$ rpki-client -vvf rsync.krill.clnexus.dev/repo/CLNexus/2/3136372e3130342e3231382e302f32342d3234203d3e20323134343230.roa File: 3136372e3130342e3231382e302f32342d3234203d3e20323134343230.roa (raw, json) Hash identifier: C/cXsa/Ub+fm92VdebNBStOF+x2Ut2EDsAEUsFEaifI= Subject key identifier: 2B:C1:E4:3A:50:68:8D:4E:6C:85:DA:C0:E8:25:F9:CE:45:79:1B:D0 Certificate issuer: /CN=9450D551BB071689045ED8318A0D2E8F75FED7AF Certificate serial: 3EF937E41B3B5B2A827346DB21CC10FC4409E220 Authority key identifier: 94:50:D5:51:BB:07:16:89:04:5E:D8:31:8A:0D:2E:8F:75:FE:D7:AF Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/9450D551BB071689045ED8318A0D2E8F75FED7AF.cer Subject info access: rsync://rsync.krill.clnexus.dev/repo/CLNexus/2/3136372e3130342e3231382e302f32342d3234203d3e20323134343230.roa Signing time: Fri 17 Jul 2026 13:14:52 +0000 ROA not before: Fri 17 Jul 2026 13:09:52 +0000 ROA not after: Fri 16 Jul 2027 13:14:52 +0000 asID: 214420 IP address blocks: 167.104.218.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.krill.clnexus.dev/repo/CLNexus/2/9450D551BB071689045ED8318A0D2E8F75FED7AF.crl rsync://rsync.krill.clnexus.dev/repo/CLNexus/2/9450D551BB071689045ED8318A0D2E8F75FED7AF.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/9450D551BB071689045ED8318A0D2E8F75FED7AF.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 22 Jul 2026 14:18:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3e:f9:37:e4:1b:3b:5b:2a:82:73:46:db:21:cc:10:fc:44:09:e2:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9450D551BB071689045ED8318A0D2E8F75FED7AF Validity Not Before: Jul 17 13:09:52 2026 GMT Not After : Jul 16 13:14:52 2027 GMT Subject: CN=2BC1E43A50688D4E6C85DAC0E825F9CE45791BD0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:68:70:36:9a:db:0c:77:65:56:97:c6:01:d3: f2:36:aa:d1:82:6b:85:1f:a8:ef:5e:1b:58:8d:32: e0:9f:cb:07:0f:cf:7e:15:14:4e:c8:1b:f2:55:cb: 9b:b8:d5:23:a1:f2:f3:aa:f2:e8:51:1d:e7:f9:99: d9:da:6b:00:f2:91:4b:be:8c:5f:e4:1c:41:67:dc: 82:6e:ae:8b:25:ad:01:ee:2b:7d:98:a3:c5:c6:bf: 84:d6:26:5d:e9:08:73:af:e7:f7:b4:54:29:df:93: 3b:97:e2:88:d8:13:07:34:35:7e:58:be:1b:ae:40: 07:e8:09:dc:0f:dc:b2:65:28:08:ef:c6:59:03:1b: b1:bb:1d:f8:2d:5f:9c:6f:10:95:2a:e7:69:67:4b: 7c:60:4b:b2:b5:b4:a7:a9:0e:12:8d:59:74:dc:4c: 74:ae:fe:c0:e4:d6:35:6e:ce:ac:b5:a5:50:c6:71: 91:0d:d4:73:45:f7:e7:8f:c1:46:09:e7:bc:b2:2a: 87:60:a4:f5:ee:03:17:b2:03:82:e8:ad:9b:25:51: e9:4a:2f:ab:2e:5b:24:b3:2f:cb:75:66:82:f2:5b: f0:3f:4c:e2:73:00:de:86:f9:d0:51:3c:9a:d3:24: 61:bf:ae:eb:c3:f0:d2:ac:18:5b:85:3e:44:89:2d: 05:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:C1:E4:3A:50:68:8D:4E:6C:85:DA:C0:E8:25:F9:CE:45:79:1B:D0 X509v3 Authority Key Identifier: keyid:94:50:D5:51:BB:07:16:89:04:5E:D8:31:8A:0D:2E:8F:75:FE:D7:AF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.krill.clnexus.dev/repo/CLNexus/2/9450D551BB071689045ED8318A0D2E8F75FED7AF.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/9450D551BB071689045ED8318A0D2E8F75FED7AF.cer Subject Information Access: Signed Object - URI:rsync://rsync.krill.clnexus.dev/repo/CLNexus/2/3136372e3130342e3231382e302f32342d3234203d3e20323134343230.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 167.104.218.0/24 Signature Algorithm: sha256WithRSAEncryption 9f:df:6b:aa:c3:e7:00:63:8f:53:40:2b:fd:c7:6b:a8:cb:9a: a2:9a:29:6c:89:92:84:6f:ce:da:57:5a:43:56:4c:1f:7f:3d: 7a:92:cc:d4:8d:09:a6:96:98:49:e0:36:6e:35:73:bd:6d:08: 43:30:51:67:d3:71:28:17:0f:b4:bc:02:7c:78:dc:23:3f:6a: b5:81:27:0b:16:97:8e:e1:65:c8:df:5b:30:4c:27:27:0c:0c: 96:10:f8:6e:a4:2c:31:e5:5e:38:5b:99:42:9b:a9:17:79:62: fe:17:db:62:c3:94:97:ed:f7:bb:41:2e:69:fb:45:2a:85:c8: a8:e8:45:56:2d:e0:16:9a:aa:46:0c:8d:f3:5f:1d:b3:8c:f4: 0f:0d:68:20:5a:37:62:5e:37:c3:1b:90:bd:2d:b7:5b:d1:04: f2:6d:90:4a:50:48:d4:32:09:87:eb:e2:3c:b1:fd:e6:22:52: 80:3f:65:3c:74:6f:a0:c0:9c:5f:6a:a5:ac:fa:14:4c:58:34: 35:f3:bc:73:e3:33:82:00:c6:a5:0a:18:8c:e2:e6:bf:b0:71: 8f:d4:5c:f4:10:4f:96:7f:9e:92:a1:56:8a:81:47:70:87:29: f0:51:ad:34:31:dc:0e:c8:3e:45:b6:d0:da:79:2d:04:6a:58: 91:c2:81:14 -----BEGIN CERTIFICATE----- MIIFFTCCA/2gAwIBAgIUPvk35Bs7WyqCc0bbIcwQ/EQJ4iAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTQ1MEQ1NTFCQjA3MTY4OTA0NUVEODMxOEEwRDJFOEY3 NUZFRDdBRjAeFw0yNjA3MTcxMzA5NTJaFw0yNzA3MTYxMzE0NTJaMDMxMTAvBgNV BAMTKDJCQzFFNDNBNTA2ODhENEU2Qzg1REFDMEU4MjVGOUNFNDU3OTFCRDAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCpaHA2mtsMd2VWl8YB0/I2qtGC a4UfqO9eG1iNMuCfywcPz34VFE7IG/JVy5u41SOh8vOq8uhRHef5mdnaawDykUu+ jF/kHEFn3IJuroslrQHuK32Yo8XGv4TWJl3pCHOv5/e0VCnfkzuX4ojYEwc0NX5Y vhuuQAfoCdwP3LJlKAjvxlkDG7G7HfgtX5xvEJUq52lnS3xgS7K1tKepDhKNWXTc THSu/sDk1jVuzqy1pVDGcZEN1HNF9+ePwUYJ57yyKodgpPXuAxeyA4LorZslUelK L6suWySzL8t1ZoLyW/A/TOJzAN6G+dBRPJrTJGG/ruvD8NKsGFuFPkSJLQWvAgMB AAGjggIfMIICGzAdBgNVHQ4EFgQUK8HkOlBojU5shdrA6CX5zkV5G9AwHwYDVR0j BBgwFoAUlFDVUbsHFokEXtgxig0uj3X+168wDgYDVR0PAQH/BAQDAgeAMGwGA1Ud HwRlMGMwYaBfoF2GW3JzeW5jOi8vcnN5bmMua3JpbGwuY2xuZXh1cy5kZXYvcmVw by9DTE5leHVzLzIvOTQ1MEQ1NTFCQjA3MTY4OTA0NUVEODMxOEEwRDJFOEY3NUZF RDdBRi5jcmwwgZMGCCsGAQUFBwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5bmM6 Ly9ycGtpLXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2M2Uw MTg1NzU1YzkxYmUzZjlkLzcvOTQ1MEQ1NTFCQjA3MTY4OTA0NUVEODMxOEEwRDJF OEY3NUZFRDdBRi5jZXIwgYkGCCsGAQUFBwELBH0wezB5BggrBgEFBQcwC4ZtcnN5 bmM6Ly9yc3luYy5rcmlsbC5jbG5leHVzLmRldi9yZXBvL0NMTmV4dXMvMi8zMTM2 MzcyZTMxMzAzNDJlMzIzMTM4MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzMTM0 MzQzMjMwLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH AQH/BBAwDjAMBAIAATAGAwQAp2jaMA0GCSqGSIb3DQEBCwUAA4IBAQCf32uqw+cA Y49TQCv9x2uoy5qimilsiZKEb87aV1pDVkwffz16kszUjQmmlphJ4DZuNXO9bQhD MFFn03EoFw+0vAJ8eNwjP2q1gScLFpeO4WXI31swTCcnDAyWEPhupCwx5V44W5lC m6kXeWL+F9tiw5SX7fe7QS5p+0Uqhcio6EVWLeAWmqpGDI3zXx2zjPQPDWggWjdi XjfDG5C9Lbdb0QTybZBKUEjUMgmH6+I8sf3mIlKAP2U8dG+gwJxfaqWs+hRMWDQ1 87xz4zOCAMalChiM4ua/sHGP1Fz0EE+Wf56SoVaKgUdwhynwUa00MdwOyD5FttDa eS0EaliRwoEU -----END CERTIFICATE-----Generated at Tue Jul 21 20:29:53 2026 by rpki-client