Route Origin Authorization
$ rpki-client -vvf rsync.krill.nlnetlabs.nl/repo/nlnetlabs/1/3138352e34392e3134332e302f32342d3234203d3e20323131333231.roa
File: 3138352e34392e3134332e302f32342d3234203d3e20323131333231.roa (raw, json)
Hash identifier: 0B5YOvITIZWZRxiAsBfwVFBJO8A9+rknJ70VrZXbmhM=
Subject key identifier: 32:E9:B5:90:39:CE:05:66:A1:A3:44:C9:5C:2C:25:2C:7B:3F:CE:D5
Certificate issuer: /CN=dc780d9935dabc701a4c4832b16c11d7743c399a
Certificate serial: 6D0867576710A4F6060516AF3D2DB374B9F8A767
Authority key identifier: DC:78:0D:99:35:DA:BC:70:1A:4C:48:32:B1:6C:11:D7:74:3C:39:9A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3HgNmTXavHAaTEgysWwR13Q8OZo.cer
Subject info access: rsync://rsync.krill.nlnetlabs.nl/repo/nlnetlabs/1/3138352e34392e3134332e302f32342d3234203d3e20323131333231.roa
Signing time: Thu 02 Jul 2026 14:06:53 +0000
ROA not before: Thu 02 Jul 2026 14:01:53 +0000
ROA not after: Thu 01 Jul 2027 14:06:53 +0000
asID: 211321
IP address blocks: 185.49.143.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.krill.nlnetlabs.nl/repo/nlnetlabs/1/DC780D9935DABC701A4C4832B16C11D7743C399A.crl
rsync://rsync.krill.nlnetlabs.nl/repo/nlnetlabs/1/DC780D9935DABC701A4C4832B16C11D7743C399A.mft
rsync://rpki.ripe.net/repository/DEFAULT/3HgNmTXavHAaTEgysWwR13Q8OZo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 19:53:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6d:08:67:57:67:10:a4:f6:06:05:16:af:3d:2d:b3:74:b9:f8:a7:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc780d9935dabc701a4c4832b16c11d7743c399a
Validity
Not Before: Jul 2 14:01:53 2026 GMT
Not After : Jul 1 14:06:53 2027 GMT
Subject: CN=32E9B59039CE0566A1A344C95C2C252C7B3FCED5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:72:36:e9:73:21:d4:01:81:8f:43:57:fe:31:
a0:0d:b3:c6:0a:c8:73:22:76:2b:b4:8f:bb:33:2f:
32:b2:29:8e:35:a8:ec:b7:67:72:1a:a2:cd:d3:21:
34:32:82:c6:99:2c:6d:9f:98:67:fb:1c:3f:c6:45:
e3:7e:23:1b:04:f3:3e:0a:ca:5e:b3:8e:77:db:1f:
5e:6c:18:2b:7a:64:03:2b:11:73:ab:2b:81:d0:a7:
5d:74:d3:8f:29:2d:5b:49:b3:5d:db:94:47:d6:e1:
73:92:e8:ac:53:08:11:71:a5:f6:bc:e7:8e:5f:b6:
6f:f0:0b:31:06:e1:5c:bc:c0:70:35:b9:81:05:e5:
92:6e:d1:87:64:05:6c:0e:03:0c:75:23:e5:19:e0:
0d:3b:63:b2:2b:72:b9:c8:d8:7e:f5:02:36:8d:26:
a5:1f:de:dc:56:9d:3b:08:78:0a:a9:d1:b1:b1:ee:
e1:6f:dd:1f:23:27:65:5f:9d:b1:ff:41:5c:cf:11:
03:f2:a9:08:cb:89:0c:c9:33:ab:35:6b:cd:51:67:
3d:c0:fd:b8:0a:76:28:6b:a7:8e:7d:10:f4:12:4f:
f3:67:f7:12:af:65:80:ff:b1:01:5e:c9:ed:d3:44:
3f:22:30:56:44:05:b1:2d:33:61:ba:bc:4b:a2:5b:
77:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:E9:B5:90:39:CE:05:66:A1:A3:44:C9:5C:2C:25:2C:7B:3F:CE:D5
X509v3 Authority Key Identifier:
keyid:DC:78:0D:99:35:DA:BC:70:1A:4C:48:32:B1:6C:11:D7:74:3C:39:9A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.krill.nlnetlabs.nl/repo/nlnetlabs/1/DC780D9935DABC701A4C4832B16C11D7743C399A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3HgNmTXavHAaTEgysWwR13Q8OZo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.krill.nlnetlabs.nl/repo/nlnetlabs/1/3138352e34392e3134332e302f32342d3234203d3e20323131333231.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.49.143.0/24
Signature Algorithm: sha256WithRSAEncryption
55:c3:ad:25:09:c8:ab:2f:45:cc:36:16:f5:f8:4b:c5:7d:66:
d7:fd:40:89:bd:f6:f2:14:b6:8b:c0:df:25:a1:cf:44:66:a9:
3d:c8:30:0b:2c:97:12:28:5a:c6:cd:51:fa:59:18:3d:d5:46:
68:1c:35:dd:57:fd:87:a6:03:4a:89:c6:d5:8a:bb:40:f7:43:
c7:69:79:d5:d1:ee:53:88:e1:d6:6f:76:6f:aa:bd:b9:66:ac:
75:66:5e:82:8b:d3:20:42:b6:39:1f:81:c3:79:bc:55:0a:6b:
0e:d7:5e:0b:97:cd:8d:f6:e1:39:91:0f:e4:aa:37:2d:76:fa:
d4:07:6a:af:12:63:51:76:3c:28:a2:8c:db:9b:5a:8f:44:24:
3a:22:f3:5f:d7:d2:62:be:d4:02:58:fd:31:e2:09:b0:b2:13:
c4:b9:83:bf:7f:42:45:ab:0d:0a:5b:7d:34:8f:09:e3:c8:f4:
f8:64:bd:80:f1:bd:d8:de:05:dd:09:07:c0:bb:5c:2b:51:a6:
bf:e9:a8:53:f1:64:23:54:12:ec:e5:9d:a5:cb:53:34:1e:5c:
e9:29:3e:92:50:8b:63:68:54:5c:b6:ad:c2:c9:bd:88:76:31:
38:49:08:5a:5f:0e:b5:d7:96:e4:f3:bd:77:0c:b6:04:0f:f1:
32:d3:66:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 07:39:08 2026 by rpki-client