Route Origin Authorization
$ rpki-client -vvf rsync.krill.nlnetlabs.nl/repo/nlnetlabs/1/326130343a623930353a3a2f34382d3438203d3e203136353039.roa
File: 326130343a623930353a3a2f34382d3438203d3e203136353039.roa (raw, json)
Hash identifier: d+iw2diCkJRaNGhzIf4J/JKw8L1IDPPlPbWg6NjYiQ8=
Subject key identifier: EC:3A:5A:1E:6B:36:38:8D:B3:FD:5C:96:A0:2C:D4:54:66:CD:BB:F5
Certificate issuer: /CN=dc780d9935dabc701a4c4832b16c11d7743c399a
Certificate serial: 01D25982D7D4F4C1592439173E80A2B8D447DEB2
Authority key identifier: DC:78:0D:99:35:DA:BC:70:1A:4C:48:32:B1:6C:11:D7:74:3C:39:9A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3HgNmTXavHAaTEgysWwR13Q8OZo.cer
Subject info access: rsync://rsync.krill.nlnetlabs.nl/repo/nlnetlabs/1/326130343a623930353a3a2f34382d3438203d3e203136353039.roa
Signing time: Thu 02 Jul 2026 14:06:53 +0000
ROA not before: Thu 02 Jul 2026 14:01:53 +0000
ROA not after: Thu 01 Jul 2027 14:06:53 +0000
asID: 16509
IP address blocks: 2a04:b905::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.krill.nlnetlabs.nl/repo/nlnetlabs/1/DC780D9935DABC701A4C4832B16C11D7743C399A.crl
rsync://rsync.krill.nlnetlabs.nl/repo/nlnetlabs/1/DC780D9935DABC701A4C4832B16C11D7743C399A.mft
rsync://rpki.ripe.net/repository/DEFAULT/3HgNmTXavHAaTEgysWwR13Q8OZo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 19:53:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:d2:59:82:d7:d4:f4:c1:59:24:39:17:3e:80:a2:b8:d4:47:de:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc780d9935dabc701a4c4832b16c11d7743c399a
Validity
Not Before: Jul 2 14:01:53 2026 GMT
Not After : Jul 1 14:06:53 2027 GMT
Subject: CN=EC3A5A1E6B36388DB3FD5C96A02CD45466CDBBF5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:61:b8:9a:71:84:d4:05:43:80:fa:be:2e:0c:
45:b7:f6:54:40:bd:16:57:d0:0b:bc:1f:01:c6:4a:
05:0f:17:34:67:31:d7:17:d3:33:a3:ab:82:84:be:
56:fa:d1:57:34:66:1a:4b:56:96:4b:23:c1:5a:ed:
24:38:f6:fd:7e:ff:31:8b:24:6a:5f:2a:e8:be:fb:
a5:0f:0d:29:7d:68:97:a4:a8:08:d3:73:d5:9e:fc:
0c:56:1a:0a:d8:4c:8c:7f:07:ac:f4:91:67:b1:e8:
d0:8b:66:65:e5:d7:5c:55:37:25:89:f6:1f:14:28:
a3:da:05:59:97:58:6b:ca:cb:df:8d:3d:c7:f0:06:
a2:c3:8a:8f:1f:97:45:80:90:8d:5a:41:0c:c2:76:
e4:16:b0:37:82:47:95:dd:8f:f7:c7:3c:b4:7c:99:
56:f4:08:b7:be:0d:06:49:23:52:6b:09:15:c0:0f:
ff:a0:12:2a:03:d5:40:1e:d6:1c:36:26:1b:d8:77:
5d:7b:a4:fe:97:64:87:fd:78:70:fd:4d:fb:0a:36:
92:5e:21:47:64:74:30:97:7e:d7:54:7d:c0:94:4e:
a3:5f:5b:de:e0:7c:a9:50:50:49:59:82:ad:3a:95:
93:ab:df:05:92:45:d4:97:e0:e5:3f:77:9d:d9:52:
3b:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:3A:5A:1E:6B:36:38:8D:B3:FD:5C:96:A0:2C:D4:54:66:CD:BB:F5
X509v3 Authority Key Identifier:
keyid:DC:78:0D:99:35:DA:BC:70:1A:4C:48:32:B1:6C:11:D7:74:3C:39:9A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.krill.nlnetlabs.nl/repo/nlnetlabs/1/DC780D9935DABC701A4C4832B16C11D7743C399A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3HgNmTXavHAaTEgysWwR13Q8OZo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.krill.nlnetlabs.nl/repo/nlnetlabs/1/326130343a623930353a3a2f34382d3438203d3e203136353039.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a04:b905::/48
Signature Algorithm: sha256WithRSAEncryption
1c:06:f7:4f:47:77:de:46:bd:54:43:e2:31:71:1e:87:9f:2c:
b9:44:73:4a:50:3a:3b:1e:ab:da:45:98:c8:93:c3:8b:a8:e4:
9a:60:8c:2a:18:94:41:5d:ab:a0:ed:5d:8d:cf:1f:e7:ea:12:
85:b1:61:a8:2f:95:ff:bd:f7:f4:70:90:01:02:74:8d:07:64:
6a:0a:9b:66:42:77:3d:18:59:9e:1a:bc:d9:b2:20:d4:d9:ef:
7f:a0:20:ea:5a:6f:ca:d8:b7:4f:5b:7b:80:71:68:ac:93:8a:
86:ba:e8:3b:bd:6f:64:ac:54:94:e2:ce:99:96:33:a5:0b:1b:
fd:c4:3e:b7:9a:96:19:dd:29:f8:6a:c8:5f:a4:f6:5a:3f:d5:
3d:5c:fc:d0:5c:af:86:86:26:74:9b:5f:8c:3b:17:7a:76:b0:
e9:21:60:de:4c:60:41:cd:55:2d:5d:96:af:15:94:89:0e:c9:
28:79:03:d3:94:3a:b5:74:ef:f3:32:4e:aa:9c:05:02:19:a3:
50:35:b6:0c:bf:db:89:48:a1:11:d1:9b:67:61:2e:9e:66:24:
8f:c0:2d:d6:03:41:20:eb:4d:42:2b:65:ed:36:7f:68:32:2c:
8d:42:d2:ac:15:7f:27:26:b7:60:44:33:2c:c6:c9:e0:7e:40:
76:18:53:16
-----BEGIN CERTIFICATE-----
MIIE6DCCA9CgAwIBAgIUAdJZgtfU9MFZJDkXPoCiuNRH3rIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoZGM3ODBkOTkzNWRhYmM3MDFhNGM0ODMyYjE2YzExZDc3
NDNjMzk5YTAeFw0yNjA3MDIxNDAxNTNaFw0yNzA3MDExNDA2NTNaMDMxMTAvBgNV
BAMTKEVDM0E1QTFFNkIzNjM4OERCM0ZENUM5NkEwMkNENDU0NjZDREJCRjUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCqYbiacYTUBUOA+r4uDEW39lRA
vRZX0Au8HwHGSgUPFzRnMdcX0zOjq4KEvlb60Vc0ZhpLVpZLI8Fa7SQ49v1+/zGL
JGpfKui++6UPDSl9aJekqAjTc9We/AxWGgrYTIx/B6z0kWex6NCLZmXl11xVNyWJ
9h8UKKPaBVmXWGvKy9+NPcfwBqLDio8fl0WAkI1aQQzCduQWsDeCR5Xdj/fHPLR8
mVb0CLe+DQZJI1JrCRXAD/+gEioD1UAe1hw2JhvYd117pP6XZIf9eHD9TfsKNpJe
IUdkdDCXftdUfcCUTqNfW97gfKlQUElZgq06lZOr3wWSRdSX4OU/d53ZUjuhAgMB
AAGjggHyMIIB7jAdBgNVHQ4EFgQU7DpaHms2OI2z/VyWoCzUVGbNu/UwHwYDVR0j
BBgwFoAU3HgNmTXavHAaTEgysWwR13Q8OZowDgYDVR0PAQH/BAQDAgeAMG8GA1Ud
HwRoMGYwZKBioGCGXnJzeW5jOi8vcnN5bmMua3JpbGwubmxuZXRsYWJzLm5sL3Jl
cG8vbmxuZXRsYWJzLzEvREM3ODBEOTkzNURBQkM3MDFBNEM0ODMyQjE2QzExRDc3
NDNDMzk5QS5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzov
L3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzNIZ05tVFhhdkhBYVRF
Z3lzV3dSMTNROE9aby5jZXIwgYYGCCsGAQUFBwELBHoweDB2BggrBgEFBQcwC4Zq
cnN5bmM6Ly9yc3luYy5rcmlsbC5ubG5ldGxhYnMubmwvcmVwby9ubG5ldGxhYnMv
MS8zMjYxMzAzNDNhNjIzOTMwMzUzYTNhMmYzNDM4MmQzNDM4MjAzZDNlMjAzMTM2
MzUzMDM5LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEH
AQH/BBMwETAPBAIAAjAJAwcAKgS5BQAAMA0GCSqGSIb3DQEBCwUAA4IBAQAcBvdP
R3feRr1UQ+IxcR6Hnyy5RHNKUDo7HqvaRZjIk8OLqOSaYIwqGJRBXaug7V2Nzx/n
6hKFsWGoL5X/vff0cJABAnSNB2RqCptmQnc9GFmeGrzZsiDU2e9/oCDqWm/K2LdP
W3uAcWisk4qGuug7vW9krFSU4s6ZljOlCxv9xD63mpYZ3Sn4ashfpPZaP9U9XPzQ
XK+GhiZ0m1+MOxd6drDpIWDeTGBBzVUtXZavFZSJDskoeQPTlDq1dO/zMk6qnAUC
GaNQNbYMv9uJSKER0ZtnYS6eZiSPwC3WA0Eg601CK2XtNn9oMiyNQtKsFX8nJrdg
RDMsxsngfkB2GFMW
-----END CERTIFICATE-----
Generated at Fri Jul 24 06:20:37 2026 by rpki-client