Route Origin Authorization
$ rpki-client -vvvf rsync.rp.ki/repo/misakaio/2/AS205532.roa
File: AS205532.roa (raw, json)
Hash identifier: g0cW1aKjYAM4d5tQRKn9kUDOPOHjw4iLpCFad+geCWg=
Subject key identifier: CE:80:54:D3:3A:C6:CD:48:D4:15:F1:BE:92:14:1B:6C:1C:60:58:61
Certificate issuer: /CN=359a4b6c6d3713cff3636207de9839058b51815b
Certificate serial: 12A13C3B5724F972CB184075185492396ED7714A
Authority key identifier: 35:9A:4B:6C:6D:37:13:CF:F3:63:62:07:DE:98:39:05:8B:51:81:5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NZpLbG03E8_zY2IH3pg5BYtRgVs.cer
Subject info access: rsync://rsync.rp.ki/repo/misakaio/2/AS205532.roa
Signing time: Wed 23 Sep 2026 21:48:05 +0000
ROA not before: Wed 23 Sep 2026 21:43:05 +0000
ROA not after: Wed 22 Sep 2027 21:48:05 +0000
asID: 205532
IP address blocks: 2a0b:4340:a0::/44 maxlen: 48
Validation: OK
Signature path: rsync://rsync.rp.ki/repo/misakaio/2/359A4B6C6D3713CFF3636207DE9839058B51815B.crl
rsync://rsync.rp.ki/repo/misakaio/2/359A4B6C6D3713CFF3636207DE9839058B51815B.mft
rsync://rpki.ripe.net/repository/DEFAULT/NZpLbG03E8_zY2IH3pg5BYtRgVs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 18:27:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
12:a1:3c:3b:57:24:f9:72:cb:18:40:75:18:54:92:39:6e:d7:71:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=359a4b6c6d3713cff3636207de9839058b51815b
Validity
Not Before: Sep 23 21:43:05 2026 GMT
Not After : Sep 22 21:48:05 2027 GMT
Subject: CN=CE8054D33AC6CD48D415F1BE92141B6C1C605861
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:dc:8e:bf:86:f0:d2:84:6b:6e:a1:cc:14:f4:
de:1a:67:46:ab:c8:49:a7:97:e6:1b:12:b2:43:a2:
48:0e:a8:54:b9:c1:85:63:f5:d0:4f:d8:99:5b:51:
30:31:ec:0c:95:44:40:0e:c2:13:8b:62:28:f2:60:
0d:92:34:00:0d:1a:01:a9:8c:de:0c:1a:09:8d:3f:
18:26:d8:67:61:59:4c:65:ea:af:e4:a5:44:02:30:
94:b5:85:4f:93:95:50:8c:a3:f3:77:5c:42:20:e0:
1e:f7:77:3d:c8:89:a4:c5:1b:79:51:c6:c8:84:7f:
e6:31:77:11:7c:39:54:16:56:f4:6d:9d:c3:d0:35:
10:66:3d:d5:b4:66:ba:d1:3d:53:de:02:72:c9:4a:
4b:7a:43:0c:8f:bd:58:15:43:0e:2c:0f:94:e4:75:
17:c3:22:6e:cf:e4:7d:9f:d5:81:bd:9f:94:ad:83:
d9:12:ec:df:02:79:af:b0:47:87:e2:1a:7a:6b:c0:
da:44:61:3e:12:35:81:96:a9:0f:ed:ec:d2:38:4e:
21:e0:db:d7:58:61:ff:42:6f:6b:19:5a:52:f6:04:
cb:3e:5d:b3:60:97:9c:59:32:92:12:02:0e:62:c7:
b7:fc:ff:33:04:d0:d6:30:64:a8:12:a9:1a:32:31:
28:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:80:54:D3:3A:C6:CD:48:D4:15:F1:BE:92:14:1B:6C:1C:60:58:61
X509v3 Authority Key Identifier:
keyid:35:9A:4B:6C:6D:37:13:CF:F3:63:62:07:DE:98:39:05:8B:51:81:5B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.rp.ki/repo/misakaio/2/359A4B6C6D3713CFF3636207DE9839058B51815B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NZpLbG03E8_zY2IH3pg5BYtRgVs.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.rp.ki/repo/misakaio/2/AS205532.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0b:4340:a0::/44
Signature Algorithm: sha256WithRSAEncryption
67:b5:b4:c1:b5:f8:8c:ea:6d:cb:fe:27:e9:f3:f1:e6:5b:d5:
e6:b1:f6:d7:b6:84:23:bf:60:36:8a:76:0d:6f:0a:35:e8:d7:
36:e0:47:55:19:a5:f0:5a:46:ae:c5:7f:21:57:c8:9f:df:8e:
39:20:81:ac:d5:53:9f:76:1a:30:2d:4c:57:a1:d2:e1:75:32:
8d:41:64:ca:9f:da:b2:87:04:5a:5a:0b:6b:3f:f7:30:a2:17:
b5:dd:70:87:90:47:0d:a0:f9:d6:9d:75:3a:4c:b1:85:c3:d0:
66:88:94:48:68:fc:4f:3e:2d:93:cf:85:48:42:73:1b:ae:3a:
43:4d:4c:e5:63:b3:a9:0c:69:49:8c:b2:fd:f8:aa:1a:70:b5:
8b:c5:c6:0b:53:22:70:74:6d:26:09:ff:12:40:62:de:49:92:
75:53:5d:ea:79:43:bf:20:a1:fc:8a:cf:00:07:72:25:c4:e5:
bd:f3:85:37:ff:14:d9:4b:d3:4b:1a:fb:3f:b4:91:de:66:56:
98:e0:ab:c0:70:ca:4a:44:12:b9:89:8d:4a:7f:05:32:20:6e:
72:64:82:0d:cd:3b:72:4f:3d:26:26:88:35:c7:1f:c3:c8:27:
2a:3c:54:aa:03:45:a3:f0:44:57:23:05:3b:96:af:f0:0d:1d:
7a:25:48:39
-----BEGIN CERTIFICATE-----
MIIEnzCCA4egAwIBAgIUEqE8O1ck+XLLGEB1GFSSOW7XcUowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMzU5YTRiNmM2ZDM3MTNjZmYzNjM2MjA3ZGU5ODM5MDU4
YjUxODE1YjAeFw0yNjA5MjMyMTQzMDVaFw0yNzA5MjIyMTQ4MDVaMDMxMTAvBgNV
BAMTKENFODA1NEQzM0FDNkNENDhENDE1RjFCRTkyMTQxQjZDMUM2MDU4NjEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCb3I6/hvDShGtuocwU9N4aZ0ar
yEmnl+YbErJDokgOqFS5wYVj9dBP2JlbUTAx7AyVREAOwhOLYijyYA2SNAANGgGp
jN4MGgmNPxgm2GdhWUxl6q/kpUQCMJS1hU+TlVCMo/N3XEIg4B73dz3IiaTFG3lR
xsiEf+YxdxF8OVQWVvRtncPQNRBmPdW0ZrrRPVPeAnLJSkt6QwyPvVgVQw4sD5Tk
dRfDIm7P5H2f1YG9n5Stg9kS7N8Cea+wR4fiGnprwNpEYT4SNYGWqQ/t7NI4TiHg
29dYYf9Cb2sZWlL2BMs+XbNgl5xZMpISAg5ix7f8/zME0NYwZKgSqRoyMSg5AgMB
AAGjggGpMIIBpTAdBgNVHQ4EFgQUzoBU0zrGzUjUFfG+khQbbBxgWGEwHwYDVR0j
BBgwFoAUNZpLbG03E8/zY2IH3pg5BYtRgVswDgYDVR0PAQH/BAQDAgeAMGEGA1Ud
HwRaMFgwVqBUoFKGUHJzeW5jOi8vcnN5bmMucnAua2kvcmVwby9taXNha2Fpby8y
LzM1OUE0QjZDNkQzNzEzQ0ZGMzYzNjIwN0RFOTgzOTA1OEI1MTgxNUIuY3JsMGQG
CCsGAQUFBwEBBFgwVjBUBggrBgEFBQcwAoZIcnN5bmM6Ly9ycGtpLnJpcGUubmV0
L3JlcG9zaXRvcnkvREVGQVVMVC9OWnBMYkcwM0U4X3pZMklIM3BnNUJZdFJnVnMu
Y2VyMEwGCCsGAQUFBwELBEAwPjA8BggrBgEFBQcwC4YwcnN5bmM6Ly9yc3luYy5y
cC5raS9yZXBvL21pc2FrYWlvLzIvQVMyMDU1MzIucm9hMBgGA1UdIAEB/wQOMAww
CgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwQqC0NAAKAw
DQYJKoZIhvcNAQELBQADggEBAGe1tMG1+Izqbcv+J+nz8eZb1eax9te2hCO/YDaK
dg1vCjXo1zbgR1UZpfBaRq7FfyFXyJ/fjjkggazVU592GjAtTFeh0uF1Mo1BZMqf
2rKHBFpaC2s/9zCiF7XdcIeQRw2g+daddTpMsYXD0GaIlEho/E8+LZPPhUhCcxuu
OkNNTOVjs6kMaUmMsv34qhpwtYvFxgtTInB0bSYJ/xJAYt5JknVTXep5Q78gofyK
zwAHciXE5b3zhTf/FNlL00sa+z+0kd5mVpjgq8BwykpEErmJjUp/BTIgbnJkgg3N
O3JPPSYmiDXHH8PIJyo8VKoDRaPwRFcjBTuWr/ANHXolSDk=
-----END CERTIFICATE-----
Generated at Thu Sep 24 04:50:30 2026 by rpki-client