This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rsync.rp.ki/repo/misakaio/2/AS0.roa
File:                     AS0.roa (raw, json)
Hash identifier:          lO9WRVgkAPP818p/JhzonzjrzFnI10uWo00Pa8iO1o8=
Subject key identifier:   54:71:69:A1:B2:CF:4C:44:59:B2:1D:9A:C9:63:5B:75:B4:E2:3E:85
Certificate issuer:       /CN=359a4b6c6d3713cff3636207de9839058b51815b
Certificate serial:       2F7201CF0D6BD61DA924E57EF4543D40CA63A0D1
Authority key identifier: 35:9A:4B:6C:6D:37:13:CF:F3:63:62:07:DE:98:39:05:8B:51:81:5B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/NZpLbG03E8_zY2IH3pg5BYtRgVs.cer
Subject info access:      rsync://rsync.rp.ki/repo/misakaio/2/AS0.roa
Signing time:             Sat 08 Nov 2025 23:31:27 +0000
ROA not before:           Sat 08 Nov 2025 23:26:27 +0000
ROA not after:            Sat 07 Nov 2026 23:31:27 +0000
asID:                     0
IP address blocks:        2a0e:6906:aaaa::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rsync.rp.ki/repo/misakaio/2/359A4B6C6D3713CFF3636207DE9839058B51815B.crl
                          rsync://rsync.rp.ki/repo/misakaio/2/359A4B6C6D3713CFF3636207DE9839058B51815B.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/NZpLbG03E8_zY2IH3pg5BYtRgVs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Dec 2025 02:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2f:72:01:cf:0d:6b:d6:1d:a9:24:e5:7e:f4:54:3d:40:ca:63:a0:d1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=359a4b6c6d3713cff3636207de9839058b51815b
        Validity
            Not Before: Nov  8 23:26:27 2025 GMT
            Not After : Nov  7 23:31:27 2026 GMT
        Subject: CN=547169A1B2CF4C4459B21D9AC9635B75B4E23E85
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:c9:76:83:b6:67:7e:b3:eb:06:42:27:c5:be:
                    97:b1:46:b4:5f:f7:4f:22:09:b5:72:a2:0b:ea:d0:
                    d0:b4:76:c8:7b:30:db:77:82:aa:7a:bd:bf:08:ad:
                    7c:30:55:82:d6:62:2e:0f:2a:ef:fe:38:a2:e7:fd:
                    ee:57:38:66:98:d9:a8:6c:2b:ae:af:44:9b:51:63:
                    6d:78:60:08:93:49:75:e5:2a:a2:d2:60:b9:31:54:
                    97:cc:6b:26:77:8f:73:76:7c:34:85:8c:17:2e:b3:
                    40:7c:da:4d:06:15:02:38:14:e1:9f:b1:4b:49:c6:
                    b5:9d:34:0b:44:a1:c0:a0:0b:f9:6e:f9:f4:17:3e:
                    ce:23:2c:16:19:0b:37:e3:98:91:e0:7e:7f:c7:41:
                    b4:bd:3f:99:21:ae:cd:3a:d0:66:99:62:a2:7b:67:
                    07:46:a7:1c:f7:e6:7a:ae:2a:3b:68:a7:7a:fd:39:
                    c1:b2:7a:25:d5:55:f4:3b:31:7c:2c:cb:d9:1a:f9:
                    14:dd:ae:0d:c4:4f:9b:b6:a0:f0:3c:d7:d6:81:ff:
                    5c:47:47:37:2d:6b:d4:cb:80:ac:5f:a7:99:5b:b6:
                    74:53:ef:a2:65:ea:31:bd:7d:e9:be:9f:ae:fa:b7:
                    13:3c:5a:28:6b:d1:d6:e4:fe:34:e1:fd:4d:64:55:
                    b0:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:71:69:A1:B2:CF:4C:44:59:B2:1D:9A:C9:63:5B:75:B4:E2:3E:85
            X509v3 Authority Key Identifier:
                keyid:35:9A:4B:6C:6D:37:13:CF:F3:63:62:07:DE:98:39:05:8B:51:81:5B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.rp.ki/repo/misakaio/2/359A4B6C6D3713CFF3636207DE9839058B51815B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NZpLbG03E8_zY2IH3pg5BYtRgVs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.rp.ki/repo/misakaio/2/AS0.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0e:6906:aaaa::/48

    Signature Algorithm: sha256WithRSAEncryption
         c2:33:03:d9:f2:ce:a3:15:a6:92:7f:27:6a:e8:66:ae:3e:30:
         c1:68:6a:1a:76:4d:91:b2:9b:84:8d:f3:34:32:e9:76:9e:0d:
         52:8d:f4:b1:de:1d:86:26:e3:73:99:0e:09:50:8f:0a:ae:23:
         90:f0:47:26:39:39:bf:23:1a:71:49:ea:2e:bb:51:69:03:5b:
         cb:f3:e3:88:ad:75:77:9e:05:de:58:7c:2b:49:ed:a8:4c:c0:
         3d:43:d9:ee:27:93:77:4a:8e:4e:50:67:ae:31:dd:ed:ee:4b:
         a2:8c:2d:cb:1d:c6:e8:ba:71:45:11:00:17:77:58:f2:d9:80:
         f1:43:a0:62:f2:5f:0b:1e:6e:95:0f:d5:98:08:33:03:c4:9c:
         db:cf:93:23:a9:a2:8f:19:89:c8:66:1a:69:a8:3d:0f:95:79:
         93:ef:09:69:57:8f:21:af:ff:65:9a:d2:62:c8:7a:1b:0c:03:
         d4:56:85:cf:be:a6:9d:04:9b:52:78:bb:36:e7:9d:e3:3c:85:
         c2:4b:62:ab:4e:f4:59:33:c0:c5:0b:f4:1b:b5:e9:18:84:9d:
         d3:01:6c:65:c9:86:60:95:6a:b8:4a:a3:79:9f:38:96:b5:98:
         5d:85:11:a6:93:56:86:43:8a:4f:58:34:05:8b:f3:cc:2d:5e:
         03:91:6b:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 09:51:06 2025 by rpki-client