Route Origin Authorization
$ rpki-client -vvvf rsync.krill.nlnetlabs.nl/repo/nlnetlabs/1/326130343a623930303a3530303a3a2f34302d3430203d3e203630313331.roa
File: 326130343a623930303a3530303a3a2f34302d3430203d3e203630313331.roa (raw, json)
Hash identifier: aHSU2LAP9+uQoMkIpvrqOzq9aYzl4H0ZJ31M+HGxbv0=
Subject key identifier: F8:8C:A0:9A:09:41:A3:74:43:26:C3:3A:45:FE:3E:CF:B0:F5:0B:03
Certificate issuer: /CN=dc780d9935dabc701a4c4832b16c11d7743c399a
Certificate serial: 19E692B13F2B829804E2A158A5E2EB065BFCF636
Authority key identifier: DC:78:0D:99:35:DA:BC:70:1A:4C:48:32:B1:6C:11:D7:74:3C:39:9A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3HgNmTXavHAaTEgysWwR13Q8OZo.cer
Subject info access: rsync://rsync.krill.nlnetlabs.nl/repo/nlnetlabs/1/326130343a623930303a3530303a3a2f34302d3430203d3e203630313331.roa
Signing time: Tue 06 Oct 2026 07:48:15 +0000
ROA not before: Tue 06 Oct 2026 07:43:15 +0000
ROA not after: Tue 05 Oct 2027 07:48:15 +0000
asID: 60131
IP address blocks: 2a04:b900:500::/40 maxlen: 40
Validation: OK
Signature path: rsync://rsync.krill.nlnetlabs.nl/repo/nlnetlabs/1/DC780D9935DABC701A4C4832B16C11D7743C399A.crl
rsync://rsync.krill.nlnetlabs.nl/repo/nlnetlabs/1/DC780D9935DABC701A4C4832B16C11D7743C399A.mft
rsync://rpki.ripe.net/repository/DEFAULT/3HgNmTXavHAaTEgysWwR13Q8OZo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 08 Oct 2026 05:42:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
19:e6:92:b1:3f:2b:82:98:04:e2:a1:58:a5:e2:eb:06:5b:fc:f6:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc780d9935dabc701a4c4832b16c11d7743c399a
Validity
Not Before: Oct 6 07:43:15 2026 GMT
Not After : Oct 5 07:48:15 2027 GMT
Subject: CN=F88CA09A0941A3744326C33A45FE3ECFB0F50B03
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:ec:93:c5:cc:70:b2:54:31:43:3d:2e:6a:e5:
2f:e3:d0:40:4f:02:54:bc:82:94:68:60:9d:33:be:
d9:a9:f1:22:1c:f5:d2:67:c8:cb:0e:7a:be:c3:14:
75:bf:b6:95:87:d5:a0:90:84:33:45:aa:36:38:f2:
29:0b:a2:89:3d:63:19:42:ce:e4:6c:da:24:d1:31:
4e:f9:2c:31:14:7f:b9:4a:37:3b:c9:9b:fe:db:74:
34:e3:2e:40:52:9b:2d:90:6f:a2:ab:c4:d8:ba:0e:
fe:85:a1:d8:c6:22:b1:67:28:12:85:62:91:2f:0a:
aa:d3:a0:0d:79:2f:1a:8b:f0:35:82:b3:9d:7d:c6:
c8:32:2d:37:ea:f3:40:96:6d:dc:0f:cd:45:32:7c:
d9:97:4c:eb:05:d4:84:37:8a:1c:0c:0b:d0:ad:19:
40:35:64:a2:c8:cb:cf:86:c6:04:aa:a6:94:63:ac:
6e:3a:cb:34:09:31:bd:a8:2a:c2:1d:91:37:96:7e:
51:29:ef:34:ec:bb:bb:1d:f9:8f:32:25:83:7b:99:
74:60:d7:a0:17:21:10:5d:82:19:60:bf:16:0d:99:
2c:41:93:fc:8b:af:f2:c7:75:30:be:d9:48:4f:7d:
48:82:2f:7e:0c:ba:35:d9:31:45:7e:f9:89:86:77:
86:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:8C:A0:9A:09:41:A3:74:43:26:C3:3A:45:FE:3E:CF:B0:F5:0B:03
X509v3 Authority Key Identifier:
keyid:DC:78:0D:99:35:DA:BC:70:1A:4C:48:32:B1:6C:11:D7:74:3C:39:9A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.krill.nlnetlabs.nl/repo/nlnetlabs/1/DC780D9935DABC701A4C4832B16C11D7743C399A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3HgNmTXavHAaTEgysWwR13Q8OZo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.krill.nlnetlabs.nl/repo/nlnetlabs/1/326130343a623930303a3530303a3a2f34302d3430203d3e203630313331.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a04:b900:500::/40
Signature Algorithm: sha256WithRSAEncryption
83:bd:92:2b:7b:3c:5e:d2:74:2a:70:45:ca:17:e8:3b:c0:53:
05:ff:ef:d1:61:0b:45:75:e8:9e:c9:b1:f2:6c:2f:f7:73:2f:
7f:22:a8:77:d9:67:12:81:72:03:f6:c4:19:76:13:58:0d:dc:
1d:88:5a:a0:07:a2:50:e1:86:0e:3d:c5:14:08:3c:3d:7e:f3:
e6:16:87:96:06:8c:d1:f0:57:3d:77:d6:78:be:a9:43:3c:de:
7e:7f:41:47:9c:ef:c8:17:5e:04:ae:26:7f:7d:f7:71:06:e1:
81:de:a3:f1:eb:11:74:3a:7f:a6:7a:3e:8e:04:5f:d3:45:cf:
a4:57:79:6a:b8:31:12:28:5a:09:e4:90:52:39:a8:51:c4:3a:
34:12:90:3a:76:ae:47:78:d4:50:05:c2:8c:9b:92:1b:9c:25:
d7:d6:71:00:85:a3:6e:84:21:c6:ff:d1:d3:1a:9e:6e:87:d1:
dc:41:ad:b7:d3:01:83:67:d5:a5:63:2f:5a:cb:a8:33:e2:e2:
e4:c9:03:6d:dd:d5:93:e8:0e:ec:98:87:7e:be:f1:6b:93:d4:
c3:44:37:53:72:a9:06:9b:4e:89:ef:52:10:f7:c4:df:b5:f5:
39:f4:04:fb:0d:c1:e4:ba:84:d2:91:05:3b:5a:ea:29:dc:db:
8a:a5:ef:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 7 11:54:26 2026 by rpki-client