Route Origin Authorization
$ rpki-client -vvvf rsync.krill.nlnetlabs.nl/repo/nlnetlabs/1/326130343a623930343a373230303a3a2f34302d3430203d3e20323131333231.roa
File: 326130343a623930343a373230303a3a2f34302d3430203d3e20323131333231.roa (raw, json)
Hash identifier: F4DaaBvGL9dgBxkY4xsFoeNBV/3e5iKiYWMDoodFLqo=
Subject key identifier: 66:F6:6D:CE:BF:B3:53:DE:F6:81:23:E2:D7:6F:9D:4A:5A:BF:89:51
Certificate issuer: /CN=dc780d9935dabc701a4c4832b16c11d7743c399a
Certificate serial: 62DB76A4027FEB503A9984447DF0200E96452504
Authority key identifier: DC:78:0D:99:35:DA:BC:70:1A:4C:48:32:B1:6C:11:D7:74:3C:39:9A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3HgNmTXavHAaTEgysWwR13Q8OZo.cer
Subject info access: rsync://rsync.krill.nlnetlabs.nl/repo/nlnetlabs/1/326130343a623930343a373230303a3a2f34302d3430203d3e20323131333231.roa
Signing time: Mon 19 Oct 2026 20:06:56 +0000
ROA not before: Mon 19 Oct 2026 20:01:56 +0000
ROA not after: Mon 18 Oct 2027 20:06:56 +0000
asID: 211321
IP address blocks: 2a04:b904:7200::/40 maxlen: 40
Validation: OK
Signature path: rsync://rsync.krill.nlnetlabs.nl/repo/nlnetlabs/1/DC780D9935DABC701A4C4832B16C11D7743C399A.crl
rsync://rsync.krill.nlnetlabs.nl/repo/nlnetlabs/1/DC780D9935DABC701A4C4832B16C11D7743C399A.mft
rsync://rpki.ripe.net/repository/DEFAULT/3HgNmTXavHAaTEgysWwR13Q8OZo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Nov 2026 15:22:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
62:db:76:a4:02:7f:eb:50:3a:99:84:44:7d:f0:20:0e:96:45:25:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc780d9935dabc701a4c4832b16c11d7743c399a
Validity
Not Before: Oct 19 20:01:56 2026 GMT
Not After : Oct 18 20:06:56 2027 GMT
Subject: CN=66F66DCEBFB353DEF68123E2D76F9D4A5ABF8951
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:ff:fe:08:07:af:09:93:a2:a0:8f:32:1a:d6:
1e:74:2a:4e:70:ae:13:04:be:4d:ca:7d:b1:88:2f:
bb:cf:3f:53:82:c4:a9:95:03:84:97:4e:4c:ce:b6:
7d:87:18:d7:64:c5:81:60:b9:fe:d9:9e:e2:94:cc:
c1:c1:27:93:95:80:5d:7f:a7:9b:26:0d:b1:80:f4:
99:f2:3b:d7:ee:df:10:c7:26:f4:73:ba:24:f4:37:
4f:fc:48:e7:90:f9:2d:fe:8c:a2:41:15:d3:4e:a7:
50:57:56:26:78:95:69:0f:47:fd:86:0d:21:ce:0d:
fc:4b:bd:dd:e7:be:b1:bb:4f:15:ab:be:73:ae:5b:
dc:b2:5f:04:71:b4:2a:69:1e:4d:2b:08:80:0a:ab:
37:17:b4:53:3f:85:7b:32:c0:73:9f:ef:01:00:89:
cd:14:20:8d:19:e8:46:51:ed:58:9c:01:d4:8c:1c:
b5:e4:81:99:48:d6:45:5d:20:29:97:b2:26:f4:29:
66:38:18:34:42:8f:0a:12:7b:b2:9f:da:ca:54:66:
28:4b:72:5c:e5:3f:cb:06:6f:e2:90:9c:8f:c6:97:
3f:78:2d:d3:72:86:3c:ed:8d:1d:b4:70:f2:63:d4:
02:b7:23:de:38:d4:ba:e3:7c:5a:4d:36:57:39:4c:
92:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:F6:6D:CE:BF:B3:53:DE:F6:81:23:E2:D7:6F:9D:4A:5A:BF:89:51
X509v3 Authority Key Identifier:
keyid:DC:78:0D:99:35:DA:BC:70:1A:4C:48:32:B1:6C:11:D7:74:3C:39:9A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.krill.nlnetlabs.nl/repo/nlnetlabs/1/DC780D9935DABC701A4C4832B16C11D7743C399A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3HgNmTXavHAaTEgysWwR13Q8OZo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.krill.nlnetlabs.nl/repo/nlnetlabs/1/326130343a623930343a373230303a3a2f34302d3430203d3e20323131333231.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a04:b904:7200::/40
Signature Algorithm: sha256WithRSAEncryption
13:06:a2:04:41:75:ce:14:0d:c1:3b:6d:b3:53:72:a4:6e:cf:
66:73:7a:2b:3f:b7:bb:e1:dc:b3:e1:0e:c3:e3:27:57:fd:84:
d0:ef:3d:a7:fe:98:de:1e:07:98:76:4a:de:70:d2:2a:c4:c2:
4e:0c:c3:fe:3b:f3:dd:13:dc:ba:33:e0:e4:cf:06:39:5c:b8:
c8:7c:cc:14:08:82:5e:5c:ed:e7:24:5f:e7:2c:0f:04:82:7d:
08:bf:0b:44:c4:8f:a3:d3:cc:f7:39:6f:dc:63:93:be:0f:45:
25:ba:a5:ec:cd:30:e3:c4:6b:a0:9f:a3:f2:6f:ae:3c:4e:30:
7d:9b:dc:ba:a0:31:3f:f7:23:4a:c6:6e:1a:e6:34:a5:de:f0:
42:8b:10:c8:03:88:97:04:da:3e:eb:8a:10:97:24:0c:1b:69:
33:c6:97:4f:93:8f:8a:76:b3:3c:0e:ac:30:31:05:fa:ea:b8:
15:c4:04:51:17:07:b4:12:a0:89:e6:15:82:64:6e:e5:b5:ee:
48:26:8c:b4:fa:f5:14:7c:4a:03:78:ec:44:1a:7b:9c:51:cd:
33:95:57:4f:e2:6c:9b:4a:f6:a8:ce:46:f3:86:2a:5c:45:45:
7f:32:e9:c9:cd:26:a1:e5:dc:ab:0b:a3:20:5c:c0:b7:0b:e0:
5d:6e:b9:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 08:33:48 2026 by rpki-client