Route Origin Authorization
$ rpki-client -vvf repo.rpki.space/repo/Infiniroute/1/326131343a3763303a313030303a3a2f33382d3438203d3e20323135333635.roa
File: 326131343a3763303a313030303a3a2f33382d3438203d3e20323135333635.roa (raw, json)
Hash identifier: MZ65te72kSmdgWlLOdxoiGTtz8UaGaGLEmqNdjT2CRQ=
Subject key identifier: 3A:9B:9D:15:00:84:04:6B:C9:31:0C:A4:CF:F2:FA:34:C3:FF:E3:65
Certificate issuer: /CN=5b8e21c6890bd79ab764d91b60c39c3b7e4985e1
Certificate serial: 17920726F07075F4A24B5875DC3342CFFF06D53F
Authority key identifier: 5B:8E:21:C6:89:0B:D7:9A:B7:64:D9:1B:60:C3:9C:3B:7E:49:85:E1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/W44hxokL15q3ZNkbYMOcO35JheE.cer
Subject info access: rsync://repo.rpki.space/repo/Infiniroute/1/326131343a3763303a313030303a3a2f33382d3438203d3e20323135333635.roa
Signing time: Tue 31 Mar 2026 15:52:10 +0000
ROA not before: Tue 31 Mar 2026 15:47:10 +0000
ROA not after: Tue 30 Mar 2027 15:52:10 +0000
asID: 215365
IP address blocks: 2a14:7c0:1000::/38 maxlen: 48
Validation: OK
Signature path: rsync://repo.rpki.space/repo/Infiniroute/1/5B8E21C6890BD79AB764D91B60C39C3B7E4985E1.crl
rsync://repo.rpki.space/repo/Infiniroute/1/5B8E21C6890BD79AB764D91B60C39C3B7E4985E1.mft
rsync://rpki.ripe.net/repository/DEFAULT/W44hxokL15q3ZNkbYMOcO35JheE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 06:18:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
17:92:07:26:f0:70:75:f4:a2:4b:58:75:dc:33:42:cf:ff:06:d5:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5b8e21c6890bd79ab764d91b60c39c3b7e4985e1
Validity
Not Before: Mar 31 15:47:10 2026 GMT
Not After : Mar 30 15:52:10 2027 GMT
Subject: CN=3A9B9D150084046BC9310CA4CFF2FA34C3FFE365
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:c0:18:c7:a7:f7:9f:de:ed:2b:e2:c4:af:ca:
b4:82:70:6c:58:e5:db:76:e9:c7:33:ac:17:0b:56:
5b:f7:c8:b4:6e:94:0c:79:9d:e4:4d:6d:a2:53:16:
dc:29:ac:5f:dd:da:25:33:00:f6:f0:b3:04:84:72:
ce:6f:8e:13:f8:8b:6c:33:22:30:51:44:ff:4a:d1:
a4:4f:26:1d:fc:50:da:55:a4:c8:31:11:d9:72:f0:
59:2b:b4:4c:4f:00:37:a5:71:64:da:6a:02:fc:1b:
1a:f3:5f:38:2c:b7:7b:04:aa:c5:95:f3:9e:33:6f:
83:24:42:ff:1d:58:8c:49:f1:f2:6f:78:ba:47:c4:
02:23:21:7a:9b:67:b8:1f:a9:af:21:73:f1:00:d9:
12:16:08:e5:ab:8e:9c:1a:0d:2b:3d:2d:6c:a8:57:
8a:d0:a4:1a:fd:ea:e4:4b:16:19:d4:dc:de:6e:85:
6c:06:af:de:37:b5:12:ea:23:96:4c:1d:7f:a6:18:
34:7a:4a:82:f4:99:b0:b6:94:c7:19:ea:30:3e:c7:
01:68:d3:e9:bf:22:d7:5c:48:e8:70:a4:2b:4f:70:
ec:08:54:29:f3:75:7a:38:4d:98:78:b6:65:8b:d6:
1c:1e:21:d1:e1:70:c6:d3:1c:cd:fa:db:7e:4a:1f:
c8:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:9B:9D:15:00:84:04:6B:C9:31:0C:A4:CF:F2:FA:34:C3:FF:E3:65
X509v3 Authority Key Identifier:
keyid:5B:8E:21:C6:89:0B:D7:9A:B7:64:D9:1B:60:C3:9C:3B:7E:49:85:E1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo.rpki.space/repo/Infiniroute/1/5B8E21C6890BD79AB764D91B60C39C3B7E4985E1.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W44hxokL15q3ZNkbYMOcO35JheE.cer
Subject Information Access:
Signed Object - URI:rsync://repo.rpki.space/repo/Infiniroute/1/326131343a3763303a313030303a3a2f33382d3438203d3e20323135333635.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7c0:1000::/38
Signature Algorithm: sha256WithRSAEncryption
35:28:84:9a:eb:17:c7:6a:b5:5e:41:10:70:7a:4e:88:d5:31:
0b:8b:51:49:a3:75:eb:50:63:44:09:e6:e6:b4:a2:24:51:c2:
62:9a:34:f3:7e:c1:0b:c6:64:71:eb:52:7b:75:f1:4f:5b:21:
80:20:dc:69:b6:13:9c:5b:36:69:c2:20:fe:d1:8e:78:8b:bc:
fc:2b:e2:9d:91:d4:50:49:f0:76:1d:41:10:93:f9:79:0b:05:
4e:74:dd:b5:74:c7:d9:60:eb:ef:48:a5:6e:a7:0f:2a:da:a1:
9b:b0:b6:8e:83:ad:f6:4b:c3:5a:5a:1c:40:bb:be:54:fd:d3:
ab:61:eb:01:bc:51:f8:ed:bf:09:e8:cf:6e:5d:76:e2:4f:a2:
66:e9:ae:56:4b:25:cd:37:29:b6:fe:b2:7f:88:25:47:83:a8:
0d:4f:a1:99:01:4c:4c:f9:49:d8:e6:56:af:d7:23:b5:1f:2e:
0d:15:ee:b7:df:94:8d:83:cf:68:58:46:f7:2b:81:9f:fa:91:
9f:ae:df:b2:a7:93:9f:01:6d:5b:2d:de:43:f2:56:38:0d:ed:
c6:0b:d1:57:b5:d6:87:ac:7e:af:29:6c:0a:df:3c:48:c2:2b:
df:93:dd:76:d3:35:9c:bf:66:88:69:19:5f:af:91:88:21:35:
41:6b:ed:dc
-----BEGIN CERTIFICATE-----
MIIE4zCCA8ugAwIBAgIUF5IHJvBwdfSiS1h13DNCz/8G1T8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNWI4ZTIxYzY4OTBiZDc5YWI3NjRkOTFiNjBjMzljM2I3
ZTQ5ODVlMTAeFw0yNjAzMzExNTQ3MTBaFw0yNzAzMzAxNTUyMTBaMDMxMTAvBgNV
BAMTKDNBOUI5RDE1MDA4NDA0NkJDOTMxMENBNENGRjJGQTM0QzNGRkUzNjUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCywBjHp/ef3u0r4sSvyrSCcGxY
5dt26cczrBcLVlv3yLRulAx5neRNbaJTFtwprF/d2iUzAPbwswSEcs5vjhP4i2wz
IjBRRP9K0aRPJh38UNpVpMgxEdly8FkrtExPADelcWTaagL8GxrzXzgst3sEqsWV
854zb4MkQv8dWIxJ8fJveLpHxAIjIXqbZ7gfqa8hc/EA2RIWCOWrjpwaDSs9LWyo
V4rQpBr96uRLFhnU3N5uhWwGr943tRLqI5ZMHX+mGDR6SoL0mbC2lMcZ6jA+xwFo
0+m/ItdcSOhwpCtPcOwIVCnzdXo4TZh4tmWL1hweIdHhcMbTHM36235KH8i7AgMB
AAGjggHtMIIB6TAdBgNVHQ4EFgQUOpudFQCEBGvJMQykz/L6NMP/42UwHwYDVR0j
BBgwFoAUW44hxokL15q3ZNkbYMOcO35JheEwDgYDVR0PAQH/BAQDAgeAMGgGA1Ud
HwRhMF8wXaBboFmGV3JzeW5jOi8vcmVwby5ycGtpLnNwYWNlL3JlcG8vSW5maW5p
cm91dGUvMS81QjhFMjFDNjg5MEJENzlBQjc2NEQ5MUI2MEMzOUMzQjdFNDk4NUUx
LmNybDBkBggrBgEFBQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5y
aXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvVzQ0aHhva0wxNXEzWk5rYllNT2NP
MzVKaGVFLmNlcjCBiQYIKwYBBQUHAQsEfTB7MHkGCCsGAQUFBzALhm1yc3luYzov
L3JlcG8ucnBraS5zcGFjZS9yZXBvL0luZmluaXJvdXRlLzEvMzI2MTMxMzQzYTM3
NjMzMDNhMzEzMDMwMzAzYTNhMmYzMzM4MmQzNDM4MjAzZDNlMjAzMjMxMzUzMzM2
MzUucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8E
EjAQMA4EAgACMAgDBgIqFAfAEDANBgkqhkiG9w0BAQsFAAOCAQEANSiEmusXx2q1
XkEQcHpOiNUxC4tRSaN161BjRAnm5rSiJFHCYpo0837BC8ZkcetSe3XxT1shgCDc
abYTnFs2acIg/tGOeIu8/CvinZHUUEnwdh1BEJP5eQsFTnTdtXTH2WDr70ilbqcP
Ktqhm7C2joOt9kvDWlocQLu+VP3Tq2HrAbxR+O2/CejPbl124k+iZumuVkslzTcp
tv6yf4glR4OoDU+hmQFMTPlJ2OZWr9cjtR8uDRXut9+UjYPPaFhG9yuBn/qRn67f
sqeTnwFtWy3eQ/JWOA3txgvRV7XWh6x+rylsCt88SMIr35PddtM1nL9miGkZX6+R
iCE1QWvt3A==
-----END CERTIFICATE-----
Generated at Fri Apr 17 19:07:58 2026 by rpki-client