Route Origin Authorization
$ rpki-client -vvf rsync.krill.nlnetlabs.nl/repo/nlnetlabs/1/326130343a623930373a3a2f34372d3437203d3e20323131333231.roa
File: 326130343a623930373a3a2f34372d3437203d3e20323131333231.roa (raw, json)
Hash identifier: q5XBQbeSajkFemFHOP7sJXFLQua3ROC9i4L+KFjqA2Y=
Subject key identifier: D5:A9:B7:BB:E5:0E:CC:5E:87:B8:49:09:14:2B:41:65:57:56:00:87
Certificate issuer: /CN=dc780d9935dabc701a4c4832b16c11d7743c399a
Certificate serial: 59CC48765962C2DE6D634858B2E1C80930EC4DAE
Authority key identifier: DC:78:0D:99:35:DA:BC:70:1A:4C:48:32:B1:6C:11:D7:74:3C:39:9A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3HgNmTXavHAaTEgysWwR13Q8OZo.cer
Subject info access: rsync://rsync.krill.nlnetlabs.nl/repo/nlnetlabs/1/326130343a623930373a3a2f34372d3437203d3e20323131333231.roa
Signing time: Thu 02 Jul 2026 14:06:53 +0000
ROA not before: Thu 02 Jul 2026 14:01:53 +0000
ROA not after: Thu 01 Jul 2027 14:06:53 +0000
asID: 211321
IP address blocks: 2a04:b907::/47 maxlen: 47
Validation: OK
Signature path: rsync://rsync.krill.nlnetlabs.nl/repo/nlnetlabs/1/DC780D9935DABC701A4C4832B16C11D7743C399A.crl
rsync://rsync.krill.nlnetlabs.nl/repo/nlnetlabs/1/DC780D9935DABC701A4C4832B16C11D7743C399A.mft
rsync://rpki.ripe.net/repository/DEFAULT/3HgNmTXavHAaTEgysWwR13Q8OZo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 19:53:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
59:cc:48:76:59:62:c2:de:6d:63:48:58:b2:e1:c8:09:30:ec:4d:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc780d9935dabc701a4c4832b16c11d7743c399a
Validity
Not Before: Jul 2 14:01:53 2026 GMT
Not After : Jul 1 14:06:53 2027 GMT
Subject: CN=D5A9B7BBE50ECC5E87B84909142B416557560087
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:9e:59:f9:fd:f7:2b:75:ce:3e:e3:7d:4f:78:
27:6d:17:60:4a:ac:08:95:62:21:34:1a:92:94:a1:
8a:43:3d:7c:dc:0c:64:48:ed:6a:78:a9:53:1c:8d:
af:27:49:bb:91:17:93:5c:0f:01:09:05:1c:1d:b3:
e2:11:00:90:8f:e6:d6:c1:77:a3:a2:b4:4e:e9:d4:
5c:c9:b0:80:30:77:9f:a9:79:73:ef:8f:ee:ad:4e:
10:d4:37:36:8b:68:cc:e9:2c:7a:90:62:0f:42:ff:
4d:f7:4a:38:82:27:c5:ad:c1:84:5a:f3:03:46:3f:
71:5f:78:48:0b:ba:48:59:21:58:bc:98:2e:6e:80:
c8:b1:6a:bd:9e:d9:ff:73:c6:8a:e0:b0:eb:dd:f7:
02:f8:a5:71:dc:83:60:9f:cd:4f:78:d0:d3:80:ee:
14:41:0a:f0:4b:c7:f3:cc:0e:c6:d6:ff:ac:46:eb:
8a:ff:71:ae:45:37:2c:05:9a:97:e2:94:f2:f5:4b:
1b:2c:d3:bd:28:ad:9a:24:31:b6:a8:f0:37:30:06:
70:bc:aa:d7:7c:97:6b:ba:88:16:ac:9d:61:c8:01:
19:30:0d:04:8f:18:f8:c7:89:bf:97:12:f6:b9:7e:
fe:36:bc:e0:e7:c4:b0:aa:07:60:ef:b8:9b:45:9a:
f5:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:A9:B7:BB:E5:0E:CC:5E:87:B8:49:09:14:2B:41:65:57:56:00:87
X509v3 Authority Key Identifier:
keyid:DC:78:0D:99:35:DA:BC:70:1A:4C:48:32:B1:6C:11:D7:74:3C:39:9A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.krill.nlnetlabs.nl/repo/nlnetlabs/1/DC780D9935DABC701A4C4832B16C11D7743C399A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3HgNmTXavHAaTEgysWwR13Q8OZo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.krill.nlnetlabs.nl/repo/nlnetlabs/1/326130343a623930373a3a2f34372d3437203d3e20323131333231.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a04:b907::/47
Signature Algorithm: sha256WithRSAEncryption
69:49:9f:b8:7b:70:61:56:5c:81:72:7d:39:37:47:d3:86:63:
57:bc:24:c2:72:fb:f6:05:1f:02:c2:57:0a:51:db:bc:02:11:
aa:8f:f2:d6:39:e7:c2:6d:47:3a:f7:bf:af:ce:7e:d3:1c:e6:
7b:97:80:98:a9:3f:73:9e:33:c8:00:f0:2f:e1:df:25:a0:43:
2f:ca:d2:c0:42:3c:8d:1b:ed:cb:b0:e7:c3:d4:98:ec:fd:97:
e9:c3:19:86:98:be:91:93:16:9b:43:59:a6:cd:71:16:d8:08:
ca:a1:50:66:2b:54:3f:93:65:2d:48:f4:8a:5e:6f:1f:82:bf:
9c:b1:0d:d4:a1:e5:44:06:6f:09:ac:8f:d2:58:df:b7:fb:1c:
ce:a3:fb:d5:27:b7:39:d2:c2:48:b9:02:9f:81:a8:e4:c4:08:
79:c5:55:0e:54:6f:2d:90:48:61:08:2e:3f:ec:86:de:74:46:
99:4d:16:cd:af:d0:5b:dc:c8:0f:58:8b:6e:91:e9:b7:fb:89:
23:60:be:cf:43:da:bb:38:27:ab:86:c8:75:92:82:53:83:1d:
90:aa:33:8b:da:d3:ac:6d:d3:82:90:a2:0b:79:bb:c0:49:7f:
30:f8:f7:e4:bb:41:27:88:d4:b8:e3:68:e8:43:e8:96:23:aa:
4f:c9:ea:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 07:36:28 2026 by rpki-client