Route Origin Authorization

$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/a66dce54-20b9-47e8-bcc3-d307c70fdea9/1/326130363a613030323a666631303a3a2f34342d3434203d3e20323138373839.roa
File:                     326130363a613030323a666631303a3a2f34342d3434203d3e20323138373839.roa (raw, json)
Hash identifier:          hl/eiX/+yFuwGcvv/eXNIK1c9HO5fEuzLJZyn6q5/gE=
Subject key identifier:   7E:6B:24:9E:FC:DB:FF:39:BB:2C:9B:FE:90:90:12:B8:AC:52:28:E3
Certificate issuer:       /CN=08B09F355659D14A7514422FF8C0A470E09A616D
Certificate serial:       7A4F6FA15C90B0BB7571958D10A23F471EA500D6
Authority key identifier: 08:B0:9F:35:56:59:D1:4A:75:14:42:2F:F8:C0:A4:70:E0:9A:61:6D
Authority info access:    rsync://krill.dispaisy.systems/repo/dispaisyenterprises/3/08B09F355659D14A7514422FF8C0A470E09A616D.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/a66dce54-20b9-47e8-bcc3-d307c70fdea9/1/326130363a613030323a666631303a3a2f34342d3434203d3e20323138373839.roa
Signing time:             Fri 02 Oct 2026 04:06:30 +0000
ROA not before:           Fri 02 Oct 2026 04:01:30 +0000
ROA not after:            Fri 01 Oct 2027 04:06:30 +0000
asID:                     218789
IP address blocks:        2a06:a002:ff10::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/a66dce54-20b9-47e8-bcc3-d307c70fdea9/1/08B09F355659D14A7514422FF8C0A470E09A616D.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/a66dce54-20b9-47e8-bcc3-d307c70fdea9/1/08B09F355659D14A7514422FF8C0A470E09A616D.mft
                          rsync://krill.dispaisy.systems/repo/dispaisyenterprises/3/08B09F355659D14A7514422FF8C0A470E09A616D.cer
                          rsync://krill.dispaisy.systems/repo/dispaisyenterprises/3/82E655CAA25B8DDE79B40B323A234B26A41D4E33.crl
                          rsync://krill.dispaisy.systems/repo/dispaisyenterprises/3/82E655CAA25B8DDE79B40B323A234B26A41D4E33.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/82E655CAA25B8DDE79B40B323A234B26A41D4E33.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 12 Oct 2026 01:38:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7a:4f:6f:a1:5c:90:b0:bb:75:71:95:8d:10:a2:3f:47:1e:a5:00:d6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=08B09F355659D14A7514422FF8C0A470E09A616D
        Validity
            Not Before: Oct  2 04:01:30 2026 GMT
            Not After : Oct  1 04:06:30 2027 GMT
        Subject: CN=7E6B249EFCDBFF39BB2C9BFE909012B8AC5228E3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:35:c8:ce:70:55:1d:4c:0e:b6:19:d3:27:ee:
                    b7:ac:02:1c:32:1b:4c:eb:4f:3c:18:87:58:4a:21:
                    3a:0b:2b:95:c7:fb:e6:3e:48:b1:fc:40:7f:f7:89:
                    e0:7b:e5:19:20:c3:ae:2e:23:f7:7e:22:dd:ab:1b:
                    36:7c:11:11:d2:36:60:5c:3d:4a:83:c7:b5:19:fb:
                    ba:f3:89:22:c2:62:e0:1f:02:a7:d1:fd:be:b2:fd:
                    a7:4f:bd:ab:2f:32:9c:ee:fd:b3:80:03:c5:fe:18:
                    40:05:9b:28:33:a9:02:40:2f:44:5b:5f:66:a4:f6:
                    c2:86:55:d2:82:e9:64:45:8b:64:ae:d5:ff:98:13:
                    f2:7e:65:32:e3:8d:d7:99:20:36:dc:18:b5:a3:31:
                    46:9f:43:29:4d:fd:39:d5:3d:82:9d:d0:2a:20:b2:
                    0e:19:ae:c5:a4:c4:f9:92:32:71:18:4a:45:e3:3d:
                    43:29:fc:3e:7c:75:8c:9f:2e:df:7b:9e:c9:15:13:
                    41:dc:c1:93:f9:4d:33:2a:7f:a3:af:a0:43:f5:a3:
                    5d:43:1f:32:5a:4e:ee:21:18:65:ab:3c:82:2e:ed:
                    94:6f:5c:60:96:af:e9:a0:47:ab:4f:ac:28:e9:fe:
                    36:a1:aa:4a:fd:bb:a0:d2:a6:24:3c:a6:bb:f4:6c:
                    09:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:6B:24:9E:FC:DB:FF:39:BB:2C:9B:FE:90:90:12:B8:AC:52:28:E3
            X509v3 Authority Key Identifier:
                keyid:08:B0:9F:35:56:59:D1:4A:75:14:42:2F:F8:C0:A4:70:E0:9A:61:6D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/a66dce54-20b9-47e8-bcc3-d307c70fdea9/1/08B09F355659D14A7514422FF8C0A470E09A616D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://krill.dispaisy.systems/repo/dispaisyenterprises/3/08B09F355659D14A7514422FF8C0A470E09A616D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a66dce54-20b9-47e8-bcc3-d307c70fdea9/1/326130363a613030323a666631303a3a2f34342d3434203d3e20323138373839.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a06:a002:ff10::/44

    Signature Algorithm: sha256WithRSAEncryption
         38:e8:8a:f6:a7:c3:e5:7d:bf:16:c5:e6:a4:45:d0:90:75:68:
         89:da:db:9a:4f:0e:69:3d:ca:32:df:0d:d7:ff:cf:a2:1b:5e:
         03:75:be:9c:3f:19:4f:ff:e2:20:00:d7:7f:1b:2c:f0:e8:e8:
         7d:25:e5:bd:ba:17:e4:79:f2:0c:8e:72:bc:ae:e7:8a:18:b7:
         f0:e8:c5:39:26:0c:58:53:0d:de:1c:02:82:65:fd:2d:61:b1:
         56:6c:75:25:9b:42:85:f9:b8:35:32:c6:26:8f:1e:55:44:b1:
         b4:b5:7f:95:8d:30:aa:1d:3c:80:8d:f0:48:08:23:71:22:25:
         64:4f:1b:00:e4:6a:2c:3c:f1:3e:2c:1c:ee:64:32:bc:48:bc:
         38:88:86:2a:c5:ca:d2:f9:fc:45:9e:f9:43:02:a1:f4:32:86:
         89:a8:fc:f0:7a:f4:07:00:10:10:f4:a4:58:21:18:c0:de:c3:
         13:34:53:56:cd:f6:29:b3:de:cb:a4:1a:10:32:d8:8d:4f:11:
         06:3c:cd:c9:68:a6:12:f5:cf:bf:2a:7e:1e:8d:02:8d:2c:1f:
         e6:60:04:9f:25:e8:0a:54:bb:1d:b8:12:67:aa:73:bd:f1:30:
         b4:59:9e:af:ef:82:2b:24:7a:15:0b:0f:a6:0f:f8:be:3c:a8:
         d1:30:a9:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 13:37:18 2026 by rpki-client