:4c:81:34:67:1d:32: 17:8a:f2:d9:9e:9c:9a:36:77:a1:28:3f:ba:09:8a:c2:60:12: 7c:32:36:8b:62:6c:11:c1:17:e8:6e:35:a1:3b:9c:64:8c:83: 9d:0a:08:e0:0b:42:63:7a:ab:81:9e:89:8a:6a:1a:4f:bc:49: cd:d9:ec:39:89:47:26:9c:f6:42:1c:bc:16:cf:d7:e0:0c:94: 9f:ff:b9:d7:bf:41:d5:da:06:53:2b:93:b9:82:71:e9:b0:9c: bc:84:6e:9b:5f:f1:bb:8b:77:7a:36:ff:ff:d9:ae:1b:f5:a7: 5f:20:01:e7:22:6a:66:31:bc:4f:64:a4:14:ce:38:31:c7:2b: c1:40:b8:71:cd:2a:09:79:c8:25:9f:9c:19:b3:36:cb:d9:d5: 5e:66:ac:9e:05:79:41:07:ee:0a:35:6b:49:2a:14:dc:54:27: 29:ea:4c:14:e2:29:8d:40:da:34:a6:74:b0:ea:74:31:96:f5: 27:6f:3a:6f:a6:61:2d:7c:8e:d5:39:6a:42:84:e0:6c:40:4c: 31:3d:70:21:bb:ff:1b:a0:ef:47:22:dc:74:d5:92:5b:c4:63: 52:de:16:1e:54:c4:ac:49:44:d6:70:70:45:2f:32:76:89:9d: 8e:ab:30:af -----BEGIN CERTIFICATE----- MIIE1TCCA72gAwIBAgIUdGTIVR16kCWw5MyA5aSMO9W3CKAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzNDRjQxODk4OTM2Q0I5QzU3M0RCMUVBQUI5NEM2RTY2 OTk1MUZENzAeFw0yNjA0MjkwNzU1MjBaFw0yNzA0MjgwODAwMjBaMDMxMTAvBgNV BAMTKEFEMTIxRUFDOTVEQThDNjlGNjg4MUJGNUNBN0ZFQkVFNTc0MDJDNkEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCuh6LHpU0YlE80xAz7X9IT6Bkn uDhWUQ/GJUaKRwDyBdMHFjkJS9jkrqQxzApmRdEPuDmaJDNpnGEDIIwtM7JVe8sN Z7GDrHTDlsbduv5N5/Mi3wDkIV9PL0agsg76SwAOsvjxuSB1OSp39jcOcGzgT60n 3R7ihH5kiXkq/Vr+dYKjcF3pEwFEPuylxot3tbwJhfCuZX29PsSjQvx/D3F5je4t gveW8IfFMBTuPaRv88mDHoHPk7Fwagp8uPQ+D42aKlKzmtCrv45/iOKw4STe2JBZ kHlYOWCoJAimR1VJCpnELgfF07YZ0CzJSVykI9mmbNOGuzkp8ZpssmR8FiBXAgMB AAGjggHfMIIB2zAdBgNVHQ4EFgQUrRIerJXajGn2iBv1yn/r7ldALGowHwYDVR0j BBgwFoAUw89BiYk2y5xXPbHqq5TG5mmVH9cwDgYDVR0PAQH/BAQDAgeAMGQGA1Ud HwRdMFswWaBXoFWGU3JzeW5jOi8va3JpbGwuNDcyNzIubmV0L3JlcG8vSFlFSE9T VC81L0MzQ0Y0MTg5ODkzNkNCOUM1NzNEQjFFQUFCOTRDNkU2Njk5NTFGRDcuY3Js MIGTBggrBgEFBQcBAQSBhjCBgzCBgAYIKwYBBQUHMAKGdHJzeW5jOi8vcnBraS1y cHMuYXJpbi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZjg1MGQwNjNlMDE4NTc1NWM5 MWJlM2Y5ZC83L0MzQ0Y0MTg5ODkzNkNCOUM1NzNEQjFFQUFCOTRDNkU2Njk5NTFG RDcuY2VyME8GCCsGAQUFBwELBEMwQTA/BggrBgEFBQcwC4YzcnN5bmM6Ly9rcmls bC40NzI3Mi5uZXQvcmVwby9IWUVIT1NULzUvQVMyMTQyOTkucm9hMBgGA1UdIAEB /wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwQq Bd/D/UAwDQYJKoZIhvcNAQELBQADggEBAAvdnTib1CfueonrCkyBNGcdMheK8tme nJo2d6EoP7oJisJgEnwyNotibBHBF+huNaE7nGSMg50KCOALQmN6q4GeiYpqGk+8 Sc3Z7DmJRyac9kIcvBbP1+AMlJ//ude/QdXaBlMrk7mCcemwnLyEbptf8buLd3o2 ///Zrhv1p18gAeciamYxvE9kpBTOODHHK8FAuHHNKgl5yCWfnBmzNsvZ1V5mrJ4F eUEH7go1a0kqFNxUJynqTBTiKY1A2jSmdLDqdDGW9SdvOm+mYS18jtU5akKE4GxA TDE9cCG7/xug70ci3HTVklvEY1LeFh5UxKxJRNZwcEUvMnaJnY6rMK8= -----END CERTIFICATE-----Generated at Wed May 13 00:28:40 2026 by rpki-client