Route Origin Authorization
$ rpki-client -vvf repo.rpki.space/repo/Infiniroute/1/326131343a3763303a3830303a3a2f33382d3438203d3e20323135353331.roa
File: 326131343a3763303a3830303a3a2f33382d3438203d3e20323135353331.roa (raw, json)
Hash identifier: DakGHkBxzli+6zEGowTkKPEM7hd0YlEGgs8AdDPLGFE=
Subject key identifier: 4B:66:66:29:73:0E:06:BE:B2:89:F2:D8:75:69:C1:A2:0F:EB:0D:AD
Certificate issuer: /CN=5b8e21c6890bd79ab764d91b60c39c3b7e4985e1
Certificate serial: 35FEC0CE667E26D2536A5358EA2AB7F255642A7B
Authority key identifier: 5B:8E:21:C6:89:0B:D7:9A:B7:64:D9:1B:60:C3:9C:3B:7E:49:85:E1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/W44hxokL15q3ZNkbYMOcO35JheE.cer
Subject info access: rsync://repo.rpki.space/repo/Infiniroute/1/326131343a3763303a3830303a3a2f33382d3438203d3e20323135353331.roa
Signing time: Tue 31 Mar 2026 15:52:13 +0000
ROA not before: Tue 31 Mar 2026 15:47:13 +0000
ROA not after: Tue 30 Mar 2027 15:52:13 +0000
asID: 215531
IP address blocks: 2a14:7c0:800::/38 maxlen: 48
Validation: OK
Signature path: rsync://repo.rpki.space/repo/Infiniroute/1/5B8E21C6890BD79AB764D91B60C39C3B7E4985E1.crl
rsync://repo.rpki.space/repo/Infiniroute/1/5B8E21C6890BD79AB764D91B60C39C3B7E4985E1.mft
rsync://rpki.ripe.net/repository/DEFAULT/W44hxokL15q3ZNkbYMOcO35JheE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 10 Apr 2026 03:28:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
35:fe:c0:ce:66:7e:26:d2:53:6a:53:58:ea:2a:b7:f2:55:64:2a:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5b8e21c6890bd79ab764d91b60c39c3b7e4985e1
Validity
Not Before: Mar 31 15:47:13 2026 GMT
Not After : Mar 30 15:52:13 2027 GMT
Subject: CN=4B666629730E06BEB289F2D87569C1A20FEB0DAD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:32:4c:6f:82:e1:a3:0e:a6:1c:60:14:95:9a:
13:c5:72:ec:b3:6e:42:1b:ee:a2:05:2e:97:62:25:
d3:41:69:6a:88:42:85:ac:e8:c1:a5:58:96:7d:e7:
1f:b8:04:64:2e:2b:21:9b:e1:60:20:77:de:2d:ba:
9a:3b:eb:be:cb:72:3c:bc:9d:c2:63:7c:72:09:8f:
4c:17:9c:61:ad:3e:f9:4f:c4:3f:28:0c:a7:72:4e:
df:72:bb:f2:25:ce:3e:28:89:76:0d:ca:b1:f6:2d:
2e:4e:e1:52:f1:65:2d:01:ba:b3:6f:75:70:e8:ac:
f6:b0:c9:e9:c2:ed:cd:01:3b:25:0d:c5:ca:89:a8:
c6:01:67:a6:b6:ce:3a:6b:79:6a:55:cd:6b:35:41:
ae:c5:36:6a:fb:0d:cd:09:f5:d5:52:7b:3a:01:02:
40:52:c7:0b:9d:01:e2:b8:70:f5:4b:2e:9f:b0:a8:
03:e5:ce:11:75:32:5e:74:15:be:5a:a2:f4:b2:83:
91:64:53:11:a8:a9:d2:c9:4e:6a:53:b7:29:fd:f1:
20:ca:9b:56:8a:ff:8c:9a:f7:65:ed:35:e8:99:41:
66:86:b9:78:fd:ef:bd:c9:90:7f:64:c0:2e:44:23:
a1:b6:97:89:90:e4:56:05:88:48:f2:04:bf:c0:1b:
40:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:66:66:29:73:0E:06:BE:B2:89:F2:D8:75:69:C1:A2:0F:EB:0D:AD
X509v3 Authority Key Identifier:
keyid:5B:8E:21:C6:89:0B:D7:9A:B7:64:D9:1B:60:C3:9C:3B:7E:49:85:E1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo.rpki.space/repo/Infiniroute/1/5B8E21C6890BD79AB764D91B60C39C3B7E4985E1.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W44hxokL15q3ZNkbYMOcO35JheE.cer
Subject Information Access:
Signed Object - URI:rsync://repo.rpki.space/repo/Infiniroute/1/326131343a3763303a3830303a3a2f33382d3438203d3e20323135353331.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7c0:800::/38
Signature Algorithm: sha256WithRSAEncryption
3f:5b:a2:4f:29:91:c3:19:bf:d8:f7:1c:b2:5b:15:de:72:7f:
6e:92:de:fc:d0:88:13:0b:a7:c8:87:4f:db:3c:c8:e3:0d:70:
19:80:ad:e0:f7:b9:72:7b:f4:c6:c7:92:9a:cf:51:a1:d7:ca:
4d:0b:bb:43:dc:c3:57:c7:ee:79:de:a8:38:98:a2:62:a3:63:
12:9b:6a:83:1b:a4:da:75:fe:88:31:84:f6:7e:c2:57:5c:5c:
df:c6:89:5e:5b:cd:f7:9e:2e:71:c6:7f:f4:c1:b9:39:fe:f1:
58:2a:f8:6d:19:70:36:6a:fb:45:00:0c:b4:dd:bd:fd:d2:cd:
c5:6f:4a:52:fc:69:20:de:49:1a:3c:68:81:15:8a:c1:5c:61:
c2:23:de:fd:ba:32:62:a0:b0:6a:09:a8:78:be:fa:60:dd:f0:
8c:b0:0f:26:37:a3:18:c6:57:35:29:ff:2d:88:34:3c:3a:57:
d2:3f:99:1a:af:1a:f1:c6:03:7a:2c:9b:30:2b:e5:25:aa:40:
57:75:ca:04:71:50:92:a8:f8:d4:6e:e6:a1:3f:f6:e4:f1:7a:
7c:5f:d9:47:8b:ce:e5:22:90:18:77:4c:a3:ec:c4:3d:e8:57:
bb:51:c8:20:12:08:30:1b:2e:dd:aa:77:d1:68:15:b7:08:32:
b2:56:64:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 9 17:59:21 2026 by rpki-client