Route Origin Authorization
$ rpki-client -vvf rsync.rp.ki/repo/misakaio/2/AS205610.roa
File: AS205610.roa (raw, json)
Hash identifier: 8k4+G3P8f7IZw6fGDZl6qQ1hKcnRuZ6wCyzNemlakVE=
Subject key identifier: 8A:73:55:7F:CA:C8:C9:DB:AE:16:A9:8D:DE:9D:2E:9D:F3:A1:8E:CB
Certificate issuer: /CN=359a4b6c6d3713cff3636207de9839058b51815b
Certificate serial: 6EED7E1D7E333ADB1B20E26003CE138D6BF1151A
Authority key identifier: 35:9A:4B:6C:6D:37:13:CF:F3:63:62:07:DE:98:39:05:8B:51:81:5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NZpLbG03E8_zY2IH3pg5BYtRgVs.cer
Subject info access: rsync://rsync.rp.ki/repo/misakaio/2/AS205610.roa
Signing time: Wed 22 Oct 2025 21:31:19 +0000
ROA not before: Wed 22 Oct 2025 21:26:19 +0000
ROA not after: Wed 21 Oct 2026 21:31:19 +0000
asID: 205610
IP address blocks: 2a0b:4340:90::/44 maxlen: 48
Validation: OK
Signature path: rsync://rsync.rp.ki/repo/misakaio/2/359A4B6C6D3713CFF3636207DE9839058B51815B.crl
rsync://rsync.rp.ki/repo/misakaio/2/359A4B6C6D3713CFF3636207DE9839058B51815B.mft
rsync://rpki.ripe.net/repository/DEFAULT/NZpLbG03E8_zY2IH3pg5BYtRgVs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 22:37:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6e:ed:7e:1d:7e:33:3a:db:1b:20:e2:60:03:ce:13:8d:6b:f1:15:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=359a4b6c6d3713cff3636207de9839058b51815b
Validity
Not Before: Oct 22 21:26:19 2025 GMT
Not After : Oct 21 21:31:19 2026 GMT
Subject: CN=8A73557FCAC8C9DBAE16A98DDE9D2E9DF3A18ECB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:72:49:a0:80:48:6c:5b:d5:4c:3a:01:17:ea:
38:be:2b:29:cf:b5:67:20:15:e8:dc:75:85:76:ef:
ef:c1:7e:6d:a2:48:8b:a5:3b:4b:98:d7:12:0c:b5:
32:d3:54:95:4b:d6:21:59:c7:b7:23:f9:6d:7a:51:
e3:aa:ef:61:ca:25:c0:8a:78:f2:e6:d5:f7:ff:d2:
fc:cb:1d:a1:ee:02:73:23:7e:2f:b6:b4:47:69:29:
16:05:75:a1:32:ea:26:d2:77:79:3d:e3:7c:80:db:
8d:92:cd:8e:ab:47:62:92:b4:7d:d1:06:36:c9:e0:
94:d4:3e:cc:5c:25:5a:9b:f3:b1:51:5a:10:44:e8:
ac:98:82:c5:d5:7b:bc:b8:0b:83:75:55:24:ab:5c:
75:1d:cd:78:6b:64:08:66:15:34:cc:35:d0:e4:07:
12:de:51:dc:18:7d:c3:65:43:d0:62:93:e8:67:de:
7f:0e:7d:8c:5b:b4:ab:98:c0:ab:cb:d2:78:35:45:
f2:c2:12:57:4c:cb:33:40:01:78:68:f6:6b:e7:33:
2c:b0:0d:3c:0e:5e:db:dd:23:65:68:af:b7:2a:d8:
27:99:03:ce:6a:68:0c:cc:73:37:32:06:08:f0:0d:
35:a2:78:68:00:af:b1:c5:f1:24:0b:fc:08:28:47:
21:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:73:55:7F:CA:C8:C9:DB:AE:16:A9:8D:DE:9D:2E:9D:F3:A1:8E:CB
X509v3 Authority Key Identifier:
keyid:35:9A:4B:6C:6D:37:13:CF:F3:63:62:07:DE:98:39:05:8B:51:81:5B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.rp.ki/repo/misakaio/2/359A4B6C6D3713CFF3636207DE9839058B51815B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NZpLbG03E8_zY2IH3pg5BYtRgVs.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.rp.ki/repo/misakaio/2/AS205610.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0b:4340:90::/44
Signature Algorithm: sha256WithRSAEncryption
5e:56:97:ea:f2:8f:ad:bc:fb:72:b0:e0:cd:a8:02:00:41:de:
e8:a0:f1:a7:b0:92:e4:5f:7a:76:98:97:c7:5c:a0:c2:49:2f:
0e:47:ff:b2:2d:9a:fc:39:1e:e3:8f:a9:f0:18:c3:1f:b9:c7:
16:63:a7:b4:a1:a6:82:73:49:01:c3:95:30:0b:08:f5:3b:2c:
17:81:fb:70:c1:8e:1d:8b:ed:97:47:a6:c9:4f:b1:c0:68:1e:
71:9e:67:3f:1d:0a:5c:c2:92:98:5b:73:7a:73:f1:85:26:66:
61:36:aa:5d:85:17:03:da:1b:3d:d5:81:b6:31:e9:57:47:97:
e8:9a:c7:12:b8:de:44:10:9f:c4:cc:92:88:77:fd:46:55:76:
2d:f6:00:b5:8d:65:14:bc:11:a5:7e:8c:db:fb:47:46:02:f9:
73:05:1a:ab:10:d1:60:bc:46:d5:99:da:d0:b5:8d:de:96:af:
2a:07:f1:33:43:97:40:58:a5:30:d9:a9:f5:d1:2a:56:9e:11:
96:2b:2a:35:d1:db:86:fc:6a:87:3c:45:6a:0e:dd:66:69:d7:
82:eb:ef:96:1f:b9:50:7c:99:a1:67:b7:9e:06:46:2d:f4:b1:
91:ee:1a:20:7a:89:b0:ce:29:2f:74:6d:05:c5:e5:f2:3d:c1:
75:27:71:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 06:50:50 2025 by rpki-client