Route Origin Authorization
$ rpki-client -vvvf rsync.rp.ki/repo/misakaio/2/AS205152.roa
File: AS205152.roa (raw, json)
Hash identifier: M/oVUPmQGwSTvf35WWzvgjZUl2g/uIH1l9iQYaqnDF8=
Subject key identifier: 0E:BE:0D:1A:DC:16:A6:12:71:9D:65:E0:6B:E7:BD:3C:57:F6:93:46
Certificate issuer: /CN=359a4b6c6d3713cff3636207de9839058b51815b
Certificate serial: 01053E401B80088DEC5EA7BF8604815936D6CDEE
Authority key identifier: 35:9A:4B:6C:6D:37:13:CF:F3:63:62:07:DE:98:39:05:8B:51:81:5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NZpLbG03E8_zY2IH3pg5BYtRgVs.cer
Subject info access: rsync://rsync.rp.ki/repo/misakaio/2/AS205152.roa
Signing time: Wed 23 Sep 2026 21:48:03 +0000
ROA not before: Wed 23 Sep 2026 21:43:03 +0000
ROA not after: Wed 22 Sep 2027 21:48:03 +0000
asID: 205152
IP address blocks: 2a0b:4340:1300::/40 maxlen: 48
Validation: OK
Signature path: rsync://rsync.rp.ki/repo/misakaio/2/359A4B6C6D3713CFF3636207DE9839058B51815B.crl
rsync://rsync.rp.ki/repo/misakaio/2/359A4B6C6D3713CFF3636207DE9839058B51815B.mft
rsync://rpki.ripe.net/repository/DEFAULT/NZpLbG03E8_zY2IH3pg5BYtRgVs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 18:27:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:05:3e:40:1b:80:08:8d:ec:5e:a7:bf:86:04:81:59:36:d6:cd:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=359a4b6c6d3713cff3636207de9839058b51815b
Validity
Not Before: Sep 23 21:43:03 2026 GMT
Not After : Sep 22 21:48:03 2027 GMT
Subject: CN=0EBE0D1ADC16A612719D65E06BE7BD3C57F69346
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:b3:13:11:fc:02:55:26:26:12:49:4a:29:f1:
91:34:71:45:01:7d:b9:41:8e:5f:51:1d:e2:a3:6e:
9f:10:ce:f0:27:2a:13:38:1c:1b:72:08:26:b0:dc:
9d:96:af:c0:b2:c1:5b:15:8e:62:39:a7:8e:42:84:
38:44:5e:88:59:12:35:6e:6a:d5:63:0d:1d:a1:e6:
91:08:04:e3:d0:e5:32:4f:c1:41:e3:b3:f4:89:15:
82:cd:90:a3:5e:32:86:02:b4:c0:80:ea:d6:38:37:
a1:7e:23:20:fb:ab:48:c7:10:2c:eb:5d:0f:3d:94:
cc:93:30:7f:9a:c7:ca:fb:f0:7a:f6:e4:5f:d7:c3:
ee:33:a9:b4:31:2f:c4:3b:e1:fd:27:c7:71:47:2f:
3b:0e:76:9f:e3:0e:f5:34:75:cb:71:e8:4a:6f:50:
46:c7:2f:51:ef:3c:46:b4:73:02:5f:88:57:14:16:
71:1b:7a:85:86:87:3e:65:a6:1c:b6:01:11:be:8f:
aa:d7:f7:3d:27:59:a8:a9:36:7d:5f:9c:80:14:25:
ea:dc:3d:91:90:5e:a3:6d:c9:6d:66:a9:04:29:bd:
c8:fa:9a:3b:35:2d:79:d1:d5:94:08:8e:62:a2:80:
40:b0:9e:4a:de:86:05:95:b1:9c:c9:6c:fb:36:2c:
5b:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:BE:0D:1A:DC:16:A6:12:71:9D:65:E0:6B:E7:BD:3C:57:F6:93:46
X509v3 Authority Key Identifier:
keyid:35:9A:4B:6C:6D:37:13:CF:F3:63:62:07:DE:98:39:05:8B:51:81:5B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.rp.ki/repo/misakaio/2/359A4B6C6D3713CFF3636207DE9839058B51815B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NZpLbG03E8_zY2IH3pg5BYtRgVs.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.rp.ki/repo/misakaio/2/AS205152.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0b:4340:1300::/40
Signature Algorithm: sha256WithRSAEncryption
3f:fb:ff:8c:8a:b5:61:fd:85:55:27:9f:52:9e:34:e8:5e:02:
4f:2a:c8:f8:85:32:80:fd:60:35:3a:00:58:72:ad:da:b5:62:
2a:d0:b5:e1:93:45:9f:ec:16:6b:a0:b8:a4:53:0d:98:40:ff:
ee:b1:4a:8b:bd:78:92:3b:c1:b6:1a:1e:2f:b8:d6:96:63:64:
84:da:6a:ef:5b:4e:a1:e9:b3:2d:48:4f:ea:71:52:b1:45:d2:
4d:f2:a7:75:c7:74:06:b2:8c:3b:a4:c7:a8:7d:97:a4:3a:40:
63:3c:41:21:a3:6c:95:dc:bf:ae:4c:47:0c:e2:40:79:fe:84:
03:9d:9d:0e:b0:28:22:5f:62:ef:cd:94:2c:80:42:ae:fb:73:
69:12:df:12:17:fc:17:76:7e:34:29:66:e0:a9:92:7f:34:4f:
a1:f9:ee:90:43:84:eb:75:19:3c:a1:e0:74:05:1f:59:40:cc:
fa:93:fd:4f:c4:f9:89:19:fe:99:15:5f:a2:32:20:ab:bc:63:
3b:b1:b7:09:64:e2:94:18:7a:6a:bf:92:b3:b4:26:63:43:d1:
dc:86:fc:c9:25:d7:fa:fb:cf:6c:f0:76:4f:07:06:e8:44:10:
b4:5f:67:c3:04:6d:2b:92:96:e8:61:85:a3:9a:ae:6d:b3:77:
42:87:cb:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 04:50:21 2026 by rpki-client