Route Origin Authorization
$ rpki-client -vvf rsync.krill.nlnetlabs.nl/repo/nlnetlabs/1/3138352e34392e3134322e302f32342d3234203d3e2030.roa
File: 3138352e34392e3134322e302f32342d3234203d3e2030.roa (raw, json)
Hash identifier: OFYzxf950q78iFTJtOczlCYpNOX+DOEpFZuRWUO9N6w=
Subject key identifier: 8C:84:B4:03:0B:E2:4D:61:26:BC:EA:2A:C5:91:B3:BD:87:D2:76:46
Certificate issuer: /CN=dc780d9935dabc701a4c4832b16c11d7743c399a
Certificate serial: 08A017A4D71083093432B72A8B55E0BA28882AFE
Authority key identifier: DC:78:0D:99:35:DA:BC:70:1A:4C:48:32:B1:6C:11:D7:74:3C:39:9A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3HgNmTXavHAaTEgysWwR13Q8OZo.cer
Subject info access: rsync://rsync.krill.nlnetlabs.nl/repo/nlnetlabs/1/3138352e34392e3134322e302f32342d3234203d3e2030.roa
Signing time: Thu 31 Jul 2025 13:37:42 +0000
ROA not before: Thu 31 Jul 2025 13:32:42 +0000
ROA not after: Thu 30 Jul 2026 13:37:42 +0000
asID: 0
IP address blocks: 185.49.142.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.krill.nlnetlabs.nl/repo/nlnetlabs/1/DC780D9935DABC701A4C4832B16C11D7743C399A.crl
rsync://rsync.krill.nlnetlabs.nl/repo/nlnetlabs/1/DC780D9935DABC701A4C4832B16C11D7743C399A.mft
rsync://rpki.ripe.net/repository/DEFAULT/3HgNmTXavHAaTEgysWwR13Q8OZo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 11:52:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
08:a0:17:a4:d7:10:83:09:34:32:b7:2a:8b:55:e0:ba:28:88:2a:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc780d9935dabc701a4c4832b16c11d7743c399a
Validity
Not Before: Jul 31 13:32:42 2025 GMT
Not After : Jul 30 13:37:42 2026 GMT
Subject: CN=8C84B4030BE24D6126BCEA2AC591B3BD87D27646
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:d3:62:ae:7d:6b:e4:0c:a5:84:26:ab:f4:a1:
55:1c:bc:4c:bf:85:74:49:c2:e0:9c:a8:60:34:80:
d7:52:16:37:92:a5:a0:83:1a:35:a1:a9:be:74:34:
2c:42:b5:4a:c4:15:07:c8:17:1a:d6:91:87:c8:d3:
e3:69:4e:02:15:e6:46:12:f8:96:63:14:7f:34:6a:
a4:53:26:78:a4:33:16:b6:f8:5e:0e:98:83:6c:43:
9f:5c:ca:fe:1c:67:48:de:f7:7c:13:7b:f4:76:0f:
4c:5b:5c:11:01:22:35:28:f4:cf:f3:39:a9:95:35:
e2:2b:bc:7b:a4:53:44:56:07:57:d0:48:bf:91:48:
5f:36:c7:f2:8f:4e:8a:7c:f8:20:8c:6a:0a:55:f5:
f3:ed:6d:8b:a9:25:61:83:ef:d8:ca:e8:27:87:c0:
57:68:7a:08:1b:49:da:45:f7:ab:27:a0:ab:ec:ce:
7a:d0:53:ca:53:b1:f3:53:28:3f:5f:dd:fa:b0:01:
d6:be:e9:56:ea:2f:9f:0a:f6:3b:30:f4:88:36:5e:
fc:b8:16:71:41:5a:65:e8:e9:cf:70:65:33:33:e7:
2a:fd:3c:5b:dc:ba:b0:05:6b:31:4c:62:bc:ef:38:
07:a2:ab:8e:81:14:7c:e7:3f:b3:e2:45:c7:b9:8d:
b5:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:84:B4:03:0B:E2:4D:61:26:BC:EA:2A:C5:91:B3:BD:87:D2:76:46
X509v3 Authority Key Identifier:
keyid:DC:78:0D:99:35:DA:BC:70:1A:4C:48:32:B1:6C:11:D7:74:3C:39:9A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.krill.nlnetlabs.nl/repo/nlnetlabs/1/DC780D9935DABC701A4C4832B16C11D7743C399A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3HgNmTXavHAaTEgysWwR13Q8OZo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.krill.nlnetlabs.nl/repo/nlnetlabs/1/3138352e34392e3134322e302f32342d3234203d3e2030.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.49.142.0/24
Signature Algorithm: sha256WithRSAEncryption
75:56:71:96:c0:49:aa:85:c6:ea:f0:7c:84:4d:b7:ea:96:ca:
b8:ba:2a:f1:26:56:12:98:7a:7e:c0:1a:b9:85:1c:70:51:34:
1b:e7:ec:e0:77:17:0a:6f:ea:99:fe:a5:aa:0e:02:35:ef:cb:
33:97:59:06:92:1e:72:ac:41:cc:f2:56:93:03:20:4b:19:63:
8d:87:cb:39:85:9d:f2:c0:c5:3a:f6:c8:93:2a:d7:e4:72:87:
ee:d8:86:2c:dc:06:3e:47:ae:1a:f2:84:74:85:ec:2b:4d:10:
8a:26:f2:cc:40:d7:7e:90:af:e0:93:91:ae:ff:fb:51:ff:54:
21:65:14:73:a8:f7:f0:e3:26:4b:88:98:32:10:1e:92:a0:76:
fe:5f:17:4b:f1:50:95:6a:2b:79:a4:aa:19:22:b5:fc:53:94:
36:50:99:d4:80:55:73:80:e6:e1:49:ae:41:73:10:06:cd:8c:
42:b3:e2:d9:68:e7:43:82:9d:1c:9a:d5:ff:27:f1:ea:da:a4:
93:d5:83:9b:5d:dd:7d:3d:04:ec:c1:26:3f:8e:33:c3:67:82:
7f:7f:d4:49:7b:2e:95:02:30:8a:0e:b4:53:7d:b3:53:21:b1:
22:9b:b4:1d:50:3a:8e:94:0c:db:39:c8:53:b4:92:52:b3:2e:
d2:53:66:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 13:54:38 2025 by rpki-client