Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/031463-58e6-4fcb-8ca1-1fcfd0c8bdf5/1/biox_IcJl2R53KL8eVcMexo3hyk.roa
File: biox_IcJl2R53KL8eVcMexo3hyk.roa (raw, json)
Hash identifier: 9YRHQDy03QzDXrwwyA0XNYxW9EZFCRbOyoZs04jIFdo=
Subject key identifier: 6E:2A:31:FC:87:09:97:64:79:DC:A2:FC:79:57:0C:7B:1A:37:87:29
Certificate issuer: /CN=b256b8ead7ff1b112a92b55e8fadb2ef55be7491
Certificate serial: 019F2368FFDC3C01EE286AFBEDD5422265EB
Authority key identifier: B2:56:B8:EA:D7:FF:1B:11:2A:92:B5:5E:8F:AD:B2:EF:55:BE:74:91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sla46tf_GxEqkrVej62y71W-dJE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/031463-58e6-4fcb-8ca1-1fcfd0c8bdf5/1/biox_IcJl2R53KL8eVcMexo3hyk.roa
Signing time: Thu 02 Jul 2026 15:18:31 +0000
ROA not before: Thu 02 Jul 2026 15:18:31 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 57757
IP address blocks: 91.213.19.0/24 maxlen: 24
2001:67c:fe8::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/031463-58e6-4fcb-8ca1-1fcfd0c8bdf5/1/sla46tf_GxEqkrVej62y71W-dJE.crl
rsync://rpki.ripe.net/repository/DEFAULT/dd/031463-58e6-4fcb-8ca1-1fcfd0c8bdf5/1/sla46tf_GxEqkrVej62y71W-dJE.mft
rsync://rpki.ripe.net/repository/DEFAULT/sla46tf_GxEqkrVej62y71W-dJE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:ff:dc:3c:01:ee:28:6a:fb:ed:d5:42:22:65:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b256b8ead7ff1b112a92b55e8fadb2ef55be7491
Validity
Not Before: Jul 2 15:18:31 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6e2a31fc8709976479dca2fc79570c7b1a378729
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:a7:a5:ba:21:b6:74:40:d4:c2:4e:f7:00:2b:
60:9a:ce:ce:25:5b:cd:db:8b:0e:06:73:05:02:56:
85:0c:8e:0c:f2:ae:eb:ac:cd:f7:c8:70:2f:67:d3:
02:4a:e3:a4:0e:b9:b4:0b:ad:e6:a0:71:99:33:3c:
e7:7d:c5:91:43:a2:02:13:f1:11:87:0e:f6:21:de:
41:41:39:f5:96:c3:97:6c:3a:b7:31:4b:1a:4e:14:
65:87:0b:14:26:c6:31:2e:35:40:04:b1:76:c0:e7:
86:46:c7:33:ca:96:9c:5d:ed:9d:5c:d2:61:a3:e1:
ad:8c:8d:03:da:09:5f:ac:3e:2d:43:f7:ac:a7:ab:
76:7f:e5:4c:26:c2:85:2f:29:8f:bb:7c:6e:fa:25:
b2:1f:e1:c1:0e:04:54:bf:9f:2a:5c:00:f7:42:42:
fa:99:e7:f6:14:de:ca:56:51:87:0c:02:44:23:b5:
3a:4e:3e:8d:a6:3f:a3:88:30:ef:68:58:24:64:70:
bd:3b:ca:74:06:56:ce:c0:8c:0a:07:01:5f:e5:ae:
21:5b:cf:6c:fa:e6:a6:a1:92:be:65:1b:a1:63:81:
3f:07:6a:ce:4d:b9:a5:58:42:5e:eb:a8:32:ec:84:
d4:46:d9:3f:a0:0c:8b:40:38:de:0d:ef:a8:45:9d:
4b:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:2A:31:FC:87:09:97:64:79:DC:A2:FC:79:57:0C:7B:1A:37:87:29
X509v3 Authority Key Identifier:
keyid:B2:56:B8:EA:D7:FF:1B:11:2A:92:B5:5E:8F:AD:B2:EF:55:BE:74:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sla46tf_GxEqkrVej62y71W-dJE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/031463-58e6-4fcb-8ca1-1fcfd0c8bdf5/1/biox_IcJl2R53KL8eVcMexo3hyk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/031463-58e6-4fcb-8ca1-1fcfd0c8bdf5/1/sla46tf_GxEqkrVej62y71W-dJE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.213.19.0/24
IPv6:
2001:67c:fe8::/48
Signature Algorithm: sha256WithRSAEncryption
aa:4a:c1:41:49:9d:75:ea:6e:a1:d5:3b:d1:8f:54:18:c9:6d:
a4:16:f2:d2:b0:38:e2:45:97:74:ac:c1:e9:19:a1:4f:f2:db:
d9:4f:4a:b5:a4:f2:bc:94:52:72:a9:6a:f0:1c:6e:40:ad:57:
c5:af:25:c4:de:76:1f:a5:88:bf:82:8f:be:f6:f3:7e:56:a3:
d8:12:66:f6:c2:bb:f6:21:eb:67:05:21:e2:c1:d4:df:e8:1f:
48:7a:45:1a:15:65:94:22:f8:63:f5:59:fc:c3:71:57:69:66:
2c:d4:72:9d:a6:9c:92:50:40:b4:67:79:8d:2c:88:42:c0:f7:
14:c8:cf:2d:e8:8c:5e:be:8b:7a:ae:2d:e9:69:2e:1f:1e:b0:
fa:ec:54:0b:d4:2c:78:0a:b2:ec:28:74:1b:4c:34:80:af:ff:
b6:e9:45:94:17:31:16:86:20:61:b5:21:22:af:0b:e8:1f:67:
86:ff:e8:24:a7:91:7b:d3:9d:7c:f8:8d:fc:cc:28:fb:64:53:
39:5e:1f:e3:c9:8c:c8:5c:48:69:e9:68:f3:a4:8d:b2:a0:a2:
99:20:3f:68:89:7d:e7:77:5a:ac:7a:67:b4:c9:5c:16:77:fa:
a1:f2:f4:af:af:b9:3a:96:28:3f:0c:5f:d1:00:1e:43:34:1f:
c1:38:d0:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 20:09:03 2026 by rpki-client