Route Origin Authorization

$ rpki-client -vvvf rsync.rp.ki/repo/misakaio/2/AS41780.roa
File:                     AS41780.roa (raw, json)
Hash identifier:          NBXdbubjVTDJTBNx0sD8MgpBTmZ3gAlF4utwaWFdRW0=
Subject key identifier:   F4:C5:63:5A:CA:93:1D:2F:E6:F4:05:A2:02:FF:9A:27:2B:C9:51:E3
Certificate issuer:       /CN=359a4b6c6d3713cff3636207de9839058b51815b
Certificate serial:       07A66E74AE41B44810800DA5BE7E0C844183D946
Authority key identifier: 35:9A:4B:6C:6D:37:13:CF:F3:63:62:07:DE:98:39:05:8B:51:81:5B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/NZpLbG03E8_zY2IH3pg5BYtRgVs.cer
Subject info access:      rsync://rsync.rp.ki/repo/misakaio/2/AS41780.roa
Signing time:             Wed 23 Sep 2026 21:48:04 +0000
ROA not before:           Wed 23 Sep 2026 21:43:04 +0000
ROA not after:            Wed 22 Sep 2027 21:48:04 +0000
asID:                     41780
IP address blocks:        2a0b:4340:40::/44 maxlen: 48
Validation:               OK
Signature path:           rsync://rsync.rp.ki/repo/misakaio/2/359A4B6C6D3713CFF3636207DE9839058B51815B.crl
                          rsync://rsync.rp.ki/repo/misakaio/2/359A4B6C6D3713CFF3636207DE9839058B51815B.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/NZpLbG03E8_zY2IH3pg5BYtRgVs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 24 Sep 2026 18:27:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            07:a6:6e:74:ae:41:b4:48:10:80:0d:a5:be:7e:0c:84:41:83:d9:46
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=359a4b6c6d3713cff3636207de9839058b51815b
        Validity
            Not Before: Sep 23 21:43:04 2026 GMT
            Not After : Sep 22 21:48:04 2027 GMT
        Subject: CN=F4C5635ACA931D2FE6F405A202FF9A272BC951E3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:da:8d:7f:1c:e8:f9:b4:3c:a8:e3:d1:af:02:
                    45:d3:8c:12:9c:f2:d3:b1:2b:a8:19:eb:2d:bb:6a:
                    86:f3:9d:9f:c3:9e:0b:02:f7:5d:44:ae:00:d0:14:
                    05:6f:27:6c:9b:9e:eb:22:c7:53:4a:e8:db:18:89:
                    4c:f4:59:c4:ac:96:ff:a6:f1:99:44:c9:50:b4:16:
                    87:45:5d:d0:39:cb:25:24:66:ac:ca:be:60:9a:81:
                    e0:02:fb:66:1d:49:e7:61:2a:44:56:b2:d3:67:c3:
                    97:2b:b7:57:5f:f0:64:07:ea:04:1a:12:ab:a1:88:
                    5d:9b:4e:0f:74:bf:47:3c:0e:c2:6d:fb:dc:9c:71:
                    8c:84:dd:80:28:d3:09:44:25:a3:ec:9f:d1:57:58:
                    a4:3b:9c:07:cb:87:34:98:52:9b:17:5b:b2:00:50:
                    88:d0:60:65:a2:b7:c3:54:47:54:e1:ac:1a:ed:7f:
                    27:29:ac:86:dd:9f:cc:41:32:1d:e1:f6:73:44:3e:
                    12:c1:36:f6:2e:19:86:9c:92:94:aa:db:8a:5f:67:
                    5a:fe:18:49:4f:62:c4:03:50:c7:e2:56:3b:c6:27:
                    5a:c8:56:d1:84:53:66:e3:53:9e:a1:c1:88:a6:1f:
                    6e:d9:1b:51:02:2d:d7:2b:ab:11:64:75:eb:db:17:
                    31:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:C5:63:5A:CA:93:1D:2F:E6:F4:05:A2:02:FF:9A:27:2B:C9:51:E3
            X509v3 Authority Key Identifier:
                keyid:35:9A:4B:6C:6D:37:13:CF:F3:63:62:07:DE:98:39:05:8B:51:81:5B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.rp.ki/repo/misakaio/2/359A4B6C6D3713CFF3636207DE9839058B51815B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NZpLbG03E8_zY2IH3pg5BYtRgVs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.rp.ki/repo/misakaio/2/AS41780.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0b:4340:40::/44

    Signature Algorithm: sha256WithRSAEncryption
         97:f9:c4:2f:d3:87:19:a2:11:7e:7b:b6:65:09:50:16:eb:48:
         80:8e:e4:bd:f4:10:a3:a1:e7:b0:54:4e:64:f0:89:8d:a7:71:
         26:0d:20:eb:ec:37:e6:ae:18:0f:22:d6:00:50:18:d0:e2:29:
         75:0c:20:b3:80:64:0c:2f:0a:a4:b1:9f:fb:67:c6:e0:a9:1f:
         cb:6d:98:c2:50:78:f9:b4:12:1b:24:b4:62:92:3a:22:2d:56:
         68:82:b4:61:a3:70:67:4e:fc:25:1e:86:0a:01:cc:a1:b5:87:
         c0:81:39:3e:e3:13:2c:68:13:9f:a3:4e:ab:cc:ae:df:59:32:
         ee:cc:67:df:99:47:2f:8c:40:17:fa:d9:ac:75:31:33:08:64:
         08:e9:3e:f9:cf:91:99:33:3d:42:30:db:80:2b:95:96:dc:b3:
         4a:9d:c7:50:5c:6d:1b:cd:30:d6:e4:65:e4:74:ab:96:af:4e:
         3c:d2:77:2b:f6:a8:33:7c:d9:b1:92:d2:84:33:a9:78:0a:d4:
         2c:a1:d0:76:ab:6d:f1:66:7a:61:ca:65:23:00:a9:79:81:d9:
         e0:b2:af:79:2e:ee:a1:ba:70:5b:9d:86:06:42:b5:4b:cc:58:
         8d:a6:51:26:89:88:5e:84:20:06:40:7f:26:ad:d0:99:49:c3:
         5a:86:33:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 04:50:22 2026 by rpki-client