Route Origin Authorization
$ rpki-client -vvvf rsync.rp.ki/repo/misakaio/2/AS138668.roa
File: AS138668.roa (raw, json)
Hash identifier: 6EVH9KBlpwZattkb4lE9KyjnRzWGnHHz65a6tjx6Tso=
Subject key identifier: 84:FF:57:DD:95:94:13:AE:96:8B:9F:DF:EA:7B:74:A5:F4:8C:E5:3D
Certificate issuer: /CN=359a4b6c6d3713cff3636207de9839058b51815b
Certificate serial: 476BA4F94E7370796DDE6D985D2210E0FFFF6388
Authority key identifier: 35:9A:4B:6C:6D:37:13:CF:F3:63:62:07:DE:98:39:05:8B:51:81:5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NZpLbG03E8_zY2IH3pg5BYtRgVs.cer
Subject info access: rsync://rsync.rp.ki/repo/misakaio/2/AS138668.roa
Signing time: Wed 23 Sep 2026 21:48:07 +0000
ROA not before: Wed 23 Sep 2026 21:43:07 +0000
ROA not after: Wed 22 Sep 2027 21:48:07 +0000
asID: 138668
IP address blocks: 2a0d:2901::/32 maxlen: 48
Validation: OK
Signature path: rsync://rsync.rp.ki/repo/misakaio/2/359A4B6C6D3713CFF3636207DE9839058B51815B.crl
rsync://rsync.rp.ki/repo/misakaio/2/359A4B6C6D3713CFF3636207DE9839058B51815B.mft
rsync://rpki.ripe.net/repository/DEFAULT/NZpLbG03E8_zY2IH3pg5BYtRgVs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 18:27:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
47:6b:a4:f9:4e:73:70:79:6d:de:6d:98:5d:22:10:e0:ff:ff:63:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=359a4b6c6d3713cff3636207de9839058b51815b
Validity
Not Before: Sep 23 21:43:07 2026 GMT
Not After : Sep 22 21:48:07 2027 GMT
Subject: CN=84FF57DD959413AE968B9FDFEA7B74A5F48CE53D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:96:b1:9f:8b:69:02:2b:eb:4f:86:ce:0d:42:
7b:fc:70:79:82:8b:61:ad:e7:6a:3b:33:d6:c1:ef:
7a:a9:5a:9f:44:e8:79:1a:dd:3b:9e:10:a9:93:66:
07:8e:7b:59:e4:d8:70:c2:44:20:47:af:f9:cc:01:
d0:97:c8:02:05:a9:ac:b3:e9:af:db:cb:ea:a3:b3:
64:18:11:2c:e0:9d:1c:68:c7:bd:54:b1:78:da:ca:
de:c0:b7:0d:38:13:ea:6b:b1:c3:7c:88:af:8e:68:
ad:a2:dc:0d:30:64:26:7e:93:c8:85:80:a4:b7:70:
0a:d8:61:88:ce:5d:68:9a:08:b6:98:59:ee:6e:76:
61:bd:01:2e:db:b1:ee:b2:50:71:1b:00:c7:65:57:
0e:4e:77:75:e5:08:dd:89:d2:4d:be:81:b1:1a:56:
9b:12:ca:cc:dd:da:01:a2:58:9b:a5:6e:52:3e:68:
c7:78:77:d6:7d:7d:8a:3e:d4:50:63:19:ae:c0:78:
01:42:8c:d5:4b:93:b7:67:77:20:1c:63:de:5a:ba:
e8:7b:b9:ce:c8:bd:a1:85:26:88:0c:3d:15:e7:33:
e1:c0:0a:38:54:20:b5:6c:e1:5c:81:3b:28:29:9e:
78:46:a5:9f:30:ba:14:ef:8a:44:74:f2:75:b1:5a:
3a:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:FF:57:DD:95:94:13:AE:96:8B:9F:DF:EA:7B:74:A5:F4:8C:E5:3D
X509v3 Authority Key Identifier:
keyid:35:9A:4B:6C:6D:37:13:CF:F3:63:62:07:DE:98:39:05:8B:51:81:5B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.rp.ki/repo/misakaio/2/359A4B6C6D3713CFF3636207DE9839058B51815B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NZpLbG03E8_zY2IH3pg5BYtRgVs.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.rp.ki/repo/misakaio/2/AS138668.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0d:2901::/32
Signature Algorithm: sha256WithRSAEncryption
c3:c9:6e:e6:64:0c:3e:5c:71:d0:a8:39:a5:27:9d:7f:60:7d:
8e:4d:5a:f8:ff:e0:41:dc:28:79:4d:3b:52:a1:4c:be:e3:cf:
e1:a7:fa:e2:f4:bb:c8:2b:55:0f:5c:b6:d9:36:7d:4c:8c:db:
f9:15:f6:3f:91:c2:43:84:08:23:1b:ab:a5:1c:1f:78:5f:a3:
1c:e8:5c:4e:eb:29:ca:df:f2:f4:88:23:fa:fc:51:16:c1:5c:
dd:0e:cb:3a:72:1f:4e:91:05:f5:50:b2:dd:a0:6a:19:dc:31:
b6:52:5e:22:4a:34:1c:68:3d:16:ad:7f:66:0e:0e:86:d2:36:
e7:b7:7b:2b:b3:54:5c:fa:9e:db:ec:19:27:3e:55:f4:19:5b:
48:0a:60:e9:48:43:ab:9f:ef:c5:9c:3c:24:a8:40:8d:d6:6f:
13:31:89:75:10:e1:c3:45:c6:10:a3:9c:11:cc:04:de:61:72:
38:b2:1f:71:3f:f7:df:dc:9b:07:bc:f5:84:0d:e9:ef:77:72:
19:2f:ab:16:73:78:b0:94:8c:d5:70:14:2d:af:d7:83:ef:9c:
66:eb:8f:4d:f8:7e:ef:86:5e:79:45:c3:49:37:be:5d:41:b7:
18:c1:1a:15:af:c5:29:33:f2:b2:ae:b7:fa:f6:3e:22:af:92:
d8:e7:f2:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 04:50:28 2026 by rpki-client