This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.krill.nlnetlabs.nl/repo/nlnetlabs/1/326130343a623930343a373230303a3a2f34302d3430203d3e20323131333231.roa File: 326130343a623930343a373230303a3a2f34302d3430203d3e20323131333231.roa (raw, json) Hash identifier: refEY6cMSdDY7cBVUX5w6R5vf51PxokJ+N8DMMimo3o= Subject key identifier: 5B:DF:54:09:DB:2F:1A:AE:5D:7D:A4:2E:26:7C:57:FB:D9:FE:40:3A Certificate issuer: /CN=dc780d9935dabc701a4c4832b16c11d7743c399a Certificate serial: 5C95B918C84BC9F15BCB23FBBACD1B5704251A93 Authority key identifier: DC:78:0D:99:35:DA:BC:70:1A:4C:48:32:B1:6C:11:D7:74:3C:39:9A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3HgNmTXavHAaTEgysWwR13Q8OZo.cer Subject info access: rsync://rsync.krill.nlnetlabs.nl/repo/nlnetlabs/1/326130343a623930343a373230303a3a2f34302d3430203d3e20323131333231.roa Signing time: Mon 17 Nov 2025 19:29:53 +0000 ROA not before: Mon 17 Nov 2025 19:24:53 +0000 ROA not after: Mon 16 Nov 2026 19:29:53 +0000 asID: 211321 IP address blocks: 2a04:b904:7200::/40 maxlen: 40 Validation: OK Signature path: rsync://rsync.krill.nlnetlabs.nl/repo/nlnetlabs/1/DC780D9935DABC701A4C4832B16C11D7743C399A.crl rsync://rsync.krill.nlnetlabs.nl/repo/nlnetlabs/1/DC780D9935DABC701A4C4832B16C11D7743C399A.mft rsync://rpki.ripe.net/repository/DEFAULT/3HgNmTXavHAaTEgysWwR13Q8OZo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 11:33:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5c:95:b9:18:c8:4b:c9:f1:5b:cb:23:fb:ba:cd:1b:57:04:25:1a:93 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dc780d9935dabc701a4c4832b16c11d7743c399a Validity Not Before: Nov 17 19:24:53 2025 GMT Not After : Nov 16 19:29:53 2026 GMT Subject: CN=5BDF5409DB2F1AAE5D7DA42E267C57FBD9FE403A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:b6:ea:4c:28:91:8c:c6:33:18:02:65:1e:8b: 17:af:64:fe:80:2d:5e:5c:5f:2d:08:3d:94:28:c1: ce:3f:8e:83:80:d3:cb:80:5a:c1:18:62:40:68:a9: e1:88:ff:49:3d:b3:5f:4e:87:c1:1d:05:a0:85:9c: 86:7a:e6:45:66:c0:db:7c:53:5f:87:fe:04:38:37: 87:f9:c7:30:c6:bf:8e:42:e5:09:9e:29:b6:9b:fb: a3:3a:f0:f7:a9:4e:9c:c8:6d:cb:83:47:81:ea:80: 19:df:ff:88:38:83:33:fe:19:8d:34:33:5c:40:78: 12:84:35:9b:c0:4f:9e:8c:5a:66:5d:f7:ba:14:4b: 83:14:0f:be:84:9a:d3:d6:6c:ce:aa:94:f0:2c:7a: da:78:9f:e2:8d:5e:58:62:b8:42:f9:02:ba:6f:c3: 06:87:5c:e3:fc:ca:58:ed:3b:3e:37:5d:01:61:0f: 34:bb:f6:38:09:2e:0b:31:80:71:f8:a5:c5:91:21: fe:c1:f7:7f:73:60:0f:40:63:5c:6a:d7:e8:94:4f: b4:b4:ef:91:4c:8c:d3:63:ad:a2:37:92:4b:5c:b1: a0:b2:f5:ab:11:00:66:05:33:fa:83:95:74:8d:17: 78:d7:74:dd:91:98:ca:96:77:1f:53:33:16:35:75: 32:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:DF:54:09:DB:2F:1A:AE:5D:7D:A4:2E:26:7C:57:FB:D9:FE:40:3A X509v3 Authority Key Identifier: keyid:DC:78:0D:99:35:DA:BC:70:1A:4C:48:32:B1:6C:11:D7:74:3C:39:9A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.krill.nlnetlabs.nl/repo/nlnetlabs/1/DC780D9935DABC701A4C4832B16C11D7743C399A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3HgNmTXavHAaTEgysWwR13Q8OZo.cer Subject Information Access: Signed Object - URI:rsync://rsync.krill.nlnetlabs.nl/repo/nlnetlabs/1/326130343a623930343a373230303a3a2f34302d3430203d3e20323131333231.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a04:b904:7200::/40 Signature Algorithm: sha256WithRSAEncryption 70:c3:81:88:6d:6a:dd:1e:ed:83:02:fd:10:8b:34:8a:55:c3: 91:8e:4e:59:8a:6a:57:50:34:05:d2:2c:f9:00:65:2a:81:65: e9:6f:3b:bb:e2:51:5e:a7:12:1c:85:ce:89:b9:7b:e9:64:c1: 8c:7a:51:cb:e3:fb:49:8d:df:b9:26:45:94:fb:75:19:ea:24: 17:f7:f1:5a:c3:8d:99:70:97:97:ba:38:0a:ca:e4:cd:5b:8e: 1e:24:3d:b7:92:4d:6b:12:86:13:d4:e2:c0:e8:2a:15:9b:6d: 29:b1:14:cd:d1:fe:b8:ca:22:24:4f:23:bf:a5:38:01:09:d3: ad:35:fc:b9:b7:4d:c3:05:d3:06:96:f4:af:37:ae:9e:c7:bc: 78:d5:91:9b:7a:db:69:8b:37:bd:bf:76:8f:1c:f4:a0:73:72: 12:21:36:65:5c:85:88:42:5c:4d:f6:96:03:51:51:f6:c2:39: 59:23:e5:75:87:69:4b:0b:3c:8a:08:00:ad:78:45:1c:99:41: 61:e1:9e:9f:f8:63:98:85:fb:13:d4:59:88:a1:27:e3:50:a7: e1:e5:7b:6f:60:67:3a:c5:a2:91:b8:5c:14:c3:f4:cd:dc:8c: d6:75:e5:f5:55:b2:d2:e2:36:76:b6:6c:75:f3:3a:c2:5b:ef: 78:be:54:40 -----BEGIN CERTIFICATE----- MIIE9jCCA96gAwIBAgIUXJW5GMhLyfFbyyP7us0bVwQlGpMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoZGM3ODBkOTkzNWRhYmM3MDFhNGM0ODMyYjE2YzExZDc3 NDNjMzk5YTAeFw0yNTExMTcxOTI0NTNaFw0yNjExMTYxOTI5NTNaMDMxMTAvBgNV BAMTKDVCREY1NDA5REIyRjFBQUU1RDdEQTQyRTI2N0M1N0ZCRDlGRTQwM0EwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCetupMKJGMxjMYAmUeixevZP6A LV5cXy0IPZQowc4/joOA08uAWsEYYkBoqeGI/0k9s19Oh8EdBaCFnIZ65kVmwNt8 U1+H/gQ4N4f5xzDGv45C5QmeKbab+6M68PepTpzIbcuDR4HqgBnf/4g4gzP+GY00 M1xAeBKENZvAT56MWmZd97oUS4MUD76EmtPWbM6qlPAsetp4n+KNXlhiuEL5Arpv wwaHXOP8yljtOz43XQFhDzS79jgJLgsxgHH4pcWRIf7B939zYA9AY1xq1+iUT7S0 75FMjNNjraI3kktcsaCy9asRAGYFM/qDlXSNF3jXdN2RmMqWdx9TMxY1dTKvAgMB AAGjggIAMIIB/DAdBgNVHQ4EFgQUW99UCdsvGq5dfaQuJnxX+9n+QDowHwYDVR0j BBgwFoAU3HgNmTXavHAaTEgysWwR13Q8OZowDgYDVR0PAQH/BAQDAgeAMG8GA1Ud HwRoMGYwZKBioGCGXnJzeW5jOi8vcnN5bmMua3JpbGwubmxuZXRsYWJzLm5sL3Jl cG8vbmxuZXRsYWJzLzEvREM3ODBEOTkzNURBQkM3MDFBNEM0ODMyQjE2QzExRDc3 NDNDMzk5QS5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzov L3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzNIZ05tVFhhdkhBYVRF Z3lzV3dSMTNROE9aby5jZXIwgZUGCCsGAQUFBwELBIGIMIGFMIGCBggrBgEFBQcw C4Z2cnN5bmM6Ly9yc3luYy5rcmlsbC5ubG5ldGxhYnMubmwvcmVwby9ubG5ldGxh YnMvMS8zMjYxMzAzNDNhNjIzOTMwMzQzYTM3MzIzMDMwM2EzYTJmMzQzMDJkMzQz MDIwM2QzZTIwMzIzMTMxMzMzMjMxLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAKgS5BHIwDQYJKoZIhvcN AQELBQADggEBAHDDgYhtat0e7YMC/RCLNIpVw5GOTlmKaldQNAXSLPkAZSqBZelv O7viUV6nEhyFzom5e+lkwYx6Ucvj+0mN37kmRZT7dRnqJBf38VrDjZlwl5e6OArK 5M1bjh4kPbeSTWsShhPU4sDoKhWbbSmxFM3R/rjKIiRPI7+lOAEJ0601/Lm3TcMF 0waW9K83rp7HvHjVkZt622mLN72/do8c9KBzchIhNmVchYhCXE32lgNRUfbCOVkj 5XWHaUsLPIoIAK14RRyZQWHhnp/4Y5iF+xPUWYihJ+NQp+Hle29gZzrFopG4XBTD 9M3cjNZ15fVVstLiNna2bHXzOsJb73i+VEA= -----END CERTIFICATE-----Generated at Sat Dec 6 22:31:13 2025 by rpki-client