Route Origin Authorization
$ rpki-client -vvf rsync.krill.nlnetlabs.nl/repo/nlnetlabs/1/3138352e34392e3134322e302f32332d3233203d3e20323131333231.roa
File: 3138352e34392e3134322e302f32332d3233203d3e20323131333231.roa (raw, json)
Hash identifier: G71RBaKhsjP596XjbfAcbZmTzgSOwVARGZ/mPeB9am8=
Subject key identifier: 76:22:A9:7B:F1:C1:FC:E6:F2:69:DE:85:AF:48:64:40:7D:5A:D1:1F
Certificate issuer: /CN=dc780d9935dabc701a4c4832b16c11d7743c399a
Certificate serial: 3952F8169F6A6C6E0A0D878D637D6B11A99247C2
Authority key identifier: DC:78:0D:99:35:DA:BC:70:1A:4C:48:32:B1:6C:11:D7:74:3C:39:9A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3HgNmTXavHAaTEgysWwR13Q8OZo.cer
Subject info access: rsync://rsync.krill.nlnetlabs.nl/repo/nlnetlabs/1/3138352e34392e3134322e302f32332d3233203d3e20323131333231.roa
Signing time: Thu 02 Jul 2026 14:06:54 +0000
ROA not before: Thu 02 Jul 2026 14:01:54 +0000
ROA not after: Thu 01 Jul 2027 14:06:54 +0000
asID: 211321
IP address blocks: 185.49.142.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rsync.krill.nlnetlabs.nl/repo/nlnetlabs/1/DC780D9935DABC701A4C4832B16C11D7743C399A.crl
rsync://rsync.krill.nlnetlabs.nl/repo/nlnetlabs/1/DC780D9935DABC701A4C4832B16C11D7743C399A.mft
rsync://rpki.ripe.net/repository/DEFAULT/3HgNmTXavHAaTEgysWwR13Q8OZo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 19:53:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
39:52:f8:16:9f:6a:6c:6e:0a:0d:87:8d:63:7d:6b:11:a9:92:47:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc780d9935dabc701a4c4832b16c11d7743c399a
Validity
Not Before: Jul 2 14:01:54 2026 GMT
Not After : Jul 1 14:06:54 2027 GMT
Subject: CN=7622A97BF1C1FCE6F269DE85AF4864407D5AD11F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:aa:57:cf:24:70:07:c8:0a:dd:27:45:57:a1:
6c:ec:a6:a3:03:90:1b:e9:5d:95:d6:8d:3f:39:c0:
67:c2:9b:4e:e3:40:7f:bf:37:a7:51:5c:c6:8e:4a:
96:ce:d7:69:41:0a:4e:df:2b:13:9b:20:23:a9:01:
7e:95:3b:b9:9e:c8:8c:1e:3c:a0:0e:59:96:63:df:
8f:a2:b3:01:25:a5:72:be:7e:54:fa:6c:ad:1b:0a:
76:13:fc:0c:64:bb:09:e4:24:3e:03:fe:35:a0:2c:
fe:db:dc:74:6f:22:39:4a:75:d9:33:0f:1f:fb:c8:
24:62:36:96:af:09:bd:3e:ef:e7:a2:2c:67:76:87:
7c:c8:21:6e:b2:f2:88:c1:eb:05:54:f4:2c:25:cd:
97:ee:e2:73:da:71:a5:a2:14:28:13:b0:e6:e0:80:
ec:5f:c1:a9:4e:71:d5:4e:88:41:2f:33:be:af:05:
9a:84:4a:db:72:c7:00:cf:a3:53:20:47:4e:b9:84:
f9:5e:c0:e6:1d:f5:7c:b8:46:ee:c1:ad:66:18:7e:
3d:bb:b6:f3:62:ac:3e:fe:fe:cc:98:19:29:c1:ff:
30:aa:eb:4b:26:09:31:3e:4b:14:49:46:92:1a:5d:
cc:31:d4:20:ea:a6:54:f1:57:df:9b:6d:89:c2:ad:
5e:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:22:A9:7B:F1:C1:FC:E6:F2:69:DE:85:AF:48:64:40:7D:5A:D1:1F
X509v3 Authority Key Identifier:
keyid:DC:78:0D:99:35:DA:BC:70:1A:4C:48:32:B1:6C:11:D7:74:3C:39:9A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.krill.nlnetlabs.nl/repo/nlnetlabs/1/DC780D9935DABC701A4C4832B16C11D7743C399A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3HgNmTXavHAaTEgysWwR13Q8OZo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.krill.nlnetlabs.nl/repo/nlnetlabs/1/3138352e34392e3134322e302f32332d3233203d3e20323131333231.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.49.142.0/23
Signature Algorithm: sha256WithRSAEncryption
7e:0d:84:a1:6a:1a:a8:51:ee:c5:3f:04:0f:50:97:ec:d6:04:
86:33:0b:7a:92:73:ab:36:0a:66:78:b5:18:e2:ec:7b:63:23:
1c:c3:a9:cd:ff:c9:35:d9:4c:ba:d3:b3:55:5a:54:ab:17:0b:
82:fd:75:5b:0a:57:68:9e:89:97:27:a3:32:8f:00:35:b3:13:
da:44:33:28:99:be:b8:5b:8f:0b:b0:de:e4:3a:b1:a4:65:17:
66:aa:7d:7b:6b:81:05:49:d3:1f:10:07:c4:2b:75:fe:dd:72:
2c:b7:0d:7a:24:c5:d5:da:75:1d:52:bb:08:49:31:01:f4:5f:
ee:c3:3d:c1:12:4b:34:c1:81:79:77:7f:cd:70:16:6f:7f:ba:
e9:3b:93:56:89:09:85:15:51:69:22:4e:8f:28:cf:75:15:03:
aa:ee:70:06:94:f6:da:ab:90:c7:a0:47:4f:90:a6:80:c8:0a:
48:52:62:e1:0d:f3:40:9c:55:3e:1a:c1:e3:c0:bc:6b:61:3c:
94:6a:9e:4e:02:95:2a:64:ef:28:0a:ce:da:be:54:16:53:f2:
b3:78:1a:c3:d7:0e:b2:0e:b6:77:bd:0e:e7:64:b2:48:25:22:
97:25:ef:cb:78:b5:30:5f:fd:f2:2e:20:8e:65:bb:de:b2:94:
6a:ba:d3:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 12:19:14 2026 by rpki-client