Route Origin Authorization

$ rpki-client -vvvf rpki-rsync.warpnet.xyz/repo/warpnet/0/3133302e37382e32362e302f32342d3234203d3e203335363631.roa
File:                     3133302e37382e32362e302f32342d3234203d3e203335363631.roa (raw, json)
Hash identifier:          iTmvlFUvOJrXXccptAAuiVheoUJjNWXDJZQRDQvpQEc=
Subject key identifier:   14:93:AB:16:E5:A3:75:B4:80:A2:9D:AC:4E:8A:43:DF:94:89:62:62
Certificate issuer:       /CN=b4b74ed94183cc06a35c95c5b7096b7c0ef04944
Certificate serial:       664E967CA53F0C0B8A131359F9158DBCA73FF931
Authority key identifier: B4:B7:4E:D9:41:83:CC:06:A3:5C:95:C5:B7:09:6B:7C:0E:F0:49:44
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tLdO2UGDzAajXJXFtwlrfA7wSUQ.cer
Subject info access:      rsync://rpki-rsync.warpnet.xyz/repo/warpnet/0/3133302e37382e32362e302f32342d3234203d3e203335363631.roa
Signing time:             Wed 21 Oct 2026 12:39:05 +0000
ROA not before:           Wed 21 Oct 2026 12:34:05 +0000
ROA not after:            Wed 20 Oct 2027 12:39:05 +0000
asID:                     35661
IP address blocks:        130.78.26.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.warpnet.xyz/repo/warpnet/0/B4B74ED94183CC06A35C95C5B7096B7C0EF04944.crl
                          rsync://rpki-rsync.warpnet.xyz/repo/warpnet/0/B4B74ED94183CC06A35C95C5B7096B7C0EF04944.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/tLdO2UGDzAajXJXFtwlrfA7wSUQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Oct 2026 23:25:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            66:4e:96:7c:a5:3f:0c:0b:8a:13:13:59:f9:15:8d:bc:a7:3f:f9:31
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b4b74ed94183cc06a35c95c5b7096b7c0ef04944
        Validity
            Not Before: Oct 21 12:34:05 2026 GMT
            Not After : Oct 20 12:39:05 2027 GMT
        Subject: CN=1493AB16E5A375B480A29DAC4E8A43DF94896262
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:4d:e4:21:db:e0:ad:70:74:a4:95:e0:11:04:
                    57:f4:03:c1:76:ea:54:53:78:93:d6:65:da:11:39:
                    d4:69:57:8e:1f:11:43:c9:f7:e4:de:35:52:bf:9a:
                    2a:c4:e7:a6:9d:fa:25:6e:3f:27:b9:fe:60:41:00:
                    1b:13:4b:82:4b:e3:9a:af:85:34:c0:69:9c:46:10:
                    b0:98:c0:75:e2:6a:7e:cf:a7:0b:5c:ff:9f:c9:0d:
                    22:bd:87:30:8d:dc:ce:24:a8:9c:40:6c:4c:9c:0c:
                    d0:11:15:58:03:8b:30:2d:e8:2b:ff:47:55:c4:da:
                    d6:23:39:87:f4:77:bb:e4:b8:2e:eb:18:da:54:8b:
                    0f:6a:14:12:43:6f:c6:1c:ac:2f:49:1b:f4:1f:5c:
                    83:a0:7d:cf:05:fb:19:08:d7:e0:38:fb:fd:de:d0:
                    2d:fc:f7:c1:e5:ea:03:fc:6c:41:12:a3:2f:b2:c6:
                    fd:36:26:e6:79:97:75:fc:07:83:e6:da:16:4c:61:
                    a9:0b:93:f4:df:59:8f:c3:a4:96:4b:82:8a:e4:f2:
                    e4:72:76:d4:34:d7:fb:7f:bd:6c:d9:43:ec:91:0e:
                    bc:33:d8:eb:1c:b6:d7:f4:44:e9:aa:1e:4a:2c:c5:
                    37:ac:7e:57:cc:22:9d:92:53:7e:5f:32:df:23:0c:
                    a5:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:93:AB:16:E5:A3:75:B4:80:A2:9D:AC:4E:8A:43:DF:94:89:62:62
            X509v3 Authority Key Identifier:
                keyid:B4:B7:4E:D9:41:83:CC:06:A3:5C:95:C5:B7:09:6B:7C:0E:F0:49:44

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.warpnet.xyz/repo/warpnet/0/B4B74ED94183CC06A35C95C5B7096B7C0EF04944.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tLdO2UGDzAajXJXFtwlrfA7wSUQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.warpnet.xyz/repo/warpnet/0/3133302e37382e32362e302f32342d3234203d3e203335363631.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  130.78.26.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0c:a2:bf:92:db:a6:61:ac:6e:08:60:bb:65:01:4e:66:02:12:
         7f:cf:c7:ce:55:12:df:50:33:3a:7e:94:d4:a6:bf:2b:0d:34:
         e6:61:f9:4f:01:df:f4:15:a6:a8:91:0f:09:9b:45:ef:bd:6a:
         ed:56:db:61:89:81:ed:93:b7:5f:b8:a5:73:45:4c:be:af:84:
         96:58:ef:ed:45:ef:0f:97:09:9f:93:ca:85:d9:59:e0:cb:23:
         3f:0d:72:0b:bb:11:10:30:bd:2d:12:5f:cf:88:1c:c6:23:97:
         81:3b:59:5b:4a:ae:cd:76:86:82:78:d8:9a:b1:e9:82:df:37:
         02:3e:25:cd:a5:d8:eb:b8:da:0d:61:85:01:87:4d:8f:55:3e:
         91:2c:ed:b9:3a:fb:c6:85:2c:72:4e:94:b8:0d:fc:c4:e8:ba:
         e3:f2:35:75:9e:19:49:62:b7:4a:cf:86:85:bd:f5:97:ef:af:
         d1:d4:89:29:32:26:07:ed:da:07:88:c7:cd:94:48:af:4d:73:
         d3:af:85:b0:c1:7e:44:ed:01:b9:ad:9d:70:b5:e1:55:f4:64:
         3a:27:57:f8:46:a5:3a:33:45:c3:48:ca:4b:80:30:85:d6:ae:
         da:22:db:04:40:c7:f2:63:41:51:99:ce:0f:aa:36:f6:94:f8:
         13:ab:89:b4
-----BEGIN CERTIFICATE-----
MIIE3TCCA8WgAwIBAgIUZk6WfKU/DAuKExNZ+RWNvKc/+TEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYjRiNzRlZDk0MTgzY2MwNmEzNWM5NWM1YjcwOTZiN2Mw
ZWYwNDk0NDAeFw0yNjEwMjExMjM0MDVaFw0yNzEwMjAxMjM5MDVaMDMxMTAvBgNV
BAMTKDE0OTNBQjE2RTVBMzc1QjQ4MEEyOURBQzRFOEE0M0RGOTQ4OTYyNjIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDATeQh2+CtcHSkleARBFf0A8F2
6lRTeJPWZdoROdRpV44fEUPJ9+TeNVK/mirE56ad+iVuPye5/mBBABsTS4JL45qv
hTTAaZxGELCYwHXian7Ppwtc/5/JDSK9hzCN3M4kqJxAbEycDNARFVgDizAt6Cv/
R1XE2tYjOYf0d7vkuC7rGNpUiw9qFBJDb8YcrC9JG/QfXIOgfc8F+xkI1+A4+/3e
0C3898Hl6gP8bEESoy+yxv02JuZ5l3X8B4Pm2hZMYakLk/TfWY/DpJZLgork8uRy
dtQ01/t/vWzZQ+yRDrwz2Oscttf0ROmqHkosxTesflfMIp2SU35fMt8jDKXVAgMB
AAGjggHnMIIB4zAdBgNVHQ4EFgQUFJOrFuWjdbSAop2sTopD35SJYmIwHwYDVR0j
BBgwFoAUtLdO2UGDzAajXJXFtwlrfA7wSUQwDgYDVR0PAQH/BAQDAgeAMGsGA1Ud
HwRkMGIwYKBeoFyGWnJzeW5jOi8vcnBraS1yc3luYy53YXJwbmV0Lnh5ei9yZXBv
L3dhcnBuZXQvMC9CNEI3NEVEOTQxODNDQzA2QTM1Qzk1QzVCNzA5NkI3QzBFRjA0
OTQ0LmNybDBkBggrBgEFBQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvdExkTzJVR0R6QWFqWEpYRnR3
bHJmQTd3U1VRLmNlcjCBggYIKwYBBQUHAQsEdjB0MHIGCCsGAQUFBzALhmZyc3lu
YzovL3Jwa2ktcnN5bmMud2FycG5ldC54eXovcmVwby93YXJwbmV0LzAvMzEzMzMw
MmUzNzM4MmUzMjM2MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzMzNTM2MzYzMS5y
b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4w
DAQCAAEwBgMEAIJOGjANBgkqhkiG9w0BAQsFAAOCAQEADKK/ktumYaxuCGC7ZQFO
ZgISf8/HzlUS31AzOn6U1Ka/Kw005mH5TwHf9BWmqJEPCZtF771q7VbbYYmB7ZO3
X7ilc0VMvq+Elljv7UXvD5cJn5PKhdlZ4MsjPw1yC7sREDC9LRJfz4gcxiOXgTtZ
W0quzXaGgnjYmrHpgt83Aj4lzaXY67jaDWGFAYdNj1U+kSztuTr7xoUsck6UuA38
xOi64/I1dZ4ZSWK3Ss+Ghb31l++v0dSJKTImB+3aB4jHzZRIr01z06+FsMF+RO0B
ua2dcLXhVfRkOidX+EalOjNFw0jKS4Awhdau2iLbBEDH8mNBUZnOD6o29pT4E6uJ
tA==
-----END CERTIFICATE-----
Generated at Mon Oct 26 08:51:04 2026 by rpki-client