Route Origin Authorization
$ rpki-client -vvf rsync.rp.ki/repo/misakaio/2/AS8075.roa
File: AS8075.roa (raw, json)
Hash identifier: Zps0fnarva022OCmZcaRQS8xxpxvuD3hOi4cLC9iit4=
Subject key identifier: A2:7C:27:91:30:AE:80:72:78:8C:58:C3:94:CE:1A:D0:13:E1:BB:EA
Certificate issuer: /CN=359a4b6c6d3713cff3636207de9839058b51815b
Certificate serial: 223D8DE0E0E91D4678FA9CB434B5FC82777E5ABF
Authority key identifier: 35:9A:4B:6C:6D:37:13:CF:F3:63:62:07:DE:98:39:05:8B:51:81:5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NZpLbG03E8_zY2IH3pg5BYtRgVs.cer
Subject info access: rsync://rsync.rp.ki/repo/misakaio/2/AS8075.roa
Signing time: Mon 20 Oct 2025 12:12:02 +0000
ROA not before: Mon 20 Oct 2025 12:07:02 +0000
ROA not after: Mon 19 Oct 2026 12:12:02 +0000
asID: 8075
IP address blocks: 45.142.245.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.rp.ki/repo/misakaio/2/359A4B6C6D3713CFF3636207DE9839058B51815B.crl
rsync://rsync.rp.ki/repo/misakaio/2/359A4B6C6D3713CFF3636207DE9839058B51815B.mft
rsync://rpki.ripe.net/repository/DEFAULT/NZpLbG03E8_zY2IH3pg5BYtRgVs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Oct 2025 02:07:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
22:3d:8d:e0:e0:e9:1d:46:78:fa:9c:b4:34:b5:fc:82:77:7e:5a:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=359a4b6c6d3713cff3636207de9839058b51815b
Validity
Not Before: Oct 20 12:07:02 2025 GMT
Not After : Oct 19 12:12:02 2026 GMT
Subject: CN=A27C279130AE8072788C58C394CE1AD013E1BBEA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:b3:e5:fd:5e:b9:9d:5c:87:12:2e:bd:9e:5c:
e7:69:e1:cd:e5:00:a5:3b:ab:49:23:e4:b5:63:d0:
7b:69:21:c2:9a:73:ae:00:2c:af:5a:26:32:fd:12:
f7:ad:e6:88:07:f2:dc:53:95:c6:5e:dc:86:af:b2:
25:f9:47:98:6e:20:41:e5:91:13:c1:23:70:b7:e7:
1f:77:b0:e6:86:0c:62:ac:b6:62:50:ee:a5:8d:99:
7b:d9:74:9e:b1:6f:1c:04:2d:17:78:c1:bc:c7:18:
3d:a1:25:b0:81:96:ea:53:92:99:a4:ff:eb:f8:b1:
1f:ac:5b:50:f4:13:39:29:bd:f5:6d:17:a6:d9:0d:
0b:21:9b:d7:91:96:04:d0:49:34:02:9b:35:2f:22:
a9:e7:b0:90:3a:2c:ff:05:64:8b:0e:ec:b5:02:55:
cd:0f:ba:c3:38:e2:5a:99:2b:df:af:05:12:ab:4c:
6c:87:1b:d8:72:e5:88:b5:b7:33:9a:00:1e:64:86:
64:0d:8a:28:22:30:42:4a:41:dd:7d:79:8f:12:cc:
7d:22:4f:f1:54:af:f0:af:7a:69:03:b0:16:55:4e:
4d:c4:31:91:f6:7c:44:3d:d9:31:56:fc:4e:35:d6:
8f:d8:d9:d0:3f:59:d3:67:a7:34:4c:c6:f0:db:df:
9e:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:7C:27:91:30:AE:80:72:78:8C:58:C3:94:CE:1A:D0:13:E1:BB:EA
X509v3 Authority Key Identifier:
keyid:35:9A:4B:6C:6D:37:13:CF:F3:63:62:07:DE:98:39:05:8B:51:81:5B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.rp.ki/repo/misakaio/2/359A4B6C6D3713CFF3636207DE9839058B51815B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NZpLbG03E8_zY2IH3pg5BYtRgVs.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.rp.ki/repo/misakaio/2/AS8075.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.142.245.0/24
Signature Algorithm: sha256WithRSAEncryption
49:9b:93:1d:57:7f:8d:3d:1d:28:79:3a:e6:90:9b:d7:2b:a2:
15:6c:b2:7a:3c:d3:31:01:be:d2:66:14:de:c8:56:a8:8d:55:
36:b3:cf:c5:76:ec:e8:9d:15:c8:2f:ca:91:f8:16:d9:a9:02:
00:2b:ef:22:84:19:49:a5:0c:7b:d9:a3:e6:a5:05:9b:dd:d4:
02:79:d3:18:84:f1:29:6e:86:9f:51:dc:f3:48:03:53:c9:ef:
8a:a6:86:e0:1d:7b:db:55:28:42:d7:eb:37:1d:3a:7f:94:0a:
32:59:67:a9:31:c5:d3:d4:af:c9:d4:17:ac:11:10:1e:29:e9:
b5:47:7b:6d:85:69:74:1b:9a:32:67:be:e2:03:4d:ad:9e:84:
8b:ee:c9:3b:65:ab:9e:89:23:2b:11:37:f2:f5:51:4e:7a:73:
91:e3:7d:97:c7:89:3f:a4:43:35:39:c0:c7:de:c3:a0:8c:60:
be:e3:d6:c5:f7:4e:08:bd:83:d6:d6:92:35:34:1e:2e:c8:72:
16:ad:43:06:c5:1a:06:69:16:06:a4:b1:b2:e9:b4:6e:2c:49:
cc:bc:cc:4d:0d:4e:e3:97:c4:ba:d2:f3:4d:a8:77:d9:d5:c4:
55:59:45:e2:c3:9b:7d:53:ec:fb:30:96:d3:d4:4e:d9:18:22:
3c:23:4b:a7
-----BEGIN CERTIFICATE-----
MIIEmjCCA4KgAwIBAgIUIj2N4ODpHUZ4+py0NLX8gnd+Wr8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMzU5YTRiNmM2ZDM3MTNjZmYzNjM2MjA3ZGU5ODM5MDU4
YjUxODE1YjAeFw0yNTEwMjAxMjA3MDJaFw0yNjEwMTkxMjEyMDJaMDMxMTAvBgNV
BAMTKEEyN0MyNzkxMzBBRTgwNzI3ODhDNThDMzk0Q0UxQUQwMTNFMUJCRUEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCos+X9XrmdXIcSLr2eXOdp4c3l
AKU7q0kj5LVj0HtpIcKac64ALK9aJjL9Evet5ogH8txTlcZe3IavsiX5R5huIEHl
kRPBI3C35x93sOaGDGKstmJQ7qWNmXvZdJ6xbxwELRd4wbzHGD2hJbCBlupTkpmk
/+v4sR+sW1D0EzkpvfVtF6bZDQshm9eRlgTQSTQCmzUvIqnnsJA6LP8FZIsO7LUC
Vc0PusM44lqZK9+vBRKrTGyHG9hy5Yi1tzOaAB5khmQNiigiMEJKQd19eY8SzH0i
T/FUr/CvemkDsBZVTk3EMZH2fEQ92TFW/E411o/Y2dA/WdNnpzRMxvDb354LAgMB
AAGjggGkMIIBoDAdBgNVHQ4EFgQUonwnkTCugHJ4jFjDlM4a0BPhu+owHwYDVR0j
BBgwFoAUNZpLbG03E8/zY2IH3pg5BYtRgVswDgYDVR0PAQH/BAQDAgeAMGEGA1Ud
HwRaMFgwVqBUoFKGUHJzeW5jOi8vcnN5bmMucnAua2kvcmVwby9taXNha2Fpby8y
LzM1OUE0QjZDNkQzNzEzQ0ZGMzYzNjIwN0RFOTgzOTA1OEI1MTgxNUIuY3JsMGQG
CCsGAQUFBwEBBFgwVjBUBggrBgEFBQcwAoZIcnN5bmM6Ly9ycGtpLnJpcGUubmV0
L3JlcG9zaXRvcnkvREVGQVVMVC9OWnBMYkcwM0U4X3pZMklIM3BnNUJZdFJnVnMu
Y2VyMEoGCCsGAQUFBwELBD4wPDA6BggrBgEFBQcwC4YucnN5bmM6Ly9yc3luYy5y
cC5raS9yZXBvL21pc2FrYWlvLzIvQVM4MDc1LnJvYTAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALY71MA0GCSqG
SIb3DQEBCwUAA4IBAQBJm5MdV3+NPR0oeTrmkJvXK6IVbLJ6PNMxAb7SZhTeyFao
jVU2s8/FduzonRXIL8qR+BbZqQIAK+8ihBlJpQx72aPmpQWb3dQCedMYhPEpboaf
UdzzSANTye+KpobgHXvbVShC1+s3HTp/lAoyWWepMcXT1K/J1BesERAeKem1R3tt
hWl0G5oyZ77iA02tnoSL7sk7ZaueiSMrETfy9VFOenOR432Xx4k/pEM1OcDH3sOg
jGC+49bF904IvYPW1pI1NB4uyHIWrUMGxRoGaRYGpLGy6bRuLEnMvMxNDU7jl8S6
0vNNqHfZ1cRVWUXiw5t9U+z7MJbT1E7ZGCI8I0un
-----END CERTIFICATE-----
Generated at Thu Oct 23 12:53:55 2025 by rpki-client