Route Origin Authorization
$ rpki-client -vvf krill.signalx.cloud/repo/signalx-rpki/6/326130623a346238313a313030333a3a2f34382d3438203d3e20323131353835.roa
File: 326130623a346238313a313030333a3a2f34382d3438203d3e20323131353835.roa (raw, json)
Hash identifier: YqLoXYq8CvWBNnBUykUxXsu7E1d0r/8x3lOP64/m1I0=
Subject key identifier: D0:D5:63:92:2B:78:D8:E2:2A:B0:98:41:1A:97:80:93:4D:90:2A:62
Certificate issuer: /CN=88332c8750cc71629e694fddb3615ae083589921
Certificate serial: 7B5C38677719BC18C9947E43763DF2311A7450DE
Authority key identifier: 88:33:2C:87:50:CC:71:62:9E:69:4F:DD:B3:61:5A:E0:83:58:99:21
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iDMsh1DMcWKeaU_ds2Fa4INYmSE.cer
Subject info access: rsync://krill.signalx.cloud/repo/signalx-rpki/6/326130623a346238313a313030333a3a2f34382d3438203d3e20323131353835.roa
Signing time: Mon 29 Sep 2025 09:33:23 +0000
ROA not before: Mon 29 Sep 2025 09:28:23 +0000
ROA not after: Mon 28 Sep 2026 09:33:23 +0000
asID: 211585
IP address blocks: 2a0b:4b81:1003::/48 maxlen: 48
Validation: OK
Signature path: rsync://krill.signalx.cloud/repo/signalx-rpki/6/88332C8750CC71629E694FDDB3615AE083589921.crl
rsync://krill.signalx.cloud/repo/signalx-rpki/6/88332C8750CC71629E694FDDB3615AE083589921.mft
rsync://rpki.ripe.net/repository/DEFAULT/iDMsh1DMcWKeaU_ds2Fa4INYmSE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Oct 2025 17:43:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7b:5c:38:67:77:19:bc:18:c9:94:7e:43:76:3d:f2:31:1a:74:50:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=88332c8750cc71629e694fddb3615ae083589921
Validity
Not Before: Sep 29 09:28:23 2025 GMT
Not After : Sep 28 09:33:23 2026 GMT
Subject: CN=D0D563922B78D8E22AB098411A9780934D902A62
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:99:83:a6:4a:36:e1:b4:f4:70:14:37:8c:31:
bc:5b:2d:89:e2:00:c2:30:c3:b8:c8:d1:4c:40:92:
88:6c:e9:63:ea:bf:32:f8:25:ba:ae:f3:9f:b4:97:
1f:d0:ee:f4:f7:4c:93:26:49:d9:bc:2d:1c:0f:35:
8e:02:df:2f:bf:f2:03:57:69:ae:3d:d6:c8:4c:14:
f7:77:2b:f8:2d:26:19:e4:6c:03:a0:80:db:c6:1d:
85:24:27:22:57:1e:45:58:74:74:7a:92:89:1b:4f:
6e:46:c0:9e:de:02:a3:be:52:cf:9e:14:49:e5:1c:
98:2d:d0:1f:c7:63:c5:59:21:a7:cb:17:e7:b9:97:
cf:fa:ec:d9:83:11:36:ad:26:90:05:2b:f0:bf:71:
f5:ab:e8:c7:89:00:7f:05:0a:2e:fd:18:9c:30:94:
5c:d7:56:3e:ca:a1:e5:ea:a9:e0:b0:a9:6f:60:30:
fa:f2:81:f2:ae:7d:47:09:99:5d:5e:c5:b4:f5:26:
0d:75:b5:07:5e:08:ad:b0:da:99:42:4b:e1:3f:a9:
27:b5:1e:e0:4e:5d:5f:bc:cb:5e:2b:6f:66:fd:8b:
7f:d9:cf:11:06:ba:d2:ec:55:51:81:6b:62:e6:f1:
c4:1e:6f:a0:c4:c3:37:a7:ae:22:ea:de:92:03:82:
9f:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:D5:63:92:2B:78:D8:E2:2A:B0:98:41:1A:97:80:93:4D:90:2A:62
X509v3 Authority Key Identifier:
keyid:88:33:2C:87:50:CC:71:62:9E:69:4F:DD:B3:61:5A:E0:83:58:99:21
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://krill.signalx.cloud/repo/signalx-rpki/6/88332C8750CC71629E694FDDB3615AE083589921.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iDMsh1DMcWKeaU_ds2Fa4INYmSE.cer
Subject Information Access:
Signed Object - URI:rsync://krill.signalx.cloud/repo/signalx-rpki/6/326130623a346238313a313030333a3a2f34382d3438203d3e20323131353835.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0b:4b81:1003::/48
Signature Algorithm: sha256WithRSAEncryption
82:b3:80:fe:54:50:b7:96:7a:aa:7a:8e:2e:83:04:a7:46:bd:
d6:32:80:8f:43:b4:04:71:70:44:25:24:09:da:52:7b:4d:d6:
61:64:22:c9:14:3a:8e:ba:a2:67:5a:68:3c:9e:ea:65:12:a6:
e7:fb:77:62:63:09:29:8e:c8:3e:03:95:a5:f0:29:3d:6f:7a:
97:25:59:57:af:b7:91:9d:20:28:3b:50:b4:b0:fc:1a:eb:b0:
03:e9:0f:60:fb:34:ed:c7:5d:9f:0f:b0:9f:41:7d:10:fc:9a:
10:d7:4c:dd:ef:84:bf:cf:12:80:4b:1f:75:79:b2:1e:ee:8a:
35:92:55:ac:b8:33:87:6e:6d:be:c0:9e:1d:be:ff:27:c1:75:
da:21:4b:15:23:a1:d4:b7:28:6c:95:df:d3:59:2a:bd:30:f8:
b8:f5:8b:6d:7c:64:7b:bd:b2:df:25:af:ce:6d:26:15:cb:9c:
a1:69:40:30:15:1f:77:76:92:a4:2c:dd:b2:c9:72:e7:ff:89:
22:fe:b5:dc:69:51:6b:4f:68:10:01:57:12:e8:df:b2:c0:0d:
d3:e3:b1:d1:2a:41:42:db:ba:b2:48:04:69:df:91:bf:31:a9:
88:c4:f4:a6:d1:b4:ee:7d:3b:d3:07:ef:26:54:db:2a:70:3f:
16:35:34:76
-----BEGIN CERTIFICATE-----
MIIE8zCCA9ugAwIBAgIUe1w4Z3cZvBjJlH5Ddj3yMRp0UN4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoODgzMzJjODc1MGNjNzE2MjllNjk0ZmRkYjM2MTVhZTA4
MzU4OTkyMTAeFw0yNTA5MjkwOTI4MjNaFw0yNjA5MjgwOTMzMjNaMDMxMTAvBgNV
BAMTKEQwRDU2MzkyMkI3OEQ4RTIyQUIwOTg0MTFBOTc4MDkzNEQ5MDJBNjIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCKmYOmSjbhtPRwFDeMMbxbLYni
AMIww7jI0UxAkohs6WPqvzL4Jbqu85+0lx/Q7vT3TJMmSdm8LRwPNY4C3y+/8gNX
aa491shMFPd3K/gtJhnkbAOggNvGHYUkJyJXHkVYdHR6kokbT25GwJ7eAqO+Us+e
FEnlHJgt0B/HY8VZIafLF+e5l8/67NmDETatJpAFK/C/cfWr6MeJAH8FCi79GJww
lFzXVj7KoeXqqeCwqW9gMPrygfKufUcJmV1exbT1Jg11tQdeCK2w2plCS+E/qSe1
HuBOXV+8y14rb2b9i3/ZzxEGutLsVVGBa2Lm8cQeb6DEwzenriLq3pIDgp8TAgMB
AAGjggH9MIIB+TAdBgNVHQ4EFgQU0NVjkit42OIqsJhBGpeAk02QKmIwHwYDVR0j
BBgwFoAUiDMsh1DMcWKeaU/ds2Fa4INYmSEwDgYDVR0PAQH/BAQDAgeAMG0GA1Ud
HwRmMGQwYqBgoF6GXHJzeW5jOi8va3JpbGwuc2lnbmFseC5jbG91ZC9yZXBvL3Np
Z25hbHgtcnBraS82Lzg4MzMyQzg3NTBDQzcxNjI5RTY5NEZEREIzNjE1QUUwODM1
ODk5MjEuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggrBgEFBQcwAoZIcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvREVGQVVMVC9pRE1zaDFETWNXS2VhVV9k
czJGYTRJTlltU0UuY2VyMIGTBggrBgEFBQcBCwSBhjCBgzCBgAYIKwYBBQUHMAuG
dHJzeW5jOi8va3JpbGwuc2lnbmFseC5jbG91ZC9yZXBvL3NpZ25hbHgtcnBraS82
LzMyNjEzMDYyM2EzNDYyMzgzMTNhMzEzMDMwMzMzYTNhMmYzNDM4MmQzNDM4MjAz
ZDNlMjAzMjMxMzEzNTM4MzUucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw
IgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwAqC0uBEAMwDQYJKoZIhvcNAQEL
BQADggEBAIKzgP5UULeWeqp6ji6DBKdGvdYygI9DtARxcEQlJAnaUntN1mFkIskU
Oo66omdaaDye6mUSpuf7d2JjCSmOyD4DlaXwKT1vepclWVevt5GdICg7ULSw/Brr
sAPpD2D7NO3HXZ8PsJ9BfRD8mhDXTN3vhL/PEoBLH3V5sh7uijWSVay4M4dubb7A
nh2+/yfBddohSxUjodS3KGyV39NZKr0w+Lj1i218ZHu9st8lr85tJhXLnKFpQDAV
H3d2kqQs3bLJcuf/iSL+tdxpUWtPaBABVxLo37LADdPjsdEqQULburJIBGnfkb8x
qYjE9KbRtO59O9MH7yZU2ypwPxY1NHY=
-----END CERTIFICATE-----
Generated at Sat Oct 18 05:59:59 2025 by rpki-client