Route Origin Authorization
$ rpki-client -vvf repo.rpki.space/repo/Infiniroute/1/326131343a3763303a353830303a3a2f33382d3438203d3e20323134393637.roa
File: 326131343a3763303a353830303a3a2f33382d3438203d3e20323134393637.roa (raw, json)
Hash identifier: IlDSpvGZCz2BBnQwWqdbhezStMkV7P8UpO+hEXxImI8=
Subject key identifier: 32:46:3E:5F:56:0C:0D:EA:01:74:77:87:B1:6A:92:78:8A:47:DA:84
Certificate issuer: /CN=5b8e21c6890bd79ab764d91b60c39c3b7e4985e1
Certificate serial: 34D003C5C824A88280357D1856C6B3EBEBB15046
Authority key identifier: 5B:8E:21:C6:89:0B:D7:9A:B7:64:D9:1B:60:C3:9C:3B:7E:49:85:E1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/W44hxokL15q3ZNkbYMOcO35JheE.cer
Subject info access: rsync://repo.rpki.space/repo/Infiniroute/1/326131343a3763303a353830303a3a2f33382d3438203d3e20323134393637.roa
Signing time: Sat 18 Apr 2026 20:52:35 +0000
ROA not before: Sat 18 Apr 2026 20:47:35 +0000
ROA not after: Sat 17 Apr 2027 20:52:35 +0000
asID: 214967
IP address blocks: 2a14:7c0:5800::/38 maxlen: 48
Validation: OK
Signature path: rsync://repo.rpki.space/repo/Infiniroute/1/5B8E21C6890BD79AB764D91B60C39C3B7E4985E1.crl
rsync://repo.rpki.space/repo/Infiniroute/1/5B8E21C6890BD79AB764D91B60C39C3B7E4985E1.mft
rsync://rpki.ripe.net/repository/DEFAULT/W44hxokL15q3ZNkbYMOcO35JheE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Apr 2026 02:36:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
34:d0:03:c5:c8:24:a8:82:80:35:7d:18:56:c6:b3:eb:eb:b1:50:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5b8e21c6890bd79ab764d91b60c39c3b7e4985e1
Validity
Not Before: Apr 18 20:47:35 2026 GMT
Not After : Apr 17 20:52:35 2027 GMT
Subject: CN=32463E5F560C0DEA01747787B16A92788A47DA84
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:65:77:32:d1:3e:57:ce:57:78:17:b8:dc:72:
20:7d:e5:db:c6:a3:bf:2c:2a:66:93:9a:c2:5f:4f:
0c:ea:6c:49:e0:2c:a9:e9:cd:e8:ca:bb:ae:e3:1e:
bf:e7:df:7f:db:48:97:2a:45:11:20:a0:09:d6:08:
19:cf:e6:ae:f7:35:a4:69:58:f0:b7:64:e9:e9:6e:
52:2f:a1:ba:82:c8:e6:4e:13:73:60:8b:3f:b7:c8:
0b:de:87:72:42:15:b5:3d:7f:26:f7:c4:51:98:15:
37:d1:ed:9b:7b:eb:56:3f:46:d5:24:fd:b5:fa:44:
43:82:ef:f1:c8:12:b3:28:7b:d6:b0:2b:9b:4c:f5:
88:92:1f:0d:1e:d9:91:eb:67:e0:5c:44:5a:16:20:
cb:7b:32:eb:13:6d:ac:57:03:59:54:03:f3:df:c0:
6e:b1:f7:ed:f9:2a:5f:83:dd:c4:90:82:9a:e1:21:
67:66:bf:ef:1d:14:36:ee:34:96:f5:41:e3:74:d7:
d0:77:37:1d:39:20:83:97:46:c4:1f:50:a4:48:a2:
e6:a7:12:1d:92:2a:d3:35:02:69:e2:62:84:58:43:
4f:9f:88:ce:68:a4:2a:10:0e:94:a4:b7:45:7a:9d:
20:95:0d:c6:6a:9d:c7:1b:f5:ee:90:3c:5d:84:2e:
3a:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:46:3E:5F:56:0C:0D:EA:01:74:77:87:B1:6A:92:78:8A:47:DA:84
X509v3 Authority Key Identifier:
keyid:5B:8E:21:C6:89:0B:D7:9A:B7:64:D9:1B:60:C3:9C:3B:7E:49:85:E1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo.rpki.space/repo/Infiniroute/1/5B8E21C6890BD79AB764D91B60C39C3B7E4985E1.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W44hxokL15q3ZNkbYMOcO35JheE.cer
Subject Information Access:
Signed Object - URI:rsync://repo.rpki.space/repo/Infiniroute/1/326131343a3763303a353830303a3a2f33382d3438203d3e20323134393637.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7c0:5800::/38
Signature Algorithm: sha256WithRSAEncryption
3e:f0:c8:ee:e7:be:7e:fa:44:28:d4:b5:ae:f6:77:fc:a6:8c:
56:c4:f5:87:a2:58:26:fe:f4:e8:d6:a8:29:33:b9:4d:20:4c:
19:f3:f9:e7:c8:bd:c9:bd:be:4e:e1:1a:5f:24:6b:c1:ba:7e:
aa:5f:59:1a:f5:09:b7:d4:2d:9c:76:07:3a:1f:10:c7:73:8c:
2d:8d:4c:17:4d:ab:66:e7:81:de:f9:e3:85:0e:9a:e8:b8:3a:
90:6d:e1:83:08:bc:49:65:6e:a8:96:3f:ac:ca:a1:28:9f:09:
0a:f6:69:6e:b7:7e:1f:f7:50:ae:4c:f2:2b:92:e4:15:18:35:
8e:86:e2:92:d7:f3:95:69:ba:50:21:3c:71:3b:bc:70:5a:70:
e2:4b:60:ae:e6:17:af:87:a0:5c:7b:9f:f0:05:e1:69:45:7c:
62:20:65:c9:4a:b9:93:68:9c:41:22:74:8a:13:ad:73:09:b9:
73:8c:5f:c9:08:4c:f1:8a:e3:a6:5a:45:01:05:82:97:9b:8e:
03:3a:31:ec:41:5a:1f:9f:4d:bf:e1:f6:b7:b4:2e:e9:9e:f6:
30:3b:07:f9:a6:bb:ee:ec:9b:c9:03:a3:b2:71:4c:cb:79:2e:
3f:01:4f:fa:15:7b:5e:5a:fc:5b:c9:44:88:20:d7:12:67:39:
d0:de:65:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 27 16:28:30 2026 by rpki-client