Route Origin Authorization
$ rpki-client -vvf rsync.rp.ki/repo/misakaio/2/AS207193.roa
File: AS207193.roa (raw, json)
Hash identifier: V2l4dU1NUxuXRVHB6O279jjBJJKZj67VmRn27gr3fcQ=
Subject key identifier: 69:2A:E5:CA:37:2F:65:15:8A:50:BC:83:4A:E1:B4:A7:7F:A3:0C:1A
Certificate issuer: /CN=359a4b6c6d3713cff3636207de9839058b51815b
Certificate serial: 6DE893848D7ECB5C87EF317A2A27006E1795D977
Authority key identifier: 35:9A:4B:6C:6D:37:13:CF:F3:63:62:07:DE:98:39:05:8B:51:81:5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NZpLbG03E8_zY2IH3pg5BYtRgVs.cer
Subject info access: rsync://rsync.rp.ki/repo/misakaio/2/AS207193.roa
Signing time: Sun 12 Apr 2026 19:31:35 +0000
ROA not before: Sun 12 Apr 2026 19:26:35 +0000
ROA not after: Sun 11 Apr 2027 19:31:35 +0000
asID: 207193
IP address blocks: 188.244.96.0/24 maxlen: 24
188.244.97.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.rp.ki/repo/misakaio/2/359A4B6C6D3713CFF3636207DE9839058B51815B.crl
rsync://rsync.rp.ki/repo/misakaio/2/359A4B6C6D3713CFF3636207DE9839058B51815B.mft
rsync://rpki.ripe.net/repository/DEFAULT/NZpLbG03E8_zY2IH3pg5BYtRgVs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6d:e8:93:84:8d:7e:cb:5c:87:ef:31:7a:2a:27:00:6e:17:95:d9:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=359a4b6c6d3713cff3636207de9839058b51815b
Validity
Not Before: Apr 12 19:26:35 2026 GMT
Not After : Apr 11 19:31:35 2027 GMT
Subject: CN=692AE5CA372F65158A50BC834AE1B4A77FA30C1A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:b3:18:3d:4d:89:4b:df:6a:51:38:61:c2:7f:
39:ed:95:c5:dc:f6:8e:a6:ef:e0:59:3c:b5:ad:18:
9b:b2:0b:f8:0c:48:3d:66:bd:69:f0:8c:71:f1:7c:
be:36:ed:ca:fc:f6:d7:24:57:ef:a4:9d:70:6e:38:
b1:08:35:2f:ea:00:dc:80:bd:6b:f1:56:d1:f1:e4:
02:59:6a:31:5e:9e:21:95:84:dc:aa:a5:4b:27:6b:
5e:6d:43:d0:c5:31:f9:d7:55:a9:90:32:a9:58:f3:
e3:02:27:27:19:62:41:cf:43:23:7b:5d:7f:65:81:
d9:ca:69:5e:ef:88:0f:70:7d:26:3c:14:2d:80:e6:
51:0f:dc:1e:f4:dc:90:d0:eb:e1:dc:bb:15:34:48:
a7:fb:26:9c:5c:b3:e7:32:05:c0:6b:17:95:e9:50:
57:42:de:b7:82:15:78:28:47:37:d6:ff:76:19:20:
c7:6d:b4:86:d0:54:ed:25:c7:d7:8d:0c:7b:48:37:
b5:06:c4:88:8f:38:e2:0b:51:cb:a0:ea:4f:fa:84:
69:65:3b:0a:80:79:1e:d8:a7:0c:7d:ef:1f:cb:c0:
0f:f6:8e:00:9b:db:c0:2d:00:e5:17:1e:de:07:b3:
f8:f8:13:85:e7:0c:de:80:7a:8b:86:79:b1:db:f8:
1c:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:2A:E5:CA:37:2F:65:15:8A:50:BC:83:4A:E1:B4:A7:7F:A3:0C:1A
X509v3 Authority Key Identifier:
keyid:35:9A:4B:6C:6D:37:13:CF:F3:63:62:07:DE:98:39:05:8B:51:81:5B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.rp.ki/repo/misakaio/2/359A4B6C6D3713CFF3636207DE9839058B51815B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NZpLbG03E8_zY2IH3pg5BYtRgVs.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.rp.ki/repo/misakaio/2/AS207193.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.244.96.0/23
Signature Algorithm: sha256WithRSAEncryption
3d:d6:9f:fe:0d:60:f0:69:08:23:4a:94:ca:80:fc:de:79:57:
05:28:39:44:1c:45:0c:ab:8b:62:53:ee:80:46:f9:e5:ca:39:
28:b6:63:b6:25:14:d9:7d:c7:9a:92:d7:1f:e7:54:50:dd:83:
70:e5:be:aa:71:59:7b:e5:d2:46:01:34:1b:cc:cc:dc:8b:56:
d5:f6:41:13:f0:a1:06:6f:6a:e1:17:12:2e:d3:21:c2:41:61:
b5:1f:21:b0:fa:c3:15:7b:fa:59:20:20:e6:96:de:25:93:16:
28:a3:ef:ca:b7:91:be:62:3d:e4:91:85:ad:66:77:a2:3d:14:
27:49:3b:ea:5d:68:5b:e9:31:ad:92:e0:c0:19:a3:73:e9:35:
fb:49:ba:a8:07:2c:8a:a7:a6:bd:07:cc:b8:e6:0a:bc:cb:90:
88:5b:9a:be:5a:e4:8d:64:41:b2:3c:7d:bc:52:30:e5:02:36:
a2:79:ae:ad:db:2b:dd:8b:4d:21:a9:c7:64:8a:1e:e7:bc:b2:
10:53:3f:7c:34:5b:bb:e1:c7:19:23:53:0e:2a:91:29:a0:36:
d4:ff:f1:ca:a0:95:73:70:9e:02:45:db:f7:0d:24:90:b8:88:
6b:2c:a4:2a:ee:2d:92:bd:3d:37:a6:c9:16:3a:a3:69:39:3b:
45:9e:d8:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 17:04:53 2026 by rpki-client