Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/679968-11e9-49a5-b1d1-e0be148c4097/1/jj4p-t17R-_1G4MNsVWsKf7lxt8.roa
File: jj4p-t17R-_1G4MNsVWsKf7lxt8.roa (raw, json)
Hash identifier: gxtd056u5s+5E72I3IyM1AJXXx0KOPdQmubbLYFzxYI=
Subject key identifier: 8E:3E:29:FA:DD:7B:47:EF:F5:1B:83:0D:B1:55:AC:29:FE:E5:C6:DF
Certificate issuer: /CN=1dd7088d9da221f0565eb178443600171e7977aa
Certificate serial: 019F64B04D87580AE80C95B1429554616CCB
Authority key identifier: 1D:D7:08:8D:9D:A2:21:F0:56:5E:B1:78:44:36:00:17:1E:79:77:AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HdcIjZ2iIfBWXrF4RDYAFx55d6o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/679968-11e9-49a5-b1d1-e0be148c4097/1/jj4p-t17R-_1G4MNsVWsKf7lxt8.roa
Signing time: Wed 15 Jul 2026 07:31:43 +0000
ROA not before: Wed 15 Jul 2026 07:31:43 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 216054
IP address blocks: 46.29.34.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/679968-11e9-49a5-b1d1-e0be148c4097/1/HdcIjZ2iIfBWXrF4RDYAFx55d6o.crl
rsync://rpki.ripe.net/repository/DEFAULT/d1/679968-11e9-49a5-b1d1-e0be148c4097/1/HdcIjZ2iIfBWXrF4RDYAFx55d6o.mft
rsync://rpki.ripe.net/repository/DEFAULT/HdcIjZ2iIfBWXrF4RDYAFx55d6o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 22:01:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:64:b0:4d:87:58:0a:e8:0c:95:b1:42:95:54:61:6c:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1dd7088d9da221f0565eb178443600171e7977aa
Validity
Not Before: Jul 15 07:31:43 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=8e3e29fadd7b47eff51b830db155ac29fee5c6df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:c8:bd:06:b4:5c:a4:1d:3f:7d:79:c2:d4:1a:
93:63:46:78:41:c8:1e:92:6a:59:26:1f:f3:1a:dd:
44:b7:5a:e3:69:0e:f1:44:84:0c:42:19:8d:3f:97:
28:39:2d:6f:38:a4:a3:20:43:9f:99:25:79:f2:28:
3a:cc:40:31:9b:da:1e:55:b1:be:23:93:c8:e9:18:
53:69:88:30:8f:f3:ae:26:01:4d:4d:4a:fd:17:21:
2b:b4:71:9f:db:d2:9f:fd:21:fe:95:9e:98:c5:91:
52:df:b5:51:bc:58:73:4c:8f:01:30:27:3d:f4:4c:
cf:17:ed:49:20:5b:76:7a:47:3c:41:61:95:2d:9d:
79:55:52:54:d9:48:93:0b:70:00:84:48:2f:b4:a0:
bc:94:f5:ee:d0:c6:c9:ca:23:ba:03:59:b0:31:c3:
96:41:50:56:c3:ff:f3:8e:72:6d:f2:b5:4e:d9:49:
33:25:df:b7:8e:50:fe:f0:f5:1a:e8:36:3b:f6:f6:
56:04:ab:f1:43:f7:16:48:05:2f:62:cf:c3:9b:6c:
f8:57:6c:04:02:14:f4:bb:c6:ad:bf:df:7f:e1:96:
89:9b:2a:01:1c:36:eb:36:10:ec:af:3b:50:55:7a:
f2:0d:b0:3b:88:0b:02:e7:2b:d0:b2:d0:41:d4:06:
4f:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:3E:29:FA:DD:7B:47:EF:F5:1B:83:0D:B1:55:AC:29:FE:E5:C6:DF
X509v3 Authority Key Identifier:
keyid:1D:D7:08:8D:9D:A2:21:F0:56:5E:B1:78:44:36:00:17:1E:79:77:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HdcIjZ2iIfBWXrF4RDYAFx55d6o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/679968-11e9-49a5-b1d1-e0be148c4097/1/jj4p-t17R-_1G4MNsVWsKf7lxt8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/679968-11e9-49a5-b1d1-e0be148c4097/1/HdcIjZ2iIfBWXrF4RDYAFx55d6o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.29.34.0/24
Signature Algorithm: sha256WithRSAEncryption
c0:56:89:a6:a5:63:53:13:e9:d5:70:6e:e0:db:ae:08:32:12:
ed:43:2b:52:b6:9e:f4:85:75:07:c5:9d:53:81:41:95:4e:30:
39:85:cd:e8:6a:44:5b:0a:95:9a:ac:fb:51:d6:8a:ca:22:ef:
27:3b:c9:fc:4f:91:30:65:48:36:5b:b7:8e:86:c3:79:2b:01:
fc:63:92:39:92:b0:2e:63:5d:9b:14:9d:37:3d:90:62:8f:d9:
45:ac:d0:27:c8:fb:c8:be:29:a6:5a:5f:1e:9a:42:49:0d:d4:
d9:58:52:d9:1f:b8:63:cf:f2:26:0f:ae:f1:7a:2d:e7:9a:fa:
ad:71:92:db:e7:88:93:80:85:1c:f2:f7:af:c4:7c:22:73:f2:
97:6f:5d:86:4c:2a:ed:cc:0f:9b:7a:a8:4f:c9:25:4a:92:8d:
75:55:bc:6c:b3:6c:45:12:ab:3e:81:09:4b:de:7a:18:19:c6:
1f:1e:57:d4:17:4a:14:46:13:07:0b:0a:a3:aa:76:e9:a3:d7:
82:2f:f5:c6:0a:13:46:bd:58:da:74:34:e0:ec:68:3f:df:de:
f2:9d:31:73:ec:f5:86:37:b2:5d:38:a7:56:07:c1:67:8e:1e:
1c:36:a4:30:18:cb:cb:6a:be:39:e8:c9:84:4b:04:33:4b:46:
11:f3:08:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 05:24:20 2026 by rpki-client