Route Origin Authorization

$ rpki-client -vvvf rpki-rsync.warpnet.xyz/repo/warpnet/0/3133302e37382e32332e302f32342d3234203d3e20343032393331.roa
File:                     3133302e37382e32332e302f32342d3234203d3e20343032393331.roa (raw, json)
Hash identifier:          9oVz11/Z7X6ub/Qs0QfIZrcSzZwt2AXxR6s5Mnp7AMQ=
Subject key identifier:   A6:5B:10:E1:77:6B:8B:03:5A:58:A2:0C:57:99:18:C5:6D:DD:15:D2
Certificate issuer:       /CN=b4b74ed94183cc06a35c95c5b7096b7c0ef04944
Certificate serial:       170F7DB83138E27056BB3F43D23DC43E4AE5873B
Authority key identifier: B4:B7:4E:D9:41:83:CC:06:A3:5C:95:C5:B7:09:6B:7C:0E:F0:49:44
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tLdO2UGDzAajXJXFtwlrfA7wSUQ.cer
Subject info access:      rsync://rpki-rsync.warpnet.xyz/repo/warpnet/0/3133302e37382e32332e302f32342d3234203d3e20343032393331.roa
Signing time:             Thu 05 Nov 2026 20:56:18 +0000
ROA not before:           Thu 05 Nov 2026 20:51:18 +0000
ROA not after:            Thu 04 Nov 2027 20:56:18 +0000
asID:                     402931
IP address blocks:        130.78.23.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.warpnet.xyz/repo/warpnet/0/B4B74ED94183CC06A35C95C5B7096B7C0EF04944.crl
                          rsync://rpki-rsync.warpnet.xyz/repo/warpnet/0/B4B74ED94183CC06A35C95C5B7096B7C0EF04944.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/tLdO2UGDzAajXJXFtwlrfA7wSUQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Nov 2026 23:28:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            17:0f:7d:b8:31:38:e2:70:56:bb:3f:43:d2:3d:c4:3e:4a:e5:87:3b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b4b74ed94183cc06a35c95c5b7096b7c0ef04944
        Validity
            Not Before: Nov  5 20:51:18 2026 GMT
            Not After : Nov  4 20:56:18 2027 GMT
        Subject: CN=A65B10E1776B8B035A58A20C579918C56DDD15D2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:91:35:ad:1c:bb:80:95:47:23:fc:ed:74:33:
                    95:cb:c0:c0:94:50:dc:8c:f6:c2:bc:86:c8:8a:c7:
                    4c:97:2c:b4:88:68:07:47:ca:7d:d8:e9:5d:44:64:
                    34:ba:61:06:7b:f9:d3:96:59:d2:10:ca:b9:15:cb:
                    2d:ec:89:e4:44:d9:82:21:05:0e:81:49:c6:21:6b:
                    1d:cf:15:87:24:c3:1e:bb:f4:69:c1:a8:10:40:d8:
                    d6:b3:3d:e6:21:27:bd:31:fe:16:d9:14:ce:5d:45:
                    07:e0:a7:26:c8:72:08:43:5a:82:1f:99:c6:0c:e6:
                    18:21:22:b3:0e:93:b4:f2:81:24:cc:d1:7b:13:3c:
                    68:54:0e:4b:fd:1d:b1:52:1e:4d:35:46:37:f4:94:
                    7f:3f:50:c8:8d:06:5b:7d:c8:76:81:05:66:b5:be:
                    8e:ae:e7:1f:c4:24:d4:af:7a:97:a9:90:42:a0:48:
                    63:cf:e2:77:f4:42:4e:06:b6:59:a8:df:98:d0:59:
                    da:58:6e:80:ce:0f:0f:e9:e8:78:cf:76:5d:74:b4:
                    5c:c9:89:6c:0a:b8:ef:6b:e4:b2:bc:1f:04:9d:fb:
                    d5:4d:33:ac:a3:f0:3e:71:9a:7c:36:2c:b4:a3:12:
                    7a:37:21:33:11:d6:ae:20:43:49:95:02:a5:8b:c7:
                    c5:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:5B:10:E1:77:6B:8B:03:5A:58:A2:0C:57:99:18:C5:6D:DD:15:D2
            X509v3 Authority Key Identifier:
                keyid:B4:B7:4E:D9:41:83:CC:06:A3:5C:95:C5:B7:09:6B:7C:0E:F0:49:44

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.warpnet.xyz/repo/warpnet/0/B4B74ED94183CC06A35C95C5B7096B7C0EF04944.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tLdO2UGDzAajXJXFtwlrfA7wSUQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.warpnet.xyz/repo/warpnet/0/3133302e37382e32332e302f32342d3234203d3e20343032393331.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  130.78.23.0/24

    Signature Algorithm: sha256WithRSAEncryption
         c0:79:b0:df:66:98:75:f3:5f:9c:2a:75:07:8a:ee:92:33:56:
         27:7f:39:d5:a2:f1:c8:98:3a:7f:a2:28:dc:7c:69:eb:00:27:
         48:b1:a3:a0:4f:21:d5:fd:e6:71:d0:32:85:5c:3a:f9:5d:5f:
         2b:92:4d:e6:53:a7:46:02:ff:72:4a:60:bf:9c:88:3b:05:39:
         ee:0e:8a:50:26:f5:ab:2d:b2:7f:b0:38:cd:25:9b:a0:33:74:
         97:2d:82:33:85:05:9f:4c:79:2b:61:f6:fd:f3:c3:24:86:b1:
         f6:0a:1a:57:58:bb:45:78:f3:31:24:78:36:6a:ce:ca:03:b1:
         c5:8a:bb:4d:bb:e4:66:6e:30:f2:59:83:24:bb:3d:f5:2b:d5:
         5a:4c:9e:7b:a7:ae:9d:52:5c:f1:75:e0:5c:da:cc:53:12:2a:
         31:20:f4:05:d0:6c:7b:c6:12:49:d1:39:ff:b1:62:5c:e7:8d:
         6c:aa:54:fc:1b:35:d6:4b:73:fe:73:56:87:59:d6:bd:cd:c2:
         bc:6f:9f:ca:df:14:f4:ab:39:53:29:ac:ea:c8:ba:b7:83:74:
         69:29:a5:ba:d0:6a:87:3e:b0:78:f4:e9:7d:d1:1b:0c:2c:a1:
         42:d4:8a:bd:93:32:5d:b0:7a:36:d1:b5:0d:4f:ac:e1:01:80:
         04:e7:48:27
-----BEGIN CERTIFICATE-----
MIIE3zCCA8egAwIBAgIUFw99uDE44nBWuz9D0j3EPkrlhzswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYjRiNzRlZDk0MTgzY2MwNmEzNWM5NWM1YjcwOTZiN2Mw
ZWYwNDk0NDAeFw0yNjExMDUyMDUxMThaFw0yNzExMDQyMDU2MThaMDMxMTAvBgNV
BAMTKEE2NUIxMEUxNzc2QjhCMDM1QTU4QTIwQzU3OTkxOEM1NkRERDE1RDIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCrkTWtHLuAlUcj/O10M5XLwMCU
UNyM9sK8hsiKx0yXLLSIaAdHyn3Y6V1EZDS6YQZ7+dOWWdIQyrkVyy3sieRE2YIh
BQ6BScYhax3PFYckwx679GnBqBBA2NazPeYhJ70x/hbZFM5dRQfgpybIcghDWoIf
mcYM5hghIrMOk7TygSTM0XsTPGhUDkv9HbFSHk01Rjf0lH8/UMiNBlt9yHaBBWa1
vo6u5x/EJNSvepepkEKgSGPP4nf0Qk4Gtlmo35jQWdpYboDODw/p6HjPdl10tFzJ
iWwKuO9r5LK8HwSd+9VNM6yj8D5xmnw2LLSjEno3ITMR1q4gQ0mVAqWLx8V3AgMB
AAGjggHpMIIB5TAdBgNVHQ4EFgQUplsQ4XdriwNaWKIMV5kYxW3dFdIwHwYDVR0j
BBgwFoAUtLdO2UGDzAajXJXFtwlrfA7wSUQwDgYDVR0PAQH/BAQDAgeAMGsGA1Ud
HwRkMGIwYKBeoFyGWnJzeW5jOi8vcnBraS1yc3luYy53YXJwbmV0Lnh5ei9yZXBv
L3dhcnBuZXQvMC9CNEI3NEVEOTQxODNDQzA2QTM1Qzk1QzVCNzA5NkI3QzBFRjA0
OTQ0LmNybDBkBggrBgEFBQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvdExkTzJVR0R6QWFqWEpYRnR3
bHJmQTd3U1VRLmNlcjCBhAYIKwYBBQUHAQsEeDB2MHQGCCsGAQUFBzALhmhyc3lu
YzovL3Jwa2ktcnN5bmMud2FycG5ldC54eXovcmVwby93YXJwbmV0LzAvMzEzMzMw
MmUzNzM4MmUzMjMzMmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzQzMDMyMzkzMzMx
LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAw
DjAMBAIAATAGAwQAgk4XMA0GCSqGSIb3DQEBCwUAA4IBAQDAebDfZph181+cKnUH
iu6SM1YnfznVovHImDp/oijcfGnrACdIsaOgTyHV/eZx0DKFXDr5XV8rkk3mU6dG
Av9ySmC/nIg7BTnuDopQJvWrLbJ/sDjNJZugM3SXLYIzhQWfTHkrYfb988MkhrH2
ChpXWLtFePMxJHg2as7KA7HFirtNu+RmbjDyWYMkuz31K9VaTJ57p66dUlzxdeBc
2sxTEioxIPQF0Gx7xhJJ0Tn/sWJc541sqlT8GzXWS3P+c1aHWda9zcK8b5/K3xT0
qzlTKazqyLq3g3RpKaW60GqHPrB49Ol90RsMLKFC1Iq9kzJdsHo20bUNT6zhAYAE
50gn
-----END CERTIFICATE-----
Generated at Sun Nov 15 12:23:14 2026 by rpki-client