Route Origin Authorization
$ rpki-client -vvvf rsync.rp.ki/repo/misakaio/2/AS396982.roa
File: AS396982.roa (raw, json)
Hash identifier: zLZ+pJw8vbQBHghoavDzDuo/d8SmMn8FhHaZIjiQfcg=
Subject key identifier: 19:7A:67:E2:15:DE:5F:C1:AA:E1:27:8B:6F:5F:D2:DF:23:2D:7E:BE
Certificate issuer: /CN=359a4b6c6d3713cff3636207de9839058b51815b
Certificate serial: 6622D70D95361AE93E1C9DC0D8C8AF6017F48EFD
Authority key identifier: 35:9A:4B:6C:6D:37:13:CF:F3:63:62:07:DE:98:39:05:8B:51:81:5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NZpLbG03E8_zY2IH3pg5BYtRgVs.cer
Subject info access: rsync://rsync.rp.ki/repo/misakaio/2/AS396982.roa
Signing time: Mon 21 Sep 2026 17:47:59 +0000
ROA not before: Mon 21 Sep 2026 17:42:59 +0000
ROA not after: Mon 20 Sep 2027 17:47:59 +0000
asID: 396982
IP address blocks: 45.142.245.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.rp.ki/repo/misakaio/2/359A4B6C6D3713CFF3636207DE9839058B51815B.crl
rsync://rsync.rp.ki/repo/misakaio/2/359A4B6C6D3713CFF3636207DE9839058B51815B.mft
rsync://rpki.ripe.net/repository/DEFAULT/NZpLbG03E8_zY2IH3pg5BYtRgVs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 13:15:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
66:22:d7:0d:95:36:1a:e9:3e:1c:9d:c0:d8:c8:af:60:17:f4:8e:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=359a4b6c6d3713cff3636207de9839058b51815b
Validity
Not Before: Sep 21 17:42:59 2026 GMT
Not After : Sep 20 17:47:59 2027 GMT
Subject: CN=197A67E215DE5FC1AAE1278B6F5FD2DF232D7EBE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:d2:18:c6:1c:dd:90:26:75:ef:1d:38:62:12:
65:8d:d5:85:5f:46:79:2c:64:59:fb:47:b2:8a:79:
69:ad:5d:41:09:1f:15:fb:00:e3:b8:d3:b2:7c:60:
cb:f8:19:de:15:50:4a:48:23:04:3e:28:af:92:c9:
11:62:d8:ca:88:8a:04:09:fd:49:13:47:e9:25:71:
45:a3:6d:63:40:7f:bc:07:fe:09:ab:41:0d:68:df:
21:e8:19:a1:29:27:50:b3:9d:87:f3:64:24:19:d9:
e5:db:a3:a5:e8:14:a9:19:41:14:32:8b:b7:09:80:
47:1a:b3:7b:84:bc:4b:c0:92:ee:58:1f:2a:14:f6:
c4:61:44:81:d9:b6:5d:be:f1:d5:de:e1:1c:44:93:
1f:65:74:3c:1a:43:95:6a:7a:e7:a1:ac:06:a1:3f:
1a:db:5a:f7:de:a3:7e:1e:84:b9:56:d3:da:57:60:
6f:6c:0f:e8:85:d9:41:21:fe:0d:b4:c2:1e:55:b5:
26:d4:ce:8c:45:1a:59:ff:30:ce:14:6a:20:bf:ce:
1d:c6:4c:60:da:53:1a:33:3e:f4:b1:d6:77:7f:e9:
ce:7b:10:81:5c:65:ea:40:32:70:1b:24:b3:29:ba:
86:0e:38:0b:c8:bb:1a:7f:06:17:a5:13:ae:22:d0:
08:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:7A:67:E2:15:DE:5F:C1:AA:E1:27:8B:6F:5F:D2:DF:23:2D:7E:BE
X509v3 Authority Key Identifier:
keyid:35:9A:4B:6C:6D:37:13:CF:F3:63:62:07:DE:98:39:05:8B:51:81:5B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.rp.ki/repo/misakaio/2/359A4B6C6D3713CFF3636207DE9839058B51815B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NZpLbG03E8_zY2IH3pg5BYtRgVs.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.rp.ki/repo/misakaio/2/AS396982.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.142.245.0/24
Signature Algorithm: sha256WithRSAEncryption
49:04:96:88:2d:58:63:88:cd:e1:11:5b:38:6c:9f:c4:ee:1f:
4f:24:28:b8:79:89:c4:6d:ee:2d:1a:34:a8:fb:bb:55:35:8a:
40:69:d2:66:2e:78:75:2e:b7:6c:0b:d3:f7:77:e1:1c:f3:a0:
16:39:18:29:76:06:05:9a:4a:89:1c:7d:05:5d:75:a4:49:74:
b3:c5:8e:90:bb:b3:d1:94:23:e3:15:42:c6:8c:eb:9a:c3:1c:
96:6f:00:cf:e0:7a:10:e9:41:f6:40:4e:d9:12:9b:6f:b8:c5:
22:78:d1:01:d8:6c:7e:e7:39:b3:c8:d5:33:dc:97:62:31:2b:
c5:fe:d8:07:e2:72:5f:58:cf:c7:31:a8:57:86:69:2b:66:56:
f5:c9:c0:08:0d:ad:1a:be:8f:5a:6c:20:93:30:56:71:a1:37:
68:82:05:6a:bf:33:a9:ee:08:9d:13:c9:21:ce:22:41:ea:03:
cb:76:26:39:0a:18:fc:c1:5a:bd:bf:a6:76:5a:75:b4:ed:d4:
d0:3e:4c:52:59:c4:63:19:04:90:ac:2f:ab:1e:2e:8c:0b:a3:
09:e0:b1:1f:d3:c7:77:8d:b7:42:e4:b9:ac:16:04:59:59:3b:
37:1e:d1:7d:59:54:1b:9e:16:c7:6c:8c:0f:32:90:ce:63:86:
88:26:a7:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 04:02:27 2026 by rpki-client