This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rsync.rp.ki/repo/misakaio/2/AS997.roa
File:                     AS997.roa (raw, json)
Hash identifier:          Ovgsez94q3lJ5Km+n3V0QiBo15kRAAdzcJbWlA/0UZg=
Subject key identifier:   0F:8F:C6:2C:FA:4A:5C:4C:1C:6E:5E:78:B0:29:8C:BA:F2:0F:25:B5
Certificate issuer:       /CN=359a4b6c6d3713cff3636207de9839058b51815b
Certificate serial:       1EF1A9698F9E6DAF587A2A61811A6025A8534419
Authority key identifier: 35:9A:4B:6C:6D:37:13:CF:F3:63:62:07:DE:98:39:05:8B:51:81:5B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/NZpLbG03E8_zY2IH3pg5BYtRgVs.cer
Subject info access:      rsync://rsync.rp.ki/repo/misakaio/2/AS997.roa
Signing time:             Fri 09 Jan 2026 08:31:30 +0000
ROA not before:           Fri 09 Jan 2026 08:26:30 +0000
ROA not after:            Fri 08 Jan 2027 08:31:30 +0000
asID:                     997
IP address blocks:        93.93.244.0/22 maxlen: 24
                          93.93.246.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rsync.rp.ki/repo/misakaio/2/359A4B6C6D3713CFF3636207DE9839058B51815B.crl
                          rsync://rsync.rp.ki/repo/misakaio/2/359A4B6C6D3713CFF3636207DE9839058B51815B.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/NZpLbG03E8_zY2IH3pg5BYtRgVs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 06:18:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1e:f1:a9:69:8f:9e:6d:af:58:7a:2a:61:81:1a:60:25:a8:53:44:19
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=359a4b6c6d3713cff3636207de9839058b51815b
        Validity
            Not Before: Jan  9 08:26:30 2026 GMT
            Not After : Jan  8 08:31:30 2027 GMT
        Subject: CN=0F8FC62CFA4A5C4C1C6E5E78B0298CBAF20F25B5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:00:91:bd:1c:82:22:4b:b9:67:f1:d7:35:64:
                    3a:a0:d1:69:21:37:03:54:a4:8d:51:13:5b:ee:4f:
                    74:d6:5f:02:89:93:a4:33:ee:94:da:cb:18:f6:28:
                    b6:f0:94:84:5d:81:47:c1:a3:f4:00:8b:2a:57:2c:
                    a9:07:96:1b:26:b5:93:d3:61:90:01:bc:7e:a6:cc:
                    e5:69:7c:60:4a:10:a1:b6:67:0d:dc:82:b7:4f:e2:
                    1f:3e:cb:c3:4c:62:0a:c3:5d:a2:ca:be:17:a5:6f:
                    71:ed:2b:1b:fc:e2:ba:d0:f2:c5:1c:fc:d2:c9:87:
                    b0:19:3e:7d:e1:bc:8f:fa:76:1e:fa:15:9d:a7:f4:
                    74:95:d0:5d:74:7f:73:19:2f:5f:6d:ab:eb:2e:f1:
                    e8:a5:85:2b:cc:79:c3:c8:70:f3:d8:48:7b:ea:b7:
                    71:8f:ca:38:b4:86:5a:87:31:ea:57:fc:5b:c3:66:
                    d0:3b:90:81:0b:67:62:08:7b:20:47:50:79:e5:82:
                    03:8c:30:ce:31:69:cc:ac:ca:6a:ff:75:1d:10:e2:
                    12:f7:ed:87:f8:30:e5:18:a7:ad:fb:d0:03:ac:14:
                    bc:a6:f4:46:96:d5:04:63:dd:01:98:72:e4:f8:70:
                    16:75:f3:f9:c5:67:d0:77:59:4d:60:7b:c0:09:5e:
                    3d:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:8F:C6:2C:FA:4A:5C:4C:1C:6E:5E:78:B0:29:8C:BA:F2:0F:25:B5
            X509v3 Authority Key Identifier:
                keyid:35:9A:4B:6C:6D:37:13:CF:F3:63:62:07:DE:98:39:05:8B:51:81:5B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.rp.ki/repo/misakaio/2/359A4B6C6D3713CFF3636207DE9839058B51815B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NZpLbG03E8_zY2IH3pg5BYtRgVs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.rp.ki/repo/misakaio/2/AS997.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  93.93.244.0/22

    Signature Algorithm: sha256WithRSAEncryption
         5a:ff:4f:96:c4:77:66:63:cf:04:f6:cf:ce:38:e6:ee:05:a4:
         aa:ff:f3:42:ed:3f:03:cd:11:33:48:30:77:89:bc:b8:fe:dc:
         da:8c:16:a8:0c:76:cc:ae:3b:0a:50:d4:16:c0:61:73:5b:18:
         61:2d:61:e7:f3:89:b0:6f:b4:92:63:a8:9b:36:7c:88:ec:40:
         4a:49:18:f1:e7:f4:41:47:59:0c:24:32:af:d7:d9:ac:30:16:
         df:9d:52:bb:8e:3d:30:65:34:79:e5:54:64:8e:a4:e4:f9:11:
         50:41:9a:ec:e1:01:d3:15:78:14:71:9a:8a:fa:92:ba:d2:63:
         0f:4d:64:4b:a6:b4:6b:64:56:0c:d9:0c:f2:31:89:1a:49:9e:
         d6:bd:ce:bf:fc:92:36:52:e1:95:ad:22:ac:fb:82:54:83:92:
         fc:0d:40:e0:b1:00:6d:a6:19:96:72:af:8a:d3:a3:52:cb:ae:
         71:22:b3:2e:26:fb:26:b6:3f:7d:45:a2:8f:4a:be:46:de:43:
         ae:d3:97:48:09:f2:09:94:29:e8:a9:31:13:9b:b2:d6:68:74:
         08:73:41:1e:f0:d8:15:f6:2c:33:7f:7a:31:55:22:a7:6d:a7:
         90:70:34:c5:9b:c5:4f:0f:4f:d9:04:0b:10:6d:b9:4f:8e:5c:
         97:61:1f:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 14:07:06 2026 by rpki-client