Route Origin Authorization
$ rpki-client -vvvf rsync.rp.ki/repo/misakaio/2/AS134575.roa
File: AS134575.roa (raw, json)
Hash identifier: WBdICVXJ3Yzq21P48pfrTQiRulH0BHTefAaRMQPC01c=
Subject key identifier: CB:33:B9:39:2D:F4:16:48:24:A9:EF:C2:0E:E4:FF:D6:23:F7:CA:84
Certificate issuer: /CN=359a4b6c6d3713cff3636207de9839058b51815b
Certificate serial: 7FBDFC903ED6158E9CBA3D937738CBF9CEDB4C75
Authority key identifier: 35:9A:4B:6C:6D:37:13:CF:F3:63:62:07:DE:98:39:05:8B:51:81:5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NZpLbG03E8_zY2IH3pg5BYtRgVs.cer
Subject info access: rsync://rsync.rp.ki/repo/misakaio/2/AS134575.roa
Signing time: Wed 23 Sep 2026 21:48:08 +0000
ROA not before: Wed 23 Sep 2026 21:43:08 +0000
ROA not after: Wed 22 Sep 2027 21:48:08 +0000
asID: 134575
IP address blocks: 2a0b:4340:a1::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.rp.ki/repo/misakaio/2/359A4B6C6D3713CFF3636207DE9839058B51815B.crl
rsync://rsync.rp.ki/repo/misakaio/2/359A4B6C6D3713CFF3636207DE9839058B51815B.mft
rsync://rpki.ripe.net/repository/DEFAULT/NZpLbG03E8_zY2IH3pg5BYtRgVs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 18:27:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7f:bd:fc:90:3e:d6:15:8e:9c:ba:3d:93:77:38:cb:f9:ce:db:4c:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=359a4b6c6d3713cff3636207de9839058b51815b
Validity
Not Before: Sep 23 21:43:08 2026 GMT
Not After : Sep 22 21:48:08 2027 GMT
Subject: CN=CB33B9392DF4164824A9EFC20EE4FFD623F7CA84
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:00:db:ed:17:28:9b:17:0a:f7:54:1c:54:90:
5c:24:05:ce:1a:de:33:be:f3:37:15:ff:2e:41:a5:
4b:c5:0a:90:53:90:4a:83:41:71:3a:d6:22:57:9d:
ab:ea:51:33:5c:b8:2c:66:d2:9d:38:83:d8:eb:d9:
a3:e6:8e:80:ee:97:fb:73:d8:fc:18:15:32:b5:f9:
93:6c:db:db:1c:96:71:e9:54:2a:42:08:d8:54:d4:
53:fe:6c:c2:3b:08:9d:a7:1a:71:a5:58:cb:79:c2:
94:c1:2d:5b:74:53:f3:6c:2b:83:b2:80:c3:8a:14:
34:8b:ac:1d:5c:a7:86:36:80:30:78:65:5b:d2:c3:
1c:c4:33:43:7c:96:c3:3c:0c:13:a0:70:87:f1:75:
0b:4c:36:cf:b9:6b:7b:04:be:7e:dd:4e:bf:89:fb:
cb:8c:75:fe:bb:cf:f8:2d:11:0d:7c:bc:67:e1:7e:
d1:bf:4d:39:4e:94:6a:6b:d0:23:96:29:38:b8:11:
3b:dc:22:83:57:e7:36:c1:52:d1:cd:46:3d:cc:bf:
ae:6a:60:98:ab:1c:85:03:07:9e:78:48:71:15:35:
d4:49:f3:9b:54:2a:b3:e5:71:97:b3:31:ea:96:96:
0c:0b:db:11:a3:be:93:e0:01:08:5b:a5:95:63:c1:
e9:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:33:B9:39:2D:F4:16:48:24:A9:EF:C2:0E:E4:FF:D6:23:F7:CA:84
X509v3 Authority Key Identifier:
keyid:35:9A:4B:6C:6D:37:13:CF:F3:63:62:07:DE:98:39:05:8B:51:81:5B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.rp.ki/repo/misakaio/2/359A4B6C6D3713CFF3636207DE9839058B51815B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NZpLbG03E8_zY2IH3pg5BYtRgVs.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.rp.ki/repo/misakaio/2/AS134575.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0b:4340:a1::/48
Signature Algorithm: sha256WithRSAEncryption
4e:a1:80:b8:91:33:35:8e:bb:c3:9a:c3:fa:f0:b7:b7:9e:6b:
37:1f:88:0e:a4:36:c4:b5:c2:ff:14:1d:36:01:03:db:ee:55:
61:a4:44:ee:b1:18:00:83:74:b1:1b:79:e6:79:27:58:49:fa:
6a:c0:43:d2:6e:1c:e5:30:ca:16:a6:08:3e:84:16:f6:c5:e6:
8a:e7:3c:23:f3:69:d1:1a:26:00:99:3d:90:ca:64:8c:3b:46:
e5:1f:2e:62:1f:86:62:85:80:b6:12:f8:c8:33:4b:42:38:25:
a4:04:7a:0c:2b:13:16:07:ba:db:75:da:76:6f:3d:9b:51:96:
4f:38:27:1d:04:e7:fe:f8:69:6b:d9:8e:76:17:9b:14:7c:d3:
7a:9d:78:6a:29:4b:42:e1:e6:e7:f1:4c:4c:84:92:fa:8a:18:
64:47:79:a0:a3:d5:c0:30:60:61:b3:25:74:1a:0b:f5:ce:35:
63:c1:1d:65:95:43:0c:02:fe:5d:58:21:a4:74:e6:a6:c5:67:
8e:d5:99:82:1e:dc:86:4c:c7:c3:73:d7:2f:63:a4:54:02:ea:
f1:d2:bc:50:4d:e3:58:3e:a3:7a:33:69:0c:d6:3b:75:08:59:
91:80:6c:f7:a4:97:b0:15:e3:d0:f0:2b:72:59:c2:66:2f:d3:
69:ea:0d:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 04:50:26 2026 by rpki-client