Route Origin Authorization
$ rpki-client -vvf repo.rpki.space/repo/Infiniroute/1/326131343a3763303a313530303a3a2f34302d3438203d3e20323135333235.roa
File: 326131343a3763303a313530303a3a2f34302d3438203d3e20323135333235.roa (raw, json)
Hash identifier: Gdx2a2FMN0FyoiVuntnuC4KqNqntxe7e3ttVg1VnmBI=
Subject key identifier: 5F:55:B9:6B:B6:8D:14:24:41:4B:4C:60:E7:E1:41:9D:7C:9B:8D:87
Certificate issuer: /CN=5b8e21c6890bd79ab764d91b60c39c3b7e4985e1
Certificate serial: 60A83326F0BBB12B939C8157877023B5FA60E330
Authority key identifier: 5B:8E:21:C6:89:0B:D7:9A:B7:64:D9:1B:60:C3:9C:3B:7E:49:85:E1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/W44hxokL15q3ZNkbYMOcO35JheE.cer
Subject info access: rsync://repo.rpki.space/repo/Infiniroute/1/326131343a3763303a313530303a3a2f34302d3438203d3e20323135333235.roa
Signing time: Tue 31 Mar 2026 15:52:11 +0000
ROA not before: Tue 31 Mar 2026 15:47:11 +0000
ROA not after: Tue 30 Mar 2027 15:52:11 +0000
asID: 215325
IP address blocks: 2a14:7c0:1500::/40 maxlen: 48
Validation: OK
Signature path: rsync://repo.rpki.space/repo/Infiniroute/1/5B8E21C6890BD79AB764D91B60C39C3B7E4985E1.crl
rsync://repo.rpki.space/repo/Infiniroute/1/5B8E21C6890BD79AB764D91B60C39C3B7E4985E1.mft
rsync://rpki.ripe.net/repository/DEFAULT/W44hxokL15q3ZNkbYMOcO35JheE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 06:18:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
60:a8:33:26:f0:bb:b1:2b:93:9c:81:57:87:70:23:b5:fa:60:e3:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5b8e21c6890bd79ab764d91b60c39c3b7e4985e1
Validity
Not Before: Mar 31 15:47:11 2026 GMT
Not After : Mar 30 15:52:11 2027 GMT
Subject: CN=5F55B96BB68D1424414B4C60E7E1419D7C9B8D87
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:17:90:9c:28:ef:d0:10:76:2f:c9:fc:59:69:
5f:5c:0c:23:23:9e:3a:ae:db:ff:e1:51:42:9d:3d:
35:d3:70:d8:0a:69:28:35:25:f6:ae:52:6b:5c:b7:
c4:cb:32:89:b2:af:8e:5a:78:ef:1f:5e:96:0b:ce:
55:0c:08:b1:06:3c:8f:b9:69:b8:71:f1:0f:e0:82:
29:4b:2f:d8:bd:c4:68:f5:fa:40:9b:06:e8:6f:7e:
a1:0d:51:24:f5:cc:7e:09:c1:fa:27:07:00:d4:ef:
fd:a9:62:20:64:d8:ed:86:ad:fe:6c:2d:32:f9:b4:
b5:1f:90:da:48:5f:6c:00:54:2b:fe:39:f8:66:cf:
bf:49:11:ac:16:db:ab:28:7b:06:5f:d8:c0:b0:71:
a0:fb:7d:10:10:8c:d8:22:a6:31:a5:5e:5d:22:6c:
93:4a:2f:0f:ea:21:4c:db:58:cf:ac:90:bb:b4:1e:
6c:90:99:4c:a1:22:42:52:41:b9:2f:ea:85:6c:49:
5b:9c:bd:f8:87:b8:35:d7:7e:91:61:c2:1a:68:46:
b5:c8:68:e8:dd:f7:eb:b1:01:2c:18:27:46:75:f1:
0a:d7:9e:b1:54:bd:50:59:30:7a:e3:b2:e3:9c:51:
ac:15:fb:f0:1d:d0:7e:3c:9c:51:c6:d9:1a:10:5a:
d9:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:55:B9:6B:B6:8D:14:24:41:4B:4C:60:E7:E1:41:9D:7C:9B:8D:87
X509v3 Authority Key Identifier:
keyid:5B:8E:21:C6:89:0B:D7:9A:B7:64:D9:1B:60:C3:9C:3B:7E:49:85:E1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo.rpki.space/repo/Infiniroute/1/5B8E21C6890BD79AB764D91B60C39C3B7E4985E1.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W44hxokL15q3ZNkbYMOcO35JheE.cer
Subject Information Access:
Signed Object - URI:rsync://repo.rpki.space/repo/Infiniroute/1/326131343a3763303a313530303a3a2f34302d3438203d3e20323135333235.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7c0:1500::/40
Signature Algorithm: sha256WithRSAEncryption
89:9f:4b:f4:23:2b:1c:63:94:b4:8d:bc:ce:f0:74:79:0a:72:
ad:c2:64:ce:f3:46:6d:fa:74:4c:cb:0f:b8:54:9e:51:8d:bc:
68:49:12:17:0c:9c:c5:0b:f4:fa:ae:dc:5c:86:6f:59:e5:9b:
63:61:93:50:33:91:30:d0:ab:a0:44:a4:4f:fd:9d:c7:8c:9b:
5a:10:c7:a5:96:aa:44:b5:83:80:6c:97:e2:14:67:e4:8d:ca:
0e:07:15:67:6c:06:ec:03:1c:27:1d:f6:1e:35:a3:04:cd:ec:
2f:a3:9f:95:2c:a2:9e:f1:c7:78:cb:7e:13:55:3c:69:37:65:
21:c1:71:f3:78:0b:2a:1d:43:32:47:cf:ff:e2:81:77:e1:a9:
92:0d:74:f4:8b:80:c9:d8:3c:40:e3:f1:1d:1b:d8:7f:2d:10:
91:5e:25:eb:df:95:0b:9e:23:de:73:56:6f:8f:8c:a3:26:da:
c0:fe:dd:54:0a:21:0a:9f:7b:e2:3c:b2:76:1f:8b:7a:d6:67:
dd:2f:95:6d:89:86:82:c0:39:75:09:41:ac:2b:18:5d:0b:24:
a8:11:5f:e2:79:ea:86:b6:5b:94:1a:bd:f4:c7:e9:da:d7:35:
da:0c:ed:30:90:96:70:00:00:1b:55:78:88:b7:81:84:b2:94:
be:52:76:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 19:59:13 2026 by rpki-client