Route Origin Authorization
$ rpki-client -vvf rsync.rp.ki/repo/misakaio/2/AS41979.roa
File: AS41979.roa (raw, json)
Hash identifier: 1tXx+h6PTczHQnfNqGQeoDpdHGaakHA5DBqYB5LR2HU=
Subject key identifier: F3:BD:04:19:FA:C6:55:EB:1A:22:00:11:F0:6A:54:8E:35:C2:70:C1
Certificate issuer: /CN=359a4b6c6d3713cff3636207de9839058b51815b
Certificate serial: 5AF0781B534F8AF4A6AED51C00EA46FD29DB7B62
Authority key identifier: 35:9A:4B:6C:6D:37:13:CF:F3:63:62:07:DE:98:39:05:8B:51:81:5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NZpLbG03E8_zY2IH3pg5BYtRgVs.cer
Subject info access: rsync://rsync.rp.ki/repo/misakaio/2/AS41979.roa
Signing time: Wed 22 Oct 2025 21:31:23 +0000
ROA not before: Wed 22 Oct 2025 21:26:23 +0000
ROA not after: Wed 21 Oct 2026 21:31:23 +0000
asID: 41979
IP address blocks: 2a0b:4340:30::/44 maxlen: 48
Validation: OK
Signature path: rsync://rsync.rp.ki/repo/misakaio/2/359A4B6C6D3713CFF3636207DE9839058B51815B.crl
rsync://rsync.rp.ki/repo/misakaio/2/359A4B6C6D3713CFF3636207DE9839058B51815B.mft
rsync://rpki.ripe.net/repository/DEFAULT/NZpLbG03E8_zY2IH3pg5BYtRgVs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Oct 2025 02:07:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5a:f0:78:1b:53:4f:8a:f4:a6:ae:d5:1c:00:ea:46:fd:29:db:7b:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=359a4b6c6d3713cff3636207de9839058b51815b
Validity
Not Before: Oct 22 21:26:23 2025 GMT
Not After : Oct 21 21:31:23 2026 GMT
Subject: CN=F3BD0419FAC655EB1A220011F06A548E35C270C1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:d2:64:37:05:a1:0f:55:e9:4e:98:fa:2b:f5:
68:a9:28:7c:e0:0c:f8:c7:71:fd:3c:65:0d:0c:b9:
c7:15:60:5d:b9:83:08:15:58:25:52:65:6e:bf:2a:
01:43:51:67:8e:68:27:2e:bb:9a:3e:ac:d1:61:51:
be:16:14:bc:50:d2:da:08:cd:a1:7c:cb:b3:74:61:
09:35:5c:32:8d:47:c7:de:ba:cb:71:b2:ae:71:25:
b9:c5:21:2b:ca:07:77:c0:dc:61:ea:9b:41:0e:92:
3f:91:2b:2e:ac:67:77:fb:b4:f3:43:2d:4b:28:0c:
9a:74:4a:da:d4:9d:a7:d0:63:fb:0c:49:1e:63:94:
80:62:df:5e:30:e9:e4:84:d4:f5:14:30:4d:9d:2b:
89:e1:61:05:91:ee:86:60:f5:2c:1c:de:10:41:b3:
39:5f:0d:26:73:ab:62:b2:60:63:b3:d3:02:85:8e:
d4:80:46:40:de:96:58:e3:22:04:32:72:2a:61:32:
0b:05:da:5e:e9:28:ba:60:5b:72:fa:02:ac:cd:56:
78:e3:93:6f:30:04:78:b2:38:0e:27:d0:b4:75:97:
f7:8b:e0:73:2d:3b:cb:6a:22:10:32:41:57:8f:eb:
3c:9b:64:9b:9d:ae:88:e7:e2:56:bf:cd:a5:eb:3d:
db:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:BD:04:19:FA:C6:55:EB:1A:22:00:11:F0:6A:54:8E:35:C2:70:C1
X509v3 Authority Key Identifier:
keyid:35:9A:4B:6C:6D:37:13:CF:F3:63:62:07:DE:98:39:05:8B:51:81:5B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.rp.ki/repo/misakaio/2/359A4B6C6D3713CFF3636207DE9839058B51815B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NZpLbG03E8_zY2IH3pg5BYtRgVs.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.rp.ki/repo/misakaio/2/AS41979.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0b:4340:30::/44
Signature Algorithm: sha256WithRSAEncryption
af:88:d8:75:4a:b4:84:97:33:6f:11:33:e5:80:f3:c1:66:0c:
27:d4:6d:59:c3:61:b2:57:90:17:ae:47:a8:f0:76:f4:ed:90:
3b:82:9b:dd:7e:42:76:f1:fe:d2:7a:ed:36:30:bb:e5:fd:88:
e3:a2:82:86:a6:1c:92:ca:17:b9:bb:01:67:61:11:7b:d1:da:
9a:99:ef:31:93:32:72:e3:00:46:e6:2f:fb:7e:13:76:51:e8:
12:0d:76:66:6a:b3:b0:63:28:12:dc:4f:4c:6e:64:1b:68:79:
e3:f1:6f:5b:1d:66:1c:59:17:06:3d:8d:f3:8c:a8:f4:4d:be:
2e:ff:07:a2:6a:60:46:fc:b4:30:64:8f:26:a2:53:15:a8:3d:
0a:15:51:f9:c2:59:f1:b8:1c:8a:92:1b:45:70:84:6c:8c:c1:
0b:97:44:6e:22:ad:c4:b1:d8:13:bd:ac:2b:f8:2d:0a:bc:89:
12:56:d9:65:fd:61:1d:01:5d:cd:79:12:5b:77:63:7c:98:8d:
5e:1d:e2:6f:72:67:6a:b7:df:35:a6:da:e9:c8:5e:61:d8:fc:
e0:08:be:36:77:90:20:92:d6:79:51:2a:de:c1:b2:33:85:0d:
62:a6:07:b9:1e:13:90:ca:67:38:fc:5d:96:c6:95:cf:0a:45:
ae:22:d5:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 23 13:06:07 2025 by rpki-client