Route Origin Authorization

$ rpki-client -vvvf rsync.rp.ki/repo/misakaio/2/AS205651.roa
File:                     AS205651.roa (raw, json)
Hash identifier:          8YC8zMR9lbffWGS/a66LXXZAmFx7k3NeHkvSAHBIvnk=
Subject key identifier:   40:06:79:D0:E4:CB:24:90:E6:92:D9:9F:C3:5C:21:F1:04:66:F9:27
Certificate issuer:       /CN=359a4b6c6d3713cff3636207de9839058b51815b
Certificate serial:       295091039687180B1755353C3030CD9911B840D5
Authority key identifier: 35:9A:4B:6C:6D:37:13:CF:F3:63:62:07:DE:98:39:05:8B:51:81:5B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/NZpLbG03E8_zY2IH3pg5BYtRgVs.cer
Subject info access:      rsync://rsync.rp.ki/repo/misakaio/2/AS205651.roa
Signing time:             Wed 23 Sep 2026 21:48:06 +0000
ROA not before:           Wed 23 Sep 2026 21:43:06 +0000
ROA not after:            Wed 22 Sep 2027 21:48:06 +0000
asID:                     205651
IP address blocks:        185.234.215.0/24 maxlen: 24
                          2a0b:4340:20::/44 maxlen: 48
                          2a0d:2904::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rsync.rp.ki/repo/misakaio/2/359A4B6C6D3713CFF3636207DE9839058B51815B.crl
                          rsync://rsync.rp.ki/repo/misakaio/2/359A4B6C6D3713CFF3636207DE9839058B51815B.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/NZpLbG03E8_zY2IH3pg5BYtRgVs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 24 Sep 2026 18:27:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            29:50:91:03:96:87:18:0b:17:55:35:3c:30:30:cd:99:11:b8:40:d5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=359a4b6c6d3713cff3636207de9839058b51815b
        Validity
            Not Before: Sep 23 21:43:06 2026 GMT
            Not After : Sep 22 21:48:06 2027 GMT
        Subject: CN=400679D0E4CB2490E692D99FC35C21F10466F927
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:e3:f1:c8:a9:12:2e:c2:48:f3:63:90:e7:16:
                    85:b7:ef:bd:40:c1:d5:44:5c:81:8a:3d:17:fe:25:
                    e4:c1:a5:e8:a1:ca:7e:11:e2:f6:fa:92:fe:35:9f:
                    bd:b5:75:53:bd:d8:16:2b:e9:77:25:76:b0:02:d0:
                    58:c6:9d:74:03:1b:b7:a4:77:5b:99:d3:ea:f5:25:
                    b9:7e:19:5b:2e:01:e1:ee:62:b5:3a:8a:d6:e1:47:
                    32:c7:e0:7a:fd:23:4e:2c:eb:f2:de:a8:f9:5d:7f:
                    a7:93:ac:9d:bd:e4:dc:2b:a5:05:2d:4f:72:d1:25:
                    c7:d6:f3:3a:b0:19:ef:07:83:4d:73:3f:94:6d:c8:
                    eb:67:b0:02:03:ec:35:84:39:6f:b8:c7:df:32:60:
                    b0:4f:40:ae:2e:63:1a:c5:02:27:5e:cb:4c:fc:f9:
                    8d:66:12:f3:c2:9a:6d:f1:2b:2f:7a:f7:3e:5a:86:
                    55:9a:56:99:05:2d:16:e3:c4:88:34:55:43:38:1b:
                    9f:c2:f0:e5:90:bf:8e:ab:c3:32:81:2c:8b:88:06:
                    61:71:0a:98:2a:67:b8:71:56:d5:5f:ff:eb:d7:78:
                    33:f7:e7:ba:69:38:fa:b3:c2:c1:1e:9e:5b:20:12:
                    e2:38:10:16:2f:be:bf:78:4c:49:5f:fa:df:5b:5d:
                    af:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:06:79:D0:E4:CB:24:90:E6:92:D9:9F:C3:5C:21:F1:04:66:F9:27
            X509v3 Authority Key Identifier:
                keyid:35:9A:4B:6C:6D:37:13:CF:F3:63:62:07:DE:98:39:05:8B:51:81:5B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.rp.ki/repo/misakaio/2/359A4B6C6D3713CFF3636207DE9839058B51815B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NZpLbG03E8_zY2IH3pg5BYtRgVs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.rp.ki/repo/misakaio/2/AS205651.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.234.215.0/24
                IPv6:
                  2a0b:4340:20::/44
                  2a0d:2904::/32

    Signature Algorithm: sha256WithRSAEncryption
         79:4c:b5:1b:c3:23:94:af:5b:2f:84:7b:1e:9d:b9:3c:7d:7d:
         fd:0e:08:81:08:90:81:51:d8:f9:95:18:8d:00:ab:55:21:03:
         8f:48:17:d9:24:41:d7:46:10:b9:5d:a7:b9:1d:fd:4d:72:1f:
         d9:59:5e:79:46:11:5c:fd:bf:8a:b2:c5:4b:5e:ef:3a:0a:35:
         b8:9d:36:0b:5f:d9:d7:f6:db:ea:27:a0:17:55:6e:9c:1f:be:
         9b:75:61:bc:92:61:d6:3b:34:d3:83:d3:14:35:ec:26:56:3e:
         8e:6f:a0:8f:fc:9b:ea:a4:d8:b4:6b:0c:9f:1d:1a:e1:b9:f1:
         6f:41:b8:e2:1e:91:6a:e7:5b:4e:4e:59:fa:22:f2:d2:1a:f9:
         45:6f:c6:17:73:16:71:26:51:78:b8:27:47:cc:c6:2a:83:51:
         73:ab:40:71:04:f6:b5:95:a4:5e:2b:18:7c:a2:e1:e6:42:4d:
         07:52:eb:a1:cb:17:96:b3:a0:ce:2b:bd:71:86:33:3d:06:31:
         fc:6f:35:78:1d:f5:fd:da:70:f9:7e:4b:fe:16:48:60:9e:00:
         99:3d:29:d7:fc:d9:bf:9d:ae:8f:75:b3:fb:23:84:53:00:5c:
         9b:cb:6b:c0:bb:02:dd:62:ec:16:50:f9:bc:f3:83:d5:8c:2f:
         fe:e4:1b:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 04:50:28 2026 by rpki-client