Route Origin Authorization
$ rpki-client -vvf rsync.krill.nlnetlabs.nl/repo/nlnetlabs/1/326130343a623930343a3a2f34382d3438203d3e20323131333231.roa
File: 326130343a623930343a3a2f34382d3438203d3e20323131333231.roa (raw, json)
Hash identifier: uEPfzD+wbnhTwsVWW/UrDfMoUMKBuHi0vPl0IGNr7n4=
Subject key identifier: 46:26:70:3B:C2:B4:E2:A6:11:4B:57:C2:93:E7:5C:8E:85:8E:DD:24
Certificate issuer: /CN=dc780d9935dabc701a4c4832b16c11d7743c399a
Certificate serial: 6962013A20D0BB5A57E744109D0FBFB0E96F9CB2
Authority key identifier: DC:78:0D:99:35:DA:BC:70:1A:4C:48:32:B1:6C:11:D7:74:3C:39:9A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3HgNmTXavHAaTEgysWwR13Q8OZo.cer
Subject info access: rsync://rsync.krill.nlnetlabs.nl/repo/nlnetlabs/1/326130343a623930343a3a2f34382d3438203d3e20323131333231.roa
Signing time: Thu 02 Jul 2026 14:06:54 +0000
ROA not before: Thu 02 Jul 2026 14:01:54 +0000
ROA not after: Thu 01 Jul 2027 14:06:54 +0000
asID: 211321
IP address blocks: 2a04:b904::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.krill.nlnetlabs.nl/repo/nlnetlabs/1/DC780D9935DABC701A4C4832B16C11D7743C399A.crl
rsync://rsync.krill.nlnetlabs.nl/repo/nlnetlabs/1/DC780D9935DABC701A4C4832B16C11D7743C399A.mft
rsync://rpki.ripe.net/repository/DEFAULT/3HgNmTXavHAaTEgysWwR13Q8OZo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
69:62:01:3a:20:d0:bb:5a:57:e7:44:10:9d:0f:bf:b0:e9:6f:9c:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc780d9935dabc701a4c4832b16c11d7743c399a
Validity
Not Before: Jul 2 14:01:54 2026 GMT
Not After : Jul 1 14:06:54 2027 GMT
Subject: CN=4626703BC2B4E2A6114B57C293E75C8E858EDD24
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:73:5b:3b:49:30:b6:a5:3d:d1:b5:6e:28:15:
0d:b4:1c:0b:93:e8:eb:07:51:74:bf:25:89:25:c2:
71:07:65:98:96:6a:9d:bc:6c:ab:ce:f7:15:f6:1f:
60:62:79:9c:42:a8:67:c2:f8:ba:e6:d0:38:35:d1:
5f:c6:59:26:e1:1e:d9:2c:7b:94:91:76:d7:60:ae:
6e:ca:14:a6:5e:d9:3f:78:0c:4d:34:5d:3b:2c:71:
ec:6d:84:ae:2d:57:2f:a4:39:7e:67:b1:e6:b8:c8:
33:b0:b0:23:f4:a3:e5:88:92:54:fb:e6:85:48:1a:
51:88:0e:a2:bd:9c:6a:68:a4:50:af:ee:bb:1e:f8:
6c:f2:3f:06:79:4e:a6:cb:73:c4:dc:a0:4f:09:2c:
2a:66:e2:7a:60:d0:70:9e:11:c7:fb:f8:f8:b8:06:
bc:98:a1:86:3b:3e:3d:cd:57:5f:f5:36:ab:76:11:
01:85:1a:1e:dd:9c:5f:d5:75:d2:a9:6c:5a:a1:65:
c3:3e:88:b7:a4:57:98:dc:f2:05:f3:5e:63:87:81:
9a:60:a9:86:38:7f:ce:6e:84:af:d8:59:1f:b2:60:
01:d1:f1:98:b1:bf:9d:c5:f6:0a:e3:6a:5d:80:0a:
33:71:73:6b:ee:b2:25:b0:d0:fc:af:5f:be:0f:44:
10:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:26:70:3B:C2:B4:E2:A6:11:4B:57:C2:93:E7:5C:8E:85:8E:DD:24
X509v3 Authority Key Identifier:
keyid:DC:78:0D:99:35:DA:BC:70:1A:4C:48:32:B1:6C:11:D7:74:3C:39:9A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.krill.nlnetlabs.nl/repo/nlnetlabs/1/DC780D9935DABC701A4C4832B16C11D7743C399A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3HgNmTXavHAaTEgysWwR13Q8OZo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.krill.nlnetlabs.nl/repo/nlnetlabs/1/326130343a623930343a3a2f34382d3438203d3e20323131333231.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a04:b904::/48
Signature Algorithm: sha256WithRSAEncryption
83:72:03:29:46:05:74:ec:a8:ab:89:07:eb:d1:7b:fc:ed:d6:
db:14:fe:13:7a:fb:5d:67:4c:1d:78:0a:4c:f0:29:9c:fa:35:
ab:12:3a:b1:45:41:26:99:7a:77:d2:a5:59:bd:2e:a9:00:06:
85:0c:3f:60:ed:6d:a5:94:36:49:b7:fb:f4:97:5a:ed:55:14:
4d:31:8f:33:9c:b2:40:6f:e5:a1:02:85:12:4a:4e:d7:69:2f:
6c:41:87:e6:b9:0a:71:ca:82:15:25:9a:bb:7e:0e:d0:b4:f2:
2e:d8:06:4e:fd:86:41:f6:45:2d:31:df:02:35:a6:7f:d7:b5:
47:f6:98:2e:6c:89:7a:d9:db:ec:6b:b2:93:3f:91:de:51:4b:
e7:a9:13:bb:be:2f:95:ff:2a:0e:02:94:b3:a6:93:d9:82:61:
4d:b6:9c:b4:dc:a4:57:fc:e2:df:53:8b:44:57:7b:df:e6:39:
af:ab:f5:f0:10:b7:e8:5e:75:7b:27:2b:72:e2:c8:6b:a9:b9:
72:2a:ed:df:17:90:78:20:90:98:f7:4f:52:2f:3b:a8:b2:a3:
13:81:2c:a1:a1:ad:97:48:46:2f:c4:a6:f7:43:81:d6:27:9f:
1a:7d:20:4a:78:0e:bf:66:ab:99:38:91:58:ff:31:1c:c6:b5:
02:f9:e8:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 16:14:12 2026 by rpki-client