Route Origin Authorization
$ rpki-client -vvvf repo.rpki.space/repo/Infiniroute/1/326131343a3763303a663030323a3a2f34382d3438203d3e20323139343933.roa
File: 326131343a3763303a663030323a3a2f34382d3438203d3e20323139343933.roa (raw, json)
Hash identifier: mRIidvfIGKRh79lk2ADMp/sf94uqXdrrx9DOdrHcokA=
Subject key identifier: E7:7B:32:A2:5A:7B:2F:6A:13:0B:6B:87:04:C5:5E:4B:05:42:30:DB
Certificate issuer: /CN=5b8e21c6890bd79ab764d91b60c39c3b7e4985e1
Certificate serial: 7172CDEA5494307ABE382F3270070D2D377A571B
Authority key identifier: 5B:8E:21:C6:89:0B:D7:9A:B7:64:D9:1B:60:C3:9C:3B:7E:49:85:E1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/W44hxokL15q3ZNkbYMOcO35JheE.cer
Subject info access: rsync://repo.rpki.space/repo/Infiniroute/1/326131343a3763303a663030323a3a2f34382d3438203d3e20323139343933.roa
Signing time: Tue 08 Sep 2026 20:30:42 +0000
ROA not before: Tue 08 Sep 2026 20:25:42 +0000
ROA not after: Tue 07 Sep 2027 20:30:42 +0000
asID: 219493
IP address blocks: 2a14:7c0:f002::/48 maxlen: 48
Validation: OK
Signature path: rsync://repo.rpki.space/repo/Infiniroute/1/5B8E21C6890BD79AB764D91B60C39C3B7E4985E1.crl
rsync://repo.rpki.space/repo/Infiniroute/1/5B8E21C6890BD79AB764D91B60C39C3B7E4985E1.mft
rsync://rpki.ripe.net/repository/DEFAULT/W44hxokL15q3ZNkbYMOcO35JheE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 12:07:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
71:72:cd:ea:54:94:30:7a:be:38:2f:32:70:07:0d:2d:37:7a:57:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5b8e21c6890bd79ab764d91b60c39c3b7e4985e1
Validity
Not Before: Sep 8 20:25:42 2026 GMT
Not After : Sep 7 20:30:42 2027 GMT
Subject: CN=E77B32A25A7B2F6A130B6B8704C55E4B054230DB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:15:3f:d4:72:d1:cc:8b:29:09:9e:cd:cd:bb:
83:36:61:f9:a3:54:2c:4f:ca:40:ab:23:c3:9b:d4:
0a:86:07:4f:50:03:29:b2:c9:17:c8:b2:e7:de:e0:
b8:93:93:15:02:2b:b4:b3:3e:26:c7:e4:89:7e:79:
2d:43:d0:1f:0d:b4:8a:6c:22:52:62:83:3c:a2:73:
fa:f1:1b:6b:07:d0:e8:82:f8:b8:94:b4:0e:bf:ed:
e5:c8:e7:e0:e6:1f:c5:d5:1f:76:05:55:be:3a:b6:
6a:d3:05:d6:85:f5:64:86:68:76:53:31:3f:35:ea:
c4:b0:26:85:3e:0a:2e:a6:40:bb:99:60:af:92:a1:
ca:b1:01:63:9d:6f:ad:08:67:7f:dd:a8:4c:15:a3:
a8:2b:84:e2:71:22:0c:c5:7b:13:68:01:8c:f1:0b:
e5:db:db:25:27:8d:7d:57:6d:b9:42:f4:00:5f:ea:
e3:d4:aa:37:54:b2:fd:f5:cc:7d:e3:2c:8e:99:b4:
72:44:33:46:1d:24:5d:51:39:d8:3e:28:8c:c3:e6:
3f:eb:5d:95:b3:9d:85:23:9e:ac:a0:31:a0:12:c4:
b7:96:26:d6:c7:b1:27:bc:0c:77:6a:d8:2f:2a:ff:
0f:11:f1:be:b0:52:82:69:3c:0e:f6:cc:c8:f0:f4:
7b:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:7B:32:A2:5A:7B:2F:6A:13:0B:6B:87:04:C5:5E:4B:05:42:30:DB
X509v3 Authority Key Identifier:
keyid:5B:8E:21:C6:89:0B:D7:9A:B7:64:D9:1B:60:C3:9C:3B:7E:49:85:E1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo.rpki.space/repo/Infiniroute/1/5B8E21C6890BD79AB764D91B60C39C3B7E4985E1.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W44hxokL15q3ZNkbYMOcO35JheE.cer
Subject Information Access:
Signed Object - URI:rsync://repo.rpki.space/repo/Infiniroute/1/326131343a3763303a663030323a3a2f34382d3438203d3e20323139343933.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7c0:f002::/48
Signature Algorithm: sha256WithRSAEncryption
76:9d:b8:46:4c:a3:36:3e:a5:69:3b:fd:e2:e7:e0:93:1e:7d:
03:2a:18:08:0b:11:15:db:40:55:5e:35:69:a1:38:2b:d2:68:
6b:36:08:33:0f:98:63:78:a2:00:b1:92:ca:aa:5f:86:65:69:
14:ce:94:83:d7:3c:4b:4a:f5:7c:46:27:5d:f1:69:39:25:ce:
b4:c4:b7:90:98:2e:87:82:6f:c6:15:fe:3b:64:86:99:13:7f:
d1:81:70:91:ea:47:76:32:4f:cc:a0:46:84:1f:2d:21:78:7a:
ee:38:2d:91:ec:b7:1d:9f:5d:b2:2f:ab:98:b0:0f:7c:72:e7:
ba:51:61:52:4f:c6:43:5d:11:ce:a4:10:1d:29:26:41:f3:cc:
11:39:3a:c2:d7:b7:49:09:ec:9a:2f:62:5c:d5:07:61:c9:27:
40:3a:57:b8:a4:32:3a:83:5a:7a:45:f8:65:13:80:50:16:f0:
b7:3d:77:f0:35:12:7b:35:54:ca:2a:45:c9:1c:10:e2:bc:79:
cd:47:51:20:06:b3:87:6f:d6:bd:a9:1a:04:10:fe:21:51:16:
6c:36:be:71:03:49:62:2b:68:21:1f:f9:02:0f:3e:d2:1c:f6:
56:e1:ee:8f:c4:44:c2:dc:b5:0f:20:f3:b8:e7:b0:78:83:fc:
bc:07:9a:1b
-----BEGIN CERTIFICATE-----
MIIE5DCCA8ygAwIBAgIUcXLN6lSUMHq+OC8ycAcNLTd6VxswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNWI4ZTIxYzY4OTBiZDc5YWI3NjRkOTFiNjBjMzljM2I3
ZTQ5ODVlMTAeFw0yNjA5MDgyMDI1NDJaFw0yNzA5MDcyMDMwNDJaMDMxMTAvBgNV
BAMTKEU3N0IzMkEyNUE3QjJGNkExMzBCNkI4NzA0QzU1RTRCMDU0MjMwREIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCnFT/UctHMiykJns3Nu4M2Yfmj
VCxPykCrI8Ob1AqGB09QAymyyRfIsufe4LiTkxUCK7SzPibH5Il+eS1D0B8NtIps
IlJigzyic/rxG2sH0OiC+LiUtA6/7eXI5+DmH8XVH3YFVb46tmrTBdaF9WSGaHZT
MT816sSwJoU+Ci6mQLuZYK+SocqxAWOdb60IZ3/dqEwVo6grhOJxIgzFexNoAYzx
C+Xb2yUnjX1XbblC9ABf6uPUqjdUsv31zH3jLI6ZtHJEM0YdJF1ROdg+KIzD5j/r
XZWznYUjnqygMaASxLeWJtbHsSe8DHdq2C8q/w8R8b6wUoJpPA72zMjw9HthAgMB
AAGjggHuMIIB6jAdBgNVHQ4EFgQU53syolp7L2oTC2uHBMVeSwVCMNswHwYDVR0j
BBgwFoAUW44hxokL15q3ZNkbYMOcO35JheEwDgYDVR0PAQH/BAQDAgeAMGgGA1Ud
HwRhMF8wXaBboFmGV3JzeW5jOi8vcmVwby5ycGtpLnNwYWNlL3JlcG8vSW5maW5p
cm91dGUvMS81QjhFMjFDNjg5MEJENzlBQjc2NEQ5MUI2MEMzOUMzQjdFNDk4NUUx
LmNybDBkBggrBgEFBQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5y
aXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvVzQ0aHhva0wxNXEzWk5rYllNT2NP
MzVKaGVFLmNlcjCBiQYIKwYBBQUHAQsEfTB7MHkGCCsGAQUFBzALhm1yc3luYzov
L3JlcG8ucnBraS5zcGFjZS9yZXBvL0luZmluaXJvdXRlLzEvMzI2MTMxMzQzYTM3
NjMzMDNhNjYzMDMwMzIzYTNhMmYzNDM4MmQzNDM4MjAzZDNlMjAzMjMxMzkzNDM5
MzMucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8E
EzARMA8EAgACMAkDBwAqFAfA8AIwDQYJKoZIhvcNAQELBQADggEBAHaduEZMozY+
pWk7/eLn4JMefQMqGAgLERXbQFVeNWmhOCvSaGs2CDMPmGN4ogCxksqqX4ZlaRTO
lIPXPEtK9XxGJ13xaTklzrTEt5CYLoeCb8YV/jtkhpkTf9GBcJHqR3YyT8ygRoQf
LSF4eu44LZHstx2fXbIvq5iwD3xy57pRYVJPxkNdEc6kEB0pJkHzzBE5OsLXt0kJ
7JovYlzVB2HJJ0A6V7ikMjqDWnpF+GUTgFAW8Lc9d/A1Ens1VMoqRckcEOK8ec1H
USAGs4dv1r2pGgQQ/iFRFmw2vnEDSWIraCEf+QIPPtIc9lbh7o/ERMLctQ8g87jn
sHiD/LwHmhs=
-----END CERTIFICATE-----
Generated at Thu Sep 10 19:37:02 2026 by rpki-client