$ rpki-client -vvf krill.47272.net/repo/HYEHOST/5/AS219207.roa File: AS219207.roa (raw, json) Hash identifier: 0b6DTV+H1JaSmC579phCup57uvTtU25OGO7X6Bfz0z8= Subject key identifier: D4:3C:AE:82:AE:A5:CE:C7:2F:5E:82:74:5E:71:6A:6D:04:41:A2:0D Certificate issuer: /CN=C3CF41898936CB9C573DB1EAAB94C6E669951FD7 Certificate serial: 6B849EB7694DBE5287D1A10E424BE543C100D3A7 Authority key identifier: C3:CF:41:89:89:36:CB:9C:57:3D:B1:EA:AB:94:C6:E6:69:95:1F:D7 Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer Subject info access: rsync://krill.47272.net/repo/HYEHOST/5/AS219207.roa Signing time: Wed 22 Jul 2026 17:00:14 +0000 ROA not before: Wed 22 Jul 2026 16:55:14 +0000 ROA not after: Wed 21 Jul 2027 17:00:14 +0000 asID: 219207 IP address blocks: 2a0f:6280:f000::/36 maxlen: 48 Validation: OK Signature path: rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.crl rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 24 Jul 2026 12:59:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6b:84:9e:b7:69:4d:be:52:87:d1:a1:0e:42:4b:e5:43:c1:00:d3:a7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C3CF41898936CB9C573DB1EAAB94C6E669951FD7 Validity Not Before: Jul 22 16:55:14 2026 GMT Not After : Jul 21 17:00:14 2027 GMT Subject: CN=D43CAE82AEA5CEC72F5E82745E716A6D0441A20D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:39:83:1e:22:54:7c:ee:73:dd:c4:e1:1b:19: 8b:b2:dd:4b:96:0a:b3:71:bb:ac:ed:80:7b:43:c3: c5:df:c2:2e:ef:19:01:57:f3:eb:04:6e:12:ed:86: 6b:05:b4:94:ca:74:dd:c6:b4:ed:8d:be:de:b5:14: b4:b3:8f:84:e4:e6:26:be:a2:dc:60:35:54:f8:57: 6d:5c:19:c5:8a:e8:03:f7:e3:24:b0:9d:cd:7b:bf: 0c:be:72:a2:99:41:b8:0e:43:4b:3e:90:bf:44:f0: 45:4c:e4:19:18:a9:b1:10:b3:94:3b:ee:84:5b:cd: c5:96:cd:4c:23:14:8f:3b:48:0f:d1:30:8b:48:63: 9e:eb:09:16:3d:0d:21:f6:69:41:ec:7c:be:3a:f9: ec:17:db:81:bb:b5:85:74:4b:c2:ab:ca:89:d7:41: 14:a9:ce:34:8f:dc:8f:90:66:1f:10:6d:ca:f2:62: ad:ad:ec:d2:22:d7:71:c7:cc:86:25:8b:fc:e4:0e: 72:65:51:ed:1c:40:6a:ce:bb:89:fb:36:96:9d:9d: 87:e6:3e:23:34:4d:10:17:a2:95:ae:9e:7d:98:44: d6:1d:d3:f5:0a:2d:95:6e:fa:fb:df:63:f1:4e:88: b4:ac:eb:43:b8:91:46:45:14:99:af:11:e4:18:a2: 7c:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:3C:AE:82:AE:A5:CE:C7:2F:5E:82:74:5E:71:6A:6D:04:41:A2:0D X509v3 Authority Key Identifier: keyid:C3:CF:41:89:89:36:CB:9C:57:3D:B1:EA:AB:94:C6:E6:69:95:1F:D7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer Subject Information Access: Signed Object - URI:rsync://krill.47272.net/repo/HYEHOST/5/AS219207.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0f:6280:f000::/36 Signature Algorithm: sha256WithRSAEncryption 62:79:e5:f0:fe:2d:f9:27:dd:d5:31:58:bf:10:d9:16:c1:d3: ca:c7:ef:26:90:26:3f:5f:f9:29:a7:f2:14:f7:50:a3:c8:58: b3:31:dc:35:41:76:29:c6:bb:45:85:47:67:ab:fb:51:30:3c: fe:1f:b9:f6:eb:8c:eb:90:fa:09:5a:99:b0:73:40:b8:f5:0f: f3:76:b3:19:80:f5:fa:e4:f3:65:a1:28:0b:35:96:4c:25:4b: ca:70:36:d9:e6:5d:ae:39:91:0d:97:40:f8:58:58:37:89:f3: f4:38:79:ee:98:76:f4:44:9e:e8:73:77:e1:c8:9d:35:11:b5: 25:1a:75:a0:fc:36:a2:a3:57:d0:50:0b:42:01:3a:da:44:2f: 2c:b1:cb:b0:ee:17:0a:6c:a7:1b:19:ed:20:55:99:96:23:f2: b1:1e:65:dc:36:e5:c3:25:2d:d3:3d:d6:95:cd:d6:81:ff:62: d1:7e:27:a1:10:d3:9b:5d:2b:b0:11:ce:1c:f8:e7:8b:44:11: e8:df:33:53:b3:f5:e0:31:8a:0c:fa:a1:13:55:ec:97:bd:33: 55:0e:b8:5a:be:fb:41:6d:1a:dc:48:ea:e5:e3:69:b1:b7:eb: 8d:0d:a7:d2:a6:20:ba:3d:2c:cc:3e:1d:06:f0:be:e1:4e:d6: e3:3b:80:83 -----BEGIN CERTIFICATE----- MIIE1DCCA7ygAwIBAgIUa4Set2lNvlKH0aEOQkvlQ8EA06cwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzNDRjQxODk4OTM2Q0I5QzU3M0RCMUVBQUI5NEM2RTY2 OTk1MUZENzAeFw0yNjA3MjIxNjU1MTRaFw0yNzA3MjExNzAwMTRaMDMxMTAvBgNV BAMTKEQ0M0NBRTgyQUVBNUNFQzcyRjVFODI3NDVFNzE2QTZEMDQ0MUEyMEQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCeOYMeIlR87nPdxOEbGYuy3UuW CrNxu6ztgHtDw8Xfwi7vGQFX8+sEbhLthmsFtJTKdN3GtO2Nvt61FLSzj4Tk5ia+ otxgNVT4V21cGcWK6AP34ySwnc17vwy+cqKZQbgOQ0s+kL9E8EVM5BkYqbEQs5Q7 7oRbzcWWzUwjFI87SA/RMItIY57rCRY9DSH2aUHsfL46+ewX24G7tYV0S8KryonX QRSpzjSP3I+QZh8QbcryYq2t7NIi13HHzIYli/zkDnJlUe0cQGrOu4n7NpadnYfm PiM0TRAXopWunn2YRNYd0/UKLZVu+vvfY/FOiLSs60O4kUZFFJmvEeQYonzhAgMB AAGjggHeMIIB2jAdBgNVHQ4EFgQU1Dyugq6lzscvXoJ0XnFqbQRBog0wHwYDVR0j BBgwFoAUw89BiYk2y5xXPbHqq5TG5mmVH9cwDgYDVR0PAQH/BAQDAgeAMGQGA1Ud HwRdMFswWaBXoFWGU3JzeW5jOi8va3JpbGwuNDcyNzIubmV0L3JlcG8vSFlFSE9T VC81L0MzQ0Y0MTg5ODkzNkNCOUM1NzNEQjFFQUFCOTRDNkU2Njk5NTFGRDcuY3Js MIGTBggrBgEFBQcBAQSBhjCBgzCBgAYIKwYBBQUHMAKGdHJzeW5jOi8vcnBraS1y cHMuYXJpbi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZjg1MGQwNjNlMDE4NTc1NWM5 MWJlM2Y5ZC83L0MzQ0Y0MTg5ODkzNkNCOUM1NzNEQjFFQUFCOTRDNkU2Njk5NTFG RDcuY2VyME8GCCsGAQUFBwELBEMwQTA/BggrBgEFBQcwC4YzcnN5bmM6Ly9rcmls bC40NzI3Mi5uZXQvcmVwby9IWUVIT1NULzUvQVMyMTkyMDcucm9hMBgGA1UdIAEB /wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgACMAgDBgQq D2KA8DANBgkqhkiG9w0BAQsFAAOCAQEAYnnl8P4t+Sfd1TFYvxDZFsHTysfvJpAm P1/5KafyFPdQo8hYszHcNUF2Kca7RYVHZ6v7UTA8/h+59uuM65D6CVqZsHNAuPUP 83azGYD1+uTzZaEoCzWWTCVLynA22eZdrjmRDZdA+FhYN4nz9Dh57ph29ESe6HN3 4cidNRG1JRp1oPw2oqNX0FALQgE62kQvLLHLsO4XCmynGxntIFWZliPysR5l3Dbl wyUt0z3Wlc3Wgf9i0X4noRDTm10rsBHOHPjni0QR6N8zU7P14DGKDPqhE1Xsl70z VQ64Wr77QW0a3Ejq5eNpsbfrjQ2n0qYguj0szD4dBvC+4U7W4zuAgw== -----END CERTIFICATE-----Generated at Thu Jul 23 23:45:09 2026 by rpki-client