Route Origin Authorization
$ rpki-client -vvvf rsync.rp.ki/repo/misakaio/2/AS16509.roa
File: AS16509.roa (raw, json)
Hash identifier: iO328UQl/gSNCaNBlKvw8ZC+q+OkcM4eyeJjxEpVihI=
Subject key identifier: F0:A4:BD:36:04:3D:C7:DD:EA:A4:33:2B:99:5D:25:5D:7D:94:63:6D
Certificate issuer: /CN=359a4b6c6d3713cff3636207de9839058b51815b
Certificate serial: 743742059C8F7941B05F3FB33FFA8E57F93372F3
Authority key identifier: 35:9A:4B:6C:6D:37:13:CF:F3:63:62:07:DE:98:39:05:8B:51:81:5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NZpLbG03E8_zY2IH3pg5BYtRgVs.cer
Subject info access: rsync://rsync.rp.ki/repo/misakaio/2/AS16509.roa
Signing time: Mon 21 Sep 2026 17:47:59 +0000
ROA not before: Mon 21 Sep 2026 17:42:59 +0000
ROA not after: Mon 20 Sep 2027 17:47:59 +0000
asID: 16509
IP address blocks: 45.142.245.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.rp.ki/repo/misakaio/2/359A4B6C6D3713CFF3636207DE9839058B51815B.crl
rsync://rsync.rp.ki/repo/misakaio/2/359A4B6C6D3713CFF3636207DE9839058B51815B.mft
rsync://rpki.ripe.net/repository/DEFAULT/NZpLbG03E8_zY2IH3pg5BYtRgVs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 18:27:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
74:37:42:05:9c:8f:79:41:b0:5f:3f:b3:3f:fa:8e:57:f9:33:72:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=359a4b6c6d3713cff3636207de9839058b51815b
Validity
Not Before: Sep 21 17:42:59 2026 GMT
Not After : Sep 20 17:47:59 2027 GMT
Subject: CN=F0A4BD36043DC7DDEAA4332B995D255D7D94636D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:89:63:61:28:ad:bc:8c:34:2c:8d:21:e8:6f:
ee:93:a2:d9:d2:ad:17:9f:cc:8a:cc:0d:0d:99:fb:
17:50:48:d3:e3:4e:47:ae:58:e5:fb:40:e1:d1:bd:
18:fc:44:a3:bc:23:46:fa:b7:04:71:8b:c8:27:e7:
58:d6:f6:fb:d4:c5:33:79:bd:b8:cb:4a:81:2c:06:
e2:d9:01:e2:93:bb:7d:69:0a:83:28:66:3f:79:9f:
fc:c8:a8:fd:a7:24:6a:15:8f:3e:b1:18:20:31:50:
4d:57:0d:24:df:89:34:37:bd:3b:83:3f:82:9c:bb:
3b:f5:6b:ea:d1:63:60:d3:ad:df:4d:cc:ed:62:e1:
01:8a:b7:6b:f3:e9:59:cb:64:49:37:e2:af:f0:ca:
f2:d0:c0:a6:c4:94:c9:c6:0e:77:7e:4b:77:81:d3:
d1:98:e0:e3:12:71:c5:18:81:b3:5b:c7:c1:03:cb:
c6:6f:39:2d:61:d2:ca:75:ac:1c:b4:d4:a5:fa:d5:
0a:4e:fe:b8:43:2d:00:6a:51:78:1c:ab:87:f1:85:
98:57:00:4f:64:85:c3:ec:73:1b:71:23:4e:e8:b1:
fb:38:19:c5:87:99:e1:f0:07:eb:74:93:64:82:2d:
5d:0e:56:87:41:95:22:ef:7f:51:48:c0:0e:38:85:
1c:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:A4:BD:36:04:3D:C7:DD:EA:A4:33:2B:99:5D:25:5D:7D:94:63:6D
X509v3 Authority Key Identifier:
keyid:35:9A:4B:6C:6D:37:13:CF:F3:63:62:07:DE:98:39:05:8B:51:81:5B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.rp.ki/repo/misakaio/2/359A4B6C6D3713CFF3636207DE9839058B51815B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NZpLbG03E8_zY2IH3pg5BYtRgVs.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.rp.ki/repo/misakaio/2/AS16509.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.142.245.0/24
Signature Algorithm: sha256WithRSAEncryption
94:25:de:57:c7:53:7b:ad:03:bb:ea:9d:1e:74:5a:f5:0e:7f:
cc:e2:11:ad:fa:db:10:74:65:f2:11:8b:86:ef:23:7c:0f:9a:
f8:e9:1a:6c:90:f5:08:39:70:79:11:ba:98:21:8c:7e:61:b8:
ee:bb:41:76:24:a1:e4:e8:00:ec:1c:99:87:20:9e:3b:a2:e6:
8c:64:dc:7a:e6:ee:08:9d:94:86:b5:b0:bc:5f:42:d9:73:e0:
54:49:95:73:bb:a1:21:81:bb:20:51:48:04:b9:5d:2b:2d:28:
b6:d7:2a:80:35:f5:e9:81:aa:30:03:e4:6c:96:08:86:6f:41:
10:31:27:52:35:08:49:a8:bc:19:aa:ab:5b:87:4e:ca:43:6d:
37:c2:85:9e:41:32:3e:92:bd:38:cb:2d:4a:89:69:03:af:39:
6a:4a:99:e9:8a:1a:d8:db:98:17:a4:cc:6c:81:e5:97:e7:b2:
f5:9e:65:3d:ee:5d:bd:ea:53:75:35:95:8f:bd:f0:1b:5d:80:
74:2c:3f:cf:c4:2c:74:b9:3d:e8:65:96:fe:0c:4b:11:b8:6c:
fb:ed:50:b6:99:b7:de:d6:ae:fb:e1:93:d3:e3:f6:42:38:ab:
71:03:d9:9c:c3:e6:82:3d:f5:f6:b6:66:2f:2d:1d:c0:c2:2d:
0a:08:7f:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 04:50:29 2026 by rpki-client