Route Origin Authorization
$ rpki-client -vvvf rsync.rp.ki/repo/misakaio/2/AS969.roa
File: AS969.roa (raw, json)
Hash identifier: JPTIWWcBt6d5WjB8hwtKOeai4EOh7lcr4l/TfinKKrU=
Subject key identifier: F8:5A:B6:66:C2:76:7E:7D:73:D8:86:B4:A6:5F:4D:77:9B:04:A1:9E
Certificate issuer: /CN=359a4b6c6d3713cff3636207de9839058b51815b
Certificate serial: 4239882D8A86B89C6C6227ECDB98299B9A4C178F
Authority key identifier: 35:9A:4B:6C:6D:37:13:CF:F3:63:62:07:DE:98:39:05:8B:51:81:5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NZpLbG03E8_zY2IH3pg5BYtRgVs.cer
Subject info access: rsync://rsync.rp.ki/repo/misakaio/2/AS969.roa
Signing time: Wed 23 Sep 2026 21:48:03 +0000
ROA not before: Wed 23 Sep 2026 21:43:03 +0000
ROA not after: Wed 22 Sep 2027 21:48:03 +0000
asID: 969
IP address blocks: 45.11.107.0/24 maxlen: 32
Validation: OK
Signature path: rsync://rsync.rp.ki/repo/misakaio/2/359A4B6C6D3713CFF3636207DE9839058B51815B.crl
rsync://rsync.rp.ki/repo/misakaio/2/359A4B6C6D3713CFF3636207DE9839058B51815B.mft
rsync://rpki.ripe.net/repository/DEFAULT/NZpLbG03E8_zY2IH3pg5BYtRgVs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 18:27:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
42:39:88:2d:8a:86:b8:9c:6c:62:27:ec:db:98:29:9b:9a:4c:17:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=359a4b6c6d3713cff3636207de9839058b51815b
Validity
Not Before: Sep 23 21:43:03 2026 GMT
Not After : Sep 22 21:48:03 2027 GMT
Subject: CN=F85AB666C2767E7D73D886B4A65F4D779B04A19E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:ab:b6:b8:40:76:49:e7:58:39:c2:4a:37:f3:
75:8d:6f:11:b9:05:58:e5:59:d9:ac:43:a9:5d:f1:
b1:4e:c7:8f:86:02:d9:2e:cb:48:8f:12:29:84:ed:
4a:c8:b8:c6:ae:93:41:8c:62:f9:9c:68:62:36:06:
2c:48:f6:3a:36:ba:85:52:29:e9:3d:3e:09:d0:f8:
9b:df:a4:38:6c:f1:a4:57:d1:4a:b2:ce:75:c0:e2:
a1:ae:c3:31:56:f5:f0:58:69:6c:70:91:d1:90:f1:
2c:6e:da:10:28:c1:3b:c4:ab:14:4f:57:78:14:79:
0d:24:d6:db:3e:22:a8:3c:35:ad:b9:bc:92:ec:42:
80:b7:6c:34:01:b5:a7:b9:1d:85:89:64:89:70:a2:
40:c9:02:1a:84:22:c5:48:66:69:47:e5:e7:19:1f:
23:90:94:b5:af:1a:12:63:da:0f:9f:27:a1:a0:94:
ff:4b:4c:df:f4:3a:ca:83:62:aa:46:fd:25:f6:48:
2c:f7:a2:35:80:68:ad:68:e7:8a:f0:87:d1:9f:43:
43:1d:0c:7b:07:c2:f5:fe:9b:df:57:27:12:82:fe:
8b:98:91:23:b1:31:c2:33:5b:28:f0:f1:ec:8b:8c:
0c:6b:0e:c5:89:ee:9a:91:85:33:f0:b3:4a:05:ec:
b1:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:5A:B6:66:C2:76:7E:7D:73:D8:86:B4:A6:5F:4D:77:9B:04:A1:9E
X509v3 Authority Key Identifier:
keyid:35:9A:4B:6C:6D:37:13:CF:F3:63:62:07:DE:98:39:05:8B:51:81:5B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.rp.ki/repo/misakaio/2/359A4B6C6D3713CFF3636207DE9839058B51815B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NZpLbG03E8_zY2IH3pg5BYtRgVs.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.rp.ki/repo/misakaio/2/AS969.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.11.107.0/24
Signature Algorithm: sha256WithRSAEncryption
6e:55:ad:63:8d:16:84:d2:13:23:9c:a9:d8:c2:08:8f:ef:75:
e5:f6:17:d5:8a:91:e4:e9:0d:fa:b3:5a:6d:c2:41:d6:4d:2c:
fe:e9:36:b7:52:f7:c1:28:16:03:ae:f6:08:32:af:cc:4a:39:
e4:fc:d6:2f:67:a8:6b:ca:e0:f2:8d:0a:40:12:88:5f:dc:e6:
a3:04:c8:e0:9c:5a:7f:2a:06:ed:b3:d6:e1:e7:77:2b:f6:29:
c3:eb:52:6d:ed:4e:19:68:cf:ac:7c:61:07:5d:cb:e9:e8:0f:
ff:09:69:c0:d1:dd:85:fb:6a:3b:c4:6a:3b:a1:4d:38:4c:94:
ac:b5:7a:93:fc:68:e1:d6:db:26:86:69:b6:04:f2:55:4c:2c:
c8:34:4b:4b:3e:f8:d8:ed:13:00:54:65:93:8e:7c:2f:08:ee:
0c:84:d5:4c:01:dc:94:9d:c3:19:a3:2a:24:2a:ef:89:84:ce:
a8:da:70:13:6d:f0:eb:63:4d:4a:11:ba:5e:a9:4e:a5:a0:bf:
e6:25:15:22:fb:50:9d:bd:ca:8f:24:40:e2:e2:4d:b3:8e:da:
d9:a0:a0:74:5e:d7:94:01:f4:20:62:b7:e3:04:db:bb:45:d2:
3e:84:0b:3f:48:c6:61:f4:cf:3e:11:61:ab:a5:08:1d:a3:41:
a8:cd:34:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 04:50:20 2026 by rpki-client