Route Origin Authorization

$ rpki-client -vvvf krill.dispaisy.systems/repo/dispaisyenterprises/3/326130363a613030323a663030643a3a2f34382d3438203d3e20323135373630.roa
File:                     326130363a613030323a663030643a3a2f34382d3438203d3e20323135373630.roa (raw, json)
Hash identifier:          P96vLAWU7gIXIaJ9dOVDCMZeeu4D8PhS90TtQ+x6okM=
Subject key identifier:   40:A4:7E:01:63:A4:59:F9:70:D9:70:5B:19:0F:B1:07:C7:84:B6:88
Certificate issuer:       /CN=82E655CAA25B8DDE79B40B323A234B26A41D4E33
Certificate serial:       48AC17FE3093FC23FAF787E0CC4A7A6BE67DBEB7
Authority key identifier: 82:E6:55:CA:A2:5B:8D:DE:79:B4:0B:32:3A:23:4B:26:A4:1D:4E:33
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/82E655CAA25B8DDE79B40B323A234B26A41D4E33.cer
Subject info access:      rsync://krill.dispaisy.systems/repo/dispaisyenterprises/3/326130363a613030323a663030643a3a2f34382d3438203d3e20323135373630.roa
Signing time:             Mon 26 Oct 2026 18:37:37 +0000
ROA not before:           Mon 26 Oct 2026 18:32:37 +0000
ROA not after:            Mon 25 Oct 2027 18:37:37 +0000
asID:                     215760
IP address blocks:        2a06:a002:f00d::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://krill.dispaisy.systems/repo/dispaisyenterprises/3/82E655CAA25B8DDE79B40B323A234B26A41D4E33.crl
                          rsync://krill.dispaisy.systems/repo/dispaisyenterprises/3/82E655CAA25B8DDE79B40B323A234B26A41D4E33.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/82E655CAA25B8DDE79B40B323A234B26A41D4E33.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 05 Nov 2026 18:26:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            48:ac:17:fe:30:93:fc:23:fa:f7:87:e0:cc:4a:7a:6b:e6:7d:be:b7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=82E655CAA25B8DDE79B40B323A234B26A41D4E33
        Validity
            Not Before: Oct 26 18:32:37 2026 GMT
            Not After : Oct 25 18:37:37 2027 GMT
        Subject: CN=40A47E0163A459F970D9705B190FB107C784B688
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:b2:48:58:d3:88:e8:77:8d:7d:eb:0f:93:23:
                    d3:e1:7c:8f:79:50:3d:e4:8a:0f:1a:26:00:7d:73:
                    f5:91:78:a5:8e:37:32:31:df:8e:da:dc:e6:b3:c1:
                    fc:13:6a:09:73:ad:f0:ca:27:11:9c:7f:32:ad:2b:
                    53:65:23:8f:0e:b1:19:b3:08:b9:a3:a3:38:7a:23:
                    9c:31:24:3b:94:4e:ec:8a:5c:54:05:df:1f:b6:11:
                    74:d7:94:3e:d7:82:e6:af:2b:de:57:8b:eb:25:2a:
                    10:37:0b:63:62:50:e4:b4:3d:8c:95:94:2f:02:99:
                    54:0a:35:a2:fe:72:37:36:ad:c6:88:a8:a8:8d:73:
                    99:2d:2e:c1:d1:90:a1:ce:80:9e:15:b7:b1:e5:14:
                    d1:7e:61:c8:ff:68:d5:f2:f6:36:46:bd:dd:cf:65:
                    45:43:4d:bf:37:50:bb:56:3b:d2:8f:fa:e6:cf:a7:
                    de:dd:c8:3c:38:7d:d5:0a:98:c3:17:d9:4e:e8:63:
                    70:8a:bc:69:64:71:18:9e:d5:db:88:e1:0e:bd:7a:
                    99:a9:35:e6:1c:61:9b:46:1d:1a:71:74:c1:3f:fb:
                    97:18:17:13:06:8b:aa:27:d3:dc:c1:33:39:3f:51:
                    6a:20:9f:f5:58:08:81:55:be:89:07:58:fa:95:80:
                    e0:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:A4:7E:01:63:A4:59:F9:70:D9:70:5B:19:0F:B1:07:C7:84:B6:88
            X509v3 Authority Key Identifier:
                keyid:82:E6:55:CA:A2:5B:8D:DE:79:B4:0B:32:3A:23:4B:26:A4:1D:4E:33

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://krill.dispaisy.systems/repo/dispaisyenterprises/3/82E655CAA25B8DDE79B40B323A234B26A41D4E33.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/82E655CAA25B8DDE79B40B323A234B26A41D4E33.cer

            Subject Information Access:
                Signed Object - URI:rsync://krill.dispaisy.systems/repo/dispaisyenterprises/3/326130363a613030323a663030643a3a2f34382d3438203d3e20323135373630.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a06:a002:f00d::/48

    Signature Algorithm: sha256WithRSAEncryption
         4c:07:08:41:9f:03:af:74:e6:f9:ae:4f:79:b7:a4:5c:45:ac:
         59:a4:1f:0c:b7:09:2a:56:55:ae:7e:52:8d:5b:26:d2:03:60:
         ce:d8:cf:de:37:4c:cd:2b:46:64:e2:c0:04:27:bb:b1:2e:be:
         8a:b6:88:5c:48:81:34:e2:61:81:c8:30:4a:3f:3c:1b:b7:58:
         ef:8b:10:15:fc:4e:63:54:fa:48:b5:aa:4a:08:fa:5f:4f:33:
         e2:b3:79:8f:07:b3:f2:7b:42:93:2b:0b:d7:3f:0c:cb:fb:bb:
         28:9a:f3:39:c4:ca:89:bd:8f:aa:c9:35:d4:46:00:62:81:b8:
         c8:40:a4:cb:af:05:28:24:5a:2a:62:15:6e:ef:16:ba:8d:15:
         82:69:ee:70:06:7b:da:70:05:0c:92:d6:1f:51:44:f6:37:4e:
         ae:0c:73:59:37:c4:05:62:9a:d6:24:4c:e2:1d:09:9c:fd:bb:
         02:0d:c6:f8:16:bf:ab:47:e8:99:63:d1:50:4d:39:e0:f5:ac:
         16:47:da:79:c5:df:94:eb:42:d9:fc:88:47:d6:9b:af:70:9d:
         b8:59:88:c7:2e:b9:10:96:07:18:41:9b:73:b1:9a:7b:c9:21:
         a7:b9:df:0c:b9:17:85:3a:77:89:b6:ca:83:64:cd:e9:ed:10:
         99:ad:4b:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 5 09:39:28 2026 by rpki-client