Route Origin Authorization
$ rpki-client -vvf rsync.krill.nlnetlabs.nl/repo/nlnetlabs/1/3138352e34392e3134322e302f32332d3233203d3e20323131333231.roa
File: 3138352e34392e3134322e302f32332d3233203d3e20323131333231.roa (raw, json)
Hash identifier: jR+qYDFgs1RFLmTf7rqpUDak54gW5tVDwGwUk/IhO4s=
Subject key identifier: 2C:B1:BD:5B:1D:00:F2:98:9C:58:63:7E:B4:DD:1D:8E:19:B6:44:03
Certificate issuer: /CN=dc780d9935dabc701a4c4832b16c11d7743c399a
Certificate serial: 456FB66042435BF5CD6373AB56C733B76CCE22CB
Authority key identifier: DC:78:0D:99:35:DA:BC:70:1A:4C:48:32:B1:6C:11:D7:74:3C:39:9A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3HgNmTXavHAaTEgysWwR13Q8OZo.cer
Subject info access: rsync://rsync.krill.nlnetlabs.nl/repo/nlnetlabs/1/3138352e34392e3134322e302f32332d3233203d3e20323131333231.roa
Signing time: Thu 31 Jul 2025 13:37:45 +0000
ROA not before: Thu 31 Jul 2025 13:32:45 +0000
ROA not after: Thu 30 Jul 2026 13:37:45 +0000
asID: 211321
IP address blocks: 185.49.142.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rsync.krill.nlnetlabs.nl/repo/nlnetlabs/1/DC780D9935DABC701A4C4832B16C11D7743C399A.crl
rsync://rsync.krill.nlnetlabs.nl/repo/nlnetlabs/1/DC780D9935DABC701A4C4832B16C11D7743C399A.mft
rsync://rpki.ripe.net/repository/DEFAULT/3HgNmTXavHAaTEgysWwR13Q8OZo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 12:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
45:6f:b6:60:42:43:5b:f5:cd:63:73:ab:56:c7:33:b7:6c:ce:22:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc780d9935dabc701a4c4832b16c11d7743c399a
Validity
Not Before: Jul 31 13:32:45 2025 GMT
Not After : Jul 30 13:37:45 2026 GMT
Subject: CN=2CB1BD5B1D00F2989C58637EB4DD1D8E19B64403
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:c9:6f:9d:ef:20:47:d0:b8:fc:82:2d:74:ba:
73:45:07:20:31:c2:f1:40:24:70:3e:35:28:a5:ac:
b3:25:dd:63:00:5d:46:05:af:a4:ae:35:0f:0f:82:
bb:bd:a7:e1:d2:69:33:cc:34:41:df:33:a4:76:c7:
bd:86:da:f7:2d:73:b8:ab:29:20:04:14:39:3a:82:
69:ba:6d:b0:82:65:f5:a5:da:1c:b2:30:d7:d7:28:
fa:0b:92:d5:99:73:3f:ef:2a:05:1c:13:f5:dc:ad:
36:57:6c:11:0f:4f:0f:ae:a1:9a:a6:9d:93:fd:15:
31:2a:97:5e:ad:7d:71:85:5d:77:5f:10:e9:28:fe:
77:0d:a5:bb:d3:f8:4b:05:8d:16:f3:fd:5c:64:e9:
d2:aa:92:11:68:d3:74:6e:8b:0a:62:9f:b8:50:8f:
dd:41:c3:fb:39:53:95:4f:b8:56:94:66:12:fe:7f:
0e:12:21:c7:b8:a9:2f:d9:80:d1:98:d7:32:0d:43:
8c:da:d3:44:48:0e:54:98:b2:1c:ea:69:25:99:7b:
d9:67:ac:35:0c:ff:ca:2b:e2:07:2e:26:fd:c0:dd:
1c:23:2c:8b:b0:e6:76:de:c8:da:ab:38:1e:70:d0:
59:9e:47:d3:45:72:5d:9c:35:7d:62:cd:e8:fa:44:
70:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:B1:BD:5B:1D:00:F2:98:9C:58:63:7E:B4:DD:1D:8E:19:B6:44:03
X509v3 Authority Key Identifier:
keyid:DC:78:0D:99:35:DA:BC:70:1A:4C:48:32:B1:6C:11:D7:74:3C:39:9A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.krill.nlnetlabs.nl/repo/nlnetlabs/1/DC780D9935DABC701A4C4832B16C11D7743C399A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3HgNmTXavHAaTEgysWwR13Q8OZo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.krill.nlnetlabs.nl/repo/nlnetlabs/1/3138352e34392e3134322e302f32332d3233203d3e20323131333231.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.49.142.0/23
Signature Algorithm: sha256WithRSAEncryption
4c:f6:61:51:44:a1:2c:4c:47:ad:e7:82:ea:15:9e:5f:dc:64:
c9:e6:98:2c:ac:60:fa:e0:90:9b:f9:95:96:79:da:66:0c:a3:
bb:ce:f7:e8:76:e1:77:84:ee:22:a3:b9:b9:8e:b1:07:8b:e6:
e1:ac:57:c2:02:b2:8a:30:38:38:36:26:af:02:8a:72:86:87:
51:2a:0e:56:19:a8:cb:4f:7d:8f:12:79:21:26:fa:e1:0f:f0:
c1:30:fc:96:d5:40:6a:68:4c:53:89:20:cd:62:1b:ec:71:47:
89:60:97:f9:02:64:9b:2f:ab:13:47:fb:09:2a:97:37:fd:95:
08:53:33:69:4b:3b:0c:de:79:29:98:a1:74:2f:02:c7:34:d3:
b9:9a:16:60:e2:a4:05:26:74:1f:61:eb:1e:5a:71:0b:ae:d9:
cc:3d:0b:04:de:af:e6:cc:27:fb:0f:eb:c7:1f:2e:de:e8:1c:
61:39:18:ac:13:63:19:ab:aa:20:8f:ef:7a:be:c7:c4:61:fd:
45:13:fa:45:3a:76:ed:b1:d8:8b:df:19:b3:26:57:bd:d4:f5:
42:44:1e:05:c4:f2:16:07:e8:0a:61:cf:c9:4f:7f:1a:f7:dc:
cd:f1:6d:c1:b7:82:84:18:d1:74:4a:b2:67:43:d0:41:e1:8a:
93:22:d7:b1
-----BEGIN CERTIFICATE-----
MIIE6TCCA9GgAwIBAgIURW+2YEJDW/XNY3OrVsczt2zOIsswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoZGM3ODBkOTkzNWRhYmM3MDFhNGM0ODMyYjE2YzExZDc3
NDNjMzk5YTAeFw0yNTA3MzExMzMyNDVaFw0yNjA3MzAxMzM3NDVaMDMxMTAvBgNV
BAMTKDJDQjFCRDVCMUQwMEYyOTg5QzU4NjM3RUI0REQxRDhFMTlCNjQ0MDMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9yW+d7yBH0Lj8gi10unNFByAx
wvFAJHA+NSilrLMl3WMAXUYFr6SuNQ8Pgru9p+HSaTPMNEHfM6R2x72G2vctc7ir
KSAEFDk6gmm6bbCCZfWl2hyyMNfXKPoLktWZcz/vKgUcE/XcrTZXbBEPTw+uoZqm
nZP9FTEql16tfXGFXXdfEOko/ncNpbvT+EsFjRbz/Vxk6dKqkhFo03Ruiwpin7hQ
j91Bw/s5U5VPuFaUZhL+fw4SIce4qS/ZgNGY1zINQ4za00RIDlSYshzqaSWZe9ln
rDUM/8or4gcuJv3A3RwjLIuw5nbeyNqrOB5w0FmeR9NFcl2cNX1izej6RHA5AgMB
AAGjggHzMIIB7zAdBgNVHQ4EFgQULLG9Wx0A8picWGN+tN0djhm2RAMwHwYDVR0j
BBgwFoAU3HgNmTXavHAaTEgysWwR13Q8OZowDgYDVR0PAQH/BAQDAgeAMG8GA1Ud
HwRoMGYwZKBioGCGXnJzeW5jOi8vcnN5bmMua3JpbGwubmxuZXRsYWJzLm5sL3Jl
cG8vbmxuZXRsYWJzLzEvREM3ODBEOTkzNURBQkM3MDFBNEM0ODMyQjE2QzExRDc3
NDNDMzk5QS5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzov
L3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzNIZ05tVFhhdkhBYVRF
Z3lzV3dSMTNROE9aby5jZXIwgYoGCCsGAQUFBwELBH4wfDB6BggrBgEFBQcwC4Zu
cnN5bmM6Ly9yc3luYy5rcmlsbC5ubG5ldGxhYnMubmwvcmVwby9ubG5ldGxhYnMv
MS8zMTM4MzUyZTM0MzkyZTMxMzQzMjJlMzAyZjMyMzMyZDMyMzMyMDNkM2UyMDMy
MzEzMTMzMzIzMS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEAbkxjjANBgkqhkiG9w0BAQsFAAOCAQEATPZh
UUShLExHreeC6hWeX9xkyeaYLKxg+uCQm/mVlnnaZgyju8736Hbhd4TuIqO5uY6x
B4vm4axXwgKyijA4ODYmrwKKcoaHUSoOVhmoy099jxJ5ISb64Q/wwTD8ltVAamhM
U4kgzWIb7HFHiWCX+QJkmy+rE0f7CSqXN/2VCFMzaUs7DN55KZihdC8CxzTTuZoW
YOKkBSZ0H2HrHlpxC67ZzD0LBN6v5swn+w/rxx8u3ugcYTkYrBNjGauqII/ver7H
xGH9RRP6RTp27bHYi98ZsyZXvdT1QkQeBcTyFgfoCmHPyU9/GvfczfFtwbeChBjR
dEqyZ0PQQeGKkyLXsQ==
-----END CERTIFICATE-----
Generated at Mon Aug 4 18:09:16 2025 by rpki-client