Route Origin Authorization
$ rpki-client -vvf repo.rpki.space/repo/Infiniroute/1/326131343a3763303a356330303a3a2f34302d3430203d3e20323134353332.roa
File: 326131343a3763303a356330303a3a2f34302d3430203d3e20323134353332.roa (raw, json)
Hash identifier: 1a7+0I60g81i74SB0G4PARQPr/aIbawLuj7ZXwS4+aA=
Subject key identifier: E7:33:59:C3:04:DA:B6:BF:4D:51:58:32:E9:85:E0:C2:CF:9C:90:B9
Certificate issuer: /CN=5b8e21c6890bd79ab764d91b60c39c3b7e4985e1
Certificate serial: 41FAA4C831DFA3A15003E0513D4B64F86E0C2540
Authority key identifier: 5B:8E:21:C6:89:0B:D7:9A:B7:64:D9:1B:60:C3:9C:3B:7E:49:85:E1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/W44hxokL15q3ZNkbYMOcO35JheE.cer
Subject info access: rsync://repo.rpki.space/repo/Infiniroute/1/326131343a3763303a356330303a3a2f34302d3430203d3e20323134353332.roa
Signing time: Mon 27 Jul 2026 08:14:59 +0000
ROA not before: Mon 27 Jul 2026 08:09:59 +0000
ROA not after: Mon 26 Jul 2027 08:14:59 +0000
asID: 214532
IP address blocks: 2a14:7c0:5c00::/40 maxlen: 40
Validation: OK
Signature path: rsync://repo.rpki.space/repo/Infiniroute/1/5B8E21C6890BD79AB764D91B60C39C3B7E4985E1.crl
rsync://repo.rpki.space/repo/Infiniroute/1/5B8E21C6890BD79AB764D91B60C39C3B7E4985E1.mft
rsync://rpki.ripe.net/repository/DEFAULT/W44hxokL15q3ZNkbYMOcO35JheE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
41:fa:a4:c8:31:df:a3:a1:50:03:e0:51:3d:4b:64:f8:6e:0c:25:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5b8e21c6890bd79ab764d91b60c39c3b7e4985e1
Validity
Not Before: Jul 27 08:09:59 2026 GMT
Not After : Jul 26 08:14:59 2027 GMT
Subject: CN=E73359C304DAB6BF4D515832E985E0C2CF9C90B9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:17:45:a1:5b:9e:34:e8:25:67:d8:2e:5f:7c:
b2:d0:28:ac:ff:8e:ff:c8:32:53:76:b2:86:bf:71:
99:f8:c1:1b:66:5f:bb:6a:51:e7:de:42:13:f3:68:
5e:59:14:9a:61:23:3e:7f:e0:7a:31:22:3c:ca:31:
3b:0d:ae:4a:ba:9e:92:c0:e9:36:e0:f3:ba:14:7f:
ca:89:40:3e:da:46:94:fc:66:77:6e:2c:2a:8c:ad:
15:89:6c:30:17:22:27:2d:09:d0:0a:a2:4f:27:5c:
58:a6:3f:9b:42:28:5c:a6:b3:e6:d9:ea:a4:f3:48:
c9:7e:1f:70:01:e9:df:3c:0b:86:bb:e8:c3:de:76:
66:72:c7:e4:25:a3:75:bc:80:29:cc:86:0f:c1:01:
1c:63:e0:6f:2d:8e:32:30:39:33:8b:06:9d:1d:1d:
d6:8f:78:72:fd:e7:fe:fa:db:3d:ac:8f:dc:f8:dd:
6a:f2:d9:1f:a8:e1:4f:03:2f:8d:80:73:b3:c3:d9:
a7:3b:cf:05:69:ba:49:19:57:a7:70:71:cd:4a:31:
c5:cc:37:d3:47:b1:43:8c:14:15:87:a3:b1:4b:a8:
00:13:1c:28:9e:b0:c9:46:17:7f:e3:4c:08:a9:b5:
6c:62:68:a7:2f:32:df:83:10:ac:b0:c7:40:5f:b2:
3d:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:33:59:C3:04:DA:B6:BF:4D:51:58:32:E9:85:E0:C2:CF:9C:90:B9
X509v3 Authority Key Identifier:
keyid:5B:8E:21:C6:89:0B:D7:9A:B7:64:D9:1B:60:C3:9C:3B:7E:49:85:E1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo.rpki.space/repo/Infiniroute/1/5B8E21C6890BD79AB764D91B60C39C3B7E4985E1.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W44hxokL15q3ZNkbYMOcO35JheE.cer
Subject Information Access:
Signed Object - URI:rsync://repo.rpki.space/repo/Infiniroute/1/326131343a3763303a356330303a3a2f34302d3430203d3e20323134353332.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7c0:5c00::/40
Signature Algorithm: sha256WithRSAEncryption
59:a6:63:bc:b5:a3:49:72:60:61:ab:6e:bc:da:5c:3a:7d:8d:
af:10:86:1f:d3:6a:b5:bf:f0:ae:f1:f6:9e:24:3c:07:21:cd:
04:ea:1a:d1:a9:10:ba:dd:ba:dd:13:73:0d:56:f3:62:f2:90:
0b:7a:fb:8e:46:ef:ea:8b:d0:87:dd:6f:29:45:7a:69:d9:56:
12:e4:ad:3b:55:53:2f:99:8f:a3:c1:a8:af:63:67:d5:78:6a:
3a:27:73:b7:7e:cd:3a:96:63:8b:34:43:36:a4:61:01:13:c1:
72:24:57:14:55:1e:f1:91:6e:8c:69:cc:58:41:86:ba:ca:44:
f0:83:5c:fe:af:33:ed:7f:4c:a1:35:29:e2:b7:d1:5a:95:07:
ab:f4:16:8a:16:eb:bb:19:f7:e3:98:14:b4:58:e1:df:ec:08:
8a:0f:cc:70:b5:50:aa:a7:23:89:8e:f9:02:7c:ff:a6:88:7f:
f4:aa:10:46:00:db:40:88:89:19:08:76:47:3a:18:30:f1:03:
0f:43:08:24:3c:44:9d:9d:4c:84:cd:b7:28:fe:a7:60:9b:b8:
24:89:75:0c:fc:a1:a6:ed:b1:bd:e7:e3:e6:ba:84:c5:ce:1a:
67:ac:0a:30:8d:c2:6e:57:89:10:59:75:c8:92:28:7d:53:e0:
f1:bc:99:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 11:06:02 2026 by rpki-client