Route Origin Authorization
$ rpki-client -vvvf rsync.krill.nlnetlabs.nl/repo/nlnetlabs/1/326130343a623930303a3a2f34302d3430203d3e2038353837.roa
File: 326130343a623930303a3a2f34302d3430203d3e2038353837.roa (raw, json)
Hash identifier: C+7VhiatX/AuDzxhoKtyvY9d94VTo0QlL+iBBqSiSk8=
Subject key identifier: A0:6D:0C:76:5C:59:CC:12:C8:8D:FF:9A:5E:F8:B6:D8:E0:63:91:BE
Certificate issuer: /CN=dc780d9935dabc701a4c4832b16c11d7743c399a
Certificate serial: 78DDCE582119FF1868462865BBA0DDC66E324435
Authority key identifier: DC:78:0D:99:35:DA:BC:70:1A:4C:48:32:B1:6C:11:D7:74:3C:39:9A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3HgNmTXavHAaTEgysWwR13Q8OZo.cer
Subject info access: rsync://rsync.krill.nlnetlabs.nl/repo/nlnetlabs/1/326130343a623930303a3a2f34302d3430203d3e2038353837.roa
Signing time: Tue 06 Oct 2026 07:47:23 +0000
ROA not before: Tue 06 Oct 2026 07:42:23 +0000
ROA not after: Tue 05 Oct 2027 07:47:23 +0000
asID: 8587
IP address blocks: 2a04:b900::/40 maxlen: 40
Validation: OK
Signature path: rsync://rsync.krill.nlnetlabs.nl/repo/nlnetlabs/1/DC780D9935DABC701A4C4832B16C11D7743C399A.crl
rsync://rsync.krill.nlnetlabs.nl/repo/nlnetlabs/1/DC780D9935DABC701A4C4832B16C11D7743C399A.mft
rsync://rpki.ripe.net/repository/DEFAULT/3HgNmTXavHAaTEgysWwR13Q8OZo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 09 Oct 2026 15:38:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
78:dd:ce:58:21:19:ff:18:68:46:28:65:bb:a0:dd:c6:6e:32:44:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc780d9935dabc701a4c4832b16c11d7743c399a
Validity
Not Before: Oct 6 07:42:23 2026 GMT
Not After : Oct 5 07:47:23 2027 GMT
Subject: CN=A06D0C765C59CC12C88DFF9A5EF8B6D8E06391BE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:f3:0e:4f:9a:6a:0c:e2:e8:d5:65:6c:b9:b5:
a4:a2:13:9b:8a:9c:f7:60:11:da:e7:c1:63:00:5b:
1d:6f:1c:89:dc:10:f0:36:bb:ca:2d:32:33:15:c6:
f6:7f:b8:17:bf:c4:f0:52:66:1f:6a:c5:ae:a1:56:
d1:70:85:67:1a:30:bf:13:ff:8e:0b:24:07:0a:ea:
00:4e:65:b3:63:c5:f4:a8:df:81:79:08:8b:eb:6a:
f4:67:1d:9c:fa:53:07:a4:be:b4:d5:02:33:77:7d:
9e:de:85:e3:03:99:5a:aa:73:cf:4e:99:5f:83:1d:
66:13:50:70:64:db:79:f2:3b:d1:59:35:64:77:4f:
00:c3:09:35:00:6c:9f:32:3c:2d:8f:37:f2:7c:90:
7a:6b:41:ea:78:a5:bb:7a:0d:55:a9:76:75:51:7f:
f3:d9:e1:03:ef:ee:fc:bf:31:bc:f3:3f:c7:24:ec:
81:25:6e:fb:d7:45:ac:ee:6c:67:58:56:11:0b:f7:
38:86:1f:8b:68:a4:a7:e0:32:ec:16:61:78:11:71:
72:70:df:c8:ff:45:c4:c9:08:35:94:42:f3:7e:cf:
17:07:66:08:29:c1:63:9c:ce:fd:1b:5a:d3:08:65:
a7:be:7c:90:1b:e6:41:65:44:f7:e8:31:b3:2f:7e:
9b:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:6D:0C:76:5C:59:CC:12:C8:8D:FF:9A:5E:F8:B6:D8:E0:63:91:BE
X509v3 Authority Key Identifier:
keyid:DC:78:0D:99:35:DA:BC:70:1A:4C:48:32:B1:6C:11:D7:74:3C:39:9A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.krill.nlnetlabs.nl/repo/nlnetlabs/1/DC780D9935DABC701A4C4832B16C11D7743C399A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3HgNmTXavHAaTEgysWwR13Q8OZo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.krill.nlnetlabs.nl/repo/nlnetlabs/1/326130343a623930303a3a2f34302d3430203d3e2038353837.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a04:b900::/40
Signature Algorithm: sha256WithRSAEncryption
00:f3:05:9b:ea:d7:f9:4c:b7:a1:f9:a0:81:fd:35:9c:bb:e7:
9c:f6:cc:2d:80:8f:c1:dd:0b:d5:79:2d:e0:7e:f5:72:cf:a6:
16:83:b2:08:7d:3a:a4:25:0b:c0:78:41:12:43:7b:da:5f:08:
12:51:16:05:e3:94:70:7a:70:12:ea:ec:f0:28:46:04:93:13:
8b:44:9f:bf:74:e4:f3:dd:84:73:b4:53:1d:57:ff:ae:4b:ca:
76:73:0b:ca:40:84:5a:ba:57:d7:fa:8e:f0:bc:17:cb:f5:de:
c7:05:05:52:24:1c:6d:d9:ad:a5:96:ba:76:72:d6:59:8d:95:
c9:a3:0b:47:1c:0b:94:40:e3:69:e5:56:a5:4f:69:45:b1:71:
9c:8c:6a:d1:08:72:2f:6d:a3:33:33:6c:d3:30:62:db:ab:b0:
92:3f:12:d2:c3:80:ec:ff:c1:11:60:16:5d:bd:a7:0a:41:a0:
9b:95:1e:26:c7:d7:38:fc:a7:23:26:16:0f:67:6f:a5:4b:3d:
61:c9:ec:77:ad:42:ee:70:29:b2:e8:49:56:c0:52:7c:73:2a:
f6:76:4b:c4:fb:30:d2:52:e1:2d:7c:7e:61:47:15:d1:be:8a:
25:58:10:f5:29:70:df:5a:df:13:30:97:13:64:86:4c:ae:6a:
e7:e7:0e:7c
-----BEGIN CERTIFICATE-----
MIIE5TCCA82gAwIBAgIUeN3OWCEZ/xhoRihlu6Ddxm4yRDUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoZGM3ODBkOTkzNWRhYmM3MDFhNGM0ODMyYjE2YzExZDc3
NDNjMzk5YTAeFw0yNjEwMDYwNzQyMjNaFw0yNzEwMDUwNzQ3MjNaMDMxMTAvBgNV
BAMTKEEwNkQwQzc2NUM1OUNDMTJDODhERkY5QTVFRjhCNkQ4RTA2MzkxQkUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCw8w5PmmoM4ujVZWy5taSiE5uK
nPdgEdrnwWMAWx1vHIncEPA2u8otMjMVxvZ/uBe/xPBSZh9qxa6hVtFwhWcaML8T
/44LJAcK6gBOZbNjxfSo34F5CIvravRnHZz6UwekvrTVAjN3fZ7eheMDmVqqc89O
mV+DHWYTUHBk23nyO9FZNWR3TwDDCTUAbJ8yPC2PN/J8kHprQep4pbt6DVWpdnVR
f/PZ4QPv7vy/MbzzP8ck7IElbvvXRazubGdYVhEL9ziGH4topKfgMuwWYXgRcXJw
38j/RcTJCDWUQvN+zxcHZggpwWOczv0bWtMIZae+fJAb5kFlRPfoMbMvfpv7AgMB
AAGjggHvMIIB6zAdBgNVHQ4EFgQUoG0MdlxZzBLIjf+aXvi22OBjkb4wHwYDVR0j
BBgwFoAU3HgNmTXavHAaTEgysWwR13Q8OZowDgYDVR0PAQH/BAQDAgeAMG8GA1Ud
HwRoMGYwZKBioGCGXnJzeW5jOi8vcnN5bmMua3JpbGwubmxuZXRsYWJzLm5sL3Jl
cG8vbmxuZXRsYWJzLzEvREM3ODBEOTkzNURBQkM3MDFBNEM0ODMyQjE2QzExRDc3
NDNDMzk5QS5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzov
L3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzNIZ05tVFhhdkhBYVRF
Z3lzV3dSMTNROE9aby5jZXIwgYQGCCsGAQUFBwELBHgwdjB0BggrBgEFBQcwC4Zo
cnN5bmM6Ly9yc3luYy5rcmlsbC5ubG5ldGxhYnMubmwvcmVwby9ubG5ldGxhYnMv
MS8zMjYxMzAzNDNhNjIzOTMwMzAzYTNhMmYzNDMwMmQzNDMwMjAzZDNlMjAzODM1
MzgzNy5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB
/wQSMBAwDgQCAAIwCAMGACoEuQAAMA0GCSqGSIb3DQEBCwUAA4IBAQAA8wWb6tf5
TLeh+aCB/TWcu+ec9swtgI/B3QvVeS3gfvVyz6YWg7IIfTqkJQvAeEESQ3vaXwgS
URYF45RwenAS6uzwKEYEkxOLRJ+/dOTz3YRztFMdV/+uS8p2cwvKQIRaulfX+o7w
vBfL9d7HBQVSJBxt2a2llrp2ctZZjZXJowtHHAuUQONp5ValT2lFsXGcjGrRCHIv
baMzM2zTMGLbq7CSPxLSw4Ds/8ERYBZdvacKQaCblR4mx9c4/KcjJhYPZ2+lSz1h
yex3rULucCmy6ElWwFJ8cyr2dkvE+zDSUuEtfH5hRxXRvoolWBD1KXDfWt8TMJcT
ZIZMrmrn5w58
-----END CERTIFICATE-----
Generated at Fri Oct 9 09:22:04 2026 by rpki-client