Route Origin Authorization
$ rpki-client -vvf rsync.rp.ki/repo/misakaio/2/AS205603.roa
File: AS205603.roa (raw, json)
Hash identifier: nQxZqXnpdkQQU7e7MeQmapG50hOaKwuP65RyxZk/4uo=
Subject key identifier: 80:D5:32:1A:33:D5:B9:E6:75:9A:07:8C:2F:97:07:2B:D2:2B:B4:B6
Certificate issuer: /CN=359a4b6c6d3713cff3636207de9839058b51815b
Certificate serial: 24ABA47AE270302E34E6CE1134B076F0C6A38D3B
Authority key identifier: 35:9A:4B:6C:6D:37:13:CF:F3:63:62:07:DE:98:39:05:8B:51:81:5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NZpLbG03E8_zY2IH3pg5BYtRgVs.cer
Subject info access: rsync://rsync.rp.ki/repo/misakaio/2/AS205603.roa
Signing time: Wed 22 Oct 2025 21:31:24 +0000
ROA not before: Wed 22 Oct 2025 21:26:24 +0000
ROA not after: Wed 21 Oct 2026 21:31:24 +0000
asID: 205603
IP address blocks: 2a0b:4340:6::/48 maxlen: 48
2a0b:4340:60::/44 maxlen: 48
Validation: OK
Signature path: rsync://rsync.rp.ki/repo/misakaio/2/359A4B6C6D3713CFF3636207DE9839058B51815B.crl
rsync://rsync.rp.ki/repo/misakaio/2/359A4B6C6D3713CFF3636207DE9839058B51815B.mft
rsync://rpki.ripe.net/repository/DEFAULT/NZpLbG03E8_zY2IH3pg5BYtRgVs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Oct 2025 02:07:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
24:ab:a4:7a:e2:70:30:2e:34:e6:ce:11:34:b0:76:f0:c6:a3:8d:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=359a4b6c6d3713cff3636207de9839058b51815b
Validity
Not Before: Oct 22 21:26:24 2025 GMT
Not After : Oct 21 21:31:24 2026 GMT
Subject: CN=80D5321A33D5B9E6759A078C2F97072BD22BB4B6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:84:dd:67:cb:1d:75:7d:ff:59:6e:df:d3:ca:
26:cb:d2:e1:99:90:a2:f2:4c:69:b5:f0:22:5f:7f:
47:41:0c:35:eb:22:fb:70:50:8d:e6:61:ed:25:73:
61:fa:e8:0f:d2:e1:14:97:53:75:db:a1:e9:7c:fd:
3a:f9:c9:10:47:30:b0:8e:4a:6d:5e:66:5c:1b:33:
34:99:2c:5a:03:b1:89:bd:a6:8f:48:ed:ef:23:84:
a1:2a:bf:cb:fa:a5:fe:e1:c0:72:78:6d:82:d7:4b:
c9:0b:ac:16:11:59:e2:4d:b5:75:26:dc:a2:82:f2:
ec:41:f9:88:5d:ac:c8:ef:38:4b:a5:37:d2:b1:30:
6b:0d:06:dd:cd:0c:94:2b:dc:e2:2e:16:5f:5c:7e:
5c:ef:99:d0:e4:fe:ef:0c:90:c9:e8:d2:19:af:08:
7d:a2:fe:d7:51:97:67:06:52:d3:98:50:af:ff:fb:
f6:3a:67:6b:89:34:13:aa:f9:e1:d4:cf:8d:f6:a3:
9a:90:6f:06:47:15:45:40:73:9d:d1:49:a5:a5:96:
4a:4c:88:10:20:ef:77:ec:40:24:c5:ee:90:c2:17:
26:b4:3c:7d:57:97:79:90:be:f0:d3:06:e2:39:35:
e8:63:d8:9e:b8:24:0c:26:eb:76:27:a8:63:1f:7b:
47:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:D5:32:1A:33:D5:B9:E6:75:9A:07:8C:2F:97:07:2B:D2:2B:B4:B6
X509v3 Authority Key Identifier:
keyid:35:9A:4B:6C:6D:37:13:CF:F3:63:62:07:DE:98:39:05:8B:51:81:5B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.rp.ki/repo/misakaio/2/359A4B6C6D3713CFF3636207DE9839058B51815B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NZpLbG03E8_zY2IH3pg5BYtRgVs.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.rp.ki/repo/misakaio/2/AS205603.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0b:4340:6::/48
2a0b:4340:60::/44
Signature Algorithm: sha256WithRSAEncryption
4d:bd:ac:f7:12:31:77:35:88:c3:50:8d:17:ac:2e:43:7f:5d:
7f:7b:ec:d3:6b:d7:c0:49:cd:d9:31:64:5f:51:90:f1:0d:c1:
88:bd:a1:e9:81:f0:ea:e4:4c:5b:3d:9c:60:d1:18:a2:6f:2d:
ff:f3:a8:94:de:b0:48:5e:79:ca:b6:d6:5d:0a:46:81:c3:30:
70:e1:5b:53:2f:3b:eb:2a:bd:bb:b3:3e:d7:5b:bd:bc:4f:4e:
26:1b:7e:28:52:44:02:8b:26:39:47:68:64:8e:c7:ac:51:fe:
24:32:a0:a4:b3:03:d0:51:0a:3d:59:42:c0:95:e4:28:2d:14:
66:27:53:0e:0e:91:d2:96:38:85:9c:e7:99:b1:4c:a7:23:7c:
7e:bf:d5:c1:f9:74:1d:d9:a0:88:0f:73:fa:2f:87:98:79:92:
f7:2f:5e:ef:ef:af:51:2d:b1:8e:a7:d3:bf:5c:31:be:58:a9:
81:30:0b:3f:33:6e:5c:59:5a:d3:8b:51:10:65:b4:42:24:80:
60:cb:4c:e3:e7:0f:c1:7d:af:bd:3e:85:1f:db:d9:2e:d4:e8:
4e:a7:6c:63:3f:f3:fa:f3:63:cf:90:80:e2:a4:21:d6:4c:ed:
79:9e:59:2e:3e:74:3f:2c:a4:a7:e4:75:8e:29:d6:50:84:be:
b9:ce:e7:bf
-----BEGIN CERTIFICATE-----
MIIEqDCCA5CgAwIBAgIUJKukeuJwMC405s4RNLB28MajjTswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMzU5YTRiNmM2ZDM3MTNjZmYzNjM2MjA3ZGU5ODM5MDU4
YjUxODE1YjAeFw0yNTEwMjIyMTI2MjRaFw0yNjEwMjEyMTMxMjRaMDMxMTAvBgNV
BAMTKDgwRDUzMjFBMzNENUI5RTY3NTlBMDc4QzJGOTcwNzJCRDIyQkI0QjYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCghN1nyx11ff9Zbt/TyibL0uGZ
kKLyTGm18CJff0dBDDXrIvtwUI3mYe0lc2H66A/S4RSXU3Xboel8/Tr5yRBHMLCO
Sm1eZlwbMzSZLFoDsYm9po9I7e8jhKEqv8v6pf7hwHJ4bYLXS8kLrBYRWeJNtXUm
3KKC8uxB+YhdrMjvOEulN9KxMGsNBt3NDJQr3OIuFl9cflzvmdDk/u8MkMno0hmv
CH2i/tdRl2cGUtOYUK//+/Y6Z2uJNBOq+eHUz432o5qQbwZHFUVAc53RSaWllkpM
iBAg73fsQCTF7pDCFya0PH1Xl3mQvvDTBuI5Nehj2J64JAwm63YnqGMfe0elAgMB
AAGjggGyMIIBrjAdBgNVHQ4EFgQUgNUyGjPVueZ1mgeML5cHK9IrtLYwHwYDVR0j
BBgwFoAUNZpLbG03E8/zY2IH3pg5BYtRgVswDgYDVR0PAQH/BAQDAgeAMGEGA1Ud
HwRaMFgwVqBUoFKGUHJzeW5jOi8vcnN5bmMucnAua2kvcmVwby9taXNha2Fpby8y
LzM1OUE0QjZDNkQzNzEzQ0ZGMzYzNjIwN0RFOTgzOTA1OEI1MTgxNUIuY3JsMGQG
CCsGAQUFBwEBBFgwVjBUBggrBgEFBQcwAoZIcnN5bmM6Ly9ycGtpLnJpcGUubmV0
L3JlcG9zaXRvcnkvREVGQVVMVC9OWnBMYkcwM0U4X3pZMklIM3BnNUJZdFJnVnMu
Y2VyMEwGCCsGAQUFBwELBEAwPjA8BggrBgEFBQcwC4YwcnN5bmM6Ly9yc3luYy5y
cC5raS9yZXBvL21pc2FrYWlvLzIvQVMyMDU2MDMucm9hMBgGA1UdIAEB/wQOMAww
CgYIKwYBBQUHDgIwKwYIKwYBBQUHAQcBAf8EHDAaMBgEAgACMBIDBwAqC0NAAAYD
BwQqC0NAAGAwDQYJKoZIhvcNAQELBQADggEBAE29rPcSMXc1iMNQjResLkN/XX97
7NNr18BJzdkxZF9RkPENwYi9oemB8OrkTFs9nGDRGKJvLf/zqJTesEheecq21l0K
RoHDMHDhW1MvO+sqvbuzPtdbvbxPTiYbfihSRAKLJjlHaGSOx6xR/iQyoKSzA9BR
Cj1ZQsCV5CgtFGYnUw4OkdKWOIWc55mxTKcjfH6/1cH5dB3ZoIgPc/ovh5h5kvcv
Xu/vr1EtsY6n079cMb5YqYEwCz8zblxZWtOLURBltEIkgGDLTOPnD8F9r70+hR/b
2S7U6E6nbGM/8/rzY8+QgOKkIdZM7XmeWS4+dD8spKfkdY4p1lCEvrnO578=
-----END CERTIFICATE-----
Generated at Thu Oct 23 13:06:06 2025 by rpki-client