Route Origin Authorization
$ rpki-client -vvvf rsync.rp.ki/repo/misakaio/2/AS917.roa
File: AS917.roa (raw, json)
Hash identifier: WwHHLh9I+LGqUSUpqdMm5H2PwK0aAOhSB/M0DPJIpvg=
Subject key identifier: FA:84:EE:F9:6D:83:B5:B2:9D:D4:C7:93:C9:0C:41:AA:67:3F:0B:B7
Certificate issuer: /CN=359a4b6c6d3713cff3636207de9839058b51815b
Certificate serial: 17F4EE163F2A163CCB5ECC708D1CBDA71A0F63CF
Authority key identifier: 35:9A:4B:6C:6D:37:13:CF:F3:63:62:07:DE:98:39:05:8B:51:81:5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NZpLbG03E8_zY2IH3pg5BYtRgVs.cer
Subject info access: rsync://rsync.rp.ki/repo/misakaio/2/AS917.roa
Signing time: Wed 23 Sep 2026 21:48:02 +0000
ROA not before: Wed 23 Sep 2026 21:43:02 +0000
ROA not after: Wed 22 Sep 2027 21:48:02 +0000
asID: 917
IP address blocks: 45.11.104.0/22 maxlen: 24
45.131.68.0/22 maxlen: 24
45.142.246.0/24 maxlen: 24
45.142.247.0/24 maxlen: 24
45.150.242.0/23 maxlen: 24
185.189.72.0/24 maxlen: 24
185.234.213.0/24 maxlen: 24
194.45.101.0/24 maxlen: 24
194.156.162.0/23 maxlen: 24
2a0b:4341::/32 maxlen: 48
2a0b:4342::/32 maxlen: 48
2a0d:5641:2100::/44 maxlen: 48
2a0e:6901::/32 maxlen: 48
2a0e:6902::/32 maxlen: 48
2a11:6e01::/32 maxlen: 48
2a12:8d00::/29 maxlen: 48
Validation: OK
Signature path: rsync://rsync.rp.ki/repo/misakaio/2/359A4B6C6D3713CFF3636207DE9839058B51815B.crl
rsync://rsync.rp.ki/repo/misakaio/2/359A4B6C6D3713CFF3636207DE9839058B51815B.mft
rsync://rpki.ripe.net/repository/DEFAULT/NZpLbG03E8_zY2IH3pg5BYtRgVs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 18:27:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
17:f4:ee:16:3f:2a:16:3c:cb:5e:cc:70:8d:1c:bd:a7:1a:0f:63:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=359a4b6c6d3713cff3636207de9839058b51815b
Validity
Not Before: Sep 23 21:43:02 2026 GMT
Not After : Sep 22 21:48:02 2027 GMT
Subject: CN=FA84EEF96D83B5B29DD4C793C90C41AA673F0BB7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:a0:87:76:b7:c3:f9:4c:b2:75:f4:cf:c5:e2:
0e:4e:47:ee:81:bd:94:4a:67:d8:49:4b:d3:3b:b5:
23:55:89:3b:80:72:6e:90:4c:c1:dd:af:66:dd:02:
a3:77:10:62:d9:8e:ff:7f:7e:f7:65:2a:be:32:95:
7b:ea:f6:85:06:db:4b:5c:f3:d9:f5:7d:93:a1:9d:
3d:2b:57:95:ad:02:e2:1c:d9:3f:ac:e6:38:50:cf:
35:40:02:38:73:65:4d:8f:9e:17:86:e9:bf:dc:af:
93:4f:ec:77:f1:b5:89:73:05:dd:0e:3b:42:fd:68:
cf:d2:84:46:a5:25:44:e6:a7:1f:67:e9:3b:96:74:
cb:91:8f:88:3f:6a:ef:3f:bc:39:22:c0:16:85:74:
ff:cc:18:df:20:54:54:af:9e:7a:1c:23:67:3f:5f:
c6:ea:85:e4:22:9e:ad:29:eb:da:4e:ad:ea:07:75:
06:b0:fc:af:78:17:c5:4f:5a:46:b2:80:18:8b:45:
e8:e1:53:e8:e5:c1:ec:f6:a1:b6:c3:79:8a:da:a7:
f6:77:f2:11:77:9c:b5:db:4f:06:50:8c:fc:46:99:
87:90:6c:78:f1:78:db:0b:86:7d:c8:dd:b5:b7:6d:
89:4a:54:f0:26:b2:99:b1:99:7c:2c:57:96:15:05:
4c:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:84:EE:F9:6D:83:B5:B2:9D:D4:C7:93:C9:0C:41:AA:67:3F:0B:B7
X509v3 Authority Key Identifier:
keyid:35:9A:4B:6C:6D:37:13:CF:F3:63:62:07:DE:98:39:05:8B:51:81:5B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.rp.ki/repo/misakaio/2/359A4B6C6D3713CFF3636207DE9839058B51815B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NZpLbG03E8_zY2IH3pg5BYtRgVs.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.rp.ki/repo/misakaio/2/AS917.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.11.104.0/22
45.131.68.0/22
45.142.246.0/23
45.150.242.0/23
185.189.72.0/24
185.234.213.0/24
194.45.101.0/24
194.156.162.0/23
IPv6:
2a0b:4341::-2a0b:4342:ffff:ffff:ffff:ffff:ffff:ffff
2a0d:5641:2100::/44
2a0e:6901::-2a0e:6902:ffff:ffff:ffff:ffff:ffff:ffff
2a11:6e01::/32
2a12:8d00::/29
Signature Algorithm: sha256WithRSAEncryption
60:65:74:32:8f:1d:f5:ec:0d:e7:5b:c8:fe:63:66:e4:82:f4:
2e:35:d6:0d:57:da:7c:de:cc:11:7b:db:da:6c:c7:58:c7:4d:
6c:5d:01:c7:d8:cf:26:4e:54:1f:e3:60:c7:59:94:a7:36:bc:
5a:65:fd:85:8a:c2:b6:c9:03:ef:9f:d5:98:4a:c2:c8:84:c9:
80:9d:c3:b5:5a:ce:85:6d:af:a5:ce:ee:36:8e:cb:f1:9f:6b:
cc:c9:17:7a:0f:26:97:05:98:c5:a0:88:fb:59:17:1d:b8:94:
8c:45:60:03:d2:10:f6:42:ec:7c:ed:6e:0a:8a:62:f5:46:d6:
d3:32:d7:94:56:3b:03:18:a1:fe:48:42:09:6d:2c:d5:85:bf:
12:33:65:e8:5e:6c:6a:c1:08:bc:27:01:ca:1b:3c:32:dd:fb:
97:77:d4:94:2e:72:bd:e7:1d:1b:6d:f6:d1:8f:0f:76:19:a8:
d2:91:d1:1a:ee:37:14:99:f8:3a:c6:05:57:f5:af:da:26:07:
61:0b:c6:21:69:84:0f:fb:5f:30:ec:6e:8b:14:9a:3e:93:69:
1f:cd:3c:3d:78:9c:38:4d:a4:82:42:da:2f:91:7f:d6:41:a8:
f4:da:4b:96:d3:5c:cb:70:5f:1a:94:0f:3a:48:df:c3:d3:26:
a5:38:11:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 04:50:23 2026 by rpki-client