Route Origin Authorization
$ rpki-client -vvf rsync.krill.nlnetlabs.nl/repo/nlnetlabs/1/326130343a623930303a3a2f33302d3330203d3e2038353837.roa
File: 326130343a623930303a3a2f33302d3330203d3e2038353837.roa (raw, json)
Hash identifier: YVqDFSJM9BpzA7j/lmc/Km9kXBCWwBuBJnXVpd3c0oA=
Subject key identifier: D7:2C:46:E8:0C:4F:FA:11:BE:B4:2F:5E:92:BF:31:2E:8B:2E:A9:14
Certificate issuer: /CN=dc780d9935dabc701a4c4832b16c11d7743c399a
Certificate serial: 088837816938CA9A921EB1363DCAF71DC84F5808
Authority key identifier: DC:78:0D:99:35:DA:BC:70:1A:4C:48:32:B1:6C:11:D7:74:3C:39:9A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3HgNmTXavHAaTEgysWwR13Q8OZo.cer
Subject info access: rsync://rsync.krill.nlnetlabs.nl/repo/nlnetlabs/1/326130343a623930303a3a2f33302d3330203d3e2038353837.roa
Signing time: Thu 02 Jul 2026 14:06:53 +0000
ROA not before: Thu 02 Jul 2026 14:01:53 +0000
ROA not after: Thu 01 Jul 2027 14:06:53 +0000
asID: 8587
IP address blocks: 2a04:b900::/30 maxlen: 30
Validation: OK
Signature path: rsync://rsync.krill.nlnetlabs.nl/repo/nlnetlabs/1/DC780D9935DABC701A4C4832B16C11D7743C399A.crl
rsync://rsync.krill.nlnetlabs.nl/repo/nlnetlabs/1/DC780D9935DABC701A4C4832B16C11D7743C399A.mft
rsync://rpki.ripe.net/repository/DEFAULT/3HgNmTXavHAaTEgysWwR13Q8OZo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 19:53:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
08:88:37:81:69:38:ca:9a:92:1e:b1:36:3d:ca:f7:1d:c8:4f:58:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc780d9935dabc701a4c4832b16c11d7743c399a
Validity
Not Before: Jul 2 14:01:53 2026 GMT
Not After : Jul 1 14:06:53 2027 GMT
Subject: CN=D72C46E80C4FFA11BEB42F5E92BF312E8B2EA914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:76:3c:dc:2c:5b:51:79:0b:05:f6:57:af:0d:
6a:05:6f:89:90:08:2d:49:07:cb:78:d8:1e:79:de:
c6:0c:48:99:95:62:f6:0e:e7:00:27:e6:ab:02:3e:
f6:5f:19:9c:5d:bc:9f:07:1f:99:b6:c9:40:50:d9:
2e:5d:7f:34:a1:1b:f2:4f:97:d9:7f:c4:ec:8c:25:
03:49:2e:24:ae:52:61:d3:ed:bb:ad:4e:c0:1c:a4:
19:95:77:01:ce:03:f0:93:a6:82:e8:30:91:43:49:
de:38:96:d6:56:38:15:78:57:f2:59:4c:f8:50:4b:
bf:ab:90:56:c1:fa:21:45:f8:cc:82:09:d8:63:17:
d2:5e:b0:7a:4a:cd:6e:6a:5e:83:3d:61:d5:83:a5:
7d:c8:76:fb:79:65:87:76:d2:4b:14:cc:7b:d6:43:
ed:ab:e8:6b:ec:35:f2:e4:57:73:92:95:15:62:0d:
86:47:0e:ff:44:cb:57:11:02:7e:33:0e:be:a5:7a:
d8:ec:61:3f:27:ed:db:39:49:14:59:d9:c6:71:3d:
ba:c0:b2:09:54:4c:55:22:eb:71:41:6e:63:b0:e2:
85:b9:09:ff:fc:5e:c5:dd:2d:47:e3:a8:58:2f:16:
75:b5:46:f7:9b:c0:5e:60:cd:de:29:16:35:a6:d3:
d2:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:2C:46:E8:0C:4F:FA:11:BE:B4:2F:5E:92:BF:31:2E:8B:2E:A9:14
X509v3 Authority Key Identifier:
keyid:DC:78:0D:99:35:DA:BC:70:1A:4C:48:32:B1:6C:11:D7:74:3C:39:9A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.krill.nlnetlabs.nl/repo/nlnetlabs/1/DC780D9935DABC701A4C4832B16C11D7743C399A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3HgNmTXavHAaTEgysWwR13Q8OZo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.krill.nlnetlabs.nl/repo/nlnetlabs/1/326130343a623930303a3a2f33302d3330203d3e2038353837.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a04:b900::/30
Signature Algorithm: sha256WithRSAEncryption
9b:3e:7a:e1:c7:ca:0f:56:76:59:a9:2a:b8:27:74:09:c2:4b:
c7:ae:cf:19:53:bc:df:0a:50:d2:18:86:fd:f6:74:ad:9c:94:
a5:e1:d6:f9:2d:d2:c6:12:a7:f6:a3:02:85:1d:73:26:ad:e7:
a7:84:4f:3e:a8:23:ad:8c:7c:4f:4a:02:bc:2c:7e:f5:8c:74:
74:58:7e:87:18:98:01:cf:6a:e7:bd:e9:d6:bb:20:b0:60:56:
d1:6e:b6:0d:f4:85:a6:08:c8:63:84:03:c0:8c:8d:a7:cc:5f:
54:73:a3:bf:d1:7a:4e:62:90:86:19:db:38:34:f1:6d:73:36:
ea:39:a6:3d:fa:9b:30:fd:0e:d0:36:e9:42:25:e6:79:5b:4a:
0f:55:f3:ed:30:89:48:44:54:b1:2c:40:76:29:82:c1:86:8d:
23:3e:ee:f0:59:93:7a:9b:96:fd:bb:d8:de:14:5f:b2:36:9b:
a9:ea:9d:1e:32:91:24:9c:c2:14:b4:b2:d9:a9:43:27:00:81:
e2:97:f0:78:f9:3b:18:3e:19:ca:55:36:2b:a3:d2:5a:3e:31:
d0:6b:79:2e:69:1a:91:a2:fa:2c:16:10:43:65:10:18:3e:3b:
85:67:39:d7:45:e8:78:94:47:2e:9d:0a:2d:6c:9b:48:5d:bc:
e1:5f:d3:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 11:05:52 2026 by rpki-client