Route Origin Authorization
$ rpki-client -vvvf rsync.rp.ki/repo/misakaio/2/AS57695.roa
File: AS57695.roa (raw, json)
Hash identifier: xhUDQouAEtl1PMEPWO/CPZgYAG0RR3D6W9IsPuIUS3w=
Subject key identifier: 0A:26:78:63:97:CF:1C:8F:32:9C:69:FA:A9:2A:26:2B:C7:74:38:AE
Certificate issuer: /CN=359a4b6c6d3713cff3636207de9839058b51815b
Certificate serial: 03632B085EBB4C99A5A62F0D8C177E51B2C24D71
Authority key identifier: 35:9A:4B:6C:6D:37:13:CF:F3:63:62:07:DE:98:39:05:8B:51:81:5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NZpLbG03E8_zY2IH3pg5BYtRgVs.cer
Subject info access: rsync://rsync.rp.ki/repo/misakaio/2/AS57695.roa
Signing time: Wed 23 Sep 2026 21:48:08 +0000
ROA not before: Wed 23 Sep 2026 21:43:08 +0000
ROA not after: Wed 22 Sep 2027 21:48:08 +0000
asID: 57695
IP address blocks: 45.11.104.0/22 maxlen: 24
45.131.68.0/22 maxlen: 24
45.142.246.0/24 maxlen: 24
45.142.247.0/24 maxlen: 24
45.150.240.0/22 maxlen: 24
185.189.72.0/24 maxlen: 24
185.234.213.0/24 maxlen: 24
194.45.101.0/24 maxlen: 24
194.156.162.0/23 maxlen: 24
2a0b:4341::/32 maxlen: 48
2a0b:4342::/32 maxlen: 48
2a0d:5641:2100::/44 maxlen: 48
2a0e:6901::/32 maxlen: 48
2a0e:6902::/32 maxlen: 48
2a11:6e01::/32 maxlen: 48
2a12:8d00::/29 maxlen: 48
Validation: OK
Signature path: rsync://rsync.rp.ki/repo/misakaio/2/359A4B6C6D3713CFF3636207DE9839058B51815B.crl
rsync://rsync.rp.ki/repo/misakaio/2/359A4B6C6D3713CFF3636207DE9839058B51815B.mft
rsync://rpki.ripe.net/repository/DEFAULT/NZpLbG03E8_zY2IH3pg5BYtRgVs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 18:27:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
03:63:2b:08:5e:bb:4c:99:a5:a6:2f:0d:8c:17:7e:51:b2:c2:4d:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=359a4b6c6d3713cff3636207de9839058b51815b
Validity
Not Before: Sep 23 21:43:08 2026 GMT
Not After : Sep 22 21:48:08 2027 GMT
Subject: CN=0A26786397CF1C8F329C69FAA92A262BC77438AE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:6b:18:77:8a:57:c2:03:fa:6c:5f:11:09:5b:
a7:a5:0d:52:41:5e:32:d4:af:55:4b:43:7a:22:31:
55:6a:b0:4e:cb:e3:e8:8d:c1:fc:47:8a:07:3e:37:
bc:fb:01:28:40:89:85:9f:43:cd:a6:ec:fb:35:c9:
cd:85:64:d2:cb:cf:7a:ab:53:59:67:08:db:d5:77:
7e:a5:6e:92:99:49:c6:94:67:b1:2a:06:13:a8:dd:
ec:68:11:82:bc:91:86:46:b9:f9:f8:ea:b3:44:6a:
6c:83:c0:14:55:cd:70:93:74:2a:14:6c:02:90:13:
d6:5c:9b:39:bd:56:83:33:4b:f4:a8:b4:15:33:74:
a9:63:df:c6:f5:07:37:b1:3d:16:dd:ce:4b:0f:c3:
4f:40:67:2c:d1:7e:6f:9c:0d:59:79:0a:b3:c3:9b:
c6:0b:e3:20:8d:d6:11:62:12:55:78:bc:f7:15:d3:
fc:06:63:c5:c7:74:c0:f4:f8:67:f1:86:3b:2b:b7:
37:7d:2a:b8:13:90:ed:5c:7d:0e:b6:5a:0d:d7:fa:
ff:ea:a1:dd:47:c2:b3:d7:4f:3f:a8:58:91:cd:94:
d6:a2:8d:eb:f1:f9:04:94:b0:7b:13:78:d5:9c:7b:
13:6a:af:cb:fa:2a:b9:03:71:16:ac:75:39:b1:48:
b4:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:26:78:63:97:CF:1C:8F:32:9C:69:FA:A9:2A:26:2B:C7:74:38:AE
X509v3 Authority Key Identifier:
keyid:35:9A:4B:6C:6D:37:13:CF:F3:63:62:07:DE:98:39:05:8B:51:81:5B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.rp.ki/repo/misakaio/2/359A4B6C6D3713CFF3636207DE9839058B51815B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NZpLbG03E8_zY2IH3pg5BYtRgVs.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.rp.ki/repo/misakaio/2/AS57695.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.11.104.0/22
45.131.68.0/22
45.142.246.0/23
45.150.240.0/22
185.189.72.0/24
185.234.213.0/24
194.45.101.0/24
194.156.162.0/23
IPv6:
2a0b:4341::-2a0b:4342:ffff:ffff:ffff:ffff:ffff:ffff
2a0d:5641:2100::/44
2a0e:6901::-2a0e:6902:ffff:ffff:ffff:ffff:ffff:ffff
2a11:6e01::/32
2a12:8d00::/29
Signature Algorithm: sha256WithRSAEncryption
29:45:da:04:5f:12:85:fc:24:ea:ca:e5:17:e1:ef:fd:b8:0c:
9c:2d:8b:ca:c8:6b:5e:24:d7:ab:56:eb:59:d4:9c:b4:58:bf:
07:37:d4:9a:20:ee:b0:13:57:a2:15:67:41:a6:28:bc:0e:61:
e2:d3:b7:6d:9c:b5:e7:aa:2d:a9:70:52:ab:72:73:ef:0b:5b:
cb:8f:e8:13:10:7a:9b:87:5f:1d:d3:b7:a7:cd:40:8c:f9:f9:
eb:90:62:fe:59:2b:d5:c2:55:95:ee:b8:db:33:b6:ad:7d:c9:
d0:19:04:73:8a:a1:26:a9:f6:bd:4a:b8:54:31:db:e2:60:cb:
91:7b:88:52:e8:5a:bb:1a:5d:c8:94:3d:b3:81:9d:e7:59:13:
9f:97:8c:85:80:52:0c:6a:34:f1:7c:46:6f:6d:12:82:dc:5f:
83:54:7d:87:26:97:e7:72:8f:73:9b:05:9f:93:05:43:ed:be:
7b:7a:18:72:1a:8b:5a:05:60:9a:11:b5:aa:6f:f9:09:f5:5a:
0c:d0:a2:cf:66:07:d4:48:4a:d0:03:2e:12:73:62:ce:90:93:
00:c3:84:dd:82:e3:e6:4d:13:c3:cd:8b:db:63:15:b0:8f:82:
7f:85:54:7d:0c:0c:52:95:6c:34:c4:1a:a7:cc:f9:8a:27:f2:
fe:41:db:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 04:50:32 2026 by rpki-client