Route Origin Authorization
$ rpki-client -vvvf rsync.rp.ki/repo/misakaio/2/AS49466.roa
File: AS49466.roa (raw, json)
Hash identifier: xxadgMm7RHXvXF6KWH3VUa2Sqdxz83fe+bldF5i6xA0=
Subject key identifier: 43:C4:B0:76:2C:B2:A8:B3:BA:65:3A:70:49:62:57:CF:A3:01:AD:DF
Certificate issuer: /CN=359a4b6c6d3713cff3636207de9839058b51815b
Certificate serial: 3EB8AB16236CEC776E8ABABAB9B44CE3636F9C94
Authority key identifier: 35:9A:4B:6C:6D:37:13:CF:F3:63:62:07:DE:98:39:05:8B:51:81:5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NZpLbG03E8_zY2IH3pg5BYtRgVs.cer
Subject info access: rsync://rsync.rp.ki/repo/misakaio/2/AS49466.roa
Signing time: Wed 23 Sep 2026 22:48:10 +0000
ROA not before: Wed 23 Sep 2026 22:43:10 +0000
ROA not after: Wed 22 Sep 2027 22:48:10 +0000
asID: 49466
IP address blocks: 93.93.244.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rsync.rp.ki/repo/misakaio/2/359A4B6C6D3713CFF3636207DE9839058B51815B.crl
rsync://rsync.rp.ki/repo/misakaio/2/359A4B6C6D3713CFF3636207DE9839058B51815B.mft
rsync://rpki.ripe.net/repository/DEFAULT/NZpLbG03E8_zY2IH3pg5BYtRgVs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 18:27:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3e:b8:ab:16:23:6c:ec:77:6e:8a:ba:ba:b9:b4:4c:e3:63:6f:9c:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=359a4b6c6d3713cff3636207de9839058b51815b
Validity
Not Before: Sep 23 22:43:10 2026 GMT
Not After : Sep 22 22:48:10 2027 GMT
Subject: CN=43C4B0762CB2A8B3BA653A70496257CFA301ADDF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:32:11:4f:c2:b4:af:cb:c2:03:3d:11:22:d3:
e2:f2:e6:0c:4a:b5:48:4d:e0:b7:e1:31:16:24:65:
4e:e6:11:21:38:23:af:b0:e1:db:d7:bc:61:4e:a7:
ac:f4:17:51:49:64:d0:37:4a:ff:d1:45:58:9b:68:
97:5e:b4:a6:5f:84:84:25:b6:58:58:64:d1:b7:a3:
3f:b1:ae:33:87:80:aa:f0:5f:6a:70:89:ed:a4:05:
94:a3:ef:1e:22:47:e6:f8:98:9f:81:57:b1:36:62:
fb:b2:95:6e:10:c8:b2:97:ef:a9:15:16:8a:01:fd:
8d:38:a9:81:93:ed:6b:05:d5:0c:f9:8a:9d:a6:3b:
be:db:58:8c:a4:80:87:98:d4:4d:11:c8:45:1c:a8:
23:fe:84:8d:54:c7:46:db:2f:ae:c2:a5:01:0d:d8:
56:7d:c1:05:52:5d:c8:bb:51:cd:b2:75:c9:ff:a3:
b9:a7:e5:4f:ef:43:50:ed:1b:c5:13:57:c5:c2:13:
db:63:b4:6f:88:ba:4f:57:e7:08:a9:17:9d:21:13:
ca:83:9e:6e:73:9b:de:18:22:7b:29:15:e6:7e:76:
db:44:9e:ed:d6:d4:ec:4c:c5:4d:ad:7b:e3:4d:de:
e8:ec:90:76:69:d4:15:42:1b:54:08:0b:1d:98:b6:
f1:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:C4:B0:76:2C:B2:A8:B3:BA:65:3A:70:49:62:57:CF:A3:01:AD:DF
X509v3 Authority Key Identifier:
keyid:35:9A:4B:6C:6D:37:13:CF:F3:63:62:07:DE:98:39:05:8B:51:81:5B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.rp.ki/repo/misakaio/2/359A4B6C6D3713CFF3636207DE9839058B51815B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NZpLbG03E8_zY2IH3pg5BYtRgVs.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.rp.ki/repo/misakaio/2/AS49466.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.93.244.0/22
Signature Algorithm: sha256WithRSAEncryption
bf:11:87:36:29:2b:a8:d3:74:b0:77:2d:08:46:20:ad:8b:00:
58:c9:e3:ad:88:a2:71:b5:bf:44:47:f5:04:48:85:88:c5:1c:
06:ed:0d:9b:9b:d7:c3:c8:ef:f7:ea:ed:ac:4f:67:c2:1d:3a:
36:42:ae:4d:9c:bf:40:ee:e1:f2:5f:b7:e2:dd:6a:0a:dc:ba:
af:8b:63:6a:f6:f4:22:87:cf:c6:01:66:e7:b9:32:ed:d9:fa:
0f:99:d2:9d:dc:78:d2:6b:64:c8:55:f2:f9:dc:b7:b0:77:6b:
34:e0:fb:ac:67:e8:2c:a8:3c:58:c1:5b:bf:9a:f6:29:94:19:
ba:0a:f0:6c:16:39:c3:1c:d3:1d:11:e6:1e:df:dc:fc:e8:f8:
33:ab:79:c5:f4:6f:e0:59:40:86:00:e7:ee:3d:1d:4c:5a:66:
3a:7b:f1:c4:75:a1:b1:b7:9f:6e:b7:84:94:68:b4:ed:e0:af:
f7:a8:4b:56:19:cb:e2:8f:6d:d1:7d:7a:d8:92:96:49:ba:9a:
6b:07:20:c9:a7:a9:93:09:14:b6:bd:44:3f:86:fc:18:42:2e:
1f:bf:7b:93:78:63:14:1a:fd:53:bc:26:e6:b3:1f:7a:22:50:
c3:53:b2:55:23:4d:e7:38:82:da:3d:56:d6:d0:6f:bf:99:4c:
a1:68:a1:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 04:50:34 2026 by rpki-client