Route Origin Authorization
$ rpki-client -vvvf rsync.rp.ki/repo/misakaio/2/AS47553.roa
File: AS47553.roa (raw, json)
Hash identifier: M2lifNPfBLFWsF3EfjGd9Mahmx3w9v+aqQlpeYihV6o=
Subject key identifier: F6:CA:78:EB:F6:05:21:49:64:08:84:59:8F:90:91:AD:C2:40:ED:E3
Certificate issuer: /CN=359a4b6c6d3713cff3636207de9839058b51815b
Certificate serial: 5B541344475F931EAC88960EF6500B01E61B2985
Authority key identifier: 35:9A:4B:6C:6D:37:13:CF:F3:63:62:07:DE:98:39:05:8B:51:81:5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NZpLbG03E8_zY2IH3pg5BYtRgVs.cer
Subject info access: rsync://rsync.rp.ki/repo/misakaio/2/AS47553.roa
Signing time: Wed 23 Sep 2026 21:48:05 +0000
ROA not before: Wed 23 Sep 2026 21:43:05 +0000
ROA not after: Wed 22 Sep 2027 21:48:05 +0000
asID: 47553
IP address blocks: 2a0f:3b04::/32 maxlen: 48
Validation: OK
Signature path: rsync://rsync.rp.ki/repo/misakaio/2/359A4B6C6D3713CFF3636207DE9839058B51815B.crl
rsync://rsync.rp.ki/repo/misakaio/2/359A4B6C6D3713CFF3636207DE9839058B51815B.mft
rsync://rpki.ripe.net/repository/DEFAULT/NZpLbG03E8_zY2IH3pg5BYtRgVs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 14 Oct 2026 23:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5b:54:13:44:47:5f:93:1e:ac:88:96:0e:f6:50:0b:01:e6:1b:29:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=359a4b6c6d3713cff3636207de9839058b51815b
Validity
Not Before: Sep 23 21:43:05 2026 GMT
Not After : Sep 22 21:48:05 2027 GMT
Subject: CN=F6CA78EBF6052149640884598F9091ADC240EDE3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:2f:14:9c:e2:4f:50:0f:96:11:d4:8f:a9:68:
0a:ed:f6:2d:b1:18:18:35:6e:de:5a:74:cc:5d:cc:
27:c4:20:6b:29:6d:ac:63:87:2d:86:72:eb:75:a7:
93:d3:c5:1a:01:ad:29:09:8d:27:bb:0c:5c:dd:d9:
10:ac:c0:c7:a0:21:ac:13:ec:e2:e5:0e:0b:04:5f:
c8:c5:b9:38:90:a2:64:6f:af:09:a8:ba:23:d0:a2:
3c:35:7a:b9:ed:62:b1:80:8f:94:ff:7d:4e:74:f3:
33:d6:c0:81:8d:08:89:ed:74:3f:f1:2c:f6:44:e7:
00:45:a0:6c:84:ad:92:90:08:a4:62:28:a1:16:f7:
0b:bb:d3:e8:3e:13:ca:b2:cc:96:3d:f4:cd:86:32:
3e:e7:c4:2b:86:15:5c:3b:6b:0d:d7:42:f4:a2:01:
21:66:bf:e4:de:55:74:ee:65:9d:d4:7e:d3:45:af:
36:ad:d1:2e:9a:c4:4b:da:81:b0:f8:05:47:81:08:
e8:50:40:02:2c:4c:e4:28:c0:83:fe:41:85:c8:d3:
fc:09:63:c2:c2:70:9b:21:dd:22:81:46:bf:a3:27:
c9:e7:95:85:4e:8b:ad:5e:64:9b:65:ab:35:13:e9:
5a:c2:35:ef:61:b7:5d:4d:ac:a6:17:9c:85:3d:3b:
41:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:CA:78:EB:F6:05:21:49:64:08:84:59:8F:90:91:AD:C2:40:ED:E3
X509v3 Authority Key Identifier:
keyid:35:9A:4B:6C:6D:37:13:CF:F3:63:62:07:DE:98:39:05:8B:51:81:5B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.rp.ki/repo/misakaio/2/359A4B6C6D3713CFF3636207DE9839058B51815B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NZpLbG03E8_zY2IH3pg5BYtRgVs.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.rp.ki/repo/misakaio/2/AS47553.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:3b04::/32
Signature Algorithm: sha256WithRSAEncryption
1d:8e:d1:99:5f:e2:de:1e:58:84:24:b7:75:52:54:4f:28:e6:
9b:98:65:b5:44:80:ca:3d:a5:6d:ea:72:b2:a4:e3:5b:c3:fe:
6a:6b:17:09:0d:67:90:ba:49:c9:17:7f:7f:6c:27:01:6c:73:
d2:47:b0:54:54:09:9c:63:00:2d:8a:83:9d:3d:66:d7:f5:42:
e5:4e:41:63:c2:79:90:9d:98:c6:54:cc:53:4f:09:41:88:8a:
d8:74:d6:0f:d2:eb:73:58:90:d4:13:10:98:d3:9a:b1:d5:2f:
18:b8:0e:9f:60:2b:dd:db:8e:34:e3:47:4a:e9:aa:2f:2e:f3:
66:60:5a:42:6a:75:66:83:36:10:f8:d3:c1:e6:c2:c8:67:d7:
03:13:23:0e:b8:dc:e7:31:58:7d:c2:90:45:f3:86:3d:99:f1:
d4:08:d7:7c:81:66:b5:d8:e8:b9:31:d8:0d:09:a9:e4:75:9c:
f9:c1:a9:24:20:b5:4c:58:d5:d1:bb:73:b1:84:bc:ea:40:cb:
d2:48:5d:ff:a2:03:7a:69:63:8f:fb:ce:2a:c3:4d:ae:8e:89:
5e:23:78:d4:ca:cb:dd:e3:76:2c:5b:3e:21:7e:1b:96:b8:3a:
2a:40:75:22:b0:96:c5:e5:34:11:29:05:c1:30:02:20:c1:f5:
08:02:88:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 14 06:48:07 2026 by rpki-client