Route Origin Authorization
$ rpki-client -vvf rsync.krill.nlnetlabs.nl/repo/nlnetlabs/1/3138352e34392e3134322e302f32342d3234203d3e2030.roa
File: 3138352e34392e3134322e302f32342d3234203d3e2030.roa (raw, json)
Hash identifier: +h5nxp3r86DxkM+mEV1xj5BP7LH8Lp8uZ6CT1Hi1E54=
Subject key identifier: 19:93:FD:02:1C:FA:F9:13:A2:AD:91:51:8E:6D:7B:EB:F7:D7:08:C6
Certificate issuer: /CN=dc780d9935dabc701a4c4832b16c11d7743c399a
Certificate serial: 08D2507BB07EFD75F5D6A2B392941AC0D121714B
Authority key identifier: DC:78:0D:99:35:DA:BC:70:1A:4C:48:32:B1:6C:11:D7:74:3C:39:9A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3HgNmTXavHAaTEgysWwR13Q8OZo.cer
Subject info access: rsync://rsync.krill.nlnetlabs.nl/repo/nlnetlabs/1/3138352e34392e3134322e302f32342d3234203d3e2030.roa
Signing time: Thu 02 Jul 2026 14:06:53 +0000
ROA not before: Thu 02 Jul 2026 14:01:53 +0000
ROA not after: Thu 01 Jul 2027 14:06:53 +0000
asID: 0
IP address blocks: 185.49.142.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.krill.nlnetlabs.nl/repo/nlnetlabs/1/DC780D9935DABC701A4C4832B16C11D7743C399A.crl
rsync://rsync.krill.nlnetlabs.nl/repo/nlnetlabs/1/DC780D9935DABC701A4C4832B16C11D7743C399A.mft
rsync://rpki.ripe.net/repository/DEFAULT/3HgNmTXavHAaTEgysWwR13Q8OZo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 19:53:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
08:d2:50:7b:b0:7e:fd:75:f5:d6:a2:b3:92:94:1a:c0:d1:21:71:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc780d9935dabc701a4c4832b16c11d7743c399a
Validity
Not Before: Jul 2 14:01:53 2026 GMT
Not After : Jul 1 14:06:53 2027 GMT
Subject: CN=1993FD021CFAF913A2AD91518E6D7BEBF7D708C6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:3d:ed:43:c7:e1:4e:ae:be:a2:99:d8:dd:39:
06:54:4b:4d:4d:ee:5d:07:ea:6b:18:e6:f5:72:79:
50:e7:ef:d0:e1:cb:d4:71:42:34:ea:37:d3:e0:06:
4b:a5:b4:ed:e7:bc:6c:8e:30:db:10:97:ec:2a:4c:
3b:d9:4f:80:4b:53:30:d2:1f:88:81:75:dc:23:e1:
76:78:f5:c5:49:03:be:6a:7a:5d:97:38:07:e0:73:
39:81:98:3d:49:fb:bc:ba:a1:6c:fb:6a:65:c8:1a:
24:b2:e0:22:55:8c:42:a3:c4:4a:90:a4:be:d9:77:
9d:48:9c:91:93:8f:de:50:e8:13:91:57:7d:e7:02:
aa:09:b1:0f:21:9a:87:ed:87:80:e4:18:c3:00:83:
a1:18:58:cd:a3:95:6b:d4:c5:6c:bc:91:75:81:f9:
47:db:ea:dd:42:3b:e4:85:18:06:cc:64:af:65:26:
14:2b:40:fa:27:5b:69:ba:c3:0b:98:ba:d8:08:5a:
2a:25:31:df:ab:c5:41:a4:b2:c4:be:12:9b:d9:bf:
b0:50:cb:c3:d8:40:d7:46:8e:24:99:60:2e:34:d9:
35:90:e0:47:de:e6:d2:e7:c9:7c:c9:30:1f:dc:ce:
4b:a5:a5:8c:ab:eb:56:57:b8:f2:e2:4d:de:61:4a:
1d:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:93:FD:02:1C:FA:F9:13:A2:AD:91:51:8E:6D:7B:EB:F7:D7:08:C6
X509v3 Authority Key Identifier:
keyid:DC:78:0D:99:35:DA:BC:70:1A:4C:48:32:B1:6C:11:D7:74:3C:39:9A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.krill.nlnetlabs.nl/repo/nlnetlabs/1/DC780D9935DABC701A4C4832B16C11D7743C399A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3HgNmTXavHAaTEgysWwR13Q8OZo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.krill.nlnetlabs.nl/repo/nlnetlabs/1/3138352e34392e3134322e302f32342d3234203d3e2030.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.49.142.0/24
Signature Algorithm: sha256WithRSAEncryption
b7:e2:d9:41:31:c1:34:15:c9:2b:fa:a3:0e:37:0d:04:4a:c6:
a0:31:0b:02:a2:7a:57:e2:55:ec:32:be:a6:b6:35:68:6e:cc:
28:93:15:4d:e3:ed:59:44:1a:1a:d3:69:0e:b4:13:cb:f2:6b:
d9:70:60:6a:35:f6:df:f8:d3:14:59:10:5b:df:b9:b9:6b:e1:
96:a7:42:a4:59:d0:eb:2f:7e:4f:5f:24:c9:33:35:ff:83:31:
9f:11:17:12:c2:03:14:82:3c:8d:33:cc:4e:0b:af:31:c9:89:
b6:8e:d2:2e:a3:28:3f:d8:8e:40:68:ad:21:7f:d4:1d:54:b4:
ee:f2:38:a4:ac:68:42:88:74:d7:0e:f9:fe:4b:37:34:aa:16:
60:f3:25:9a:d3:78:b2:00:c1:b2:66:ff:52:d1:bc:d5:d5:28:
4b:7f:56:43:f2:6c:a7:88:88:b3:57:a8:2a:2e:19:43:d0:47:
e6:18:14:a9:b2:01:80:d4:3e:df:01:8d:ee:32:10:ec:8c:b1:
65:53:f5:42:eb:6a:84:2b:62:6c:6f:ab:6f:4b:f2:41:82:6b:
e8:d3:a0:d1:d9:31:db:b2:44:f3:0a:59:8b:87:75:28:65:a2:
d1:a3:d7:8d:77:04:26:aa:b1:02:5a:ea:0d:59:f7:a4:b0:9a:
ce:28:44:e8
-----BEGIN CERTIFICATE-----
MIIE3zCCA8egAwIBAgIUCNJQe7B+/XX11qKzkpQawNEhcUswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoZGM3ODBkOTkzNWRhYmM3MDFhNGM0ODMyYjE2YzExZDc3
NDNjMzk5YTAeFw0yNjA3MDIxNDAxNTNaFw0yNzA3MDExNDA2NTNaMDMxMTAvBgNV
BAMTKDE5OTNGRDAyMUNGQUY5MTNBMkFEOTE1MThFNkQ3QkVCRjdENzA4QzYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDNPe1Dx+FOrr6imdjdOQZUS01N
7l0H6msY5vVyeVDn79Dhy9RxQjTqN9PgBkultO3nvGyOMNsQl+wqTDvZT4BLUzDS
H4iBddwj4XZ49cVJA75qel2XOAfgczmBmD1J+7y6oWz7amXIGiSy4CJVjEKjxEqQ
pL7Zd51InJGTj95Q6BORV33nAqoJsQ8hmofth4DkGMMAg6EYWM2jlWvUxWy8kXWB
+Ufb6t1CO+SFGAbMZK9lJhQrQPonW2m6wwuYutgIWiolMd+rxUGkssS+EpvZv7BQ
y8PYQNdGjiSZYC402TWQ4Efe5tLnyXzJMB/czkulpYyr61ZXuPLiTd5hSh0fAgMB
AAGjggHpMIIB5TAdBgNVHQ4EFgQUGZP9Ahz6+ROirZFRjm176/fXCMYwHwYDVR0j
BBgwFoAU3HgNmTXavHAaTEgysWwR13Q8OZowDgYDVR0PAQH/BAQDAgeAMG8GA1Ud
HwRoMGYwZKBioGCGXnJzeW5jOi8vcnN5bmMua3JpbGwubmxuZXRsYWJzLm5sL3Jl
cG8vbmxuZXRsYWJzLzEvREM3ODBEOTkzNURBQkM3MDFBNEM0ODMyQjE2QzExRDc3
NDNDMzk5QS5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzov
L3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzNIZ05tVFhhdkhBYVRF
Z3lzV3dSMTNROE9aby5jZXIwgYAGCCsGAQUFBwELBHQwcjBwBggrBgEFBQcwC4Zk
cnN5bmM6Ly9yc3luYy5rcmlsbC5ubG5ldGxhYnMubmwvcmVwby9ubG5ldGxhYnMv
MS8zMTM4MzUyZTM0MzkyZTMxMzQzMjJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMw
LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAw
DjAMBAIAATAGAwQAuTGOMA0GCSqGSIb3DQEBCwUAA4IBAQC34tlBMcE0Fckr+qMO
Nw0ESsagMQsConpX4lXsMr6mtjVobswokxVN4+1ZRBoa02kOtBPL8mvZcGBqNfbf
+NMUWRBb37m5a+GWp0KkWdDrL35PXyTJMzX/gzGfERcSwgMUgjyNM8xOC68xyYm2
jtIuoyg/2I5AaK0hf9QdVLTu8jikrGhCiHTXDvn+Szc0qhZg8yWa03iyAMGyZv9S
0bzV1ShLf1ZD8myniIizV6gqLhlD0EfmGBSpsgGA1D7fAY3uMhDsjLFlU/VC62qE
K2Jsb6tvS/JBgmvo06DR2THbskTzClmLh3UoZaLRo9eNdwQmqrECWuoNWfeksJrO
KETo
-----END CERTIFICATE-----
Generated at Fri Jul 24 03:45:30 2026 by rpki-client