Route Origin Authorization
$ rpki-client -vvvf rsync.rp.ki/repo/misakaio/2/AS48386.roa
File: AS48386.roa (raw, json)
Hash identifier: MYbmtZv85ycvQPB0h/VmRqYZUFadHg470IBH9hvIdxc=
Subject key identifier: E0:63:44:FF:F4:7C:10:0B:35:49:71:76:FA:03:03:C0:E2:9C:36:D9
Certificate issuer: /CN=359a4b6c6d3713cff3636207de9839058b51815b
Certificate serial: 045A939A66227E95B498ACF2305B5ECAFE8B2A7E
Authority key identifier: 35:9A:4B:6C:6D:37:13:CF:F3:63:62:07:DE:98:39:05:8B:51:81:5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NZpLbG03E8_zY2IH3pg5BYtRgVs.cer
Subject info access: rsync://rsync.rp.ki/repo/misakaio/2/AS48386.roa
Signing time: Wed 23 Sep 2026 21:48:04 +0000
ROA not before: Wed 23 Sep 2026 21:43:04 +0000
ROA not after: Wed 22 Sep 2027 21:48:04 +0000
asID: 48386
IP address blocks: 194.156.155.0/24 maxlen: 24
2a0d:5642:113::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.rp.ki/repo/misakaio/2/359A4B6C6D3713CFF3636207DE9839058B51815B.crl
rsync://rsync.rp.ki/repo/misakaio/2/359A4B6C6D3713CFF3636207DE9839058B51815B.mft
rsync://rpki.ripe.net/repository/DEFAULT/NZpLbG03E8_zY2IH3pg5BYtRgVs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 18:27:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
04:5a:93:9a:66:22:7e:95:b4:98:ac:f2:30:5b:5e:ca:fe:8b:2a:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=359a4b6c6d3713cff3636207de9839058b51815b
Validity
Not Before: Sep 23 21:43:04 2026 GMT
Not After : Sep 22 21:48:04 2027 GMT
Subject: CN=E06344FFF47C100B35497176FA0303C0E29C36D9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:a2:2b:70:f8:47:8a:f9:b3:6b:d5:96:fc:81:
9d:10:b1:4d:f7:2d:d7:1e:99:2a:0b:6d:c8:12:18:
07:d0:c9:c7:7f:63:3a:5b:05:ee:d5:ef:0f:3a:1c:
0e:ef:cb:1e:32:9f:7a:65:c2:c6:34:77:6a:a6:13:
3b:09:5a:02:ed:1c:3d:ea:4b:cb:61:78:04:2c:68:
4f:75:0b:2f:bd:d4:b6:63:61:2a:83:7a:c0:15:f3:
68:0b:14:16:bf:e6:90:dc:04:a9:0d:ee:fd:22:06:
2c:57:f2:c3:40:5a:f2:23:47:03:e2:14:77:5c:fd:
da:18:0f:88:c5:eb:33:8f:ed:0a:f7:b6:a3:3b:81:
1b:ec:bd:64:88:8a:c8:7f:50:13:17:db:97:9f:3c:
1a:4f:7e:44:d8:9b:fd:a0:ed:73:38:4a:6a:64:55:
ac:76:df:45:ec:80:23:60:d5:32:96:e6:d2:9d:19:
b7:fe:96:cf:d3:3e:f7:3a:84:6b:06:59:c9:27:df:
be:da:6e:12:d2:d4:32:85:a1:63:83:03:1c:b6:6a:
21:73:e9:07:b7:c3:9e:53:0d:96:af:76:f9:2e:b6:
83:1f:5f:36:29:e7:c6:58:05:1a:d8:d1:34:79:7a:
05:a3:8c:8d:48:e8:a1:07:b0:2b:ae:ea:9a:12:4a:
d1:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:63:44:FF:F4:7C:10:0B:35:49:71:76:FA:03:03:C0:E2:9C:36:D9
X509v3 Authority Key Identifier:
keyid:35:9A:4B:6C:6D:37:13:CF:F3:63:62:07:DE:98:39:05:8B:51:81:5B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.rp.ki/repo/misakaio/2/359A4B6C6D3713CFF3636207DE9839058B51815B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NZpLbG03E8_zY2IH3pg5BYtRgVs.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.rp.ki/repo/misakaio/2/AS48386.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.156.155.0/24
IPv6:
2a0d:5642:113::/48
Signature Algorithm: sha256WithRSAEncryption
be:9b:ac:31:30:f5:b8:40:0e:8b:97:ce:a6:0c:27:b9:c5:7e:
80:e6:67:04:09:62:dd:1a:83:c1:cf:c5:2c:a2:23:c1:d0:0e:
7d:a4:b9:17:38:a4:16:df:f2:ed:e9:f9:d2:70:67:15:11:e2:
55:0f:2d:54:2d:68:7d:1c:87:96:75:92:ae:2b:33:93:80:5c:
b3:6b:14:04:ff:be:f5:f4:16:7c:b0:03:eb:99:06:d8:6c:9c:
23:5c:d0:11:ab:3d:c7:94:61:9d:a9:62:80:9d:d4:f4:42:de:
3e:1d:f9:74:92:df:ec:6f:6f:6d:76:d6:35:d9:d8:68:b8:c8:
0c:72:71:f8:7a:c3:8f:df:95:36:a8:5b:57:84:4c:35:e8:e9:
4c:2c:b2:64:85:98:d8:d8:ba:e6:e4:74:68:c8:cd:e1:b4:c9:
33:d8:56:88:fa:22:9a:0a:7c:d0:97:a0:92:64:6a:7a:56:a8:
10:48:95:fd:94:79:6e:3b:b4:76:40:e1:8c:19:7a:63:14:f9:
96:e7:ac:30:19:42:2c:68:34:e7:b0:bf:c0:30:15:82:b6:65:
ff:4c:01:8c:8c:b6:57:fd:49:61:6b:9c:2e:31:41:cf:b5:cf:
1f:cc:a9:87:4e:f3:9f:65:cc:fc:65:42:00:1b:49:de:fe:c6:
3b:82:b0:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 04:50:23 2026 by rpki-client