Route Origin Authorization
$ rpki-client -vvvf rsync.rp.ki/repo/misakaio/2/AS41979.roa
File: AS41979.roa (raw, json)
Hash identifier: j4QiMGGu9YQ/rBhI87PxLenFV5p1ZFjsq08fxq8g3/4=
Subject key identifier: EF:20:32:0B:2C:C9:A3:46:DB:6D:37:9F:84:3F:B2:22:12:B1:F5:47
Certificate issuer: /CN=359a4b6c6d3713cff3636207de9839058b51815b
Certificate serial: 03EC92B50F35D329DBFC874A7A836D2819DB95DF
Authority key identifier: 35:9A:4B:6C:6D:37:13:CF:F3:63:62:07:DE:98:39:05:8B:51:81:5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NZpLbG03E8_zY2IH3pg5BYtRgVs.cer
Subject info access: rsync://rsync.rp.ki/repo/misakaio/2/AS41979.roa
Signing time: Wed 23 Sep 2026 21:48:03 +0000
ROA not before: Wed 23 Sep 2026 21:43:03 +0000
ROA not after: Wed 22 Sep 2027 21:48:03 +0000
asID: 41979
IP address blocks: 2a0b:4340:30::/44 maxlen: 48
Validation: OK
Signature path: rsync://rsync.rp.ki/repo/misakaio/2/359A4B6C6D3713CFF3636207DE9839058B51815B.crl
rsync://rsync.rp.ki/repo/misakaio/2/359A4B6C6D3713CFF3636207DE9839058B51815B.mft
rsync://rpki.ripe.net/repository/DEFAULT/NZpLbG03E8_zY2IH3pg5BYtRgVs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 18:27:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
03:ec:92:b5:0f:35:d3:29:db:fc:87:4a:7a:83:6d:28:19:db:95:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=359a4b6c6d3713cff3636207de9839058b51815b
Validity
Not Before: Sep 23 21:43:03 2026 GMT
Not After : Sep 22 21:48:03 2027 GMT
Subject: CN=EF20320B2CC9A346DB6D379F843FB22212B1F547
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:0c:59:83:43:44:df:97:48:12:0e:bb:f5:14:
eb:ca:53:6f:7a:38:3b:17:3b:bb:f2:d2:de:25:a8:
01:d2:62:3e:d4:e9:62:44:93:3c:2d:f3:06:30:a9:
35:c3:5d:86:82:91:55:62:8b:2d:96:1e:f4:80:16:
fa:8a:0e:4e:cf:fe:5e:da:26:00:41:25:d5:a7:40:
2c:33:e8:e6:a2:d9:a1:70:e7:dc:b8:c4:de:f6:6b:
d3:1f:ba:6a:f9:e4:88:cf:fa:a3:ec:24:b0:63:a9:
2f:37:51:1d:6c:25:e9:f1:69:c3:30:f7:4c:af:ab:
74:1e:3e:a4:df:38:cd:94:2b:08:77:3f:cb:3c:30:
97:9c:a2:a6:e0:8f:cd:ee:8a:a0:c5:76:b2:ad:a8:
e7:09:73:18:a5:67:a5:98:94:52:eb:6e:90:24:b0:
27:e8:76:a8:8a:36:13:79:29:83:b0:dd:6b:4d:d5:
d4:73:bf:5c:df:ea:ea:10:f0:c7:3c:84:99:74:83:
88:41:7f:fc:83:58:6a:f4:17:35:38:ae:79:68:a3:
a0:e5:35:33:c9:58:85:a0:b7:44:00:34:06:e2:21:
2b:4e:fb:18:34:b7:1e:7d:05:f6:94:11:89:62:ec:
ad:94:c4:7f:29:1b:e3:80:d8:ec:dd:5c:e5:91:3a:
95:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:20:32:0B:2C:C9:A3:46:DB:6D:37:9F:84:3F:B2:22:12:B1:F5:47
X509v3 Authority Key Identifier:
keyid:35:9A:4B:6C:6D:37:13:CF:F3:63:62:07:DE:98:39:05:8B:51:81:5B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.rp.ki/repo/misakaio/2/359A4B6C6D3713CFF3636207DE9839058B51815B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NZpLbG03E8_zY2IH3pg5BYtRgVs.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.rp.ki/repo/misakaio/2/AS41979.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0b:4340:30::/44
Signature Algorithm: sha256WithRSAEncryption
29:5b:6c:82:90:da:58:2f:8e:51:6a:09:b6:90:83:9b:08:fe:
00:a1:6f:29:61:85:c8:9f:aa:45:2f:62:9b:da:12:78:84:7e:
3e:95:db:90:29:8e:42:72:57:3c:98:1d:13:dd:bc:78:4d:80:
72:fc:03:d7:81:9f:68:6e:da:b3:8f:f6:65:f9:97:34:bb:ae:
50:19:6c:de:a8:0d:f5:f8:2e:b5:77:f0:bb:db:57:9e:0f:66:
42:d7:eb:71:2c:d8:1b:1f:a3:2d:e8:44:01:11:a6:e0:47:d7:
f6:2d:8f:5d:93:67:ca:35:da:19:40:04:de:e1:75:a5:6b:ae:
80:69:dc:9a:82:b6:c6:a2:76:9d:f2:6e:95:c6:30:ed:ea:9d:
3d:b7:87:71:a5:9f:b9:8d:39:91:d2:ab:21:9d:8c:d1:8d:dc:
35:4c:0a:fc:53:67:57:1e:cd:ee:fe:69:1d:68:20:e7:bd:49:
b1:bc:40:07:21:f0:61:e6:e3:2b:1a:e4:39:af:20:39:5b:18:
71:16:fb:80:9f:75:d0:d1:7d:70:e6:cf:a3:d2:cc:eb:7c:4b:
a0:ad:01:58:b3:f9:89:19:70:1e:33:9a:5f:ef:ef:8c:3d:82:
81:cd:13:5f:9c:cc:53:96:88:91:37:a2:d0:ed:54:92:85:64:
bb:b3:ff:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 04:50:29 2026 by rpki-client