This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.krill.nlnetlabs.nl/repo/nlnetlabs/0/326130343a623930303a3a2f33302d3332203d3e2038353837.roa File: 326130343a623930303a3a2f33302d3332203d3e2038353837.roa (raw, json) Hash identifier: ETkYm7XBanKB9uFcZ1Ai9QZqd6f4qrL1Tym4Nlm01Uk= Subject key identifier: E6:FF:34:E0:47:4C:CD:01:DF:12:AB:DB:EB:EB:AD:7D:1C:33:3C:4D Certificate issuer: /CN=be74d3bba33a0916f10207854a8fc2b7d4a828d4 Certificate serial: 4B5E0C4AFED5E2839CB717110D5043823B3BC0D9 Authority key identifier: BE:74:D3:BB:A3:3A:09:16:F1:02:07:85:4A:8F:C2:B7:D4:A8:28:D4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vnTTu6M6CRbxAgeFSo_Ct9SoKNQ.cer Subject info access: rsync://rsync.krill.nlnetlabs.nl/repo/nlnetlabs/0/326130343a623930303a3a2f33302d3332203d3e2038353837.roa Signing time: Mon 10 Jun 2024 10:21:07 +0000 ROA not before: Mon 10 Jun 2024 10:16:07 +0000 ROA not after: Mon 09 Jun 2025 10:21:07 +0000 asID: 8587 IP address blocks: 2a04:b900::/30 maxlen: 32 Validation: Failed, unable to get local issuer certificate Certificate: Data: Version: 3 (0x2) Serial Number: 4b:5e:0c:4a:fe:d5:e2:83:9c:b7:17:11:0d:50:43:82:3b:3b:c0:d9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=be74d3bba33a0916f10207854a8fc2b7d4a828d4 Validity Not Before: Jun 10 10:16:07 2024 GMT Not After : Jun 9 10:21:07 2025 GMT Subject: CN=E6FF34E0474CCD01DF12ABDBEBEBAD7D1C333C4D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:0a:0a:11:a7:c0:bf:ed:e2:d7:5f:97:ef:b4: 76:c1:4b:40:51:61:9a:82:06:4c:d6:88:2e:76:83: 41:85:7d:b2:be:2c:29:5e:e0:da:79:4c:d0:5a:14: f8:13:90:f7:9e:bd:f8:25:ce:7d:d8:f1:59:76:59: 4a:0e:b4:d9:dc:f9:c4:0b:2b:f6:43:3f:ab:50:a3: 04:d9:59:d6:fe:66:71:b3:f2:89:03:96:7b:de:a1: 6a:5d:fa:2d:ee:36:07:8a:3d:c5:94:2b:8b:50:8b: 5b:8e:3f:0c:8c:a5:64:1b:ac:3f:6a:f7:0b:fb:58: c2:e2:fd:92:6a:a2:c6:0c:77:6c:1c:5f:8d:c6:52: 99:d1:b9:98:92:87:d3:ca:07:d1:8e:d7:92:8a:8f: 03:79:ad:05:72:fa:d5:a3:bd:36:79:a6:b9:b6:59: 9e:c7:ee:14:70:55:aa:16:50:14:d3:4a:48:76:83: 24:e4:27:72:9f:2d:ee:49:9f:84:ae:c0:57:df:d4: fd:65:36:c2:2b:5c:58:21:25:b2:5a:b0:2a:8c:2d: ab:b0:ff:f7:01:af:79:54:38:b9:31:7d:1d:cd:4c: 95:23:84:93:4f:5c:5b:97:f6:71:50:32:73:70:fb: 64:25:ff:8d:8e:3d:d6:3b:97:e8:15:cc:c8:82:68: eb:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:FF:34:E0:47:4C:CD:01:DF:12:AB:DB:EB:EB:AD:7D:1C:33:3C:4D X509v3 Authority Key Identifier: keyid:BE:74:D3:BB:A3:3A:09:16:F1:02:07:85:4A:8F:C2:B7:D4:A8:28:D4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.krill.nlnetlabs.nl/repo/nlnetlabs/0/BE74D3BBA33A0916F10207854A8FC2B7D4A828D4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vnTTu6M6CRbxAgeFSo_Ct9SoKNQ.cer Subject Information Access: Signed Object - URI:rsync://rsync.krill.nlnetlabs.nl/repo/nlnetlabs/0/326130343a623930303a3a2f33302d3332203d3e2038353837.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a04:b900::/30 Signature Algorithm: sha256WithRSAEncryption 30:cd:0e:8e:7e:8b:7b:6b:d2:7c:a9:85:1e:d9:2d:16:a7:f7: 47:52:71:40:2d:43:07:7c:c0:f5:ad:6c:8b:c4:19:51:7b:a5: a9:8d:52:06:ca:3e:98:f4:43:27:d6:2a:70:d1:8e:e5:78:8a: 8d:a1:46:db:25:cc:61:77:e0:44:38:48:ef:40:cf:bf:c0:da: 4a:8e:f6:00:29:82:a4:6e:d2:be:ab:ed:d1:3b:f4:38:cc:b1: 16:43:75:26:74:49:51:49:f7:a5:b1:9c:e5:9e:a5:cd:67:35: 10:2e:9c:5c:47:1c:87:24:ca:6f:b3:27:08:75:bf:eb:f0:14: 3a:8c:53:c8:da:22:47:01:da:cb:36:58:ba:b2:1a:50:21:a9: 6b:4f:c6:b9:9e:78:8b:e2:bb:08:5a:4b:fd:34:8c:ad:38:a4: da:6e:e9:d3:03:32:e4:fe:e5:0d:57:00:59:be:2a:4d:f1:c0: 57:5c:e4:26:71:9e:92:c7:bd:c8:06:12:4e:db:a0:b4:44:4a: c6:a3:fd:c8:d3:15:20:f2:c1:b2:20:3b:4d:dc:60:97:34:eb: 3c:9d:43:49:eb:4f:aa:4c:70:42:9e:a3:f3:d2:cf:d2:0c:e0: 0b:b3:2b:fb:ec:bd:5a:fe:77:39:a8:1f:8a:85:14:e2:b5:35: d5:bf:a5:39 -----BEGIN CERTIFICATE----- MIIE5DCCA8ygAwIBAgIUS14MSv7V4oOctxcRDVBDgjs7wNkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoYmU3NGQzYmJhMzNhMDkxNmYxMDIwNzg1NGE4ZmMyYjdk NGE4MjhkNDAeFw0yNDA2MTAxMDE2MDdaFw0yNTA2MDkxMDIxMDdaMDMxMTAvBgNV BAMTKEU2RkYzNEUwNDc0Q0NEMDFERjEyQUJEQkVCRUJBRDdEMUMzMzNDNEQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDDCgoRp8C/7eLXX5fvtHbBS0BR YZqCBkzWiC52g0GFfbK+LCle4Np5TNBaFPgTkPeevfglzn3Y8Vl2WUoOtNnc+cQL K/ZDP6tQowTZWdb+ZnGz8okDlnveoWpd+i3uNgeKPcWUK4tQi1uOPwyMpWQbrD9q 9wv7WMLi/ZJqosYMd2wcX43GUpnRuZiSh9PKB9GO15KKjwN5rQVy+tWjvTZ5prm2 WZ7H7hRwVaoWUBTTSkh2gyTkJ3KfLe5Jn4SuwFff1P1lNsIrXFghJbJasCqMLauw //cBr3lUOLkxfR3NTJUjhJNPXFuX9nFQMnNw+2Ql/42OPdY7l+gVzMiCaOuhAgMB AAGjggHuMIIB6jAdBgNVHQ4EFgQU5v804EdMzQHfEqvb6+utfRwzPE0wHwYDVR0j BBgwFoAUvnTTu6M6CRbxAgeFSo/Ct9SoKNQwDgYDVR0PAQH/BAQDAgeAMG8GA1Ud HwRoMGYwZKBioGCGXnJzeW5jOi8vcnN5bmMua3JpbGwubmxuZXRsYWJzLm5sL3Jl cG8vbmxuZXRsYWJzLzAvQkU3NEQzQkJBMzNBMDkxNkYxMDIwNzg1NEE4RkMyQjdE NEE4MjhENC5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzov L3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3ZuVFR1Nk02Q1JieEFn ZUZTb19DdDlTb0tOUS5jZXIwgYQGCCsGAQUFBwELBHgwdjB0BggrBgEFBQcwC4Zo cnN5bmM6Ly9yc3luYy5rcmlsbC5ubG5ldGxhYnMubmwvcmVwby9ubG5ldGxhYnMv MC8zMjYxMzAzNDNhNjIzOTMwMzAzYTNhMmYzMzMwMmQzMzMyMjAzZDNlMjAzODM1 MzgzNy5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB /wQRMA8wDQQCAAIwBwMFAioEuQAwDQYJKoZIhvcNAQELBQADggEBADDNDo5+i3tr 0nyphR7ZLRan90dScUAtQwd8wPWtbIvEGVF7pamNUgbKPpj0QyfWKnDRjuV4io2h RtslzGF34EQ4SO9Az7/A2kqO9gApgqRu0r6r7dE79DjMsRZDdSZ0SVFJ96WxnOWe pc1nNRAunFxHHIckym+zJwh1v+vwFDqMU8jaIkcB2ss2WLqyGlAhqWtPxrmeeIvi uwhaS/00jK04pNpu6dMDMuT+5Q1XAFm+Kk3xwFdc5CZxnpLHvcgGEk7boLRESsaj /cjTFSDywbIgO03cYJc06zydQ0nrT6pMcEKeo/PSz9IM4AuzK/vsvVr+dzmoH4qF FOK1NdW/pTk= -----END CERTIFICATE-----Generated at Tue Dec 16 09:42:58 2025 by rpki-client