Route Origin Authorization
$ rpki-client -vvvf rsync.rp.ki/repo/misakaio/2/AS8075.roa
File: AS8075.roa (raw, json)
Hash identifier: G9uahhxLDmJXzTN9DdAso1zSXohgzIUyIScuuCdmYS8=
Subject key identifier: BB:B4:03:96:44:2E:8B:EB:9F:BB:A7:31:77:CF:9C:83:F2:20:B5:AC
Certificate issuer: /CN=359a4b6c6d3713cff3636207de9839058b51815b
Certificate serial: 4C6FE91DE1249403A901F10B4506BB72CE88B353
Authority key identifier: 35:9A:4B:6C:6D:37:13:CF:F3:63:62:07:DE:98:39:05:8B:51:81:5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NZpLbG03E8_zY2IH3pg5BYtRgVs.cer
Subject info access: rsync://rsync.rp.ki/repo/misakaio/2/AS8075.roa
Signing time: Mon 21 Sep 2026 12:47:58 +0000
ROA not before: Mon 21 Sep 2026 12:42:58 +0000
ROA not after: Mon 20 Sep 2027 12:47:58 +0000
asID: 8075
IP address blocks: 45.142.245.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.rp.ki/repo/misakaio/2/359A4B6C6D3713CFF3636207DE9839058B51815B.crl
rsync://rsync.rp.ki/repo/misakaio/2/359A4B6C6D3713CFF3636207DE9839058B51815B.mft
rsync://rpki.ripe.net/repository/DEFAULT/NZpLbG03E8_zY2IH3pg5BYtRgVs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 06:25:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4c:6f:e9:1d:e1:24:94:03:a9:01:f1:0b:45:06:bb:72:ce:88:b3:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=359a4b6c6d3713cff3636207de9839058b51815b
Validity
Not Before: Sep 21 12:42:58 2026 GMT
Not After : Sep 20 12:47:58 2027 GMT
Subject: CN=BBB40396442E8BEB9FBBA73177CF9C83F220B5AC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:54:70:f1:a1:b8:e4:5d:dd:42:f2:d3:81:b3:
c0:04:9a:53:30:79:b6:13:33:d4:fb:7b:9d:5c:af:
5e:d0:a8:f3:be:59:02:2f:68:b2:dd:6e:06:29:b4:
c8:37:a8:49:e4:5a:6a:83:05:f1:71:ae:57:d4:49:
ca:be:ed:95:18:22:aa:c5:58:59:bb:47:f3:68:46:
99:6a:0a:01:64:38:db:f8:6c:64:e0:f6:13:81:31:
13:d2:36:56:14:5d:88:6e:9c:20:10:04:ae:09:b6:
fd:2e:f6:4a:26:e7:ed:41:52:27:9c:fa:58:99:d4:
c4:88:a1:13:37:fe:3a:9f:95:90:2d:e7:9b:6b:c6:
99:6d:92:56:9d:22:1c:ed:97:48:60:e7:77:c9:7a:
7b:b9:64:d4:2c:3a:04:14:d8:b0:aa:52:cf:9c:6c:
a0:0f:59:5b:35:8e:7b:20:f2:48:74:6b:c7:02:b8:
a0:64:b3:23:c5:a9:77:d3:34:18:df:d4:b2:19:c7:
33:07:52:1d:98:7f:79:ec:19:a8:77:a9:58:9b:6a:
37:df:72:f2:22:3a:0c:0b:4d:67:68:ae:a6:d7:c4:
4f:ac:30:e7:34:b9:af:a2:d3:8a:93:09:32:3f:d3:
40:59:8d:32:5e:43:5c:c3:02:fc:c5:bf:da:4a:91:
45:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:B4:03:96:44:2E:8B:EB:9F:BB:A7:31:77:CF:9C:83:F2:20:B5:AC
X509v3 Authority Key Identifier:
keyid:35:9A:4B:6C:6D:37:13:CF:F3:63:62:07:DE:98:39:05:8B:51:81:5B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.rp.ki/repo/misakaio/2/359A4B6C6D3713CFF3636207DE9839058B51815B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NZpLbG03E8_zY2IH3pg5BYtRgVs.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.rp.ki/repo/misakaio/2/AS8075.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.142.245.0/24
Signature Algorithm: sha256WithRSAEncryption
6e:75:ac:60:e6:56:ad:2b:6f:89:3e:1d:e0:43:b6:2f:65:c9:
4f:45:44:d7:05:c6:68:b9:0a:f6:bc:04:c1:37:11:b2:5a:b1:
72:f8:b8:2c:a0:b0:08:c9:a2:ad:1b:b6:6e:b9:5b:fe:da:e0:
ba:fb:ce:22:1f:73:f9:d2:49:69:be:34:97:88:de:66:59:99:
76:66:4f:7c:ec:e2:b0:83:86:ee:5f:5d:71:87:d0:f7:e5:47:
87:99:fe:24:1b:f6:63:09:a8:a4:8b:00:d1:9f:ec:7c:b4:63:
f2:c8:94:45:d5:f7:87:87:a5:b6:cd:6d:61:cc:c3:80:a5:d5:
dc:87:6b:03:fa:62:ef:7d:0d:49:3b:b9:52:5b:ac:e4:d3:81:
31:39:64:a2:0e:29:c2:91:69:5f:17:cf:fa:0b:34:de:f7:f6:
73:ae:24:97:76:80:f8:9c:54:b2:c1:08:d3:47:9d:37:1f:62:
b6:03:c4:95:5d:ad:4a:6d:8a:28:0e:18:64:96:45:c2:67:68:
90:3f:87:db:9e:e6:b9:28:ae:e6:0c:a7:23:f6:d2:ba:ee:34:
e8:a1:42:3a:5c:12:5b:d7:d7:a2:db:ed:d8:b5:a8:02:e4:34:
60:2f:e5:24:93:69:c3:b6:a1:bc:b9:3f:7a:7d:26:28:d8:d5:
bd:4a:f4:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 11:51:56 2026 by rpki-client