Route Origin Authorization
$ rpki-client -vvvf repo.rpki.space/repo/Infiniroute/1/326131343a3763303a653030303a3a2f33362d3336203d3e203531333936.roa
File: 326131343a3763303a653030303a3a2f33362d3336203d3e203531333936.roa (raw, json)
Hash identifier: ENZVocV+s/2jzroq4Vx0byMxWpvw9nCToDrlqxcOyyA=
Subject key identifier: 35:BF:AD:07:0F:E9:8E:63:A0:67:41:EC:03:AB:BC:8B:02:4D:E8:A3
Certificate issuer: /CN=5b8e21c6890bd79ab764d91b60c39c3b7e4985e1
Certificate serial: 433C186FFB62F791D74FBB9FF026D02753224003
Authority key identifier: 5B:8E:21:C6:89:0B:D7:9A:B7:64:D9:1B:60:C3:9C:3B:7E:49:85:E1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/W44hxokL15q3ZNkbYMOcO35JheE.cer
Subject info access: rsync://repo.rpki.space/repo/Infiniroute/1/326131343a3763303a653030303a3a2f33362d3336203d3e203531333936.roa
Signing time: Wed 02 Sep 2026 15:15:00 +0000
ROA not before: Wed 02 Sep 2026 15:10:00 +0000
ROA not after: Wed 01 Sep 2027 15:15:00 +0000
asID: 51396
IP address blocks: 2a14:7c0:e000::/36 maxlen: 36
Validation: OK
Signature path: rsync://repo.rpki.space/repo/Infiniroute/1/5B8E21C6890BD79AB764D91B60C39C3B7E4985E1.crl
rsync://repo.rpki.space/repo/Infiniroute/1/5B8E21C6890BD79AB764D91B60C39C3B7E4985E1.mft
rsync://rpki.ripe.net/repository/DEFAULT/W44hxokL15q3ZNkbYMOcO35JheE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 12:07:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
43:3c:18:6f:fb:62:f7:91:d7:4f:bb:9f:f0:26:d0:27:53:22:40:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5b8e21c6890bd79ab764d91b60c39c3b7e4985e1
Validity
Not Before: Sep 2 15:10:00 2026 GMT
Not After : Sep 1 15:15:00 2027 GMT
Subject: CN=35BFAD070FE98E63A06741EC03ABBC8B024DE8A3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:6c:a3:c0:76:c2:ac:d9:40:14:39:0f:34:ac:
ba:30:37:c7:c6:97:d2:1d:12:df:92:38:37:af:31:
60:b6:9a:2e:41:f2:57:4c:d7:c5:c5:ed:13:b2:82:
1c:76:47:9d:cb:34:56:4a:a5:70:38:d3:c1:3b:28:
6d:ec:80:c7:79:e9:24:64:17:e5:0a:cd:f1:d4:a1:
5a:d4:e1:91:ab:94:33:dc:cd:94:0f:79:a7:c6:57:
cc:2f:7f:4c:22:5e:7d:e6:eb:ac:e9:3e:ae:08:60:
51:e3:12:35:7a:6e:15:88:5c:c4:ea:c3:60:a6:3a:
40:1b:7d:95:70:47:1b:c7:b1:8c:a8:74:9a:2e:5a:
c3:25:a0:8b:ac:b4:bf:e7:fe:f1:a8:53:6f:fd:5e:
60:b6:64:79:e3:42:c0:62:18:c1:0d:94:5e:cc:b5:
ba:78:a8:f6:41:61:f5:1c:81:9c:25:d6:ac:48:9f:
f9:28:92:ee:44:52:7a:26:59:f6:fb:4d:66:96:e4:
0b:94:d3:f9:2b:5a:66:3f:df:49:36:be:8a:eb:a3:
d7:44:c8:ce:e7:eb:50:41:ee:5a:aa:b2:66:4b:e5:
76:a7:5b:3a:0c:72:ab:07:7e:87:2d:2a:6e:97:f7:
8d:09:ba:af:62:43:7c:6c:a9:d6:07:14:c1:a2:20:
b0:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:BF:AD:07:0F:E9:8E:63:A0:67:41:EC:03:AB:BC:8B:02:4D:E8:A3
X509v3 Authority Key Identifier:
keyid:5B:8E:21:C6:89:0B:D7:9A:B7:64:D9:1B:60:C3:9C:3B:7E:49:85:E1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo.rpki.space/repo/Infiniroute/1/5B8E21C6890BD79AB764D91B60C39C3B7E4985E1.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W44hxokL15q3ZNkbYMOcO35JheE.cer
Subject Information Access:
Signed Object - URI:rsync://repo.rpki.space/repo/Infiniroute/1/326131343a3763303a653030303a3a2f33362d3336203d3e203531333936.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7c0:e000::/36
Signature Algorithm: sha256WithRSAEncryption
8c:da:ce:70:32:b1:50:2a:bb:2d:fc:c2:90:98:0f:70:2d:ae:
30:73:96:9b:d0:de:47:61:88:19:8a:28:17:e5:a8:75:dd:ba:
fe:a6:9f:8d:38:6e:d6:54:f9:a4:56:83:28:4a:f5:df:6f:b6:
3e:b2:7a:00:d9:90:47:a3:88:91:1c:1b:03:a3:0b:2b:b4:28:
a4:64:be:0b:f4:9d:39:dd:ea:0a:71:2f:18:0d:45:82:98:b4:
66:35:f0:a5:05:0f:3f:6e:be:a2:34:d8:cb:78:8f:d4:03:94:
86:ef:00:9e:d4:c5:da:e6:1f:c4:0e:78:7c:5a:f2:bd:d5:96:
e9:f5:fb:60:9f:46:fe:ef:c2:4d:bf:f9:c7:ef:4c:e4:6f:d8:
df:fd:78:87:f3:8b:c6:4a:20:66:79:ed:b4:92:39:eb:f6:cc:
64:44:11:1a:d6:3b:98:a8:2e:ef:a9:3e:7f:18:98:10:4f:42:
74:11:ca:be:39:6a:03:e6:48:ae:d8:5b:52:1b:de:d4:c6:d8:
66:af:f5:38:1a:48:3e:e4:a4:c2:03:9d:0e:d6:65:28:c0:7e:
1a:3f:6c:a2:a8:df:ad:5c:da:29:f6:5b:e1:c6:9a:58:e4:5b:
e1:7a:77:21:ad:22:3b:61:2b:c8:ff:d6:27:d8:34:54:44:44:
d0:f6:47:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 19:39:23 2026 by rpki-client