Route Origin Authorization
$ rpki-client -vvvf rsync.rp.ki/repo/misakaio/2/AS0.roa
File: AS0.roa (raw, json)
Hash identifier: wToHvUW6Ox6vRwBksqtwqb3L8ZKeNUjcXuUJpWDM+eE=
Subject key identifier: 8D:95:56:33:D6:A9:3C:BD:70:6D:BB:8B:77:38:52:C7:E2:E6:1D:1B
Certificate issuer: /CN=359a4b6c6d3713cff3636207de9839058b51815b
Certificate serial: 180A1DC270190C4214FAEDBD98EC45B46BD8E877
Authority key identifier: 35:9A:4B:6C:6D:37:13:CF:F3:63:62:07:DE:98:39:05:8B:51:81:5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NZpLbG03E8_zY2IH3pg5BYtRgVs.cer
Subject info access: rsync://rsync.rp.ki/repo/misakaio/2/AS0.roa
Signing time: Sat 10 Oct 2026 23:48:11 +0000
ROA not before: Sat 10 Oct 2026 23:43:11 +0000
ROA not after: Sat 09 Oct 2027 23:48:11 +0000
asID: 0
IP address blocks: 2a0e:6906:aaaa::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.rp.ki/repo/misakaio/2/359A4B6C6D3713CFF3636207DE9839058B51815B.crl
rsync://rsync.rp.ki/repo/misakaio/2/359A4B6C6D3713CFF3636207DE9839058B51815B.mft
rsync://rpki.ripe.net/repository/DEFAULT/NZpLbG03E8_zY2IH3pg5BYtRgVs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 05 Nov 2026 11:39:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
18:0a:1d:c2:70:19:0c:42:14:fa:ed:bd:98:ec:45:b4:6b:d8:e8:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=359a4b6c6d3713cff3636207de9839058b51815b
Validity
Not Before: Oct 10 23:43:11 2026 GMT
Not After : Oct 9 23:48:11 2027 GMT
Subject: CN=8D955633D6A93CBD706DBB8B773852C7E2E61D1B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:27:40:a9:92:4f:3f:2e:73:f4:50:85:92:1c:
98:08:e3:b6:11:e6:10:7a:d5:0d:05:4e:3f:f8:c7:
cb:dc:c5:85:5b:b4:bc:61:37:57:a1:2d:a3:9e:3e:
22:62:2d:8c:8d:58:ee:0d:cd:9d:03:13:05:7e:e2:
a0:9f:17:ff:38:08:8a:6d:3d:5b:fb:b0:c0:0a:76:
dd:d6:7f:80:d1:c2:ca:a3:85:9a:65:f8:d5:56:bb:
ca:a9:71:36:1e:9f:ed:85:a2:78:fb:7c:15:89:1a:
ea:42:53:e7:d9:6b:39:ce:10:74:7e:1d:28:f4:e5:
dc:a5:e1:c0:a9:63:5b:03:e6:62:93:26:dc:97:7f:
a0:c7:f0:34:0d:bb:20:fb:47:6b:1e:d0:ed:07:97:
64:c4:90:38:0d:0f:4a:d9:50:f3:2a:21:0f:d0:c2:
4c:e3:db:3e:2a:0b:c3:4d:c3:bb:80:de:64:a4:77:
37:b5:9c:96:6f:8e:02:41:88:92:98:b6:fc:4d:19:
73:79:3a:7e:f2:40:09:fb:41:6c:20:db:63:a7:b2:
31:8d:3f:32:47:5d:b5:db:af:4f:55:e7:d6:22:fa:
85:49:95:fd:47:1f:f4:6f:da:a3:5d:44:9a:b0:bc:
46:b3:63:1d:d7:e4:b4:91:38:ab:ac:fd:fc:85:19:
75:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:95:56:33:D6:A9:3C:BD:70:6D:BB:8B:77:38:52:C7:E2:E6:1D:1B
X509v3 Authority Key Identifier:
keyid:35:9A:4B:6C:6D:37:13:CF:F3:63:62:07:DE:98:39:05:8B:51:81:5B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.rp.ki/repo/misakaio/2/359A4B6C6D3713CFF3636207DE9839058B51815B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NZpLbG03E8_zY2IH3pg5BYtRgVs.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.rp.ki/repo/misakaio/2/AS0.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:6906:aaaa::/48
Signature Algorithm: sha256WithRSAEncryption
7f:d4:0b:e9:a6:b8:75:8d:86:35:0f:23:cb:df:ad:30:70:fd:
44:bd:a0:10:5b:00:df:25:e5:b7:e9:92:49:d9:30:4c:d5:1e:
4d:d5:14:c7:bc:54:b3:89:07:22:36:7e:f5:eb:93:22:44:1c:
15:b4:b7:00:80:06:36:dd:2e:29:01:8b:e7:8e:ad:39:39:2f:
92:57:34:2b:6b:62:f1:69:0f:40:62:6b:fb:cf:9d:3c:e5:50:
da:90:a6:de:bf:5a:38:ba:b3:8b:b6:18:95:97:eb:ef:00:0f:
bc:97:c8:b2:9b:b3:d5:9d:00:37:70:28:46:3e:ed:f9:67:aa:
10:ef:d0:c0:e6:94:bc:f5:ba:b6:b4:a7:2b:55:4d:4b:84:2f:
df:9f:f1:c2:6c:16:9b:a0:7f:2a:52:da:dc:a1:c3:a0:22:db:
90:63:fd:e8:1a:a0:e8:a0:da:a5:c9:fe:2e:6d:64:a3:0a:f5:
50:14:ff:e0:1f:c7:0d:be:55:48:c9:e8:57:c2:e8:31:52:42:
c5:75:b7:ef:81:53:8d:63:d0:71:6e:9e:5b:26:13:d9:13:ae:
10:65:58:ea:53:8d:ad:47:89:b5:7a:7f:67:fa:97:e3:1a:d7:
72:4d:8a:20:bc:ce:35:a0:58:38:51:25:dd:45:1a:bd:14:79:
63:df:5b:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 5 03:37:10 2026 by rpki-client