Route Origin Authorization
$ rpki-client -vvf rsync.krill.nlnetlabs.nl/repo/nlnetlabs/1/326130343a623930363a3a2f34382d3438203d3e2030.roa
File: 326130343a623930363a3a2f34382d3438203d3e2030.roa (raw, json)
Hash identifier: rzyLuLQB2r5jFPz4ER372UgwfaN2meO05T5dDI5hqUg=
Subject key identifier: 68:1D:1E:14:18:E1:92:14:23:9D:9E:BC:16:74:AF:49:99:5B:17:7E
Certificate issuer: /CN=dc780d9935dabc701a4c4832b16c11d7743c399a
Certificate serial: 3D56318995EA051C6055A9869EA84CEFA1D447A4
Authority key identifier: DC:78:0D:99:35:DA:BC:70:1A:4C:48:32:B1:6C:11:D7:74:3C:39:9A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3HgNmTXavHAaTEgysWwR13Q8OZo.cer
Subject info access: rsync://rsync.krill.nlnetlabs.nl/repo/nlnetlabs/1/326130343a623930363a3a2f34382d3438203d3e2030.roa
Signing time: Thu 31 Jul 2025 13:37:45 +0000
ROA not before: Thu 31 Jul 2025 13:32:45 +0000
ROA not after: Thu 30 Jul 2026 13:37:45 +0000
asID: 0
IP address blocks: 2a04:b906::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.krill.nlnetlabs.nl/repo/nlnetlabs/1/DC780D9935DABC701A4C4832B16C11D7743C399A.crl
rsync://rsync.krill.nlnetlabs.nl/repo/nlnetlabs/1/DC780D9935DABC701A4C4832B16C11D7743C399A.mft
rsync://rpki.ripe.net/repository/DEFAULT/3HgNmTXavHAaTEgysWwR13Q8OZo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 11:52:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3d:56:31:89:95:ea:05:1c:60:55:a9:86:9e:a8:4c:ef:a1:d4:47:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc780d9935dabc701a4c4832b16c11d7743c399a
Validity
Not Before: Jul 31 13:32:45 2025 GMT
Not After : Jul 30 13:37:45 2026 GMT
Subject: CN=681D1E1418E19214239D9EBC1674AF49995B177E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:92:8d:a5:f9:b4:fb:04:18:7d:46:bf:fd:01:
86:33:00:ae:d9:f8:1d:1a:09:a2:14:d8:9d:0f:61:
03:1e:c6:09:94:e9:aa:b5:5f:ed:23:4a:fc:a7:62:
b1:48:ba:7f:87:e6:e7:d4:33:1c:a7:62:2f:e5:e7:
59:78:ee:0f:13:6d:8c:26:9c:17:13:50:94:ef:87:
8e:bb:8c:27:36:3f:9f:78:28:a0:ff:07:da:7c:c5:
59:7d:6b:01:f6:33:55:3c:78:a3:0f:e4:70:f1:d4:
77:e3:5c:2b:17:d5:2a:be:53:62:54:8b:bf:aa:bd:
f7:9e:87:d2:11:82:e1:0d:ef:a1:d4:40:3a:7f:e5:
91:5e:e4:35:12:db:dd:39:63:79:89:22:62:33:36:
be:29:91:04:30:dd:50:21:ea:60:ca:c9:f9:b6:b4:
86:cc:37:2e:53:b5:98:ac:af:2f:60:03:9f:85:e0:
c9:9e:91:55:47:c1:6e:45:14:fc:f7:8f:30:9f:2b:
b3:08:d9:b2:92:2a:df:fb:96:6a:35:4b:af:7a:58:
20:83:45:9d:2e:ec:8b:f5:ca:57:91:d9:e5:23:49:
3b:1e:62:ed:c3:32:ee:f2:9c:15:88:a9:09:ef:13:
58:27:73:2e:a4:d6:f3:14:d5:47:b9:11:fd:13:21:
b0:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:1D:1E:14:18:E1:92:14:23:9D:9E:BC:16:74:AF:49:99:5B:17:7E
X509v3 Authority Key Identifier:
keyid:DC:78:0D:99:35:DA:BC:70:1A:4C:48:32:B1:6C:11:D7:74:3C:39:9A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.krill.nlnetlabs.nl/repo/nlnetlabs/1/DC780D9935DABC701A4C4832B16C11D7743C399A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3HgNmTXavHAaTEgysWwR13Q8OZo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.krill.nlnetlabs.nl/repo/nlnetlabs/1/326130343a623930363a3a2f34382d3438203d3e2030.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a04:b906::/48
Signature Algorithm: sha256WithRSAEncryption
48:0b:9e:bf:61:28:4d:a7:8a:e9:c4:ac:5b:6e:5f:45:d8:e1:
04:ec:e4:38:c7:c0:5b:51:10:1a:f3:b6:e7:07:60:02:4d:14:
c0:94:7d:6a:0a:db:c3:48:6f:74:f3:9b:18:fa:93:1b:21:e9:
52:05:f5:89:ac:e8:e6:12:31:e9:ba:51:f1:08:06:33:1f:9e:
23:d0:e6:ee:34:b2:9b:94:e7:2f:38:e1:83:f0:02:d4:28:9a:
4a:7c:36:a2:d1:e4:b2:83:d5:9f:a0:65:6d:5e:fc:12:62:64:
73:75:61:a8:db:2c:aa:a3:09:e2:7b:57:ca:9d:79:23:22:44:
f4:c2:67:79:17:76:1f:52:13:5a:6c:66:cf:0c:b9:c9:ac:a4:
7e:83:ae:f9:50:7a:45:7d:0f:ec:48:7e:d0:c0:2a:11:6e:7e:
3e:bb:2f:15:72:c7:3c:f8:99:7f:db:26:5c:a6:55:eb:c2:7f:
e4:92:b0:7c:98:d2:3b:e0:b4:85:d7:00:18:f1:0e:97:09:ba:
e9:26:bb:95:6e:5a:26:42:2a:97:3d:d5:4f:10:31:88:a8:4d:
ff:68:08:2d:58:df:fc:f2:4e:33:4c:33:96:3c:9b:4c:20:8c:
a6:f9:cb:48:a2:93:35:63:65:1d:a4:37:20:1c:69:56:b3:60:
02:bb:07:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 13:56:02 2025 by rpki-client