Route Origin Authorization
$ rpki-client -vvf repo.rpki.space/repo/Infiniroute/1/326131343a3763303a313830303a3a2f33382d3438203d3e20323139343734.roa
File: 326131343a3763303a313830303a3a2f33382d3438203d3e20323139343734.roa (raw, json)
Hash identifier: l1hguowigvmMy5RbLow68i5dcZRfEM3CHNRp+sQ55jo=
Subject key identifier: 63:7B:83:04:79:A0:50:89:43:63:78:AC:73:14:0E:D6:1C:EB:0A:AB
Certificate issuer: /CN=5b8e21c6890bd79ab764d91b60c39c3b7e4985e1
Certificate serial: 5C57053CD14282DCE797C210BBE08383422B73AA
Authority key identifier: 5B:8E:21:C6:89:0B:D7:9A:B7:64:D9:1B:60:C3:9C:3B:7E:49:85:E1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/W44hxokL15q3ZNkbYMOcO35JheE.cer
Subject info access: rsync://repo.rpki.space/repo/Infiniroute/1/326131343a3763303a313830303a3a2f33382d3438203d3e20323139343734.roa
Signing time: Wed 10 Jun 2026 19:58:21 +0000
ROA not before: Wed 10 Jun 2026 19:53:21 +0000
ROA not after: Wed 09 Jun 2027 19:58:21 +0000
asID: 219474
IP address blocks: 2a14:7c0:1800::/38 maxlen: 48
Validation: OK
Signature path: rsync://repo.rpki.space/repo/Infiniroute/1/5B8E21C6890BD79AB764D91B60C39C3B7E4985E1.crl
rsync://repo.rpki.space/repo/Infiniroute/1/5B8E21C6890BD79AB764D91B60C39C3B7E4985E1.mft
rsync://rpki.ripe.net/repository/DEFAULT/W44hxokL15q3ZNkbYMOcO35JheE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Jun 2026 18:08:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5c:57:05:3c:d1:42:82:dc:e7:97:c2:10:bb:e0:83:83:42:2b:73:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5b8e21c6890bd79ab764d91b60c39c3b7e4985e1
Validity
Not Before: Jun 10 19:53:21 2026 GMT
Not After : Jun 9 19:58:21 2027 GMT
Subject: CN=637B830479A05089436378AC73140ED61CEB0AAB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:44:b5:97:49:91:92:ee:e3:43:b6:1e:a4:f0:
e2:89:9b:36:eb:d7:f0:1a:50:c1:f4:16:d3:59:d1:
cc:24:38:c1:78:72:67:27:e1:ae:1c:4e:f8:f7:19:
bc:62:b3:f1:3c:cd:4b:35:b0:fd:0c:f1:e0:a0:d1:
30:e9:1b:f2:59:02:71:b6:8e:92:d3:be:b1:3c:d6:
76:9c:2d:c7:27:6f:73:98:f7:a8:ca:e0:36:25:b7:
37:92:dd:f4:81:af:86:0a:47:0f:88:a7:33:b9:cc:
a8:26:cb:81:df:a3:31:9d:56:58:89:d8:5e:72:09:
b7:c8:33:ae:43:48:99:50:5c:12:13:60:d1:86:c2:
fb:7b:91:87:ac:c2:94:8e:2c:1b:17:75:79:0d:54:
ab:ca:13:dc:a0:c2:35:9f:03:f8:b1:bf:d6:38:f8:
f9:b6:bc:6d:c6:0f:32:63:24:81:5f:3f:07:54:8a:
2f:09:31:3f:af:44:64:21:20:2b:15:fd:12:7f:b8:
96:46:fb:9b:34:1c:f5:a2:73:0b:ce:17:39:a9:6d:
fb:e4:11:06:91:ef:37:7d:19:54:d7:30:d0:d0:6f:
b3:37:ca:76:29:5c:b5:0c:7f:81:0e:ec:0a:26:ef:
63:3e:70:18:af:4c:5c:02:60:38:e2:d6:b7:9d:0f:
f4:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:7B:83:04:79:A0:50:89:43:63:78:AC:73:14:0E:D6:1C:EB:0A:AB
X509v3 Authority Key Identifier:
keyid:5B:8E:21:C6:89:0B:D7:9A:B7:64:D9:1B:60:C3:9C:3B:7E:49:85:E1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo.rpki.space/repo/Infiniroute/1/5B8E21C6890BD79AB764D91B60C39C3B7E4985E1.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W44hxokL15q3ZNkbYMOcO35JheE.cer
Subject Information Access:
Signed Object - URI:rsync://repo.rpki.space/repo/Infiniroute/1/326131343a3763303a313830303a3a2f33382d3438203d3e20323139343734.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7c0:1800::/38
Signature Algorithm: sha256WithRSAEncryption
64:d5:95:de:b6:d6:03:53:c9:f8:cf:fa:b1:d8:70:8e:70:04:
33:34:a1:06:de:de:8c:31:39:9b:f7:51:e3:38:85:bb:46:53:
7f:d0:07:bd:e0:f3:f5:3f:4e:a5:89:ec:0e:89:98:b2:f2:77:
b7:09:e7:4f:1d:64:43:8a:4a:67:09:e4:20:bc:e3:1b:dd:10:
e5:ab:f2:4d:ba:d2:ca:6f:60:08:6c:d4:fe:e5:0f:de:5a:ab:
af:97:32:fc:1d:f5:d8:81:ec:76:00:de:34:a1:60:bd:13:3f:
8c:6a:45:67:c1:9b:6d:75:e1:06:9a:be:c0:1d:dd:90:b4:34:
d1:3c:1a:a0:c8:a1:b1:03:48:10:1f:98:76:f0:25:42:a1:8d:
6b:8c:58:00:37:2b:a4:7d:71:d4:3c:9b:7e:4e:a1:29:91:8f:
64:fe:66:a7:be:33:e9:aa:06:e6:37:81:5f:7a:a2:8e:05:ec:
ab:95:de:fe:57:a9:78:46:31:3f:ed:c7:bd:ea:1f:58:57:5e:
91:8d:ee:d5:d4:d1:a9:06:88:27:5b:b7:8e:68:5c:31:d4:d3:
a9:ef:8c:5b:db:4d:38:86:f4:8b:41:2e:89:fc:1c:5d:2f:7c:
5f:1c:e7:38:eb:36:bd:60:13:77:5c:e3:30:01:f2:39:d5:2b:
9c:b9:c8:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 01:28:22 2026 by rpki-client