Route Origin Authorization
$ rpki-client -vvf rsync.krill.nlnetlabs.nl/repo/nlnetlabs/1/326130343a623930373a3a2f34382d3438203d3e2030.roa
File: 326130343a623930373a3a2f34382d3438203d3e2030.roa (raw, json)
Hash identifier: pEkraM4NhbgBsFbDwa7w6tJcsCMwH3uOz0vykIUzTk8=
Subject key identifier: 4A:3F:65:BE:1B:A0:EB:40:DA:35:8F:E6:4C:CC:8B:15:FD:30:54:7F
Certificate issuer: /CN=dc780d9935dabc701a4c4832b16c11d7743c399a
Certificate serial: 601752ABBB10B821069B466A98005B0F370AE36B
Authority key identifier: DC:78:0D:99:35:DA:BC:70:1A:4C:48:32:B1:6C:11:D7:74:3C:39:9A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3HgNmTXavHAaTEgysWwR13Q8OZo.cer
Subject info access: rsync://rsync.krill.nlnetlabs.nl/repo/nlnetlabs/1/326130343a623930373a3a2f34382d3438203d3e2030.roa
Signing time: Thu 02 Jul 2026 14:06:53 +0000
ROA not before: Thu 02 Jul 2026 14:01:53 +0000
ROA not after: Thu 01 Jul 2027 14:06:53 +0000
asID: 0
IP address blocks: 2a04:b907::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.krill.nlnetlabs.nl/repo/nlnetlabs/1/DC780D9935DABC701A4C4832B16C11D7743C399A.crl
rsync://rsync.krill.nlnetlabs.nl/repo/nlnetlabs/1/DC780D9935DABC701A4C4832B16C11D7743C399A.mft
rsync://rpki.ripe.net/repository/DEFAULT/3HgNmTXavHAaTEgysWwR13Q8OZo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 19:53:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
60:17:52:ab:bb:10:b8:21:06:9b:46:6a:98:00:5b:0f:37:0a:e3:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc780d9935dabc701a4c4832b16c11d7743c399a
Validity
Not Before: Jul 2 14:01:53 2026 GMT
Not After : Jul 1 14:06:53 2027 GMT
Subject: CN=4A3F65BE1BA0EB40DA358FE64CCC8B15FD30547F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:4d:f8:57:9b:bf:65:9a:a3:d1:a3:2c:12:b5:
91:ae:b9:65:cf:5e:17:50:b8:ce:8b:cd:2f:e8:0b:
f0:ae:df:ab:af:83:94:f0:7d:f1:00:04:d5:08:ec:
2f:74:b7:0f:77:be:87:3f:36:ac:34:ee:27:8b:c9:
db:7d:72:a5:71:b1:81:cf:70:20:37:27:f1:bb:2d:
7a:c8:9a:ba:76:43:39:68:c0:64:03:41:4a:da:aa:
44:0e:32:32:51:69:82:ac:4c:59:e4:d4:3b:2b:ef:
8a:a6:80:68:78:c8:8d:89:c0:48:a9:a5:70:91:a3:
8f:bf:e1:ab:5b:fe:e4:f5:0a:6d:c4:00:12:30:19:
b9:96:74:58:22:41:12:79:ae:fa:60:ad:a2:0e:be:
78:9c:06:42:b5:72:59:f8:f9:e1:17:5c:d5:86:35:
62:bb:9d:7f:78:21:c7:05:45:1d:53:06:5c:d8:cd:
e6:5d:33:49:f0:74:3f:44:65:47:08:e1:e2:ee:06:
b0:43:e6:23:37:6b:f2:39:dd:2b:49:60:eb:06:e8:
d5:77:36:48:b9:74:2f:2c:50:c6:31:dc:77:3b:a0:
a0:75:fd:e2:26:fc:49:4a:ae:9f:ba:55:24:4e:8d:
a0:34:16:09:b8:47:d5:f9:8f:29:40:a4:ac:99:90:
56:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:3F:65:BE:1B:A0:EB:40:DA:35:8F:E6:4C:CC:8B:15:FD:30:54:7F
X509v3 Authority Key Identifier:
keyid:DC:78:0D:99:35:DA:BC:70:1A:4C:48:32:B1:6C:11:D7:74:3C:39:9A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.krill.nlnetlabs.nl/repo/nlnetlabs/1/DC780D9935DABC701A4C4832B16C11D7743C399A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3HgNmTXavHAaTEgysWwR13Q8OZo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.krill.nlnetlabs.nl/repo/nlnetlabs/1/326130343a623930373a3a2f34382d3438203d3e2030.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a04:b907::/48
Signature Algorithm: sha256WithRSAEncryption
3e:d1:91:8f:62:2f:cf:1e:1c:94:5c:ba:ba:ec:f2:44:d4:4d:
39:1a:68:32:ee:6b:0e:a1:94:69:8d:69:5f:d4:69:78:a2:fd:
cc:4d:f5:e7:83:78:22:bb:6c:3c:9d:2c:4f:17:7a:e6:c3:0b:
0c:5a:27:db:36:80:57:68:39:ff:ef:a7:ee:d7:e7:ae:fa:c8:
9d:b6:f0:76:0a:c3:1b:0d:32:46:94:9d:82:62:ce:49:99:68:
62:83:04:7d:20:97:69:88:db:ac:ba:94:08:b8:26:10:85:92:
fe:38:be:41:82:dd:e0:63:97:e0:f0:f2:43:a7:7e:a6:ab:d6:
7f:8f:25:e4:a1:82:b8:60:66:24:87:46:22:02:80:a2:56:6d:
62:0b:2a:24:2e:26:83:85:f1:e4:10:7a:d9:54:7e:ef:69:35:
ff:72:42:a8:54:d7:7c:88:c7:40:6f:46:08:fe:6e:6d:e5:74:
9e:9c:86:d5:0c:a5:ae:01:49:b2:4a:4e:1c:5a:85:ae:3d:17:
95:56:ef:1f:d9:66:ab:77:d5:a0:53:9c:6b:8b:27:8a:33:62:
fb:9d:cc:50:75:7a:9d:da:8b:7e:f1:ea:4d:ea:69:03:f0:2f:
e2:30:ac:49:43:da:cd:b2:3d:74:2c:59:c4:ae:1d:17:39:49:
f9:db:98:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 03:52:05 2026 by rpki-client