Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/045f70-9ea5-42a3-8786-ee8cfdd2ed94/1/B3bioRLbAVuR82UWFBCkWvTTCus.roa
File: B3bioRLbAVuR82UWFBCkWvTTCus.roa (raw, json)
Hash identifier: OfIk/DktZrTMIWs/c6M+Tk2imIiQjnhuduF8IZvnL3M=
Subject key identifier: 07:76:E2:A1:12:DB:01:5B:91:F3:65:16:14:10:A4:5A:F4:D3:0A:EB
Certificate issuer: /CN=367160181739568e578e1b5f57976a60398062e6
Certificate serial: 019F7295986AFA11E98F713077CD6410F08D
Authority key identifier: 36:71:60:18:17:39:56:8E:57:8E:1B:5F:57:97:6A:60:39:80:62:E6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NnFgGBc5Vo5XjhtfV5dqYDmAYuY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/045f70-9ea5-42a3-8786-ee8cfdd2ed94/1/B3bioRLbAVuR82UWFBCkWvTTCus.roa
Signing time: Sat 18 Jul 2026 00:17:14 +0000
ROA not before: Sat 18 Jul 2026 00:17:14 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 198590
IP address blocks: 2a09:3f00:1001::/48 maxlen: 48
2a09:3f00:5ffe::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/045f70-9ea5-42a3-8786-ee8cfdd2ed94/1/NnFgGBc5Vo5XjhtfV5dqYDmAYuY.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/045f70-9ea5-42a3-8786-ee8cfdd2ed94/1/NnFgGBc5Vo5XjhtfV5dqYDmAYuY.mft
rsync://rpki.ripe.net/repository/DEFAULT/NnFgGBc5Vo5XjhtfV5dqYDmAYuY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:72:95:98:6a:fa:11:e9:8f:71:30:77:cd:64:10:f0:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=367160181739568e578e1b5f57976a60398062e6
Validity
Not Before: Jul 18 00:17:14 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=0776e2a112db015b91f365161410a45af4d30aeb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:97:52:6e:4a:5c:27:44:be:c9:d2:04:2e:87:
ea:5f:2a:48:cc:d9:f8:a3:1a:64:5c:21:d1:5c:74:
5d:6c:6a:60:b9:04:10:05:0f:2d:c6:41:51:64:b4:
17:58:e4:a5:d5:1b:0f:75:a6:ef:1b:87:6c:53:18:
8a:5d:b3:fe:53:ba:ec:22:b0:1d:a1:35:a4:e8:5e:
9f:c8:9e:61:08:d2:33:68:4c:8f:70:2c:86:b3:f8:
c1:67:f3:f4:5b:32:e4:53:79:d8:f9:e2:8a:ed:09:
77:62:10:10:dd:25:6d:3e:4f:3d:36:66:6c:fb:bf:
a2:c9:71:09:08:56:00:f2:27:76:a6:97:00:32:49:
31:66:b5:74:a7:93:a8:73:cf:46:be:38:84:82:62:
42:84:d9:41:0c:3f:12:58:6d:45:23:e5:f7:14:92:
b8:af:55:0f:08:0e:4b:9f:48:37:8d:9b:db:fa:ec:
b6:b9:02:bc:17:cf:95:22:ed:7d:cd:15:3d:b0:80:
83:76:b0:83:69:ea:71:6a:2a:c6:b7:bd:51:ec:52:
68:87:0d:a6:14:8c:ab:c7:73:cc:62:9a:ed:bf:c7:
c2:cf:15:13:3b:7b:36:87:6f:88:23:8f:54:43:6c:
02:72:85:84:ea:6f:54:98:30:9b:06:65:d3:27:29:
fd:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:76:E2:A1:12:DB:01:5B:91:F3:65:16:14:10:A4:5A:F4:D3:0A:EB
X509v3 Authority Key Identifier:
keyid:36:71:60:18:17:39:56:8E:57:8E:1B:5F:57:97:6A:60:39:80:62:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NnFgGBc5Vo5XjhtfV5dqYDmAYuY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/045f70-9ea5-42a3-8786-ee8cfdd2ed94/1/B3bioRLbAVuR82UWFBCkWvTTCus.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/045f70-9ea5-42a3-8786-ee8cfdd2ed94/1/NnFgGBc5Vo5XjhtfV5dqYDmAYuY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a09:3f00:1001::/48
2a09:3f00:5ffe::/48
Signature Algorithm: sha256WithRSAEncryption
4a:bb:8c:93:eb:9e:f6:58:5c:3c:88:45:33:87:58:50:4c:b5:
ad:ac:0c:81:a8:b8:3d:a9:87:fe:c8:5c:1e:33:20:12:42:0f:
e7:29:7b:a0:98:06:01:33:1a:61:c7:e8:d6:aa:a4:07:41:f9:
3c:3d:3b:88:de:60:3f:81:b3:90:a9:82:3f:3a:9d:1d:96:d2:
c6:76:ed:8b:6d:48:0a:4b:d4:6d:c9:c4:bb:17:a0:25:a0:f7:
e9:bf:ab:52:e8:14:1b:8c:bc:3c:ac:88:5c:57:a0:e0:23:e6:
a1:ec:58:af:32:aa:fe:87:a8:f4:b2:5e:71:c3:76:0a:14:c9:
1c:63:96:18:6c:53:00:4b:a7:6b:8a:82:37:47:9b:71:78:3f:
8e:68:9a:8d:35:09:ab:dc:a3:97:a2:89:83:ec:66:c4:3b:99:
d5:a2:0f:19:ac:fa:d4:87:d2:5e:0e:97:66:85:bd:4b:da:62:
57:9f:9d:d8:a9:5b:7e:a7:41:f2:20:16:83:18:fa:38:f4:71:
f4:cc:af:67:64:8c:23:1a:19:fa:96:70:a4:bf:e7:fe:8d:3e:
99:65:ef:3e:7f:ee:a8:b3:43:0f:d0:44:00:ae:05:1d:8c:e4:
41:41:69:49:a9:4e:60:f9:ac:00:2b:23:95:1b:4c:ea:12:a8:
75:ec:b0:8a
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgISAZ9ylZhq+hHpj3Ewd81kEPCNMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM2NzE2MDE4MTczOTU2OGU1NzhlMWI1ZjU3OTc2YTYwMzk4
MDYyZTYwHhcNMjYwNzE4MDAxNzE0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwNzc2ZTJhMTEyZGIwMTViOTFmMzY1MTYxNDEwYTQ1YWY0ZDMwYWViMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA35dSbkpcJ0S+ydIELofqXypIzNn4
oxpkXCHRXHRdbGpguQQQBQ8txkFRZLQXWOSl1RsPdabvG4dsUxiKXbP+U7rsIrAd
oTWk6F6fyJ5hCNIzaEyPcCyGs/jBZ/P0WzLkU3nY+eKK7Ql3YhAQ3SVtPk89NmZs
+7+iyXEJCFYA8id2ppcAMkkxZrV0p5Ooc89GvjiEgmJChNlBDD8SWG1FI+X3FJK4
r1UPCA5Ln0g3jZvb+uy2uQK8F8+VIu19zRU9sICDdrCDaepxairGt71R7FJohw2m
FIyrx3PMYprtv8fCzxUTO3s2h2+II49UQ2wCcoWE6m9UmDCbBmXTJyn9JQIDAQAB
o4ICFTCCAhEwHQYDVR0OBBYEFAd24qES2wFbkfNlFhQQpFr00wrrMB8GA1UdIwQY
MBaAFDZxYBgXOVaOV44bX1eXamA5gGLmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTm5GZ0dCYzVWbzVYamh0ZlY1ZHFZRG1BWXVZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOS8wNDVmNzAtOWVhNS00MmEzLTg3ODYt
ZWU4Y2ZkZDJlZDk0LzEvQjNiaW9STGJBVnVSODJVV0ZCQ2tXdlRUQ3VzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wOS8wNDVmNzAtOWVhNS00MmEzLTg3ODYtZWU4Y2ZkZDJlZDk0
LzEvTm5GZ0dCYzVWbzVYamh0ZlY1ZHFZRG1BWXVZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAAjASAwcAKgk/ABAB
AwcAKgk/AF/+MA0GCSqGSIb3DQEBCwUAA4IBAQBKu4yT6572WFw8iEUzh1hQTLWt
rAyBqLg9qYf+yFweMyASQg/nKXugmAYBMxphx+jWqqQHQfk8PTuI3mA/gbOQqYI/
Op0dltLGdu2LbUgKS9RtycS7F6AloPfpv6tS6BQbjLw8rIhcV6DgI+ah7FivMqr+
h6j0sl5xw3YKFMkcY5YYbFMAS6drioI3R5txeD+OaJqNNQmr3KOXoomD7GbEO5nV
og8ZrPrUh9JeDpdmhb1L2mJXn53YqVt+p0HyIBaDGPo49HH0zK9nZIwjGhn6lnCk
v+f+jT6ZZe8+f+6os0MP0EQArgUdjORBQWlJqU5g+awAKyOVG0zqEqh17LCK
-----END CERTIFICATE-----
Generated at Thu Jul 23 22:19:33 2026 by rpki-client