Route Origin Authorization

$ rpki-client -vvvf krill.dispaisy.systems/repo/dispaisyenterprises/3/326130363a613030323a643332333a3a2f34382d3438203d3e203136353039.roa
File:                     326130363a613030323a643332333a3a2f34382d3438203d3e203136353039.roa (raw, json)
Hash identifier:          4PnNEXr2vCY9u+zfpE3yL+B76k27T4zBgDpULAGMFMA=
Subject key identifier:   EC:A9:5D:6D:9F:BB:DE:F5:1D:46:C3:52:B5:F2:31:98:5F:B2:2E:BA
Certificate issuer:       /CN=82E655CAA25B8DDE79B40B323A234B26A41D4E33
Certificate serial:       7D836DFBF93004771BF63AEDAE203C7B50F8C85B
Authority key identifier: 82:E6:55:CA:A2:5B:8D:DE:79:B4:0B:32:3A:23:4B:26:A4:1D:4E:33
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/82E655CAA25B8DDE79B40B323A234B26A41D4E33.cer
Subject info access:      rsync://krill.dispaisy.systems/repo/dispaisyenterprises/3/326130363a613030323a643332333a3a2f34382d3438203d3e203136353039.roa
Signing time:             Mon 26 Oct 2026 20:54:49 +0000
ROA not before:           Mon 26 Oct 2026 20:49:49 +0000
ROA not after:            Mon 25 Oct 2027 20:54:49 +0000
asID:                     16509
IP address blocks:        2a06:a002:d323::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://krill.dispaisy.systems/repo/dispaisyenterprises/3/82E655CAA25B8DDE79B40B323A234B26A41D4E33.crl
                          rsync://krill.dispaisy.systems/repo/dispaisyenterprises/3/82E655CAA25B8DDE79B40B323A234B26A41D4E33.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/82E655CAA25B8DDE79B40B323A234B26A41D4E33.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 31 Oct 2026 14:19:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7d:83:6d:fb:f9:30:04:77:1b:f6:3a:ed:ae:20:3c:7b:50:f8:c8:5b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=82E655CAA25B8DDE79B40B323A234B26A41D4E33
        Validity
            Not Before: Oct 26 20:49:49 2026 GMT
            Not After : Oct 25 20:54:49 2027 GMT
        Subject: CN=ECA95D6D9FBBDEF51D46C352B5F231985FB22EBA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:b3:2c:fc:5c:1f:0d:5f:82:19:36:a2:88:10:
                    6c:4f:81:8e:8e:29:2b:ca:40:12:14:b0:c4:0b:c5:
                    a0:71:78:a8:56:53:17:88:45:20:81:2f:b1:17:16:
                    d8:55:50:30:3c:60:b9:d4:46:73:a2:58:01:7d:ed:
                    e9:4f:90:f1:fb:f7:4b:04:69:c3:c6:43:f6:1c:1b:
                    ff:48:df:dc:e1:5b:fe:f4:74:21:b9:70:71:96:2d:
                    65:70:dd:9d:58:94:32:c8:1e:4a:2d:6f:0b:99:54:
                    42:f0:32:00:9f:09:fa:27:67:eb:95:d8:bb:d0:18:
                    05:4b:a6:0d:e1:be:2a:83:f3:5d:23:5f:bf:7e:80:
                    21:27:75:82:f8:f0:7a:93:0a:cf:ea:22:fc:43:27:
                    92:ae:05:01:80:28:34:6c:ed:fe:56:ea:41:f7:8b:
                    c5:dd:f3:29:a4:70:52:95:a7:6a:74:10:9a:82:41:
                    0a:f8:ea:ad:57:b7:cf:05:6a:5a:25:92:b5:a4:64:
                    9c:85:46:e4:22:53:b7:33:f8:68:bf:aa:ef:59:55:
                    ab:c7:5d:2d:e4:98:79:5d:b8:f7:29:10:1a:9f:a4:
                    ea:45:4a:d5:38:5a:65:63:11:44:08:ca:22:7b:e3:
                    b6:fe:4d:28:c9:3c:32:39:1e:a6:e1:ba:a5:82:41:
                    dc:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:A9:5D:6D:9F:BB:DE:F5:1D:46:C3:52:B5:F2:31:98:5F:B2:2E:BA
            X509v3 Authority Key Identifier:
                keyid:82:E6:55:CA:A2:5B:8D:DE:79:B4:0B:32:3A:23:4B:26:A4:1D:4E:33

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://krill.dispaisy.systems/repo/dispaisyenterprises/3/82E655CAA25B8DDE79B40B323A234B26A41D4E33.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/82E655CAA25B8DDE79B40B323A234B26A41D4E33.cer

            Subject Information Access:
                Signed Object - URI:rsync://krill.dispaisy.systems/repo/dispaisyenterprises/3/326130363a613030323a643332333a3a2f34382d3438203d3e203136353039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a06:a002:d323::/48

    Signature Algorithm: sha256WithRSAEncryption
         3b:ae:2f:b6:0b:9d:cd:3c:36:af:bc:83:fe:7b:cc:d0:01:3c:
         a7:d4:02:70:af:ed:b4:7a:39:ac:f4:a2:ad:df:d8:76:eb:6c:
         24:d0:6a:a7:75:74:90:23:92:a3:71:92:41:de:b9:bb:d4:22:
         3c:f5:b4:9d:72:2c:53:ff:2f:86:82:ef:75:42:ba:c0:1a:19:
         10:bc:51:9f:f4:ff:a7:b4:51:de:c9:f4:15:2e:c7:dc:3e:58:
         11:f6:25:14:dd:6e:b9:8f:e8:ad:8b:98:c0:33:5c:d8:45:26:
         ba:3e:8a:51:95:f5:6f:34:3f:95:2f:78:f0:ae:14:c5:e0:39:
         fa:09:11:be:e4:f2:38:29:35:e4:39:ff:fb:30:96:51:7f:68:
         7b:d9:d4:98:5b:8e:fa:65:d5:0c:4f:38:8e:38:db:4a:e2:7c:
         b5:b3:e6:32:f8:9a:cf:4a:ce:b4:b7:de:95:2c:f1:47:e9:7e:
         85:6a:aa:27:bb:14:e1:27:30:d0:4c:17:1b:b9:90:40:7a:ab:
         c4:0a:9b:53:9d:6f:82:72:48:58:44:a6:69:c6:d4:7c:c9:e9:
         0e:c1:68:ba:ff:58:7f:a9:d5:55:fa:75:15:9e:ad:b7:72:9a:
         33:a1:bb:cb:71:96:a7:e0:d8:54:f5:d4:ac:99:11:43:c1:65:
         0f:84:5d:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 31 05:41:34 2026 by rpki-client