Route Origin Authorization
$ rpki-client -vvf rsync.krill.nlnetlabs.nl/repo/nlnetlabs/1/3138352e34392e3134302e302f32332d3233203d3e2038353837.roa
File: 3138352e34392e3134302e302f32332d3233203d3e2038353837.roa (raw, json)
Hash identifier: U8+OIXzaopDuaYf7hsd7liluEK65HTMfxtzOs2eUutU=
Subject key identifier: E5:06:2A:D0:A8:61:87:A8:D4:90:9A:94:A5:13:1C:09:55:A8:90:0D
Certificate issuer: /CN=dc780d9935dabc701a4c4832b16c11d7743c399a
Certificate serial: 09DFEB8397CBC72D996C3EF8FC04A9FEF30D9BC1
Authority key identifier: DC:78:0D:99:35:DA:BC:70:1A:4C:48:32:B1:6C:11:D7:74:3C:39:9A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3HgNmTXavHAaTEgysWwR13Q8OZo.cer
Subject info access: rsync://rsync.krill.nlnetlabs.nl/repo/nlnetlabs/1/3138352e34392e3134302e302f32332d3233203d3e2038353837.roa
Signing time: Thu 02 Jul 2026 14:06:53 +0000
ROA not before: Thu 02 Jul 2026 14:01:53 +0000
ROA not after: Thu 01 Jul 2027 14:06:53 +0000
asID: 8587
IP address blocks: 185.49.140.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rsync.krill.nlnetlabs.nl/repo/nlnetlabs/1/DC780D9935DABC701A4C4832B16C11D7743C399A.crl
rsync://rsync.krill.nlnetlabs.nl/repo/nlnetlabs/1/DC780D9935DABC701A4C4832B16C11D7743C399A.mft
rsync://rpki.ripe.net/repository/DEFAULT/3HgNmTXavHAaTEgysWwR13Q8OZo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 19:53:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
09:df:eb:83:97:cb:c7:2d:99:6c:3e:f8:fc:04:a9:fe:f3:0d:9b:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc780d9935dabc701a4c4832b16c11d7743c399a
Validity
Not Before: Jul 2 14:01:53 2026 GMT
Not After : Jul 1 14:06:53 2027 GMT
Subject: CN=E5062AD0A86187A8D4909A94A5131C0955A8900D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:6a:e8:46:12:bc:5e:04:f5:75:f1:28:4c:88:
8b:70:cd:69:cb:1f:95:04:42:53:4f:0b:0a:88:51:
6a:c9:d2:7d:3d:ba:8b:52:61:76:b6:85:66:27:ca:
2a:9e:27:88:e5:67:34:74:33:fa:98:45:b3:d1:2f:
e8:42:be:2b:3c:e2:78:ba:de:cc:37:e9:24:6b:69:
5a:b0:d2:50:46:a6:df:90:57:c5:4f:ef:01:0b:e9:
b5:89:c2:96:ad:b1:5a:15:70:ca:36:96:f9:9f:83:
00:a4:d4:cc:cc:6b:13:51:c2:8a:9f:40:ef:1d:a9:
fa:32:53:52:fb:97:e8:22:1f:7b:f8:03:aa:51:38:
02:10:e8:5e:3d:34:6c:4d:33:75:53:e0:cd:68:50:
99:93:c7:32:3f:02:8f:d7:b2:b7:33:12:ed:68:bd:
6a:ac:06:91:2e:97:4e:02:48:11:8f:27:97:06:96:
57:2a:29:b1:2a:2d:36:bb:55:8c:c1:eb:df:7f:d3:
1a:ba:89:f6:8b:1c:7c:cb:9f:81:d6:a3:d4:3b:a1:
60:35:01:19:01:1a:cd:03:92:f9:7b:07:ec:66:7e:
fb:5c:c6:e0:9b:44:c3:0b:99:74:ad:71:b6:6f:2b:
c8:9e:31:a0:89:4b:03:2c:b8:63:5c:2e:e1:73:d2:
09:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:06:2A:D0:A8:61:87:A8:D4:90:9A:94:A5:13:1C:09:55:A8:90:0D
X509v3 Authority Key Identifier:
keyid:DC:78:0D:99:35:DA:BC:70:1A:4C:48:32:B1:6C:11:D7:74:3C:39:9A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.krill.nlnetlabs.nl/repo/nlnetlabs/1/DC780D9935DABC701A4C4832B16C11D7743C399A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3HgNmTXavHAaTEgysWwR13Q8OZo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.krill.nlnetlabs.nl/repo/nlnetlabs/1/3138352e34392e3134302e302f32332d3233203d3e2038353837.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.49.140.0/23
Signature Algorithm: sha256WithRSAEncryption
80:aa:b2:c9:2a:f3:02:5c:2e:21:3f:0e:9a:39:f7:f4:cf:c9:
33:12:08:67:77:26:1c:ac:6b:37:f5:91:e1:47:1b:b1:89:af:
e9:47:e0:ef:49:14:fa:50:76:ad:21:71:f1:b0:b2:62:41:6b:
e1:a0:13:5d:ab:18:60:e0:c4:bb:f8:f8:2b:90:b9:99:fd:a0:
f5:32:34:96:57:ed:c8:88:85:57:81:70:f3:10:6b:2c:9f:6a:
0c:96:23:e1:45:16:bd:c6:bd:1a:c5:7b:10:06:51:56:2a:1a:
f7:0d:90:64:c2:c0:6c:27:67:17:fb:2f:14:98:dc:76:c9:f9:
af:1d:91:25:31:71:4c:87:9d:3f:ba:74:6b:15:4b:aa:51:7d:
55:1e:83:be:04:32:b6:15:a8:13:5d:a0:6d:13:17:2b:18:e2:
60:10:1d:2d:f8:bc:00:8c:bb:14:f7:17:4c:41:9d:85:d9:f9:
c2:83:cf:d4:64:0a:80:d3:3f:8e:fa:87:5c:7c:66:3c:01:d0:
e4:21:7a:37:62:42:af:9f:34:f0:03:ee:8d:f7:d1:82:ff:c1:
68:3d:2f:c0:fd:80:a9:30:90:7a:dc:21:cf:a8:b9:3c:79:c4:
ab:5e:17:f0:d0:29:74:60:3e:cd:a5:6b:84:a2:9d:ea:64:6b:
78:90:9b:ac
-----BEGIN CERTIFICATE-----
MIIE5TCCA82gAwIBAgIUCd/rg5fLxy2ZbD74/ASp/vMNm8EwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoZGM3ODBkOTkzNWRhYmM3MDFhNGM0ODMyYjE2YzExZDc3
NDNjMzk5YTAeFw0yNjA3MDIxNDAxNTNaFw0yNzA3MDExNDA2NTNaMDMxMTAvBgNV
BAMTKEU1MDYyQUQwQTg2MTg3QThENDkwOUE5NEE1MTMxQzA5NTVBODkwMEQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCgauhGErxeBPV18ShMiItwzWnL
H5UEQlNPCwqIUWrJ0n09uotSYXa2hWYnyiqeJ4jlZzR0M/qYRbPRL+hCvis84ni6
3sw36SRraVqw0lBGpt+QV8VP7wEL6bWJwpatsVoVcMo2lvmfgwCk1MzMaxNRwoqf
QO8dqfoyU1L7l+giH3v4A6pROAIQ6F49NGxNM3VT4M1oUJmTxzI/Ao/XsrczEu1o
vWqsBpEul04CSBGPJ5cGllcqKbEqLTa7VYzB699/0xq6ifaLHHzLn4HWo9Q7oWA1
ARkBGs0Dkvl7B+xmfvtcxuCbRMMLmXStcbZvK8ieMaCJSwMsuGNcLuFz0glZAgMB
AAGjggHvMIIB6zAdBgNVHQ4EFgQU5QYq0Khhh6jUkJqUpRMcCVWokA0wHwYDVR0j
BBgwFoAU3HgNmTXavHAaTEgysWwR13Q8OZowDgYDVR0PAQH/BAQDAgeAMG8GA1Ud
HwRoMGYwZKBioGCGXnJzeW5jOi8vcnN5bmMua3JpbGwubmxuZXRsYWJzLm5sL3Jl
cG8vbmxuZXRsYWJzLzEvREM3ODBEOTkzNURBQkM3MDFBNEM0ODMyQjE2QzExRDc3
NDNDMzk5QS5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzov
L3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzNIZ05tVFhhdkhBYVRF
Z3lzV3dSMTNROE9aby5jZXIwgYYGCCsGAQUFBwELBHoweDB2BggrBgEFBQcwC4Zq
cnN5bmM6Ly9yc3luYy5rcmlsbC5ubG5ldGxhYnMubmwvcmVwby9ubG5ldGxhYnMv
MS8zMTM4MzUyZTM0MzkyZTMxMzQzMDJlMzAyZjMyMzMyZDMyMzMyMDNkM2UyMDM4
MzUzODM3LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQBuTGMMA0GCSqGSIb3DQEBCwUAA4IBAQCAqrLJKvMC
XC4hPw6aOff0z8kzEghndyYcrGs39ZHhRxuxia/pR+DvSRT6UHatIXHxsLJiQWvh
oBNdqxhg4MS7+PgrkLmZ/aD1MjSWV+3IiIVXgXDzEGssn2oMliPhRRa9xr0axXsQ
BlFWKhr3DZBkwsBsJ2cX+y8UmNx2yfmvHZElMXFMh50/unRrFUuqUX1VHoO+BDK2
FagTXaBtExcrGOJgEB0t+LwAjLsU9xdMQZ2F2fnCg8/UZAqA0z+O+odcfGY8AdDk
IXo3YkKvnzTwA+6N99GC/8FoPS/A/YCpMJB63CHPqLk8ecSrXhfw0Cl0YD7NpWuE
op3qZGt4kJus
-----END CERTIFICATE-----
Generated at Fri Jul 24 05:06:37 2026 by rpki-client