Route Origin Authorization
$ rpki-client -vvvf repo.rpki.space/repo/Infiniroute/1/326131343a3763303a363830303a3a2f34302d3438203d3e20323136333637.roa
File: 326131343a3763303a363830303a3a2f34302d3438203d3e20323136333637.roa (raw, json)
Hash identifier: RsiA297iL2MXdeHG9rZuSthh+c6mO8dfQ2NWUSfWPOk=
Subject key identifier: 29:55:ED:B4:4D:57:79:B6:2E:F2:26:47:4C:9D:83:8F:E8:07:03:37
Certificate issuer: /CN=5b8e21c6890bd79ab764d91b60c39c3b7e4985e1
Certificate serial: 68745AC550F81C37FBD6195A71E8CDE7B12CF948
Authority key identifier: 5B:8E:21:C6:89:0B:D7:9A:B7:64:D9:1B:60:C3:9C:3B:7E:49:85:E1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/W44hxokL15q3ZNkbYMOcO35JheE.cer
Subject info access: rsync://repo.rpki.space/repo/Infiniroute/1/326131343a3763303a363830303a3a2f34302d3438203d3e20323136333637.roa
Signing time: Tue 20 Oct 2026 17:42:20 +0000
ROA not before: Tue 20 Oct 2026 17:37:20 +0000
ROA not after: Tue 19 Oct 2027 17:42:20 +0000
asID: 216367
IP address blocks: 2a14:7c0:6800::/40 maxlen: 48
Validation: OK
Signature path: rsync://repo.rpki.space/repo/Infiniroute/1/5B8E21C6890BD79AB764D91B60C39C3B7E4985E1.crl
rsync://repo.rpki.space/repo/Infiniroute/1/5B8E21C6890BD79AB764D91B60C39C3B7E4985E1.mft
rsync://rpki.ripe.net/repository/DEFAULT/W44hxokL15q3ZNkbYMOcO35JheE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 24 Oct 2026 02:46:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
68:74:5a:c5:50:f8:1c:37:fb:d6:19:5a:71:e8:cd:e7:b1:2c:f9:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5b8e21c6890bd79ab764d91b60c39c3b7e4985e1
Validity
Not Before: Oct 20 17:37:20 2026 GMT
Not After : Oct 19 17:42:20 2027 GMT
Subject: CN=2955EDB44D5779B62EF226474C9D838FE8070337
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:d0:b2:d6:4d:28:f5:85:3d:8a:67:a9:d2:c7:
ce:2d:d9:a6:36:6c:c1:97:a9:95:2e:29:c9:fe:2a:
59:94:0e:a9:00:35:60:cd:17:50:a2:56:50:2a:78:
a6:46:03:bb:b4:c4:29:14:95:cb:7d:d6:12:fe:f7:
a8:01:bd:b6:b3:cc:72:70:a7:ca:f3:ec:11:a3:28:
05:8f:c5:95:46:12:21:1a:ba:99:45:e6:43:bb:bd:
e1:63:5a:da:5c:ef:6f:62:30:f9:9d:9b:cf:5b:60:
80:96:1f:16:ec:0a:cd:d5:6a:37:17:5a:f1:e6:9d:
0c:83:7b:28:20:c1:ee:a3:40:ca:ad:c2:f8:fb:b5:
da:2f:21:66:1f:28:a9:48:3c:af:9b:40:19:d7:05:
cb:27:f0:59:ea:b0:55:f8:8e:8f:dc:09:86:21:e9:
19:62:c9:d3:35:36:a7:bd:e2:98:f3:f1:0b:d5:06:
13:68:d3:01:d7:fc:16:6a:a9:b8:db:76:7b:0d:30:
52:09:6f:54:65:29:0d:0b:4b:1b:db:e0:f1:34:cb:
1b:e9:e2:e0:06:d7:1c:8b:6b:9a:d0:a3:b0:e7:d6:
25:4f:d1:7c:10:3a:8b:9f:03:d8:18:f5:f0:74:49:
0a:8d:f0:90:de:e6:84:15:51:62:58:4e:e0:94:78:
ea:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:55:ED:B4:4D:57:79:B6:2E:F2:26:47:4C:9D:83:8F:E8:07:03:37
X509v3 Authority Key Identifier:
keyid:5B:8E:21:C6:89:0B:D7:9A:B7:64:D9:1B:60:C3:9C:3B:7E:49:85:E1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo.rpki.space/repo/Infiniroute/1/5B8E21C6890BD79AB764D91B60C39C3B7E4985E1.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W44hxokL15q3ZNkbYMOcO35JheE.cer
Subject Information Access:
Signed Object - URI:rsync://repo.rpki.space/repo/Infiniroute/1/326131343a3763303a363830303a3a2f34302d3438203d3e20323136333637.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7c0:6800::/40
Signature Algorithm: sha256WithRSAEncryption
87:5c:f7:d2:e2:e1:70:50:2b:b9:64:66:3f:83:b0:86:74:47:
28:cc:f6:83:36:14:74:fb:26:27:e6:6c:c5:b4:6b:fe:37:24:
46:81:e4:0b:e6:06:6b:6d:e1:ad:ca:b6:82:71:8f:5f:3b:d5:
24:ca:63:47:4a:d7:5b:d4:dd:ca:71:3a:17:de:ab:0b:06:96:
5b:f8:d7:62:b6:c3:9c:9d:86:aa:c2:13:a7:e2:39:54:56:8c:
11:2c:d4:be:4b:85:7b:de:81:0d:5a:3c:0f:73:5b:70:9e:45:
13:70:43:56:11:59:98:97:59:f0:53:65:0c:8c:a0:35:d4:f2:
ff:c6:85:9e:b2:1d:1f:83:7b:54:ee:05:e6:33:be:4c:43:27:
12:5a:f7:a2:7d:e7:fe:4b:93:31:0f:46:34:64:3e:27:4e:8d:
19:9d:84:be:44:18:43:4d:ff:a6:ab:73:7c:74:1f:64:78:04:
9e:d2:9b:9b:40:f1:88:a7:ba:ff:83:0c:e7:54:91:bd:1b:eb:
e6:c6:30:a8:da:ea:3b:e7:9b:1c:fb:3a:5c:6f:a9:11:1f:20:
17:1e:f8:ec:08:b2:80:59:c3:af:8f:c0:24:a9:3e:ef:32:98:
d6:d9:6a:07:c1:dc:84:ad:1d:b8:bd:f5:80:f6:95:f7:b1:1f:
c8:58:e6:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 23 14:33:18 2026 by rpki-client