Route Origin Authorization
$ rpki-client -vvf rsync.rp.ki/repo/misakaio/2/AS35487.roa
File: AS35487.roa (raw, json)
Hash identifier: JEHUogqChehtjFpRSt8pG+piaZDPskCDbQBUETTb9nI=
Subject key identifier: 39:E3:C4:73:02:6C:42:C8:2C:4D:54:33:38:61:BC:CF:5B:2D:86:D1
Certificate issuer: /CN=359a4b6c6d3713cff3636207de9839058b51815b
Certificate serial: 285A500E286333597FBDC7055BC95EE78DC506F3
Authority key identifier: 35:9A:4B:6C:6D:37:13:CF:F3:63:62:07:DE:98:39:05:8B:51:81:5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NZpLbG03E8_zY2IH3pg5BYtRgVs.cer
Subject info access: rsync://rsync.rp.ki/repo/misakaio/2/AS35487.roa
Signing time: Sat 21 Feb 2026 14:38:20 +0000
ROA not before: Sat 21 Feb 2026 14:33:20 +0000
ROA not after: Sat 20 Feb 2027 14:38:20 +0000
asID: 35487
IP address blocks: 45.131.68.0/22 maxlen: 24
45.142.247.0/24 maxlen: 24
45.150.240.0/23 maxlen: 24
45.150.243.0/24 maxlen: 24
146.19.3.0/24 maxlen: 24
194.156.154.0/24 maxlen: 24
2a0b:4341::/32 maxlen: 48
2a0b:4342:1a90::/44 maxlen: 48
2a0d:5641:1a00::/40 maxlen: 48
2a0d:5642::/32 maxlen: 48
2a0f:3b05:100::/44 maxlen: 44
2a12:1701::/32 maxlen: 48
2a12:8d02::/32 maxlen: 48
Validation: OK
Signature path: rsync://rsync.rp.ki/repo/misakaio/2/359A4B6C6D3713CFF3636207DE9839058B51815B.crl
rsync://rsync.rp.ki/repo/misakaio/2/359A4B6C6D3713CFF3636207DE9839058B51815B.mft
rsync://rpki.ripe.net/repository/DEFAULT/NZpLbG03E8_zY2IH3pg5BYtRgVs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
28:5a:50:0e:28:63:33:59:7f:bd:c7:05:5b:c9:5e:e7:8d:c5:06:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=359a4b6c6d3713cff3636207de9839058b51815b
Validity
Not Before: Feb 21 14:33:20 2026 GMT
Not After : Feb 20 14:38:20 2027 GMT
Subject: CN=39E3C473026C42C82C4D54333861BCCF5B2D86D1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:9f:d6:95:36:00:63:b5:93:36:8a:d0:da:3a:
09:ce:eb:8e:42:9b:d0:81:ed:c9:ef:2f:96:04:a1:
9a:ef:6a:20:d1:23:f0:15:79:0a:24:49:73:30:03:
41:70:a3:83:3c:3f:c0:12:f3:98:c4:b2:64:0d:57:
2b:2f:cf:18:e3:71:b3:31:7e:4e:f2:b2:82:2d:52:
2f:ee:85:7d:6a:2e:fb:7a:e7:a8:00:fe:cf:3d:eb:
76:34:8d:3d:c9:f0:8a:ac:bd:db:06:cd:41:e2:70:
72:32:69:5e:e1:81:7b:d1:91:33:e6:bc:22:1b:dd:
c8:9d:71:61:1c:9a:07:d0:37:c7:b9:40:05:7b:08:
19:68:a1:78:57:31:a1:0a:be:1c:c1:03:63:e9:00:
27:ff:8d:a5:5b:96:91:b1:03:b1:6e:21:de:03:88:
d7:f6:9a:67:6d:ec:6b:7c:97:19:e6:44:c0:5a:8b:
9a:17:51:46:6e:a4:c3:45:2c:f7:3e:41:49:79:a9:
f5:41:ef:d0:b2:81:ff:7c:94:61:66:17:dd:2f:0b:
c1:3d:dd:bc:e1:a1:f9:58:8a:b4:af:e8:08:a6:6f:
8a:24:7b:be:cf:ee:c7:bc:b7:87:d1:dd:c2:16:ee:
75:6c:44:e8:fc:45:c1:cd:a7:58:28:1c:40:b6:16:
65:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:E3:C4:73:02:6C:42:C8:2C:4D:54:33:38:61:BC:CF:5B:2D:86:D1
X509v3 Authority Key Identifier:
keyid:35:9A:4B:6C:6D:37:13:CF:F3:63:62:07:DE:98:39:05:8B:51:81:5B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.rp.ki/repo/misakaio/2/359A4B6C6D3713CFF3636207DE9839058B51815B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NZpLbG03E8_zY2IH3pg5BYtRgVs.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.rp.ki/repo/misakaio/2/AS35487.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.131.68.0/22
45.142.247.0/24
45.150.240.0/23
45.150.243.0/24
146.19.3.0/24
194.156.154.0/24
IPv6:
2a0b:4341::/32
2a0b:4342:1a90::/44
2a0d:5641:1a00::/40
2a0d:5642::/32
2a0f:3b05:100::/44
2a12:1701::/32
2a12:8d02::/32
Signature Algorithm: sha256WithRSAEncryption
c6:3a:74:fc:fa:1c:be:a6:8e:2a:38:dc:5a:b4:4b:cd:33:62:
b8:02:b2:ae:f9:02:16:83:8a:1b:de:b3:16:40:df:f8:a6:78:
8d:4b:39:56:aa:3e:b0:74:d2:c0:8b:b3:8d:c4:d6:02:14:46:
b1:df:f2:3c:77:59:28:fa:89:83:0b:2d:71:46:4d:44:b7:5f:
b0:9a:11:27:09:c6:e1:bc:11:b0:dd:da:cb:37:25:00:0b:6a:
31:29:16:26:1e:24:c1:6b:f7:2f:26:e1:c0:0f:10:a8:32:b7:
e0:4e:3e:c9:43:85:f0:30:47:6a:fc:e9:72:84:23:0d:5e:99:
fc:4f:69:21:c8:4f:69:37:71:55:03:c5:fa:7c:48:59:ab:7f:
68:b5:a3:f7:53:24:7a:cb:d7:1c:9b:df:e4:6a:b5:40:65:b1:
39:2c:42:74:82:a6:5a:3e:44:3b:1d:42:19:ea:eb:b5:0b:66:
09:c6:f4:4f:e9:3b:bf:11:df:42:18:b7:8b:41:c1:cc:3b:33:
7d:fb:6c:58:1b:6d:80:91:41:0e:49:88:c2:c3:0a:6c:86:77:
34:33:20:2a:65:b8:15:11:91:cd:d2:60:fb:60:dc:3f:c9:49:
70:4b:b4:58:9b:fb:ce:3c:69:fb:00:57:fa:de:e3:1f:c6:69:
20:dd:f2:e6
-----BEGIN CERTIFICATE-----
MIIE9zCCA9+gAwIBAgIUKFpQDihjM1l/vccFW8le543FBvMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMzU5YTRiNmM2ZDM3MTNjZmYzNjM2MjA3ZGU5ODM5MDU4
YjUxODE1YjAeFw0yNjAyMjExNDMzMjBaFw0yNzAyMjAxNDM4MjBaMDMxMTAvBgNV
BAMTKDM5RTNDNDczMDI2QzQyQzgyQzRENTQzMzM4NjFCQ0NGNUIyRDg2RDEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7n9aVNgBjtZM2itDaOgnO645C
m9CB7cnvL5YEoZrvaiDRI/AVeQokSXMwA0Fwo4M8P8AS85jEsmQNVysvzxjjcbMx
fk7ysoItUi/uhX1qLvt656gA/s8963Y0jT3J8IqsvdsGzUHicHIyaV7hgXvRkTPm
vCIb3cidcWEcmgfQN8e5QAV7CBlooXhXMaEKvhzBA2PpACf/jaVblpGxA7FuId4D
iNf2mmdt7Gt8lxnmRMBai5oXUUZupMNFLPc+QUl5qfVB79Cygf98lGFmF90vC8E9
3bzhoflYirSv6Aimb4oke77P7se8t4fR3cIW7nVsROj8RcHNp1goHEC2FmUrAgMB
AAGjggIBMIIB/TAdBgNVHQ4EFgQUOePEcwJsQsgsTVQzOGG8z1sthtEwHwYDVR0j
BBgwFoAUNZpLbG03E8/zY2IH3pg5BYtRgVswDgYDVR0PAQH/BAQDAgeAMGEGA1Ud
HwRaMFgwVqBUoFKGUHJzeW5jOi8vcnN5bmMucnAua2kvcmVwby9taXNha2Fpby8y
LzM1OUE0QjZDNkQzNzEzQ0ZGMzYzNjIwN0RFOTgzOTA1OEI1MTgxNUIuY3JsMGQG
CCsGAQUFBwEBBFgwVjBUBggrBgEFBQcwAoZIcnN5bmM6Ly9ycGtpLnJpcGUubmV0
L3JlcG9zaXRvcnkvREVGQVVMVC9OWnBMYkcwM0U4X3pZMklIM3BnNUJZdFJnVnMu
Y2VyMEsGCCsGAQUFBwELBD8wPTA7BggrBgEFBQcwC4YvcnN5bmM6Ly9yc3luYy5y
cC5raS9yZXBvL21pc2FrYWlvLzIvQVMzNTQ4Ny5yb2EwGAYDVR0gAQH/BA4wDDAK
BggrBgEFBQcOAjB7BggrBgEFBQcBBwEB/wRsMGowKgQCAAEwJAMEAi2DRAMEAC2O
9wMEAS2W8AMEAC2W8wMEAJITAwMEAMKcmjA8BAIAAjA2AwUAKgtDQQMHBCoLQ0Ia
kAMGACoNVkEaAwUAKg1WQgMHBCoPOwUBAAMFACoSFwEDBQAqEo0CMA0GCSqGSIb3
DQEBCwUAA4IBAQDGOnT8+hy+po4qONxatEvNM2K4ArKu+QIWg4ob3rMWQN/4pniN
SzlWqj6wdNLAi7ONxNYCFEax3/I8d1ko+omDCy1xRk1Et1+wmhEnCcbhvBGw3drL
NyUAC2oxKRYmHiTBa/cvJuHADxCoMrfgTj7JQ4XwMEdq/OlyhCMNXpn8T2khyE9p
N3FVA8X6fEhZq39otaP3UyR6y9ccm9/karVAZbE5LEJ0gqZaPkQ7HUIZ6uu1C2YJ
xvRP6Tu/Ed9CGLeLQcHMOzN9+2xYG22AkUEOSYjCwwpshnc0MyAqZbgVEZHN0mD7
YNw/yUlwS7RYm/vOPGn7AFf63uMfxmkg3fLm
-----END CERTIFICATE-----
Generated at Sun Mar 1 23:33:53 2026 by rpki-client