Route Origin Authorization
$ rpki-client -vvvf rsync.rp.ki/repo/misakaio/2/AS51928.roa
File: AS51928.roa (raw, json)
Hash identifier: PvllarBu803gtk2IswUL1RtOuZRhdy5GtU18gy3AhcE=
Subject key identifier: 0E:0B:CE:C8:A6:F6:B8:56:D0:93:28:6C:34:90:13:DC:D9:91:09:94
Certificate issuer: /CN=359a4b6c6d3713cff3636207de9839058b51815b
Certificate serial: 584BDF8A388A00162C7C8058BC0D0383F7266007
Authority key identifier: 35:9A:4B:6C:6D:37:13:CF:F3:63:62:07:DE:98:39:05:8B:51:81:5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NZpLbG03E8_zY2IH3pg5BYtRgVs.cer
Subject info access: rsync://rsync.rp.ki/repo/misakaio/2/AS51928.roa
Signing time: Wed 23 Sep 2026 21:48:02 +0000
ROA not before: Wed 23 Sep 2026 21:43:02 +0000
ROA not after: Wed 22 Sep 2027 21:48:02 +0000
asID: 51928
IP address blocks: 185.234.212.0/24 maxlen: 24
2a0e:6904::/31 maxlen: 48
Validation: OK
Signature path: rsync://rsync.rp.ki/repo/misakaio/2/359A4B6C6D3713CFF3636207DE9839058B51815B.crl
rsync://rsync.rp.ki/repo/misakaio/2/359A4B6C6D3713CFF3636207DE9839058B51815B.mft
rsync://rpki.ripe.net/repository/DEFAULT/NZpLbG03E8_zY2IH3pg5BYtRgVs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 18:27:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
58:4b:df:8a:38:8a:00:16:2c:7c:80:58:bc:0d:03:83:f7:26:60:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=359a4b6c6d3713cff3636207de9839058b51815b
Validity
Not Before: Sep 23 21:43:02 2026 GMT
Not After : Sep 22 21:48:02 2027 GMT
Subject: CN=0E0BCEC8A6F6B856D093286C349013DCD9910994
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:ee:af:3a:45:44:bc:e7:be:21:4b:6e:36:67:
d7:d7:10:24:68:01:9c:63:f7:9c:6f:f0:a2:f0:d2:
ec:c2:52:ed:69:19:3a:99:dc:1c:e3:b3:dd:df:4f:
88:eb:14:f6:72:75:29:f0:a7:22:35:fe:81:21:76:
a7:3c:e2:65:33:c3:51:2c:91:ce:49:fb:35:b6:92:
f0:99:07:79:69:50:1c:73:46:50:6a:b5:d5:86:f0:
fb:8c:ae:88:dc:cd:dd:9d:51:44:01:d6:eb:4f:23:
0f:e9:e2:36:bb:b0:6b:6c:6a:18:ee:59:b4:e5:66:
90:fd:fe:53:95:44:e1:a1:6c:46:9e:63:c3:6e:16:
3e:30:e4:6a:30:ea:a9:fc:54:1d:87:fa:d5:98:15:
4a:76:47:65:df:f0:38:73:7e:3b:0e:96:5d:7b:d6:
3f:e8:eb:8a:08:18:49:bb:e5:74:25:d1:5f:2b:4f:
c8:06:51:6f:d1:9c:2a:44:d6:be:46:f4:7e:b1:57:
7f:4d:14:f2:e3:41:1a:50:c8:e0:bf:72:94:d5:3c:
4b:32:ba:d8:32:70:cf:0f:11:15:3c:34:64:6e:5b:
84:8a:eb:f9:85:34:1e:1c:16:3e:67:b9:19:98:12:
08:d1:4f:4f:a2:9b:fa:0a:cb:92:d2:04:48:ab:04:
f7:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:0B:CE:C8:A6:F6:B8:56:D0:93:28:6C:34:90:13:DC:D9:91:09:94
X509v3 Authority Key Identifier:
keyid:35:9A:4B:6C:6D:37:13:CF:F3:63:62:07:DE:98:39:05:8B:51:81:5B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.rp.ki/repo/misakaio/2/359A4B6C6D3713CFF3636207DE9839058B51815B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NZpLbG03E8_zY2IH3pg5BYtRgVs.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.rp.ki/repo/misakaio/2/AS51928.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.234.212.0/24
IPv6:
2a0e:6904::/31
Signature Algorithm: sha256WithRSAEncryption
19:49:f0:4e:ec:d9:36:76:83:ce:5f:67:e1:da:9a:19:7e:39:
de:bd:43:fd:75:c7:5d:70:f0:2e:48:33:1a:dc:37:20:09:52:
b4:e9:44:3d:69:ca:23:ac:e2:c1:c9:6d:c9:17:24:43:13:d5:
89:e6:af:ec:49:e4:a5:1e:d0:c7:62:73:35:fb:97:1b:2c:13:
eb:51:84:6b:0b:75:bc:bc:58:00:54:77:34:a0:33:06:52:e5:
14:56:80:59:30:03:67:67:b3:2e:3e:94:95:42:b7:d2:69:b0:
f9:22:d5:a1:d5:3e:58:eb:72:d8:32:f7:48:71:23:2f:3c:0e:
74:8d:fe:82:04:cf:db:3a:32:d6:d2:33:46:38:84:70:4d:d3:
05:d5:4d:ab:e0:d3:0f:a1:3f:1c:c0:33:f4:30:d2:6f:48:57:
40:ca:fb:9b:ab:6e:b9:2d:ea:01:e0:ba:db:20:67:ea:30:ee:
22:1e:e4:a8:7b:69:94:92:79:45:3d:48:64:6e:14:df:e0:15:
d3:43:8b:19:ec:7d:29:e0:02:42:92:8d:e6:38:dd:15:4a:49:
fb:ed:f0:0a:f9:05:b7:0e:21:43:66:e6:51:65:e2:a7:ce:b5:
29:89:4f:2d:d7:92:f4:6b:4e:79:d6:d7:3e:b7:19:01:2c:90:
df:a3:ee:84
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Thu Sep 24 04:50:25 2026 by rpki-client