Route Origin Authorization

$ rpki-client -vvvf rpki-rsync.warpnet.xyz/repo/warpnet/0/3133302e37382e32382e302f32342d3234203d3e20323138353337.roa
File:                     3133302e37382e32382e302f32342d3234203d3e20323138353337.roa (raw, json)
Hash identifier:          FAfTAp5pWp81OJqDZ+5I+qGvHvbaQPIooctSak0L0SU=
Subject key identifier:   96:37:ED:32:84:BE:16:17:70:6C:2F:8D:91:28:1E:12:29:1A:5B:CB
Certificate issuer:       /CN=b4b74ed94183cc06a35c95c5b7096b7c0ef04944
Certificate serial:       3BAFC6DBE606C00C0CEBE9C649762E3AC55381EB
Authority key identifier: B4:B7:4E:D9:41:83:CC:06:A3:5C:95:C5:B7:09:6B:7C:0E:F0:49:44
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tLdO2UGDzAajXJXFtwlrfA7wSUQ.cer
Subject info access:      rsync://rpki-rsync.warpnet.xyz/repo/warpnet/0/3133302e37382e32382e302f32342d3234203d3e20323138353337.roa
Signing time:             Mon 05 Oct 2026 21:11:53 +0000
ROA not before:           Mon 05 Oct 2026 21:06:53 +0000
ROA not after:            Mon 04 Oct 2027 21:11:53 +0000
asID:                     218537
IP address blocks:        130.78.28.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.warpnet.xyz/repo/warpnet/0/B4B74ED94183CC06A35C95C5B7096B7C0EF04944.crl
                          rsync://rpki-rsync.warpnet.xyz/repo/warpnet/0/B4B74ED94183CC06A35C95C5B7096B7C0EF04944.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/tLdO2UGDzAajXJXFtwlrfA7wSUQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 14 Oct 2026 19:17:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3b:af:c6:db:e6:06:c0:0c:0c:eb:e9:c6:49:76:2e:3a:c5:53:81:eb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b4b74ed94183cc06a35c95c5b7096b7c0ef04944
        Validity
            Not Before: Oct  5 21:06:53 2026 GMT
            Not After : Oct  4 21:11:53 2027 GMT
        Subject: CN=9637ED3284BE1617706C2F8D91281E12291A5BCB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:44:30:47:3f:12:e9:8a:37:e2:ef:ff:72:c4:
                    f2:25:aa:e0:e3:70:b9:cf:bb:94:dd:9a:18:07:7d:
                    0c:72:79:4e:ad:61:f7:fa:7b:4e:ae:47:d2:86:0e:
                    a1:61:b6:74:32:1f:ae:f5:3f:7c:5e:ee:8f:32:68:
                    22:5e:69:d7:13:55:19:f2:dc:88:6b:fe:bd:44:a8:
                    25:bc:ff:2c:7e:28:a6:f4:f0:a2:f1:af:a4:22:a8:
                    78:37:8a:02:b1:73:69:53:40:1b:37:72:4e:5a:1b:
                    4e:8d:cc:be:ec:04:9c:8b:d7:98:f7:dc:6b:fa:b2:
                    e1:01:cf:82:9f:2b:67:ef:12:58:07:ea:db:9d:ff:
                    1b:80:52:4f:74:5a:17:9b:c8:0f:58:aa:c4:19:a8:
                    a9:5b:ac:4c:19:c3:ea:53:16:53:b0:e2:e7:ab:ff:
                    64:11:80:95:33:e6:ed:b3:dd:73:3b:c3:3b:eb:b6:
                    9b:9e:03:1b:e8:a0:55:21:96:03:fa:31:fc:69:bb:
                    8c:a4:9d:9e:b9:58:29:b1:9b:f9:a2:ad:c3:27:8a:
                    3c:98:1d:bd:9e:f4:b4:0a:7c:09:a2:02:8e:60:5a:
                    7b:5f:9f:3b:1c:cb:a0:fe:cb:82:76:ca:46:81:28:
                    e3:a1:66:17:9c:b6:bb:59:4c:34:51:e7:28:bb:53:
                    0c:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:37:ED:32:84:BE:16:17:70:6C:2F:8D:91:28:1E:12:29:1A:5B:CB
            X509v3 Authority Key Identifier:
                keyid:B4:B7:4E:D9:41:83:CC:06:A3:5C:95:C5:B7:09:6B:7C:0E:F0:49:44

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.warpnet.xyz/repo/warpnet/0/B4B74ED94183CC06A35C95C5B7096B7C0EF04944.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tLdO2UGDzAajXJXFtwlrfA7wSUQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.warpnet.xyz/repo/warpnet/0/3133302e37382e32382e302f32342d3234203d3e20323138353337.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  130.78.28.0/24

    Signature Algorithm: sha256WithRSAEncryption
         26:d6:85:9e:7d:37:ea:45:20:66:6f:2d:28:54:26:cf:57:02:
         13:11:da:0b:e4:39:35:09:a6:4e:78:a5:06:a3:db:89:b6:fb:
         d9:8b:34:51:c3:50:ab:39:3d:80:c8:b1:29:bc:fa:1c:a6:2d:
         fa:45:d5:cc:35:f1:89:18:e4:6e:6c:b5:0b:c5:cc:65:87:7d:
         52:9c:b7:1b:78:c5:56:7f:22:f5:99:31:48:59:c0:c0:ed:32:
         04:0a:95:3f:6c:ab:59:da:a7:f3:b9:c7:13:28:da:07:9e:f2:
         7b:3c:01:0b:66:b3:8a:10:93:68:ca:78:79:c8:ca:1c:c7:b3:
         ba:07:e2:72:81:0d:9f:33:fe:b0:7c:34:a6:16:3f:7f:e6:b8:
         fc:68:08:a7:ac:8d:a1:c5:e7:20:87:1e:4b:de:ff:b0:cd:86:
         de:34:47:73:3f:02:df:b5:ba:6d:d3:c8:8a:1b:36:25:ee:fe:
         7b:47:01:fe:47:ed:34:64:14:a2:e6:72:37:27:49:8a:ba:9e:
         c6:01:56:20:38:ba:8d:29:b9:de:10:1d:44:d3:78:30:61:9a:
         47:78:14:6f:f6:b4:2c:da:88:1f:c4:21:26:7d:3e:d7:81:02:
         21:9c:c7:7a:8c:1a:aa:2d:eb:5f:42:77:94:a2:11:91:b7:96:
         00:ef:65:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 14 03:13:12 2026 by rpki-client