Route Origin Authorization

$ rpki-client -vvvf rsync.rp.ki/repo/misakaio/2/AS204185.roa
File:                     AS204185.roa (raw, json)
Hash identifier:          14EpJHmv5tphdBfuNnbk8oFlM5wQ2ApOE4JlYyamhTM=
Subject key identifier:   64:1D:D7:58:F7:63:7A:6F:E8:81:AD:46:93:4E:54:30:18:FD:12:3F
Certificate issuer:       /CN=359a4b6c6d3713cff3636207de9839058b51815b
Certificate serial:       510E00D363FFA3A5E431D2D0D7899FA690F86FE8
Authority key identifier: 35:9A:4B:6C:6D:37:13:CF:F3:63:62:07:DE:98:39:05:8B:51:81:5B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/NZpLbG03E8_zY2IH3pg5BYtRgVs.cer
Subject info access:      rsync://rsync.rp.ki/repo/misakaio/2/AS204185.roa
Signing time:             Wed 23 Sep 2026 21:48:08 +0000
ROA not before:           Wed 23 Sep 2026 21:43:08 +0000
ROA not after:            Wed 22 Sep 2027 21:48:08 +0000
asID:                     204185
IP address blocks:        2a0b:4340:400::/40 maxlen: 48
                          2a0d:2902:caf0::/44 maxlen: 48
Validation:               OK
Signature path:           rsync://rsync.rp.ki/repo/misakaio/2/359A4B6C6D3713CFF3636207DE9839058B51815B.crl
                          rsync://rsync.rp.ki/repo/misakaio/2/359A4B6C6D3713CFF3636207DE9839058B51815B.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/NZpLbG03E8_zY2IH3pg5BYtRgVs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 08 Oct 2026 22:00:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            51:0e:00:d3:63:ff:a3:a5:e4:31:d2:d0:d7:89:9f:a6:90:f8:6f:e8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=359a4b6c6d3713cff3636207de9839058b51815b
        Validity
            Not Before: Sep 23 21:43:08 2026 GMT
            Not After : Sep 22 21:48:08 2027 GMT
        Subject: CN=641DD758F7637A6FE881AD46934E543018FD123F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:91:b9:c5:07:89:d4:e8:82:d4:aa:af:c6:a6:
                    a1:64:b7:ba:64:44:d4:ad:ef:e4:ab:b7:4d:a9:5e:
                    00:20:80:3b:ee:c9:dc:1f:ea:9f:70:49:d5:47:5a:
                    4b:c5:ee:8b:18:ef:30:99:31:45:ab:33:ec:ea:f5:
                    7f:f3:2c:f4:00:43:ca:47:78:f8:c8:08:87:87:6c:
                    05:bb:d9:7d:b6:f4:58:ed:5e:d5:89:09:a7:0a:aa:
                    20:13:57:4b:7c:68:69:e1:ea:76:13:e7:fc:fa:ec:
                    95:89:3c:05:76:d3:3d:81:0e:e6:2f:2a:1d:e4:25:
                    b6:6d:b2:36:8b:24:74:c2:2c:23:4b:13:fa:9e:c4:
                    d2:8c:c0:68:8f:fa:55:67:2a:66:b4:82:31:d0:61:
                    44:db:f3:4a:81:00:fb:cb:12:d2:19:8f:39:08:8a:
                    9a:31:57:9d:b7:91:7d:33:c1:71:45:46:c6:0f:9f:
                    88:db:8c:87:e1:48:9d:27:f8:df:77:1b:2e:ab:8d:
                    ee:e7:92:da:47:6b:49:04:98:8e:74:be:26:02:53:
                    02:c9:1e:21:cb:27:b9:de:4d:59:af:08:fd:52:4b:
                    b2:ee:68:45:8d:54:dd:be:fd:03:06:2b:be:f6:e3:
                    4d:a9:0c:31:d5:e1:40:9c:b1:7a:d7:28:53:2d:3d:
                    21:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:1D:D7:58:F7:63:7A:6F:E8:81:AD:46:93:4E:54:30:18:FD:12:3F
            X509v3 Authority Key Identifier:
                keyid:35:9A:4B:6C:6D:37:13:CF:F3:63:62:07:DE:98:39:05:8B:51:81:5B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.rp.ki/repo/misakaio/2/359A4B6C6D3713CFF3636207DE9839058B51815B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NZpLbG03E8_zY2IH3pg5BYtRgVs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.rp.ki/repo/misakaio/2/AS204185.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0b:4340:400::/40
                  2a0d:2902:caf0::/44

    Signature Algorithm: sha256WithRSAEncryption
         62:5d:64:0e:e2:29:48:3d:9e:85:4e:8a:ed:81:b4:fd:5c:07:
         26:cd:46:0f:af:51:1f:9d:2c:26:6f:88:6c:fc:ca:5f:4c:3f:
         86:d0:62:25:8b:2a:02:65:80:6e:71:85:93:23:88:d8:41:5a:
         e5:97:d1:02:3a:c1:8f:86:4a:22:ac:8c:de:fc:6e:c3:44:8d:
         4d:5b:a2:86:0f:77:75:0f:23:16:75:33:16:2e:c6:b7:ab:7a:
         37:25:04:54:19:23:36:a9:2f:dc:b7:73:3d:a9:1a:2e:60:0f:
         0b:fd:9b:f0:93:55:fe:0f:9f:4c:f0:d5:d3:a2:67:1a:dd:cb:
         91:1a:e4:74:ee:90:93:7a:5b:cc:96:50:82:ee:08:66:c0:34:
         12:25:0b:1f:2f:16:5f:17:f2:d5:fd:cb:09:12:fe:90:f3:12:
         a4:5e:37:0e:b5:bd:6b:5a:65:a8:41:da:13:26:3c:fb:c5:04:
         76:03:c7:7e:7b:ab:bc:f8:08:e9:87:36:37:79:64:66:20:8c:
         5e:7e:e2:be:91:83:56:c3:dc:e6:59:20:82:e4:eb:ea:73:37:
         f2:1a:04:b7:68:7b:c6:0e:d1:b3:18:5c:7a:1d:47:9d:89:13:
         35:33:b2:3e:11:32:1a:63:da:42:c3:8f:0a:1d:72:23:a5:eb:
         98:10:20:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 07:48:59 2026 by rpki-client