Route Origin Authorization

$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/a66dce54-20b9-47e8-bcc3-d307c70fdea9/1/326130363a613030323a666631313a3a2f34382d3438203d3e20323138373839.roa
File:                     326130363a613030323a666631313a3a2f34382d3438203d3e20323138373839.roa (raw, json)
Hash identifier:          Cmds8I+QlQq6vWAVNFBxbx1xWFCo+i+GvFwPQVxDeqE=
Subject key identifier:   9B:F2:B8:E1:8E:80:50:F1:FD:A5:BB:2F:3E:97:D1:F2:CB:22:10:11
Certificate issuer:       /CN=08B09F355659D14A7514422FF8C0A470E09A616D
Certificate serial:       16A49061AC7E12629ED79321F4AA81D01974BC31
Authority key identifier: 08:B0:9F:35:56:59:D1:4A:75:14:42:2F:F8:C0:A4:70:E0:9A:61:6D
Authority info access:    rsync://krill.dispaisy.systems/repo/dispaisyenterprises/3/08B09F355659D14A7514422FF8C0A470E09A616D.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/a66dce54-20b9-47e8-bcc3-d307c70fdea9/1/326130363a613030323a666631313a3a2f34382d3438203d3e20323138373839.roa
Signing time:             Fri 02 Oct 2026 04:06:42 +0000
ROA not before:           Fri 02 Oct 2026 04:01:42 +0000
ROA not after:            Fri 01 Oct 2027 04:06:42 +0000
asID:                     218789
IP address blocks:        2a06:a002:ff11::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/a66dce54-20b9-47e8-bcc3-d307c70fdea9/1/08B09F355659D14A7514422FF8C0A470E09A616D.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/a66dce54-20b9-47e8-bcc3-d307c70fdea9/1/08B09F355659D14A7514422FF8C0A470E09A616D.mft
                          rsync://krill.dispaisy.systems/repo/dispaisyenterprises/3/08B09F355659D14A7514422FF8C0A470E09A616D.cer
                          rsync://krill.dispaisy.systems/repo/dispaisyenterprises/3/82E655CAA25B8DDE79B40B323A234B26A41D4E33.crl
                          rsync://krill.dispaisy.systems/repo/dispaisyenterprises/3/82E655CAA25B8DDE79B40B323A234B26A41D4E33.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/82E655CAA25B8DDE79B40B323A234B26A41D4E33.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 05 Oct 2026 11:24:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            16:a4:90:61:ac:7e:12:62:9e:d7:93:21:f4:aa:81:d0:19:74:bc:31
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=08B09F355659D14A7514422FF8C0A470E09A616D
        Validity
            Not Before: Oct  2 04:01:42 2026 GMT
            Not After : Oct  1 04:06:42 2027 GMT
        Subject: CN=9BF2B8E18E8050F1FDA5BB2F3E97D1F2CB221011
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:3c:ff:7c:f7:3f:1b:4e:0e:2b:d3:6f:31:2c:
                    b8:9d:be:b2:eb:79:8e:06:50:27:57:66:23:98:96:
                    c2:ef:03:c4:23:85:fe:84:38:20:a2:03:cc:7f:f9:
                    ea:15:63:6b:b1:c3:3f:f1:04:ea:e1:d2:ea:d3:36:
                    f4:69:bd:4c:0e:cd:a3:3f:ee:81:b1:75:6d:18:21:
                    0c:f6:fc:bd:fa:90:30:4d:c5:35:de:d8:e0:14:cb:
                    29:d8:ef:f6:d3:e9:10:4c:1d:52:24:6f:8c:11:72:
                    ef:87:65:07:40:4a:d4:60:b3:35:9a:3c:65:33:f9:
                    9d:0e:7a:79:78:d8:be:9b:83:61:18:4b:68:13:3e:
                    a7:93:8a:c3:01:0b:9d:f2:3e:d1:62:4a:81:1b:97:
                    29:5a:7f:43:c8:d3:55:dd:c3:52:fa:ef:98:8f:82:
                    0a:54:69:9f:20:d7:6c:50:f3:8f:6d:33:e8:ec:7d:
                    b5:74:41:91:21:49:b4:24:88:91:eb:63:60:1d:a7:
                    33:9f:f3:af:b1:32:56:bb:e8:ba:3c:dd:8c:9e:cc:
                    bf:31:c5:22:9e:37:86:b5:4d:0d:f2:dc:97:43:15:
                    b9:af:4a:32:86:b9:69:14:89:25:f6:6b:2e:de:88:
                    b3:43:ff:7b:39:a1:f5:d1:f0:48:62:ea:d4:ba:46:
                    b5:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:F2:B8:E1:8E:80:50:F1:FD:A5:BB:2F:3E:97:D1:F2:CB:22:10:11
            X509v3 Authority Key Identifier:
                keyid:08:B0:9F:35:56:59:D1:4A:75:14:42:2F:F8:C0:A4:70:E0:9A:61:6D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/a66dce54-20b9-47e8-bcc3-d307c70fdea9/1/08B09F355659D14A7514422FF8C0A470E09A616D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://krill.dispaisy.systems/repo/dispaisyenterprises/3/08B09F355659D14A7514422FF8C0A470E09A616D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a66dce54-20b9-47e8-bcc3-d307c70fdea9/1/326130363a613030323a666631313a3a2f34382d3438203d3e20323138373839.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a06:a002:ff11::/48

    Signature Algorithm: sha256WithRSAEncryption
         76:41:ab:c5:54:67:4b:0f:b5:16:6f:49:55:c6:9e:13:01:54:
         1a:97:c0:cf:41:d8:8f:c8:e2:5b:91:ba:e4:5a:0b:78:c8:54:
         b9:d2:17:f4:66:52:c0:4e:97:a8:fa:b6:ea:bc:0b:c7:33:d8:
         bd:9c:69:48:83:c5:32:92:67:7d:3e:a4:a0:71:c3:32:d6:97:
         a4:e2:70:67:89:73:e1:9b:1e:57:e0:05:94:fd:81:41:01:d5:
         f6:cb:8d:93:3d:f3:7d:4a:15:d1:c6:1a:38:fb:dc:f1:26:ac:
         98:c8:7f:8c:87:d9:33:af:f6:4c:3c:38:d4:9d:a8:ee:9f:86:
         82:50:cf:5d:7a:2c:b2:8b:cd:b6:36:e1:dd:81:c4:db:c4:01:
         58:82:fa:d8:4e:79:0c:13:62:7e:6a:d3:cb:10:5c:4e:4c:d9:
         77:85:27:3e:16:f2:74:04:ab:02:29:2d:9d:7c:23:53:5f:07:
         1d:db:2d:a9:2a:ed:2a:79:63:25:4a:67:d5:52:62:7b:09:ef:
         45:58:0e:3b:64:f2:96:c7:2f:47:be:3b:ea:5a:d0:8a:67:e8:
         9d:f3:8e:00:b0:72:f5:56:30:3a:07:e6:fb:4e:b5:bb:b7:f7:
         02:27:46:01:4b:38:2c:4e:5a:68:c4:89:ed:47:0d:5b:2d:e4:
         c7:23:83:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 19:08:07 2026 by rpki-client