Route Origin Authorization
$ rpki-client -vvvf repo.rpki.space/repo/Infiniroute/1/326131343a3763303a313734303a3a2f34382d3438203d3e20323134343937.roa
File: 326131343a3763303a313734303a3a2f34382d3438203d3e20323134343937.roa (raw, json)
Hash identifier: uSSJqO2IGxqOBLlh5K52qtmE3reoOgW2c40xHbpwk1s=
Subject key identifier: 3E:E5:5F:FC:33:61:DE:9A:DD:54:7B:94:68:1E:FF:34:68:2C:F8:0C
Certificate issuer: /CN=5b8e21c6890bd79ab764d91b60c39c3b7e4985e1
Certificate serial: 21466EEF7EE48B93E74D6DA7BB3B188B257A6542
Authority key identifier: 5B:8E:21:C6:89:0B:D7:9A:B7:64:D9:1B:60:C3:9C:3B:7E:49:85:E1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/W44hxokL15q3ZNkbYMOcO35JheE.cer
Subject info access: rsync://repo.rpki.space/repo/Infiniroute/1/326131343a3763303a313734303a3a2f34382d3438203d3e20323134343937.roa
Signing time: Tue 11 Aug 2026 08:15:00 +0000
ROA not before: Tue 11 Aug 2026 08:10:00 +0000
ROA not after: Tue 10 Aug 2027 08:15:00 +0000
asID: 214497
IP address blocks: 2a14:7c0:1740::/48 maxlen: 48
Validation: OK
Signature path: rsync://repo.rpki.space/repo/Infiniroute/1/5B8E21C6890BD79AB764D91B60C39C3B7E4985E1.crl
rsync://repo.rpki.space/repo/Infiniroute/1/5B8E21C6890BD79AB764D91B60C39C3B7E4985E1.mft
rsync://rpki.ripe.net/repository/DEFAULT/W44hxokL15q3ZNkbYMOcO35JheE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 12:07:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
21:46:6e:ef:7e:e4:8b:93:e7:4d:6d:a7:bb:3b:18:8b:25:7a:65:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5b8e21c6890bd79ab764d91b60c39c3b7e4985e1
Validity
Not Before: Aug 11 08:10:00 2026 GMT
Not After : Aug 10 08:15:00 2027 GMT
Subject: CN=3EE55FFC3361DE9ADD547B94681EFF34682CF80C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:40:58:78:5b:2b:3d:d4:85:1e:61:56:cb:7b:
54:d4:87:95:df:8d:f0:21:80:de:c3:cc:dc:9a:d2:
32:55:ff:a0:6e:42:0a:4d:c4:8a:36:28:07:0c:9d:
ad:5b:33:ae:72:dd:b5:16:90:24:47:c7:c3:5d:66:
02:6d:11:15:4f:6e:22:d2:67:90:d7:84:31:f9:c5:
4a:86:de:62:55:94:8b:36:f0:bb:9c:74:0a:08:99:
38:a2:1b:ec:ef:58:55:1a:5a:71:50:c0:a2:36:38:
43:fb:e9:1d:2d:9c:4a:00:5b:a7:c8:ef:f8:f7:57:
19:5f:fe:13:65:7a:c0:e8:4d:31:b7:57:6c:04:92:
b3:da:59:86:e9:30:95:9e:ba:f5:e8:5f:24:f8:c3:
ea:51:64:73:e8:b2:10:7a:10:1c:be:77:80:e5:22:
78:fe:87:b6:2f:c2:c8:4f:b5:34:ee:5c:a1:d6:57:
20:2f:bd:3d:79:14:c1:fc:53:e3:76:47:d8:6a:d7:
ad:47:3d:b2:b0:53:7a:85:d4:93:98:19:4e:94:f3:
e6:7c:f9:56:1b:90:52:d8:58:05:bd:4d:ae:b4:7e:
95:57:da:b7:89:8e:61:87:6a:82:ec:70:a2:ae:dd:
ff:12:61:3c:3f:86:c6:d7:4a:e7:9a:1c:85:c0:6f:
d8:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:E5:5F:FC:33:61:DE:9A:DD:54:7B:94:68:1E:FF:34:68:2C:F8:0C
X509v3 Authority Key Identifier:
keyid:5B:8E:21:C6:89:0B:D7:9A:B7:64:D9:1B:60:C3:9C:3B:7E:49:85:E1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo.rpki.space/repo/Infiniroute/1/5B8E21C6890BD79AB764D91B60C39C3B7E4985E1.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W44hxokL15q3ZNkbYMOcO35JheE.cer
Subject Information Access:
Signed Object - URI:rsync://repo.rpki.space/repo/Infiniroute/1/326131343a3763303a313734303a3a2f34382d3438203d3e20323134343937.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7c0:1740::/48
Signature Algorithm: sha256WithRSAEncryption
73:aa:65:33:08:6c:cf:93:ec:1e:2b:10:b7:07:7f:56:bc:53:
d4:5c:7d:d8:65:2e:50:08:e4:66:6f:9c:49:27:bf:58:20:c2:
7a:26:2d:24:a3:0c:08:cf:26:cf:45:df:c5:80:cd:94:f2:4d:
7d:f9:49:ec:1c:97:87:0e:c3:13:a4:5d:4c:e3:0a:15:2d:e1:
1e:2b:b2:38:20:e6:39:e2:cc:a6:79:67:f4:e2:c0:a3:2d:d5:
7e:c5:35:23:2f:64:22:78:21:b2:88:08:f6:41:d9:a8:1f:02:
88:62:9a:e8:6c:b1:95:84:92:48:42:72:4f:7a:40:4e:34:19:
c2:51:76:4c:da:e3:5e:57:0d:40:23:1b:17:43:a1:ec:df:85:
41:8c:11:3e:74:2d:a4:a9:c9:ed:bf:46:4a:a4:1b:fc:2c:ba:
3b:c7:d3:c7:aa:87:99:bc:49:f7:b8:be:2b:92:07:da:18:8c:
ee:3a:71:c6:3d:13:54:53:d4:67:68:fe:58:28:44:f4:ac:ac:
c4:7c:92:d4:b8:81:29:02:d3:7a:47:d8:59:84:3e:dd:6f:d2:
ec:bb:7d:13:04:d5:e6:ef:bc:19:c0:88:59:9a:45:6c:f6:7e:
5a:6c:ea:c4:f8:c0:8a:e3:d2:bf:16:bc:3f:bb:d8:66:df:71:
8b:0c:33:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 19:40:08 2026 by rpki-client