Route Origin Authorization
$ rpki-client -vvf rsync.krill.nlnetlabs.nl/repo/nlnetlabs/1/326130343a623930373a3a2f34372d3437203d3e20323131333231.roa
File: 326130343a623930373a3a2f34372d3437203d3e20323131333231.roa (raw, json)
Hash identifier: eSgn8pAntXBevn2NWK+HjwLFj3TRH0aVr1zTI6ST4E0=
Subject key identifier: 35:37:1B:89:60:38:6B:63:D0:F6:25:14:E1:1A:60:3B:9B:E2:CF:77
Certificate issuer: /CN=dc780d9935dabc701a4c4832b16c11d7743c399a
Certificate serial: 03E9D4B232C29F52873E0F10EDC185FD489B9515
Authority key identifier: DC:78:0D:99:35:DA:BC:70:1A:4C:48:32:B1:6C:11:D7:74:3C:39:9A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3HgNmTXavHAaTEgysWwR13Q8OZo.cer
Subject info access: rsync://rsync.krill.nlnetlabs.nl/repo/nlnetlabs/1/326130343a623930373a3a2f34372d3437203d3e20323131333231.roa
Signing time: Thu 31 Jul 2025 13:37:47 +0000
ROA not before: Thu 31 Jul 2025 13:32:47 +0000
ROA not after: Thu 30 Jul 2026 13:37:47 +0000
asID: 211321
IP address blocks: 2a04:b907::/47 maxlen: 47
Validation: OK
Signature path: rsync://rsync.krill.nlnetlabs.nl/repo/nlnetlabs/1/DC780D9935DABC701A4C4832B16C11D7743C399A.crl
rsync://rsync.krill.nlnetlabs.nl/repo/nlnetlabs/1/DC780D9935DABC701A4C4832B16C11D7743C399A.mft
rsync://rpki.ripe.net/repository/DEFAULT/3HgNmTXavHAaTEgysWwR13Q8OZo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 12:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
03:e9:d4:b2:32:c2:9f:52:87:3e:0f:10:ed:c1:85:fd:48:9b:95:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc780d9935dabc701a4c4832b16c11d7743c399a
Validity
Not Before: Jul 31 13:32:47 2025 GMT
Not After : Jul 30 13:37:47 2026 GMT
Subject: CN=35371B8960386B63D0F62514E11A603B9BE2CF77
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:98:bb:a4:95:a0:7e:b5:40:22:97:72:e9:d3:
35:69:0c:81:b0:e4:31:72:4d:da:fc:91:19:d5:44:
5c:fd:50:7d:e2:58:18:e7:20:1f:75:1d:f5:0e:0b:
c8:c1:fa:74:38:f1:b7:be:d6:c8:f7:bd:63:d4:7d:
7f:77:36:0c:ca:6a:5b:35:fa:1c:e9:cb:59:4c:44:
e3:24:dc:9f:33:a5:e9:19:67:7d:ba:72:fa:8e:69:
f3:55:15:79:3d:ab:7d:2a:7a:8e:4d:30:26:68:9b:
1e:c7:9f:ae:7b:93:43:c5:70:5a:92:c6:b0:1f:a5:
4e:4a:4b:65:75:42:ce:c1:4d:20:4e:30:77:5c:d7:
24:22:d2:0b:d7:5f:e6:8f:a9:7e:ca:69:9b:36:4f:
f9:ff:0e:1b:f6:c5:5c:fe:e9:4b:07:ed:5c:a9:94:
e4:3d:64:a9:78:05:79:e2:2f:8d:71:95:49:f4:ab:
7e:eb:88:0d:33:e8:46:5c:87:78:12:fb:5a:87:94:
1a:c0:fb:78:e2:e3:f3:50:b2:48:74:4a:2a:9d:db:
17:45:e1:b3:1d:71:3b:ab:b0:5f:47:dc:d8:68:6a:
ad:ab:1f:7a:26:b9:52:7d:99:86:3e:ba:fa:43:fe:
fd:6a:4e:ef:bd:aa:7a:3c:6f:4f:b3:66:d6:bc:1f:
d8:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:37:1B:89:60:38:6B:63:D0:F6:25:14:E1:1A:60:3B:9B:E2:CF:77
X509v3 Authority Key Identifier:
keyid:DC:78:0D:99:35:DA:BC:70:1A:4C:48:32:B1:6C:11:D7:74:3C:39:9A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.krill.nlnetlabs.nl/repo/nlnetlabs/1/DC780D9935DABC701A4C4832B16C11D7743C399A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3HgNmTXavHAaTEgysWwR13Q8OZo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.krill.nlnetlabs.nl/repo/nlnetlabs/1/326130343a623930373a3a2f34372d3437203d3e20323131333231.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a04:b907::/47
Signature Algorithm: sha256WithRSAEncryption
90:c3:f1:d1:f7:9c:ed:f7:61:42:ee:fd:ff:78:ed:74:4b:06:
61:58:6b:24:cd:49:20:81:c0:b3:37:44:1c:2c:d2:dc:a5:a8:
99:d8:0d:72:48:8e:67:b1:41:38:8e:43:32:16:64:75:f7:37:
10:2d:0b:3e:4f:31:22:1f:d7:c9:7b:f8:96:a4:01:ae:fb:c3:
5c:c5:15:3d:9f:d5:12:08:ba:75:47:c6:39:ff:1c:b6:3f:8b:
ae:83:b8:45:b2:e5:bd:7c:5b:e5:8a:0f:b4:81:d1:fc:3b:91:
0f:24:e5:cb:e0:75:e1:49:20:b4:61:b7:af:d0:7e:8f:cf:33:
2e:24:ce:c4:9c:35:4c:68:ef:e6:e6:1e:cb:c6:12:38:a9:2c:
13:d3:b7:c6:89:b1:2b:6c:e1:85:0c:3c:d2:53:fd:b3:8a:68:
f2:67:37:ed:a9:ca:e8:62:8e:fe:6a:5d:85:b9:0f:23:13:fd:
f6:54:ef:01:6e:76:74:ca:e9:03:c4:31:37:48:8e:08:c5:2b:
d8:ee:87:dd:f4:1f:b7:64:06:f6:53:f9:9d:4d:9b:fa:20:d2:
f3:08:88:72:14:6d:e2:31:a3:ea:e0:52:3e:d4:39:bb:bb:0e:
eb:1a:68:53:76:cc:36:d8:0e:d1:7b:eb:22:5f:1d:7f:32:37:
69:de:02:b0
-----BEGIN CERTIFICATE-----
MIIE6jCCA9KgAwIBAgIUA+nUsjLCn1KHPg8Q7cGF/UiblRUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoZGM3ODBkOTkzNWRhYmM3MDFhNGM0ODMyYjE2YzExZDc3
NDNjMzk5YTAeFw0yNTA3MzExMzMyNDdaFw0yNjA3MzAxMzM3NDdaMDMxMTAvBgNV
BAMTKDM1MzcxQjg5NjAzODZCNjNEMEY2MjUxNEUxMUE2MDNCOUJFMkNGNzcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDRmLuklaB+tUAil3Lp0zVpDIGw
5DFyTdr8kRnVRFz9UH3iWBjnIB91HfUOC8jB+nQ48be+1sj3vWPUfX93NgzKals1
+hzpy1lMROMk3J8zpekZZ326cvqOafNVFXk9q30qeo5NMCZomx7Hn657k0PFcFqS
xrAfpU5KS2V1Qs7BTSBOMHdc1yQi0gvXX+aPqX7KaZs2T/n/Dhv2xVz+6UsH7Vyp
lOQ9ZKl4BXniL41xlUn0q37riA0z6EZch3gS+1qHlBrA+3ji4/NQskh0Siqd2xdF
4bMdcTursF9H3Nhoaq2rH3omuVJ9mYY+uvpD/v1qTu+9qno8b0+zZta8H9jlAgMB
AAGjggH0MIIB8DAdBgNVHQ4EFgQUNTcbiWA4a2PQ9iUU4RpgO5viz3cwHwYDVR0j
BBgwFoAU3HgNmTXavHAaTEgysWwR13Q8OZowDgYDVR0PAQH/BAQDAgeAMG8GA1Ud
HwRoMGYwZKBioGCGXnJzeW5jOi8vcnN5bmMua3JpbGwubmxuZXRsYWJzLm5sL3Jl
cG8vbmxuZXRsYWJzLzEvREM3ODBEOTkzNURBQkM3MDFBNEM0ODMyQjE2QzExRDc3
NDNDMzk5QS5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzov
L3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzNIZ05tVFhhdkhBYVRF
Z3lzV3dSMTNROE9aby5jZXIwgYgGCCsGAQUFBwELBHwwejB4BggrBgEFBQcwC4Zs
cnN5bmM6Ly9yc3luYy5rcmlsbC5ubG5ldGxhYnMubmwvcmVwby9ubG5ldGxhYnMv
MS8zMjYxMzAzNDNhNjIzOTMwMzczYTNhMmYzNDM3MmQzNDM3MjAzZDNlMjAzMjMx
MzEzMzMyMzEucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUH
AQcBAf8EEzARMA8EAgACMAkDBwEqBLkHAAAwDQYJKoZIhvcNAQELBQADggEBAJDD
8dH3nO33YULu/f947XRLBmFYayTNSSCBwLM3RBws0tylqJnYDXJIjmexQTiOQzIW
ZHX3NxAtCz5PMSIf18l7+JakAa77w1zFFT2f1RIIunVHxjn/HLY/i66DuEWy5b18
W+WKD7SB0fw7kQ8k5cvgdeFJILRht6/Qfo/PMy4kzsScNUxo7+bmHsvGEjipLBPT
t8aJsSts4YUMPNJT/bOKaPJnN+2pyuhijv5qXYW5DyMT/fZU7wFudnTK6QPEMTdI
jgjFK9juh930H7dkBvZT+Z1Nm/og0vMIiHIUbeIxo+rgUj7UObu7DusaaFN2zDbY
DtF76yJfHX8yN2neArA=
-----END CERTIFICATE-----
Generated at Mon Aug 4 18:10:12 2025 by rpki-client