Route Origin Authorization

$ rpki-client -vvvf krill.dispaisy.systems/repo/dispaisyenterprises/2/326131343a373538333a653161303a3a2f34382d3438203d3e2038303735.roa
File:                     326131343a373538333a653161303a3a2f34382d3438203d3e2038303735.roa (raw, json)
Hash identifier:          0WfGIbdnCqY+ccClEvoLWkuTmchpzxdgcLtMMvZROJk=
Subject key identifier:   9C:1F:62:06:FB:C7:EC:68:C7:F6:70:12:7D:52:71:88:73:E8:2A:47
Certificate issuer:       /CN=BF35F83A1DC88C8E5654E5EFE8D640E09D022D06
Certificate serial:       337B653DC8F64FFEBD3FFC47343E49AD3A13DDE3
Authority key identifier: BF:35:F8:3A:1D:C8:8C:8E:56:54:E5:EF:E8:D6:40:E0:9D:02:2D:06
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/BF35F83A1DC88C8E5654E5EFE8D640E09D022D06.cer
Subject info access:      rsync://krill.dispaisy.systems/repo/dispaisyenterprises/2/326131343a373538333a653161303a3a2f34382d3438203d3e2038303735.roa
Signing time:             Tue 25 Aug 2026 14:18:04 +0000
ROA not before:           Tue 25 Aug 2026 14:13:04 +0000
ROA not after:            Tue 24 Aug 2027 14:18:04 +0000
asID:                     8075
IP address blocks:        2a14:7583:e1a0::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://krill.dispaisy.systems/repo/dispaisyenterprises/2/BF35F83A1DC88C8E5654E5EFE8D640E09D022D06.crl
                          rsync://krill.dispaisy.systems/repo/dispaisyenterprises/2/BF35F83A1DC88C8E5654E5EFE8D640E09D022D06.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/BF35F83A1DC88C8E5654E5EFE8D640E09D022D06.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 27 Aug 2026 05:10:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            33:7b:65:3d:c8:f6:4f:fe:bd:3f:fc:47:34:3e:49:ad:3a:13:dd:e3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BF35F83A1DC88C8E5654E5EFE8D640E09D022D06
        Validity
            Not Before: Aug 25 14:13:04 2026 GMT
            Not After : Aug 24 14:18:04 2027 GMT
        Subject: CN=9C1F6206FBC7EC68C7F670127D52718873E82A47
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:f6:bc:9c:9a:64:d0:02:71:0c:9a:14:db:b2:
                    ce:02:3f:0d:24:d2:93:be:aa:30:d3:47:5c:5a:a5:
                    25:a2:0f:1a:67:02:82:2d:80:d6:f0:6e:47:2c:66:
                    aa:18:3f:dc:5c:7a:ea:a3:03:42:63:d0:f5:6d:8f:
                    fa:03:7b:75:3b:5b:ad:56:e3:2d:d5:4b:d5:ab:ce:
                    6a:98:00:f3:f1:e4:3c:60:76:d5:f1:c4:49:81:0b:
                    73:31:f0:82:6f:bb:d3:c5:5b:40:e5:9d:98:be:7b:
                    4a:b6:15:8a:ba:f9:19:bc:35:fe:e1:40:d4:59:2b:
                    b5:30:97:c4:cc:08:e2:9d:74:8d:02:eb:0e:81:4c:
                    29:84:5f:44:d0:a7:b1:71:98:9b:ce:03:6e:df:b0:
                    f1:4d:07:2d:78:0a:ea:9e:d8:76:c1:ad:a8:47:01:
                    5d:1e:18:6b:21:16:95:17:7d:d7:70:3b:6f:b2:4b:
                    17:da:ac:17:47:1d:d1:a5:cd:21:63:83:fd:10:0f:
                    b1:b4:b0:1c:43:54:05:6b:5e:83:ae:ed:c3:db:a5:
                    5b:b0:10:f8:11:88:f1:8b:9f:05:73:20:10:b0:3f:
                    72:d3:0b:8b:8c:ec:e9:9d:92:ad:08:a1:d2:93:36:
                    fe:38:e1:31:1b:84:cf:79:ab:39:97:f2:19:66:97:
                    fe:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:1F:62:06:FB:C7:EC:68:C7:F6:70:12:7D:52:71:88:73:E8:2A:47
            X509v3 Authority Key Identifier:
                keyid:BF:35:F8:3A:1D:C8:8C:8E:56:54:E5:EF:E8:D6:40:E0:9D:02:2D:06

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://krill.dispaisy.systems/repo/dispaisyenterprises/2/BF35F83A1DC88C8E5654E5EFE8D640E09D022D06.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/BF35F83A1DC88C8E5654E5EFE8D640E09D022D06.cer

            Subject Information Access:
                Signed Object - URI:rsync://krill.dispaisy.systems/repo/dispaisyenterprises/2/326131343a373538333a653161303a3a2f34382d3438203d3e2038303735.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a14:7583:e1a0::/48

    Signature Algorithm: sha256WithRSAEncryption
         89:75:76:03:04:a4:32:2f:10:0e:ab:a5:9e:b2:47:86:fd:af:
         8c:d1:da:70:71:9f:84:8a:02:ed:32:a8:69:83:92:cf:4f:e3:
         bc:13:12:c8:42:1e:30:71:b5:77:91:31:d6:5a:a0:cc:c8:64:
         b8:89:61:b3:d9:78:ce:2c:13:f1:40:cc:06:29:8d:1d:d1:df:
         68:4f:83:ab:b1:4b:21:32:2e:2a:95:02:4f:a8:52:60:c1:da:
         a9:cb:4f:ad:da:70:69:d6:3a:e7:aa:39:bf:b8:2b:1e:87:f7:
         c6:68:fb:d5:45:30:51:30:cd:de:40:9d:fc:e3:7c:c6:08:13:
         04:31:71:87:a5:52:bb:b5:5d:66:cd:17:88:fe:10:62:1f:ff:
         d1:3f:4b:c8:22:30:c9:b2:c5:e3:7d:1e:3e:d2:9d:cc:22:68:
         d0:61:55:fa:9e:a6:38:5f:7b:dd:8f:4b:ba:56:27:d4:c9:65:
         65:1d:dc:5d:ae:16:a3:c3:be:6a:64:dc:d9:f0:27:65:57:7d:
         15:74:4c:b6:48:4f:f5:50:17:f6:85:45:1f:6f:45:58:2d:68:
         77:37:25:7c:e6:f6:32:f2:18:57:78:9a:98:1b:70:95:f2:25:
         ce:6d:34:1d:b0:de:ac:fb:01:7c:83:9e:c0:aa:56:a8:0d:03:
         1f:23:b6:6a
-----BEGIN CERTIFICATE-----
MIIFPjCCBCagAwIBAgIUM3tlPcj2T/69P/xHND5JrToT3eMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQkYzNUY4M0ExREM4OEM4RTU2NTRFNUVGRThENjQwRTA5
RDAyMkQwNjAeFw0yNjA4MjUxNDEzMDRaFw0yNzA4MjQxNDE4MDRaMDMxMTAvBgNV
BAMTKDlDMUY2MjA2RkJDN0VDNjhDN0Y2NzAxMjdENTI3MTg4NzNFODJBNDcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCr9rycmmTQAnEMmhTbss4CPw0k
0pO+qjDTR1xapSWiDxpnAoItgNbwbkcsZqoYP9xceuqjA0Jj0PVtj/oDe3U7W61W
4y3VS9WrzmqYAPPx5DxgdtXxxEmBC3Mx8IJvu9PFW0DlnZi+e0q2FYq6+Rm8Nf7h
QNRZK7Uwl8TMCOKddI0C6w6BTCmEX0TQp7FxmJvOA27fsPFNBy14Cuqe2HbBrahH
AV0eGGshFpUXfddwO2+ySxfarBdHHdGlzSFjg/0QD7G0sBxDVAVrXoOu7cPbpVuw
EPgRiPGLnwVzIBCwP3LTC4uM7Omdkq0IodKTNv444TEbhM95qzmX8hlml/7ZAgMB
AAGjggJIMIICRDAdBgNVHQ4EFgQUnB9iBvvH7GjH9nASfVJxiHPoKkcwHwYDVR0j
BBgwFoAUvzX4Oh3IjI5WVOXv6NZA4J0CLQYwDgYDVR0PAQH/BAQDAgeAMHcGA1Ud
HwRwMG4wbKBqoGiGZnJzeW5jOi8va3JpbGwuZGlzcGFpc3kuc3lzdGVtcy9yZXBv
L2Rpc3BhaXN5ZW50ZXJwcmlzZXMvMi9CRjM1RjgzQTFEQzg4QzhFNTY1NEU1RUZF
OEQ2NDBFMDlEMDIyRDA2LmNybDCBngYIKwYBBQUHAQEEgZEwgY4wgYsGCCsGAQUF
BzAChn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
Lzg5MjcwZjZjLWEzZmUtNDI5OS1iMDc5LTMwOWVkOTdmMzgyNC8wL0JGMzVGODNB
MURDODhDOEU1NjU0RTVFRkU4RDY0MEUwOUQwMjJEMDYuY2VyMIGZBggrBgEFBQcB
CwSBjDCBiTCBhgYIKwYBBQUHMAuGenJzeW5jOi8va3JpbGwuZGlzcGFpc3kuc3lz
dGVtcy9yZXBvL2Rpc3BhaXN5ZW50ZXJwcmlzZXMvMi8zMjYxMzEzNDNhMzczNTM4
MzMzYTY1MzE2MTMwM2EzYTJmMzQzODJkMzQzODIwM2QzZTIwMzgzMDM3MzUucm9h
MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8E
AgACMAkDBwAqFHWD4aAwDQYJKoZIhvcNAQELBQADggEBAIl1dgMEpDIvEA6rpZ6y
R4b9r4zR2nBxn4SKAu0yqGmDks9P47wTEshCHjBxtXeRMdZaoMzIZLiJYbPZeM4s
E/FAzAYpjR3R32hPg6uxSyEyLiqVAk+oUmDB2qnLT63acGnWOueqOb+4Kx6H98Zo
+9VFMFEwzd5AnfzjfMYIEwQxcYelUru1XWbNF4j+EGIf/9E/S8giMMmyxeN9Hj7S
ncwiaNBhVfqepjhfe92PS7pWJ9TJZWUd3F2uFqPDvmpk3NnwJ2VXfRV0TLZIT/VQ
F/aFRR9vRVgtaHc3JXzm9jLyGFd4mpgbcJXyJc5tNB2w3qz7AXyDnsCqVqgNAx8j
tmo=
-----END CERTIFICATE-----
Generated at Wed Aug 26 20:25:16 2026 by rpki-client