$ rpki-client -vvf krill.47272.net/repo/HYEHOST/5/AS215607.roa File: AS215607.roa (raw, json) Hash identifier: +aozPJuND2A+AgwWPGrP5FCRczeK40elc5250ZrvRqk= Subject key identifier: 82:9C:B0:D1:9D:06:78:8E:13:41:5E:25:33:64:29:D9:39:FB:48:7F Certificate issuer: /CN=C3CF41898936CB9C573DB1EAAB94C6E669951FD7 Certificate serial: 79AB5615ABBF229F15F3C1A7CE538EA9A8881C42 Authority key identifier: C3:CF:41:89:89:36:CB:9C:57:3D:B1:EA:AB:94:C6:E6:69:95:1F:D7 Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer Subject info access: rsync://krill.47272.net/repo/HYEHOST/5/AS215607.roa Signing time: Sun 28 Jun 2026 18:55:30 +0000 ROA not before: Sun 28 Jun 2026 18:50:30 +0000 ROA not after: Sun 27 Jun 2027 18:55:30 +0000 asID: 215607 IP address blocks: 2a0f:6284:2::/48 maxlen: 48 Validation: OK Signature path: rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.crl rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 24 Jul 2026 12:59:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 79:ab:56:15:ab:bf:22:9f:15:f3:c1:a7:ce:53:8e:a9:a8:88:1c:42 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C3CF41898936CB9C573DB1EAAB94C6E669951FD7 Validity Not Before: Jun 28 18:50:30 2026 GMT Not After : Jun 27 18:55:30 2027 GMT Subject: CN=829CB0D19D06788E13415E25336429D939FB487F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:c1:1a:cf:f7:6c:18:66:35:35:0d:51:da:f9: 4c:64:0e:69:7a:0c:df:ab:22:00:ed:a6:73:9f:7d: b9:b5:e1:9a:75:0f:4b:36:8b:d8:f0:c8:99:8c:d0: 77:cd:4c:c4:0b:b8:85:69:db:a9:ea:47:6d:c1:67: 2f:80:8d:ad:54:ae:62:e5:6e:64:e0:42:18:56:c0: b9:e4:5d:61:8c:14:8c:df:cd:d2:92:f0:83:67:90: a0:5b:ab:07:1f:9a:91:8b:9c:42:fa:57:71:4b:72: 89:63:72:2a:d3:a9:7c:0f:fd:31:1f:df:4f:d3:9a: 5a:c6:39:7a:ee:c6:8a:92:33:cc:9d:32:28:2d:07: e5:ce:4c:27:98:00:51:92:f7:da:4d:c6:f9:cf:66: f5:ce:c6:32:2b:0f:2d:7c:c6:e7:e8:8a:61:e4:c7: 70:98:66:8d:09:cb:6a:cf:5a:9c:11:4d:f8:5f:a6: b3:ae:67:d2:b2:12:29:da:cc:2a:37:08:84:eb:98: ba:7b:28:d1:ce:2a:e1:83:0e:ac:a6:a3:9f:28:84: 62:a4:d1:f2:69:7b:2a:33:d6:15:54:58:49:4a:5b: 31:81:49:0c:d2:21:5f:4b:c8:47:67:a4:4e:b6:33: b7:9e:0d:d3:a0:62:95:2c:1d:a4:22:cb:09:d1:23: c0:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:9C:B0:D1:9D:06:78:8E:13:41:5E:25:33:64:29:D9:39:FB:48:7F X509v3 Authority Key Identifier: keyid:C3:CF:41:89:89:36:CB:9C:57:3D:B1:EA:AB:94:C6:E6:69:95:1F:D7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer Subject Information Access: Signed Object - URI:rsync://krill.47272.net/repo/HYEHOST/5/AS215607.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0f:6284:2::/48 Signature Algorithm: sha256WithRSAEncryption 26:b5:c5:5d:77:e9:0d:e0:a7:60:ef:b7:d8:4e:9b:0a:68:af: a7:a8:d0:65:f3:46:20:5a:22:ac:ff:e5:dc:d0:9f:02:db:bb: a4:f1:01:63:1c:19:64:67:cd:65:74:89:88:2b:53:bb:af:9d: 3e:70:80:5b:ec:83:5f:3d:9d:06:4c:b6:1a:7e:6c:6b:da:0e: 2d:8d:c4:2d:2b:3a:69:91:3f:0e:6a:41:4e:67:5b:34:8a:e3: 01:21:23:76:f9:b8:0b:86:37:e5:7a:67:c5:f3:bc:18:31:a3: 32:f2:7a:f5:1f:42:43:2a:88:98:2e:01:01:97:5f:1e:13:ce: ae:09:da:29:b3:2c:b3:b5:47:b2:93:f6:23:e0:bd:11:ef:8a: 5e:1d:a9:ca:a3:22:e6:ab:5c:9b:13:43:dd:f0:e3:42:a9:cb: 8b:79:d7:17:b9:af:62:b5:62:14:ed:e3:af:d4:5e:c6:a0:78: e7:c0:eb:3a:91:db:a9:1f:a5:30:4b:3e:c3:ef:82:33:c3:16: c4:e3:aa:39:ad:d4:ae:dd:9b:af:90:cb:5f:f8:3e:3d:16:b3: f7:e6:28:8b:a7:82:f7:32:bb:d4:61:a7:4b:f2:fd:41:3d:65: 07:99:2a:73:22:77:89:c4:b5:ac:30:3a:9c:9d:46:00:af:5d: 81:ff:e9:93 -----BEGIN CERTIFICATE----- MIIE1TCCA72gAwIBAgIUeatWFau/Ip8V88GnzlOOqaiIHEIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzNDRjQxODk4OTM2Q0I5QzU3M0RCMUVBQUI5NEM2RTY2 OTk1MUZENzAeFw0yNjA2MjgxODUwMzBaFw0yNzA2MjcxODU1MzBaMDMxMTAvBgNV BAMTKDgyOUNCMEQxOUQwNjc4OEUxMzQxNUUyNTMzNjQyOUQ5MzlGQjQ4N0YwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCmwRrP92wYZjU1DVHa+UxkDml6 DN+rIgDtpnOffbm14Zp1D0s2i9jwyJmM0HfNTMQLuIVp26nqR23BZy+Aja1UrmLl bmTgQhhWwLnkXWGMFIzfzdKS8INnkKBbqwcfmpGLnEL6V3FLcoljcirTqXwP/TEf 30/TmlrGOXruxoqSM8ydMigtB+XOTCeYAFGS99pNxvnPZvXOxjIrDy18xufoimHk x3CYZo0Jy2rPWpwRTfhfprOuZ9KyEinazCo3CITrmLp7KNHOKuGDDqymo58ohGKk 0fJpeyoz1hVUWElKWzGBSQzSIV9LyEdnpE62M7eeDdOgYpUsHaQiywnRI8C7AgMB AAGjggHfMIIB2zAdBgNVHQ4EFgQUgpyw0Z0GeI4TQV4lM2Qp2Tn7SH8wHwYDVR0j BBgwFoAUw89BiYk2y5xXPbHqq5TG5mmVH9cwDgYDVR0PAQH/BAQDAgeAMGQGA1Ud HwRdMFswWaBXoFWGU3JzeW5jOi8va3JpbGwuNDcyNzIubmV0L3JlcG8vSFlFSE9T VC81L0MzQ0Y0MTg5ODkzNkNCOUM1NzNEQjFFQUFCOTRDNkU2Njk5NTFGRDcuY3Js MIGTBggrBgEFBQcBAQSBhjCBgzCBgAYIKwYBBQUHMAKGdHJzeW5jOi8vcnBraS1y cHMuYXJpbi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZjg1MGQwNjNlMDE4NTc1NWM5 MWJlM2Y5ZC83L0MzQ0Y0MTg5ODkzNkNCOUM1NzNEQjFFQUFCOTRDNkU2Njk5NTFG RDcuY2VyME8GCCsGAQUFBwELBEMwQTA/BggrBgEFBQcwC4YzcnN5bmM6Ly9rcmls bC40NzI3Mi5uZXQvcmVwby9IWUVIT1NULzUvQVMyMTU2MDcucm9hMBgGA1UdIAEB /wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwAq D2KEAAIwDQYJKoZIhvcNAQELBQADggEBACa1xV136Q3gp2Dvt9hOmwpor6eo0GXz RiBaIqz/5dzQnwLbu6TxAWMcGWRnzWV0iYgrU7uvnT5wgFvsg189nQZMthp+bGva Di2NxC0rOmmRPw5qQU5nWzSK4wEhI3b5uAuGN+V6Z8XzvBgxozLyevUfQkMqiJgu AQGXXx4Tzq4J2imzLLO1R7KT9iPgvRHvil4dqcqjIuarXJsTQ93w40Kpy4t51xe5 r2K1YhTt46/UXsageOfA6zqR26kfpTBLPsPvgjPDFsTjqjmt1K7dm6+Qy1/4Pj0W s/fmKIungvcyu9Rhp0vy/UE9ZQeZKnMid4nEtawwOpydRgCvXYH/6ZM= -----END CERTIFICATE-----Generated at Fri Jul 24 02:24:16 2026 by rpki-client