Route Origin Authorization
$ rpki-client -vvf rsync.krill.nlnetlabs.nl/repo/nlnetlabs/1/326130343a623930303a3a2f33302d3332203d3e2038353837.roa
File: 326130343a623930303a3a2f33302d3332203d3e2038353837.roa (raw, json)
Hash identifier: mcRkbX+EcmuVG5kbogYs1kTfFjmT6GSDRiWlit7LIEo=
Subject key identifier: 9F:47:3D:42:70:6A:EA:76:DD:E7:E4:CB:A6:62:B4:70:89:57:09:70
Certificate issuer: /CN=dc780d9935dabc701a4c4832b16c11d7743c399a
Certificate serial: 51ECCAFE2AB597767FD5047E363B27C0A656A486
Authority key identifier: DC:78:0D:99:35:DA:BC:70:1A:4C:48:32:B1:6C:11:D7:74:3C:39:9A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3HgNmTXavHAaTEgysWwR13Q8OZo.cer
Subject info access: rsync://rsync.krill.nlnetlabs.nl/repo/nlnetlabs/1/326130343a623930303a3a2f33302d3332203d3e2038353837.roa
Signing time: Thu 02 Jul 2026 14:06:54 +0000
ROA not before: Thu 02 Jul 2026 14:01:54 +0000
ROA not after: Thu 01 Jul 2027 14:06:54 +0000
asID: 8587
IP address blocks: 2a04:b900::/30 maxlen: 32
Validation: OK
Signature path: rsync://rsync.krill.nlnetlabs.nl/repo/nlnetlabs/1/DC780D9935DABC701A4C4832B16C11D7743C399A.crl
rsync://rsync.krill.nlnetlabs.nl/repo/nlnetlabs/1/DC780D9935DABC701A4C4832B16C11D7743C399A.mft
rsync://rpki.ripe.net/repository/DEFAULT/3HgNmTXavHAaTEgysWwR13Q8OZo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 19:53:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
51:ec:ca:fe:2a:b5:97:76:7f:d5:04:7e:36:3b:27:c0:a6:56:a4:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc780d9935dabc701a4c4832b16c11d7743c399a
Validity
Not Before: Jul 2 14:01:54 2026 GMT
Not After : Jul 1 14:06:54 2027 GMT
Subject: CN=9F473D42706AEA76DDE7E4CBA662B47089570970
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:df:33:07:80:6e:a2:58:41:63:7a:b0:b8:e6:
b0:c9:b7:dc:ff:6d:75:e6:26:a8:3c:f6:9f:b3:8d:
54:06:86:10:69:61:a2:55:6b:d2:80:13:8b:9c:44:
b3:30:d0:f9:8c:30:16:14:6f:17:ad:cb:b2:cc:9f:
d9:54:de:93:e3:df:1e:7f:e4:0a:d6:0f:10:ee:fc:
6f:ab:ab:fe:dd:8b:ed:86:5c:d4:72:e5:8f:d7:46:
65:68:b2:3e:06:8c:15:d5:8a:f3:bb:5e:13:51:ce:
71:9b:66:84:8a:da:29:0b:5b:90:d7:46:06:25:53:
8f:b4:08:aa:e3:2d:21:12:e2:f6:56:08:b5:23:50:
ee:4f:66:8d:ad:25:cc:17:05:8f:36:61:1f:e4:c8:
75:45:db:b1:96:b9:ef:b8:30:9b:ab:12:30:b4:94:
19:f8:3a:52:3b:23:9b:30:76:c8:80:7a:01:cf:75:
89:26:0f:41:7a:9a:9b:82:9d:be:1b:56:ee:9f:42:
97:57:bb:04:aa:a4:53:4d:63:6d:31:2b:a6:21:b1:
9b:13:88:f7:3d:4d:7e:3b:3f:af:e4:85:3a:6c:f6:
56:f7:5e:64:89:ab:6e:80:58:e4:d7:c3:b2:53:f3:
b2:1c:5e:28:57:83:3b:23:4b:49:32:63:18:71:ce:
d1:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:47:3D:42:70:6A:EA:76:DD:E7:E4:CB:A6:62:B4:70:89:57:09:70
X509v3 Authority Key Identifier:
keyid:DC:78:0D:99:35:DA:BC:70:1A:4C:48:32:B1:6C:11:D7:74:3C:39:9A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.krill.nlnetlabs.nl/repo/nlnetlabs/1/DC780D9935DABC701A4C4832B16C11D7743C399A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3HgNmTXavHAaTEgysWwR13Q8OZo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.krill.nlnetlabs.nl/repo/nlnetlabs/1/326130343a623930303a3a2f33302d3332203d3e2038353837.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a04:b900::/30
Signature Algorithm: sha256WithRSAEncryption
97:53:d2:23:05:54:7b:aa:84:28:9e:e2:b8:1b:2b:e6:c7:27:
0f:20:99:66:38:3e:9e:ba:06:69:ca:83:94:f0:17:59:02:8b:
d9:6b:5b:b7:e1:b5:0f:f9:48:6d:b5:9b:fe:d0:89:90:37:57:
11:ec:6d:95:4d:bc:a2:4f:15:ef:17:af:6d:0b:17:1e:d1:c8:
cd:03:81:33:82:1d:f1:2a:3a:72:a3:71:fe:5a:5f:e4:8f:12:
bc:fe:fd:80:13:e0:63:2d:81:ad:5b:a8:ca:a0:0c:f5:f1:81:
67:97:f2:a8:32:d6:77:9c:24:d5:11:aa:a2:b7:2f:2e:83:98:
22:07:3e:72:4b:69:13:d7:1b:a5:d2:64:b9:94:32:31:87:9b:
1a:2a:2e:cd:6a:5a:ea:12:7c:aa:58:19:d3:95:f9:ba:f3:1d:
93:ae:6b:e6:75:cd:10:47:c7:7c:f3:5b:78:50:c2:93:66:a3:
e9:63:82:73:b1:89:fa:16:a8:9b:5f:18:8d:be:d2:7a:6e:40:
93:c2:f0:55:81:ab:a3:69:7a:0b:b3:15:7a:3f:33:76:59:e1:
3c:a5:e5:35:91:aa:10:03:8e:32:cd:77:3c:f1:99:ca:cc:cc:
00:2d:a4:fe:f4:bb:27:cc:b1:68:8c:59:73:f5:94:22:11:67:
13:74:ba:21
-----BEGIN CERTIFICATE-----
MIIE5DCCA8ygAwIBAgIUUezK/iq1l3Z/1QR+NjsnwKZWpIYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoZGM3ODBkOTkzNWRhYmM3MDFhNGM0ODMyYjE2YzExZDc3
NDNjMzk5YTAeFw0yNjA3MDIxNDAxNTRaFw0yNzA3MDExNDA2NTRaMDMxMTAvBgNV
BAMTKDlGNDczRDQyNzA2QUVBNzZEREU3RTRDQkE2NjJCNDcwODk1NzA5NzAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC43zMHgG6iWEFjerC45rDJt9z/
bXXmJqg89p+zjVQGhhBpYaJVa9KAE4ucRLMw0PmMMBYUbxety7LMn9lU3pPj3x5/
5ArWDxDu/G+rq/7di+2GXNRy5Y/XRmVosj4GjBXVivO7XhNRznGbZoSK2ikLW5DX
RgYlU4+0CKrjLSES4vZWCLUjUO5PZo2tJcwXBY82YR/kyHVF27GWue+4MJurEjC0
lBn4OlI7I5swdsiAegHPdYkmD0F6mpuCnb4bVu6fQpdXuwSqpFNNY20xK6YhsZsT
iPc9TX47P6/khTps9lb3XmSJq26AWOTXw7JT87IcXihXgzsjS0kyYxhxztGpAgMB
AAGjggHuMIIB6jAdBgNVHQ4EFgQUn0c9QnBq6nbd5+TLpmK0cIlXCXAwHwYDVR0j
BBgwFoAU3HgNmTXavHAaTEgysWwR13Q8OZowDgYDVR0PAQH/BAQDAgeAMG8GA1Ud
HwRoMGYwZKBioGCGXnJzeW5jOi8vcnN5bmMua3JpbGwubmxuZXRsYWJzLm5sL3Jl
cG8vbmxuZXRsYWJzLzEvREM3ODBEOTkzNURBQkM3MDFBNEM0ODMyQjE2QzExRDc3
NDNDMzk5QS5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzov
L3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzNIZ05tVFhhdkhBYVRF
Z3lzV3dSMTNROE9aby5jZXIwgYQGCCsGAQUFBwELBHgwdjB0BggrBgEFBQcwC4Zo
cnN5bmM6Ly9yc3luYy5rcmlsbC5ubG5ldGxhYnMubmwvcmVwby9ubG5ldGxhYnMv
MS8zMjYxMzAzNDNhNjIzOTMwMzAzYTNhMmYzMzMwMmQzMzMyMjAzZDNlMjAzODM1
MzgzNy5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB
/wQRMA8wDQQCAAIwBwMFAioEuQAwDQYJKoZIhvcNAQELBQADggEBAJdT0iMFVHuq
hCie4rgbK+bHJw8gmWY4Pp66BmnKg5TwF1kCi9lrW7fhtQ/5SG21m/7QiZA3VxHs
bZVNvKJPFe8Xr20LFx7RyM0DgTOCHfEqOnKjcf5aX+SPErz+/YAT4GMtga1bqMqg
DPXxgWeX8qgy1necJNURqqK3Ly6DmCIHPnJLaRPXG6XSZLmUMjGHmxoqLs1qWuoS
fKpYGdOV+brzHZOua+Z1zRBHx3zzW3hQwpNmo+ljgnOxifoWqJtfGI2+0npuQJPC
8FWBq6NpeguzFXo/M3ZZ4Tyl5TWRqhADjjLNdzzxmcrMzAAtpP70uyfMsWiMWXP1
lCIRZxN0uiE=
-----END CERTIFICATE-----
Generated at Fri Jul 24 05:14:02 2026 by rpki-client