$ rpki-client -vvf krill.47272.net/repo/HYEHOST/5/AS214848.roa File: AS214848.roa (raw, json) Hash identifier: oKr0+03MS+ez0D8KiTQSK5n5hRb0o8rthJXsptpdKZo= Subject key identifier: 20:D1:3B:D3:2A:8D:8B:05:5E:E6:DA:68:7B:2E:75:F3:32:6E:E7:BB Certificate issuer: /CN=C3CF41898936CB9C573DB1EAAB94C6E669951FD7 Certificate serial: 3F3A31ADCABC135F3843EE3B38E049A100487F0F Authority key identifier: C3:CF:41:89:89:36:CB:9C:57:3D:B1:EA:AB:94:C6:E6:69:95:1F:D7 Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer Subject info access: rsync://krill.47272.net/repo/HYEHOST/5/AS214848.roa Signing time: Thu 19 Mar 2026 08:00:35 +0000 ROA not before: Thu 19 Mar 2026 07:55:35 +0000 ROA not after: Thu 18 Mar 2027 08:00:35 +0000 asID: 214848 IP address blocks: 2a0f:6282:d000::/36 maxlen: 36 Validation: OK Signature path: rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.crl rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 26 Mar 2026 23:11:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3f:3a:31:ad:ca:bc:13:5f:38:43:ee:3b:38:e0:49:a1:00:48:7f:0f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C3CF41898936CB9C573DB1EAAB94C6E669951FD7 Validity Not Before: Mar 19 07:55:35 2026 GMT Not After : Mar 18 08:00:35 2027 GMT Subject: CN=20D13BD32A8D8B055EE6DA687B2E75F3326EE7BB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:2e:f4:37:f5:fc:14:4c:22:cf:3f:28:3d:0c: 14:6b:44:b9:f4:ac:70:48:6d:77:ae:52:ef:e7:77: 75:0a:b5:56:4a:45:9b:50:b9:93:16:5e:47:72:9c: 22:a9:22:f2:83:23:d0:e4:4b:ad:58:f6:c5:e8:f2: aa:79:92:7f:57:73:fc:76:fa:d5:a6:6a:54:5b:a6: 0e:2f:cb:d9:b0:7e:cf:c7:18:fe:27:e1:81:b7:cc: e6:df:d8:ab:e0:7f:cc:c0:12:bc:6e:79:f1:2b:a8: 0c:05:50:e4:15:29:20:4a:37:52:c9:f0:ba:74:47: bb:ea:0f:eb:20:1d:af:4b:86:75:3c:45:0c:e4:0b: 79:f9:07:8a:05:6f:67:32:bf:16:8c:2b:bc:84:0b: 6d:fe:0c:26:df:e5:56:40:34:38:3e:28:cd:c4:15: f1:dc:17:8a:53:70:ef:f8:b5:33:68:d2:24:6e:2e: 64:6f:09:31:9f:c1:fc:89:e4:cb:e2:44:04:2a:cf: af:c4:f6:fd:fa:02:45:17:33:33:a5:bf:b1:05:32: e8:ad:bf:81:be:43:c7:ae:57:cd:a5:ef:5e:a6:7c: 5f:d5:b7:46:8f:64:a0:75:30:1b:9e:37:6f:41:cb: d7:2e:37:f4:44:89:60:f6:14:c8:7b:bb:b7:29:34: 82:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:D1:3B:D3:2A:8D:8B:05:5E:E6:DA:68:7B:2E:75:F3:32:6E:E7:BB X509v3 Authority Key Identifier: keyid:C3:CF:41:89:89:36:CB:9C:57:3D:B1:EA:AB:94:C6:E6:69:95:1F:D7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer Subject Information Access: Signed Object - URI:rsync://krill.47272.net/repo/HYEHOST/5/AS214848.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0f:6282:d000::/36 Signature Algorithm: sha256WithRSAEncryption 59:e2:72:1e:ee:c4:81:8b:a2:06:6e:68:86:96:d3:90:7e:69: 6b:aa:63:93:9d:47:89:6a:bf:5c:50:3d:b2:b1:ac:cf:ed:c7: e4:db:af:42:7b:8e:54:9a:27:54:53:aa:eb:ab:95:65:d3:74: 51:7b:d1:9e:d4:f1:de:96:bd:1b:f2:18:6f:a6:ec:58:08:f6: a2:a1:b6:46:25:de:99:c0:15:68:ce:cb:3d:75:a0:3c:8e:27: bc:64:43:4c:11:3c:aa:9d:c6:2f:8c:c3:de:98:2d:74:bd:0f: 96:b8:0f:1f:3f:85:61:ca:34:f6:23:e9:cc:b0:fb:87:91:d5: 43:22:fa:12:a1:d4:44:0f:7b:3c:c1:ff:74:51:36:97:bc:e0: b9:25:d3:f4:4d:84:51:4d:27:a6:8b:9b:a6:fc:22:0f:b1:41: db:d8:09:45:6f:0a:95:c2:e0:ae:6e:73:d2:43:9d:14:df:2a: 80:72:52:af:c8:6b:e2:4c:48:d2:24:ae:a8:d1:82:76:48:97: 48:28:02:a9:e7:7f:8e:72:f3:33:3b:b8:45:ef:50:80:d4:f0: e6:01:70:58:f8:ae:77:09:1b:ae:dd:21:62:3f:dc:90:3c:bc: 76:04:32:14:a0:ab:23:25:70:96:c7:80:25:6d:d9:08:cf:70: 42:2e:ca:84 -----BEGIN CERTIFICATE----- MIIE1DCCA7ygAwIBAgIUPzoxrcq8E184Q+47OOBJoQBIfw8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzNDRjQxODk4OTM2Q0I5QzU3M0RCMUVBQUI5NEM2RTY2 OTk1MUZENzAeFw0yNjAzMTkwNzU1MzVaFw0yNzAzMTgwODAwMzVaMDMxMTAvBgNV BAMTKDIwRDEzQkQzMkE4RDhCMDU1RUU2REE2ODdCMkU3NUYzMzI2RUU3QkIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDILvQ39fwUTCLPPyg9DBRrRLn0 rHBIbXeuUu/nd3UKtVZKRZtQuZMWXkdynCKpIvKDI9DkS61Y9sXo8qp5kn9Xc/x2 +tWmalRbpg4vy9mwfs/HGP4n4YG3zObf2Kvgf8zAErxuefErqAwFUOQVKSBKN1LJ 8Lp0R7vqD+sgHa9LhnU8RQzkC3n5B4oFb2cyvxaMK7yEC23+DCbf5VZANDg+KM3E FfHcF4pTcO/4tTNo0iRuLmRvCTGfwfyJ5MviRAQqz6/E9v36AkUXMzOlv7EFMuit v4G+Q8euV82l716mfF/Vt0aPZKB1MBueN29By9cuN/REiWD2FMh7u7cpNIJ3AgMB AAGjggHeMIIB2jAdBgNVHQ4EFgQUINE70yqNiwVe5tpoey518zJu57swHwYDVR0j BBgwFoAUw89BiYk2y5xXPbHqq5TG5mmVH9cwDgYDVR0PAQH/BAQDAgeAMGQGA1Ud HwRdMFswWaBXoFWGU3JzeW5jOi8va3JpbGwuNDcyNzIubmV0L3JlcG8vSFlFSE9T VC81L0MzQ0Y0MTg5ODkzNkNCOUM1NzNEQjFFQUFCOTRDNkU2Njk5NTFGRDcuY3Js MIGTBggrBgEFBQcBAQSBhjCBgzCBgAYIKwYBBQUHMAKGdHJzeW5jOi8vcnBraS1y cHMuYXJpbi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZjg1MGQwNjNlMDE4NTc1NWM5 MWJlM2Y5ZC83L0MzQ0Y0MTg5ODkzNkNCOUM1NzNEQjFFQUFCOTRDNkU2Njk5NTFG RDcuY2VyME8GCCsGAQUFBwELBEMwQTA/BggrBgEFBQcwC4YzcnN5bmM6Ly9rcmls bC40NzI3Mi5uZXQvcmVwby9IWUVIT1NULzUvQVMyMTQ4NDgucm9hMBgGA1UdIAEB /wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgACMAgDBgQq D2KC0DANBgkqhkiG9w0BAQsFAAOCAQEAWeJyHu7EgYuiBm5ohpbTkH5pa6pjk51H iWq/XFA9srGsz+3H5NuvQnuOVJonVFOq66uVZdN0UXvRntTx3pa9G/IYb6bsWAj2 oqG2RiXemcAVaM7LPXWgPI4nvGRDTBE8qp3GL4zD3pgtdL0PlrgPHz+FYco09iPp zLD7h5HVQyL6EqHURA97PMH/dFE2l7zguSXT9E2EUU0npoubpvwiD7FB29gJRW8K lcLgrm5z0kOdFN8qgHJSr8hr4kxI0iSuqNGCdkiXSCgCqed/jnLzMzu4Re9QgNTw 5gFwWPiudwkbrt0hYj/ckDy8dgQyFKCrIyVwlseAJW3ZCM9wQi7KhA== -----END CERTIFICATE-----Generated at Thu Mar 26 05:30:39 2026 by rpki-client