Route Origin Authorization

$ rpki-client -vvvf rpki-rsync.warpnet.xyz/repo/warpnet/0/3133302e37382e33312e302f32342d3234203d3e20313937353734.roa
File:                     3133302e37382e33312e302f32342d3234203d3e20313937353734.roa (raw, json)
Hash identifier:          DY15glAITIMBv8rZWkGHQ0TTvmpGdAJE07X7uz9v22U=
Subject key identifier:   3D:D9:87:2D:BC:8F:DC:20:9D:F3:6D:0D:AB:FA:E6:EE:54:C2:64:29
Certificate issuer:       /CN=b4b74ed94183cc06a35c95c5b7096b7c0ef04944
Certificate serial:       30274E28FB644A46A0A63D7F5AE7B4B1AC3CA0AA
Authority key identifier: B4:B7:4E:D9:41:83:CC:06:A3:5C:95:C5:B7:09:6B:7C:0E:F0:49:44
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tLdO2UGDzAajXJXFtwlrfA7wSUQ.cer
Subject info access:      rsync://rpki-rsync.warpnet.xyz/repo/warpnet/0/3133302e37382e33312e302f32342d3234203d3e20313937353734.roa
Signing time:             Fri 30 Oct 2026 19:15:46 +0000
ROA not before:           Fri 30 Oct 2026 19:10:46 +0000
ROA not after:            Fri 29 Oct 2027 19:15:46 +0000
asID:                     197574
IP address blocks:        130.78.31.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.warpnet.xyz/repo/warpnet/0/B4B74ED94183CC06A35C95C5B7096B7C0EF04944.crl
                          rsync://rpki-rsync.warpnet.xyz/repo/warpnet/0/B4B74ED94183CC06A35C95C5B7096B7C0EF04944.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/tLdO2UGDzAajXJXFtwlrfA7wSUQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Nov 2026 23:28:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            30:27:4e:28:fb:64:4a:46:a0:a6:3d:7f:5a:e7:b4:b1:ac:3c:a0:aa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b4b74ed94183cc06a35c95c5b7096b7c0ef04944
        Validity
            Not Before: Oct 30 19:10:46 2026 GMT
            Not After : Oct 29 19:15:46 2027 GMT
        Subject: CN=3DD9872DBC8FDC209DF36D0DABFAE6EE54C26429
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:87:7a:2d:b7:3a:ca:57:27:0d:4e:82:e7:33:
                    78:5a:3b:9a:21:a6:83:09:ad:f0:ef:36:ef:41:73:
                    67:6c:74:a9:55:9a:7e:d8:14:0a:90:09:30:53:a9:
                    3f:35:6d:e1:3c:c6:e5:fd:ae:33:4e:e5:1c:cd:18:
                    f9:79:c0:a3:db:d8:c2:78:60:3f:b3:03:6c:ab:2b:
                    22:f0:50:3c:6b:88:11:d5:41:e9:76:42:8b:dc:4a:
                    2d:17:86:a2:60:33:3e:3c:5c:52:eb:ba:d6:b1:87:
                    86:6c:31:ef:23:b3:51:8c:d7:e3:8c:bc:a5:e7:f4:
                    80:59:ce:0b:47:76:73:d8:60:4e:3a:9d:e5:af:77:
                    28:b5:47:93:6b:da:46:8a:40:63:29:55:22:4f:51:
                    ac:a9:45:27:33:69:43:25:db:1d:dc:0b:41:ec:02:
                    5c:08:a5:e5:50:1f:8d:96:76:e8:05:7b:d0:d6:4d:
                    7e:ed:a6:07:6e:b6:de:97:e4:06:06:2b:4c:8c:a9:
                    66:94:95:78:6a:42:80:96:f7:50:2d:36:ed:29:71:
                    c1:49:62:3e:83:ff:ac:15:2f:02:9f:2e:5e:d5:81:
                    25:13:ae:f6:85:92:84:f5:d3:ea:47:98:10:3b:dc:
                    72:8c:66:96:d4:7f:b7:e9:c3:34:69:05:98:28:9a:
                    64:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:D9:87:2D:BC:8F:DC:20:9D:F3:6D:0D:AB:FA:E6:EE:54:C2:64:29
            X509v3 Authority Key Identifier:
                keyid:B4:B7:4E:D9:41:83:CC:06:A3:5C:95:C5:B7:09:6B:7C:0E:F0:49:44

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.warpnet.xyz/repo/warpnet/0/B4B74ED94183CC06A35C95C5B7096B7C0EF04944.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tLdO2UGDzAajXJXFtwlrfA7wSUQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.warpnet.xyz/repo/warpnet/0/3133302e37382e33312e302f32342d3234203d3e20313937353734.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  130.78.31.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9e:b1:f7:26:74:e4:97:16:f7:73:7b:ba:05:2a:f7:a8:33:d6:
         1a:4f:d6:d5:c4:ce:6a:7d:d5:57:ee:73:80:94:79:c8:c8:b7:
         04:d6:19:d5:24:bd:1e:e8:f3:2c:22:96:53:25:e2:d1:51:40:
         10:93:98:b3:ec:fd:b4:95:d7:cd:7e:7c:e3:2a:fe:80:4a:d7:
         57:26:99:1f:d7:53:0d:be:0e:44:bb:a0:d0:57:6d:ee:20:55:
         a3:c0:65:81:f5:d2:fb:a5:8c:84:e0:fc:b7:38:a5:ca:75:af:
         62:a5:65:aa:df:c1:2f:1f:40:83:54:be:49:6b:96:ea:41:01:
         e2:7b:eb:85:3a:08:4b:fd:a6:f7:e1:61:f3:d1:c7:38:4c:e3:
         0f:52:fe:ee:ea:c7:a7:81:b9:56:2d:14:89:4c:34:6e:9a:8a:
         b1:4a:2f:ae:5a:5f:10:4d:f2:02:a8:39:58:13:05:75:0a:33:
         59:5d:19:e2:0f:13:ee:39:fd:d5:6b:4b:4a:1b:28:9c:11:40:
         75:5c:d3:7c:53:fd:38:24:9f:cc:af:5c:4e:e6:6a:ec:88:71:
         69:29:4f:93:39:26:e3:d9:b4:b8:1e:0e:d8:73:06:97:cf:97:
         f7:db:20:dc:c8:ab:f5:cd:7b:cb:f7:47:3e:ed:a6:ba:f4:e3:
         cc:2c:0a:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 18:07:36 2026 by rpki-client