Route Origin Authorization
$ rpki-client -vvf rsync.krill.nlnetlabs.nl/repo/nlnetlabs/1/326130343a623930323a3a2f34382d3438203d3e20323131333231.roa
File: 326130343a623930323a3a2f34382d3438203d3e20323131333231.roa (raw, json)
Hash identifier: DvRjC5YVaO6hAiGHU5zPxy3o6I0+1biPcChDZYr62qk=
Subject key identifier: 84:89:23:5F:35:06:9B:4F:34:A5:5A:9C:EC:88:6C:5D:ED:E4:E1:7D
Certificate issuer: /CN=dc780d9935dabc701a4c4832b16c11d7743c399a
Certificate serial: 6F2ADDD90DAE7E43E2AFFA79EBC64AC7FC08FC47
Authority key identifier: DC:78:0D:99:35:DA:BC:70:1A:4C:48:32:B1:6C:11:D7:74:3C:39:9A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3HgNmTXavHAaTEgysWwR13Q8OZo.cer
Subject info access: rsync://rsync.krill.nlnetlabs.nl/repo/nlnetlabs/1/326130343a623930323a3a2f34382d3438203d3e20323131333231.roa
Signing time: Thu 02 Jul 2026 14:06:53 +0000
ROA not before: Thu 02 Jul 2026 14:01:53 +0000
ROA not after: Thu 01 Jul 2027 14:06:53 +0000
asID: 211321
IP address blocks: 2a04:b902::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.krill.nlnetlabs.nl/repo/nlnetlabs/1/DC780D9935DABC701A4C4832B16C11D7743C399A.crl
rsync://rsync.krill.nlnetlabs.nl/repo/nlnetlabs/1/DC780D9935DABC701A4C4832B16C11D7743C399A.mft
rsync://rpki.ripe.net/repository/DEFAULT/3HgNmTXavHAaTEgysWwR13Q8OZo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 19:53:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6f:2a:dd:d9:0d:ae:7e:43:e2:af:fa:79:eb:c6:4a:c7:fc:08:fc:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc780d9935dabc701a4c4832b16c11d7743c399a
Validity
Not Before: Jul 2 14:01:53 2026 GMT
Not After : Jul 1 14:06:53 2027 GMT
Subject: CN=8489235F35069B4F34A55A9CEC886C5DEDE4E17D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:21:c2:38:5f:60:4f:e6:cc:15:22:a0:1d:2e:
41:da:30:6b:b9:2b:f5:e1:02:51:cd:3b:9f:c3:0a:
ab:57:1d:fb:bc:f1:c1:f2:e0:07:81:f0:29:b0:69:
73:23:b7:64:6d:3d:96:62:0c:ff:4c:cb:cf:d6:d0:
e5:17:3f:a5:fb:61:0e:54:61:4d:87:95:ae:65:48:
1a:db:ee:36:0b:2e:b7:94:48:d3:b0:ef:d3:ce:72:
a4:44:d9:8b:69:4b:05:87:6d:55:ab:1a:99:0b:b9:
67:a7:b2:04:4d:f0:b9:d5:13:4e:d8:8f:0a:5d:b4:
45:a8:5a:06:97:25:36:ec:6c:c5:b0:e7:5b:2e:8d:
2a:5f:d7:f5:e6:ba:00:fe:f1:d7:d3:58:51:02:0f:
62:77:97:15:a7:ac:4e:0d:11:f6:5b:ae:1b:dd:97:
b3:ea:68:d9:51:a3:a5:57:fc:8c:78:cd:6d:9c:be:
b7:0e:c1:45:30:ce:8f:3d:34:d9:63:3d:df:92:50:
13:97:f4:5b:0f:36:a4:19:b4:47:fb:5d:cc:81:2d:
f9:64:38:bb:88:21:b5:e5:42:18:7f:9f:cf:90:00:
5d:2d:02:9d:6e:4b:a9:6e:4c:e8:c9:1d:b3:7a:26:
5d:e7:78:a2:c4:d5:c4:04:4f:24:44:ae:f4:9b:64:
f2:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:89:23:5F:35:06:9B:4F:34:A5:5A:9C:EC:88:6C:5D:ED:E4:E1:7D
X509v3 Authority Key Identifier:
keyid:DC:78:0D:99:35:DA:BC:70:1A:4C:48:32:B1:6C:11:D7:74:3C:39:9A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.krill.nlnetlabs.nl/repo/nlnetlabs/1/DC780D9935DABC701A4C4832B16C11D7743C399A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3HgNmTXavHAaTEgysWwR13Q8OZo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.krill.nlnetlabs.nl/repo/nlnetlabs/1/326130343a623930323a3a2f34382d3438203d3e20323131333231.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a04:b902::/48
Signature Algorithm: sha256WithRSAEncryption
85:11:d5:d8:6c:f4:e7:36:aa:33:b8:fe:86:f4:ef:1a:ae:58:
1e:94:77:16:dd:40:39:3d:3d:43:26:ff:15:69:1a:90:14:5f:
8a:34:67:4b:52:06:3a:49:3c:de:d8:61:49:f5:96:d1:3b:4e:
d3:a6:ca:83:9c:d1:2e:0f:9e:5e:3d:85:d7:43:29:6f:7d:cd:
e1:09:99:b5:bc:0c:79:05:6f:3c:80:82:ae:21:5f:47:3a:d0:
4d:da:2d:77:e4:a1:75:d3:4b:95:23:da:16:b3:22:49:31:99:
bc:33:e3:ce:fb:11:6a:b2:6f:64:72:d4:32:b0:1f:a2:8c:9d:
e0:7f:76:19:4e:b6:1d:d8:75:3c:76:06:ad:d6:d5:0f:03:ca:
16:ba:a4:24:24:df:ac:e5:f5:8b:51:f2:b0:6b:6a:d8:ea:d4:
f3:f7:a1:91:86:46:2f:16:b6:d3:8c:46:d3:9b:3e:f6:36:ec:
b1:65:58:ce:47:04:22:fa:62:ff:69:2c:a9:c8:0b:f4:92:77:
03:e2:48:48:28:72:bd:53:81:da:fb:61:20:29:7d:f9:91:2b:
dd:08:3b:26:82:8a:69:d4:69:0a:e4:4f:10:61:a5:96:8d:d8:
39:60:f3:cc:ed:b2:ae:f7:1d:e5:a4:bd:8f:2a:0a:44:cb:30:
99:62:a8:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 12:36:05 2026 by rpki-client