Route Origin Authorization

$ rpki-client -vvvf krill.dispaisy.systems/repo/dispaisyenterprises/3/326130363a613030323a643332333a3a2f34382d3438203d3e20323034303835.roa
File:                     326130363a613030323a643332333a3a2f34382d3438203d3e20323034303835.roa (raw, json)
Hash identifier:          nW38s6fBvIsJHk85yB6+DnzFZNRHspFjj0KMckbLx/k=
Subject key identifier:   88:BB:88:88:F9:B5:E7:11:91:70:0E:95:A7:E9:F8:24:26:93:6E:9D
Certificate issuer:       /CN=82E655CAA25B8DDE79B40B323A234B26A41D4E33
Certificate serial:       1680CCD085627194E5F6FB5A6874C5E33F518005
Authority key identifier: 82:E6:55:CA:A2:5B:8D:DE:79:B4:0B:32:3A:23:4B:26:A4:1D:4E:33
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/82E655CAA25B8DDE79B40B323A234B26A41D4E33.cer
Subject info access:      rsync://krill.dispaisy.systems/repo/dispaisyenterprises/3/326130363a613030323a643332333a3a2f34382d3438203d3e20323034303835.roa
Signing time:             Mon 26 Oct 2026 20:23:22 +0000
ROA not before:           Mon 26 Oct 2026 20:18:22 +0000
ROA not after:            Mon 25 Oct 2027 20:23:22 +0000
asID:                     204085
IP address blocks:        2a06:a002:d323::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://krill.dispaisy.systems/repo/dispaisyenterprises/3/82E655CAA25B8DDE79B40B323A234B26A41D4E33.crl
                          rsync://krill.dispaisy.systems/repo/dispaisyenterprises/3/82E655CAA25B8DDE79B40B323A234B26A41D4E33.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/82E655CAA25B8DDE79B40B323A234B26A41D4E33.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 05 Nov 2026 18:26:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            16:80:cc:d0:85:62:71:94:e5:f6:fb:5a:68:74:c5:e3:3f:51:80:05
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=82E655CAA25B8DDE79B40B323A234B26A41D4E33
        Validity
            Not Before: Oct 26 20:18:22 2026 GMT
            Not After : Oct 25 20:23:22 2027 GMT
        Subject: CN=88BB8888F9B5E71191700E95A7E9F82426936E9D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:70:7f:1a:77:79:09:89:c2:d3:c8:2f:fa:e8:
                    5c:e5:f4:91:b2:01:4d:04:6b:9b:3e:69:18:61:1f:
                    88:56:b4:dd:6f:b2:67:1b:86:2f:40:9e:a4:c0:33:
                    f6:96:64:81:2c:47:ad:56:13:5a:a1:a2:cb:e2:ed:
                    7b:6e:44:0a:68:52:d4:2e:b7:ff:bb:9d:9d:02:38:
                    80:27:6a:17:c3:7b:7f:2b:79:49:ee:c2:57:d0:08:
                    10:b5:18:c4:9f:f3:5a:ac:7c:32:7e:09:37:33:e3:
                    84:98:c0:dc:b4:21:05:75:5b:10:95:e5:57:99:08:
                    91:71:54:84:f8:88:80:d4:99:9b:9c:b6:d1:1d:97:
                    9f:11:b6:39:af:7f:ec:b6:ab:d8:21:c7:c6:5d:04:
                    5b:c7:3b:41:f7:01:5f:b1:a2:7d:ba:39:ce:f9:98:
                    14:e4:1b:b4:0f:2c:2f:7c:01:78:dd:fc:16:92:8e:
                    9f:81:43:f8:4f:32:ce:11:60:36:ea:fd:16:9c:86:
                    a4:07:2c:4f:38:30:f8:d0:c7:98:94:9c:25:91:43:
                    ce:34:4a:bf:cb:4d:04:90:c2:48:55:ee:34:66:16:
                    c9:85:4f:5d:8a:04:a1:14:35:8e:7f:bf:37:15:b2:
                    d4:1a:9c:bc:e7:84:9c:04:a0:2e:47:3e:7f:98:7a:
                    b6:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:BB:88:88:F9:B5:E7:11:91:70:0E:95:A7:E9:F8:24:26:93:6E:9D
            X509v3 Authority Key Identifier:
                keyid:82:E6:55:CA:A2:5B:8D:DE:79:B4:0B:32:3A:23:4B:26:A4:1D:4E:33

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://krill.dispaisy.systems/repo/dispaisyenterprises/3/82E655CAA25B8DDE79B40B323A234B26A41D4E33.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/82E655CAA25B8DDE79B40B323A234B26A41D4E33.cer

            Subject Information Access:
                Signed Object - URI:rsync://krill.dispaisy.systems/repo/dispaisyenterprises/3/326130363a613030323a643332333a3a2f34382d3438203d3e20323034303835.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a06:a002:d323::/48

    Signature Algorithm: sha256WithRSAEncryption
         86:7c:d2:a8:42:44:3a:b9:7f:c8:4d:22:45:c3:b1:3c:95:f6:
         3d:6c:b7:56:db:ee:82:eb:99:16:cf:dc:5f:50:c3:92:f2:7e:
         71:61:be:3a:b1:88:32:17:e4:70:a8:71:2a:a9:b9:f7:2a:6a:
         f5:7c:d2:0a:20:ba:07:2d:d8:99:51:f4:ad:b2:ba:67:12:78:
         eb:62:b9:32:9b:8a:2d:56:7d:62:e0:de:3b:b0:b4:7c:97:d8:
         88:b9:64:55:f5:3a:92:99:b4:d0:8e:42:d5:04:9e:bf:b8:fb:
         17:31:46:92:f0:07:ae:19:78:1b:85:a9:f8:de:da:7e:9e:31:
         3f:5e:9a:b8:68:79:2f:3a:3d:1b:e1:e7:5f:19:d7:02:72:73:
         04:44:22:7b:7e:7d:3a:45:a2:51:4f:aa:84:83:c1:05:fb:74:
         d2:fc:64:cb:22:aa:15:15:bd:e8:c2:d0:66:92:5a:6f:dc:5d:
         56:48:bd:f1:a1:82:91:60:bc:62:12:c7:94:19:9c:b0:09:93:
         f5:6b:66:63:dd:9c:86:30:eb:ff:7e:12:86:74:d5:da:f8:23:
         da:e3:11:df:72:f2:8d:e3:4e:6f:74:8e:a8:7a:15:a5:55:73:
         67:e2:01:d5:af:77:bd:92:2d:e4:8a:f9:5d:06:8b:6d:69:bd:
         32:ed:50:dc
-----BEGIN CERTIFICATE-----
MIIFNzCCBB+gAwIBAgIUFoDM0IVicZTl9vtaaHTF4z9RgAUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoODJFNjU1Q0FBMjVCOERERTc5QjQwQjMyM0EyMzRCMjZB
NDFENEUzMzAeFw0yNjEwMjYyMDE4MjJaFw0yNzEwMjUyMDIzMjJaMDMxMTAvBgNV
BAMTKDg4QkI4ODg4RjlCNUU3MTE5MTcwMEU5NUE3RTlGODI0MjY5MzZFOUQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDIcH8ad3kJicLTyC/66Fzl9JGy
AU0Ea5s+aRhhH4hWtN1vsmcbhi9AnqTAM/aWZIEsR61WE1qhosvi7XtuRApoUtQu
t/+7nZ0COIAnahfDe38reUnuwlfQCBC1GMSf81qsfDJ+CTcz44SYwNy0IQV1WxCV
5VeZCJFxVIT4iIDUmZucttEdl58Rtjmvf+y2q9ghx8ZdBFvHO0H3AV+xon26Oc75
mBTkG7QPLC98AXjd/BaSjp+BQ/hPMs4RYDbq/RachqQHLE84MPjQx5iUnCWRQ840
Sr/LTQSQwkhV7jRmFsmFT12KBKEUNY5/vzcVstQanLznhJwEoC5HPn+YeratAgMB
AAGjggJBMIICPTAdBgNVHQ4EFgQUiLuIiPm15xGRcA6Vp+n4JCaTbp0wHwYDVR0j
BBgwFoAUguZVyqJbjd55tAsyOiNLJqQdTjMwDgYDVR0PAQH/BAQDAgeAMHcGA1Ud
HwRwMG4wbKBqoGiGZnJzeW5jOi8va3JpbGwuZGlzcGFpc3kuc3lzdGVtcy9yZXBv
L2Rpc3BhaXN5ZW50ZXJwcmlzZXMvMy84MkU2NTVDQUEyNUI4RERFNzlCNDBCMzIz
QTIzNEIyNkE0MUQ0RTMzLmNybDCBkwYIKwYBBQUHAQEEgYYwgYMwgYAGCCsGAQUF
BzAChnRyc3luYzovL3Jwa2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhh
ZGY4NTBkMDYzZTAxODU3NTVjOTFiZTNmOWQvNy84MkU2NTVDQUEyNUI4RERFNzlC
NDBCMzIzQTIzNEIyNkE0MUQ0RTMzLmNlcjCBnQYIKwYBBQUHAQsEgZAwgY0wgYoG
CCsGAQUFBzALhn5yc3luYzovL2tyaWxsLmRpc3BhaXN5LnN5c3RlbXMvcmVwby9k
aXNwYWlzeWVudGVycHJpc2VzLzMvMzI2MTMwMzYzYTYxMzAzMDMyM2E2NDMzMzIz
MzNhM2EyZjM0MzgyZDM0MzgyMDNkM2UyMDMyMzAzNDMwMzgzNS5yb2EwGAYDVR0g
AQH/BA4wDDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMH
ACoGoALTIzANBgkqhkiG9w0BAQsFAAOCAQEAhnzSqEJEOrl/yE0iRcOxPJX2PWy3
VtvuguuZFs/cX1DDkvJ+cWG+OrGIMhfkcKhxKqm59ypq9XzSCiC6By3YmVH0rbK6
ZxJ462K5MpuKLVZ9YuDeO7C0fJfYiLlkVfU6kpm00I5C1QSev7j7FzFGkvAHrhl4
G4Wp+N7afp4xP16auGh5Lzo9G+HnXxnXAnJzBEQie359OkWiUU+qhIPBBft00vxk
yyKqFRW96MLQZpJab9xdVki98aGCkWC8YhLHlBmcsAmT9WtmY92chjDr/34ShnTV
2vgj2uMR33LyjeNOb3SOqHoVpVVzZ+IB1a93vZIt5Ir5XQaLbWm9Mu1Q3A==
-----END CERTIFICATE-----
Generated at Thu Nov 5 09:39:31 2026 by rpki-client