Route Origin Authorization
$ rpki-client -vvvf rsync.rp.ki/repo/misakaio/2/AS205590.roa
File: AS205590.roa (raw, json)
Hash identifier: aeV3KvzcMHx25E5sutw1QBD3NxBUztv3bhXDE6U4crM=
Subject key identifier: A5:5D:52:98:30:3F:37:45:C7:4A:F4:62:81:C0:94:55:35:9F:87:F0
Certificate issuer: /CN=359a4b6c6d3713cff3636207de9839058b51815b
Certificate serial: 3A4420D9038FAE48FA7DC26E269D87962ECCBD69
Authority key identifier: 35:9A:4B:6C:6D:37:13:CF:F3:63:62:07:DE:98:39:05:8B:51:81:5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NZpLbG03E8_zY2IH3pg5BYtRgVs.cer
Subject info access: rsync://rsync.rp.ki/repo/misakaio/2/AS205590.roa
Signing time: Wed 23 Sep 2026 21:48:07 +0000
ROA not before: Wed 23 Sep 2026 21:43:07 +0000
ROA not after: Wed 22 Sep 2027 21:48:07 +0000
asID: 205590
IP address blocks: 2a0b:4340:50::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.rp.ki/repo/misakaio/2/359A4B6C6D3713CFF3636207DE9839058B51815B.crl
rsync://rsync.rp.ki/repo/misakaio/2/359A4B6C6D3713CFF3636207DE9839058B51815B.mft
rsync://rpki.ripe.net/repository/DEFAULT/NZpLbG03E8_zY2IH3pg5BYtRgVs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 18:27:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3a:44:20:d9:03:8f:ae:48:fa:7d:c2:6e:26:9d:87:96:2e:cc:bd:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=359a4b6c6d3713cff3636207de9839058b51815b
Validity
Not Before: Sep 23 21:43:07 2026 GMT
Not After : Sep 22 21:48:07 2027 GMT
Subject: CN=A55D5298303F3745C74AF46281C09455359F87F0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:bb:e8:e3:2f:14:6a:de:d0:0c:c6:40:c2:c3:
b9:4f:0a:1f:7d:cd:88:0b:e2:4d:64:c3:42:ec:14:
d5:92:e6:01:a8:cb:6e:f5:56:b4:d8:96:6e:f9:82:
f1:e5:97:e3:e8:b6:69:89:37:20:fd:be:cf:d6:d0:
33:91:47:cf:69:d3:25:a0:ba:6d:be:b0:e7:2e:74:
10:52:d3:52:8f:c8:d9:30:ad:16:37:85:a8:a5:70:
a6:a3:e1:36:39:0a:ad:26:89:5c:da:8b:ab:e8:8f:
dc:6c:d8:ef:00:81:f1:33:06:0d:10:29:71:12:ef:
27:2a:5d:b2:cc:68:16:77:b2:79:e5:c9:4b:e3:5a:
3a:73:93:c6:31:c4:f0:57:32:03:c5:47:fd:43:ad:
6a:0e:0e:62:64:94:c1:62:ec:f5:6d:47:15:21:c6:
8b:90:f1:6d:69:09:f0:79:48:29:b9:54:27:81:2d:
ee:ee:ae:aa:91:20:3a:2f:79:9b:dd:cd:1f:6f:cb:
67:f4:88:2c:f1:2d:6a:63:f2:77:8f:6d:a8:11:96:
cd:52:09:90:ac:92:04:7f:b0:a3:87:64:25:53:9d:
48:4e:7a:81:c0:04:d5:11:69:f8:39:90:03:a1:c4:
af:21:01:7d:b5:3e:e1:2f:57:0c:b0:0f:57:b7:72:
5d:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:5D:52:98:30:3F:37:45:C7:4A:F4:62:81:C0:94:55:35:9F:87:F0
X509v3 Authority Key Identifier:
keyid:35:9A:4B:6C:6D:37:13:CF:F3:63:62:07:DE:98:39:05:8B:51:81:5B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.rp.ki/repo/misakaio/2/359A4B6C6D3713CFF3636207DE9839058B51815B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NZpLbG03E8_zY2IH3pg5BYtRgVs.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.rp.ki/repo/misakaio/2/AS205590.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0b:4340:50::/48
Signature Algorithm: sha256WithRSAEncryption
4d:dd:77:22:80:45:63:0d:2f:ed:b9:40:c7:d8:55:8c:b7:f3:
5a:e9:aa:22:b3:d6:5f:a2:cf:b4:f8:69:af:20:b9:43:bc:ec:
bd:63:0b:aa:15:93:65:49:9d:d8:c4:38:b4:80:13:b2:af:b7:
a1:7f:be:aa:c4:97:48:23:ec:bf:8e:36:4c:e6:15:ae:fa:00:
10:39:3c:e1:55:f7:d6:7e:42:45:85:8d:9c:fe:0b:98:60:87:
17:31:ef:24:8f:78:d1:2c:bd:74:e1:4b:37:d8:30:0d:66:1c:
4d:e0:b6:56:01:16:1b:b0:db:f4:e2:51:b1:27:1b:22:e8:fc:
15:20:98:4c:ea:17:77:73:8a:3d:05:b6:3c:22:57:ec:58:1b:
ea:2c:5f:99:ec:50:9d:c6:f5:a3:df:4a:0c:73:dd:b1:62:7b:
4e:78:f6:10:6d:4e:bc:35:04:99:ff:4b:ba:c6:78:39:1c:55:
29:ec:39:a8:e3:b3:dd:9a:ae:d1:86:c5:c2:e4:1a:cd:62:d5:
62:d6:e5:c3:2d:75:02:69:9e:da:57:a8:57:26:6b:82:21:fa:
7d:5a:f6:db:7c:1f:4a:b3:21:96:37:e7:36:ce:a8:84:fb:3d:
27:4e:1a:c3:03:07:f6:99:f8:09:3d:15:68:c0:11:29:e8:57:
f5:b4:0c:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 04:50:28 2026 by rpki-client