Route Origin Authorization
$ rpki-client -vvvf rsync.rp.ki/repo/misakaio/2/AS134098.roa
File: AS134098.roa (raw, json)
Hash identifier: Dp25U2CBrofFPTBdLeDEi2Di3J0akfqjC52hZ2GmePU=
Subject key identifier: B9:2A:AF:DB:AC:7A:B5:FC:8D:D1:B1:B4:81:E0:FA:06:09:08:D2:8A
Certificate issuer: /CN=359a4b6c6d3713cff3636207de9839058b51815b
Certificate serial: 20CA9931F3CFBCC12A1A5EBD379F941238D6DFE1
Authority key identifier: 35:9A:4B:6C:6D:37:13:CF:F3:63:62:07:DE:98:39:05:8B:51:81:5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NZpLbG03E8_zY2IH3pg5BYtRgVs.cer
Subject info access: rsync://rsync.rp.ki/repo/misakaio/2/AS134098.roa
Signing time: Wed 23 Sep 2026 21:48:02 +0000
ROA not before: Wed 23 Sep 2026 21:43:02 +0000
ROA not after: Wed 22 Sep 2027 21:48:02 +0000
asID: 134098
IP address blocks: 2a0b:4340:520::/44 maxlen: 48
Validation: OK
Signature path: rsync://rsync.rp.ki/repo/misakaio/2/359A4B6C6D3713CFF3636207DE9839058B51815B.crl
rsync://rsync.rp.ki/repo/misakaio/2/359A4B6C6D3713CFF3636207DE9839058B51815B.mft
rsync://rpki.ripe.net/repository/DEFAULT/NZpLbG03E8_zY2IH3pg5BYtRgVs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 18:27:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
20:ca:99:31:f3:cf:bc:c1:2a:1a:5e:bd:37:9f:94:12:38:d6:df:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=359a4b6c6d3713cff3636207de9839058b51815b
Validity
Not Before: Sep 23 21:43:02 2026 GMT
Not After : Sep 22 21:48:02 2027 GMT
Subject: CN=B92AAFDBAC7AB5FC8DD1B1B481E0FA060908D28A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:c5:b8:7b:63:bd:a7:7b:ee:b5:e5:54:81:b3:
a2:58:4d:3d:c3:e7:ef:d0:c5:f7:d8:be:95:ee:0f:
86:a2:b8:88:5c:cd:8d:89:d0:c9:47:e5:8e:0e:50:
97:8c:57:07:4f:04:59:3d:79:59:6a:e7:d6:ef:85:
75:0f:e3:96:81:03:2f:60:1c:8d:f0:5b:e2:85:d2:
52:34:9e:15:ff:80:70:3b:45:3f:54:51:0c:29:e4:
63:0b:c1:ef:b7:54:b0:2b:84:49:56:16:c0:51:dc:
b4:3b:16:a0:fc:b6:de:c0:48:e7:3f:31:9f:6b:bd:
9d:5f:52:65:b6:4d:c9:9e:4e:6a:9c:5e:50:99:6b:
45:55:5f:91:af:7b:61:ef:9e:bc:f6:ad:29:94:72:
5d:ec:30:8c:da:c8:2a:3f:90:1f:d0:c1:13:f0:f7:
9a:be:9e:9e:14:5d:3f:ba:40:82:72:bf:b4:80:87:
5e:14:ae:ec:70:2d:3f:21:fa:8d:09:ae:ef:f3:2b:
2b:4a:b6:0e:e5:d3:6d:4a:24:ba:45:fb:7d:6e:69:
28:1c:33:9c:86:1b:9f:80:67:1a:65:8e:3a:e6:2c:
6b:31:6b:ad:fe:56:b9:2e:31:8f:83:9c:67:e2:3e:
2d:60:7a:77:6c:94:18:a3:b5:26:c4:bd:96:07:52:
5d:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:2A:AF:DB:AC:7A:B5:FC:8D:D1:B1:B4:81:E0:FA:06:09:08:D2:8A
X509v3 Authority Key Identifier:
keyid:35:9A:4B:6C:6D:37:13:CF:F3:63:62:07:DE:98:39:05:8B:51:81:5B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.rp.ki/repo/misakaio/2/359A4B6C6D3713CFF3636207DE9839058B51815B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NZpLbG03E8_zY2IH3pg5BYtRgVs.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.rp.ki/repo/misakaio/2/AS134098.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0b:4340:520::/44
Signature Algorithm: sha256WithRSAEncryption
6b:e5:d5:f2:ca:29:1d:29:9e:68:fa:77:18:d1:61:f8:6c:36:
da:d3:ca:7e:1f:12:ac:66:e2:c9:a4:35:ac:62:b0:ac:c2:14:
65:f0:cc:d1:e1:ea:29:e6:43:bd:8b:55:67:9c:25:a4:e6:db:
45:96:0f:30:ff:7f:12:92:4d:8a:96:49:e8:11:56:0c:a8:94:
87:29:0a:17:1f:7a:f0:38:29:ee:38:7a:5f:07:e9:5e:08:5e:
6a:33:9e:91:fe:29:9c:cd:21:25:70:cb:cc:83:15:b0:49:03:
d7:9f:89:fd:86:a5:af:a4:a2:79:c3:16:17:a6:df:09:43:c8:
a4:e7:51:cc:53:d7:e7:dc:c6:e1:56:b8:b0:43:18:3d:31:53:
3b:93:e2:38:ce:13:70:51:56:f4:48:bc:0d:4e:47:07:34:de:
4d:d9:53:eb:f4:e9:ca:ca:b8:30:31:c0:d2:4f:2b:4f:1a:36:
b8:82:68:58:ed:6a:4c:bb:bd:53:49:11:7d:0a:3a:ef:52:63:
b0:1f:b1:19:4c:fb:e2:ad:14:1b:50:f2:e9:23:5c:dc:78:11:
8e:e1:7e:64:c2:9a:9d:58:df:b5:ac:e4:ef:8c:f2:15:cf:dd:
76:a5:c2:75:76:bd:4b:13:df:79:33:91:72:0e:68:2e:48:56:
9d:71:da:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 04:50:24 2026 by rpki-client