Route Origin Authorization
$ rpki-client -vvf rsync.krill.nlnetlabs.nl/repo/nlnetlabs/1/326130343a623930363a3a2f34382d3438203d3e2030.roa
File: 326130343a623930363a3a2f34382d3438203d3e2030.roa (raw, json)
Hash identifier: eiOsAFzUoO5n+xOw6ZqDfb1W9mjnMVvG3lh8Uszxqbc=
Subject key identifier: BB:4E:A3:9B:BF:E9:35:14:7E:A1:01:36:18:46:E9:40:93:67:61:95
Certificate issuer: /CN=dc780d9935dabc701a4c4832b16c11d7743c399a
Certificate serial: 61060E5679AC9931EB4BFFCFBDEFBB7D650BB421
Authority key identifier: DC:78:0D:99:35:DA:BC:70:1A:4C:48:32:B1:6C:11:D7:74:3C:39:9A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3HgNmTXavHAaTEgysWwR13Q8OZo.cer
Subject info access: rsync://rsync.krill.nlnetlabs.nl/repo/nlnetlabs/1/326130343a623930363a3a2f34382d3438203d3e2030.roa
Signing time: Thu 02 Jul 2026 14:06:53 +0000
ROA not before: Thu 02 Jul 2026 14:01:53 +0000
ROA not after: Thu 01 Jul 2027 14:06:53 +0000
asID: 0
IP address blocks: 2a04:b906::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.krill.nlnetlabs.nl/repo/nlnetlabs/1/DC780D9935DABC701A4C4832B16C11D7743C399A.crl
rsync://rsync.krill.nlnetlabs.nl/repo/nlnetlabs/1/DC780D9935DABC701A4C4832B16C11D7743C399A.mft
rsync://rpki.ripe.net/repository/DEFAULT/3HgNmTXavHAaTEgysWwR13Q8OZo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 16:54:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
61:06:0e:56:79:ac:99:31:eb:4b:ff:cf:bd:ef:bb:7d:65:0b:b4:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc780d9935dabc701a4c4832b16c11d7743c399a
Validity
Not Before: Jul 2 14:01:53 2026 GMT
Not After : Jul 1 14:06:53 2027 GMT
Subject: CN=BB4EA39BBFE935147EA101361846E94093676195
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:c3:6f:52:2e:03:eb:17:4d:32:75:51:c6:38:
ab:fc:a8:c2:b7:9f:76:92:22:ad:1d:0b:60:6b:b8:
6d:d4:e0:59:30:cb:4f:38:fd:72:99:64:d3:86:dc:
f7:8a:f4:67:70:90:f1:b9:06:23:91:43:3f:f1:26:
66:e2:9c:69:b4:74:00:6d:5c:f3:a9:82:4e:d8:e8:
f4:d2:56:c7:4b:ff:ad:38:4c:be:c1:c3:66:3d:0d:
24:d0:99:6e:07:83:e2:dc:87:46:a0:9c:41:6e:9e:
1e:b8:4c:07:4a:56:43:03:33:94:32:b5:0d:ab:c8:
06:a4:34:f9:96:72:43:1d:3a:d5:a6:f0:43:a5:cf:
21:f5:4b:16:1a:7a:6d:f5:e3:4f:f7:e0:19:04:41:
61:a0:4d:02:1b:a8:37:36:c8:5d:a0:5e:b9:44:9d:
1b:9b:08:93:d7:08:f2:1b:1e:37:2a:df:d6:21:0b:
5f:c3:22:ab:a4:a9:64:db:af:c9:ea:e8:40:57:dc:
b4:39:74:0c:df:c4:cb:de:82:06:6c:ec:60:bd:ca:
ff:a3:44:8f:3f:fc:50:74:eb:43:ec:83:35:98:4a:
1b:9b:d8:f6:c9:8e:f3:c5:29:df:2a:9d:a8:fe:53:
d1:13:5e:df:c7:d9:b0:3a:1f:2e:27:23:14:f4:2f:
85:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:4E:A3:9B:BF:E9:35:14:7E:A1:01:36:18:46:E9:40:93:67:61:95
X509v3 Authority Key Identifier:
keyid:DC:78:0D:99:35:DA:BC:70:1A:4C:48:32:B1:6C:11:D7:74:3C:39:9A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.krill.nlnetlabs.nl/repo/nlnetlabs/1/DC780D9935DABC701A4C4832B16C11D7743C399A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3HgNmTXavHAaTEgysWwR13Q8OZo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.krill.nlnetlabs.nl/repo/nlnetlabs/1/326130343a623930363a3a2f34382d3438203d3e2030.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a04:b906::/48
Signature Algorithm: sha256WithRSAEncryption
94:d9:b2:6d:4a:46:ff:ad:0d:88:a2:d6:3b:6c:27:9e:6d:a7:
50:09:b4:a7:2d:a2:2f:53:6b:1b:a9:ae:31:fa:6a:d5:38:0f:
8c:fb:88:09:92:4e:75:1c:c8:19:d5:3e:1f:31:3c:31:fd:3e:
5f:15:f9:44:09:d4:10:41:9d:da:3c:81:f8:18:51:dd:2b:16:
37:1c:11:27:82:e9:9b:25:64:97:81:70:74:b8:a4:24:ff:55:
32:a7:67:a7:94:7c:67:63:18:e9:69:c4:11:25:74:b4:81:4c:
d9:e4:98:d3:db:20:75:43:40:8a:15:e6:91:75:84:96:b5:17:
89:f9:28:23:a0:b9:a3:c4:c4:d1:fe:55:ea:78:01:3d:f3:7c:
71:3f:2a:1c:3a:f1:29:49:bc:d1:f0:71:30:ff:ba:d1:00:13:
5f:4f:9c:61:a8:27:cb:ef:76:bd:01:4e:9d:82:c8:a7:74:ac:
16:0c:68:6a:16:d8:51:40:70:08:33:db:6e:5c:e1:6e:a9:66:
f5:cb:89:c1:b7:c7:67:4d:58:e2:3e:29:61:ed:94:dd:0b:1a:
4f:10:db:32:62:a2:7d:38:cf:72:e8:16:45:a0:fa:5a:b5:9d:
c9:b1:12:01:32:61:f9:07:e9:68:76:29:f2:34:33:a3:75:2f:
ff:22:3c:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 01:15:21 2026 by rpki-client