Route Origin Authorization
$ rpki-client -vvf repo.rpki.space/repo/Infiniroute/1/326131343a3763303a313830303a3a2f33382d3438203d3e20323135323932.roa
File: 326131343a3763303a313830303a3a2f33382d3438203d3e20323135323932.roa (raw, json)
Hash identifier: NrMiptUglCLU8nCQfLcaJLcK/hK/A+OqqlUJYrF/hS0=
Subject key identifier: 70:29:63:6E:91:1B:1C:33:B5:3F:27:FC:AE:E5:5C:75:41:50:8F:B6
Certificate issuer: /CN=5b8e21c6890bd79ab764d91b60c39c3b7e4985e1
Certificate serial: 39E614AE77F35FF451093633CE0F7ED956B3EB82
Authority key identifier: 5B:8E:21:C6:89:0B:D7:9A:B7:64:D9:1B:60:C3:9C:3B:7E:49:85:E1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/W44hxokL15q3ZNkbYMOcO35JheE.cer
Subject info access: rsync://repo.rpki.space/repo/Infiniroute/1/326131343a3763303a313830303a3a2f33382d3438203d3e20323135323932.roa
Signing time: Tue 31 Mar 2026 15:52:15 +0000
ROA not before: Tue 31 Mar 2026 15:47:15 +0000
ROA not after: Tue 30 Mar 2027 15:52:15 +0000
asID: 215292
IP address blocks: 2a14:7c0:1800::/38 maxlen: 48
Validation: OK
Signature path: rsync://repo.rpki.space/repo/Infiniroute/1/5B8E21C6890BD79AB764D91B60C39C3B7E4985E1.crl
rsync://repo.rpki.space/repo/Infiniroute/1/5B8E21C6890BD79AB764D91B60C39C3B7E4985E1.mft
rsync://rpki.ripe.net/repository/DEFAULT/W44hxokL15q3ZNkbYMOcO35JheE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 06:18:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
39:e6:14:ae:77:f3:5f:f4:51:09:36:33:ce:0f:7e:d9:56:b3:eb:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5b8e21c6890bd79ab764d91b60c39c3b7e4985e1
Validity
Not Before: Mar 31 15:47:15 2026 GMT
Not After : Mar 30 15:52:15 2027 GMT
Subject: CN=7029636E911B1C33B53F27FCAEE55C7541508FB6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:29:41:0f:fa:99:71:55:3b:db:60:61:e9:ec:
8b:56:5e:96:cf:b1:17:ad:2c:0e:1f:d8:51:31:64:
25:14:d8:e4:0d:85:e6:16:ab:ab:97:9b:a3:e8:8c:
1f:fb:c9:6b:45:05:2a:78:f4:28:8c:da:cb:93:e4:
4c:5a:eb:44:c6:ad:44:eb:66:0e:c4:11:c7:38:f7:
93:e1:7d:06:6a:3a:49:5d:91:ec:49:82:ba:71:ec:
cf:56:ac:86:d0:fa:97:be:67:eb:ae:9a:39:8d:ac:
43:37:7c:85:b7:bb:34:7d:a3:8d:6d:ed:28:ee:ad:
c4:02:eb:3f:b1:be:f6:59:0b:de:80:62:47:48:d0:
6f:6b:44:eb:e3:ef:22:27:b3:c7:82:3b:24:71:3e:
5f:4f:40:ad:94:24:78:ea:74:ad:23:ed:85:ef:a3:
31:c6:71:f7:38:38:0e:65:60:cc:5c:4b:95:66:65:
18:a1:36:01:69:07:bb:09:3a:9b:1c:85:63:7d:f3:
92:20:71:74:4b:8e:01:9d:af:6d:03:d3:d4:c0:35:
37:93:ee:80:2e:32:0f:ca:55:a0:19:1b:ea:54:d5:
f3:7d:bf:7f:83:95:d1:5a:96:a8:b5:5d:42:de:86:
84:b6:90:0b:a7:7c:fc:4e:6a:ec:da:5f:ce:7c:92:
c4:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:29:63:6E:91:1B:1C:33:B5:3F:27:FC:AE:E5:5C:75:41:50:8F:B6
X509v3 Authority Key Identifier:
keyid:5B:8E:21:C6:89:0B:D7:9A:B7:64:D9:1B:60:C3:9C:3B:7E:49:85:E1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo.rpki.space/repo/Infiniroute/1/5B8E21C6890BD79AB764D91B60C39C3B7E4985E1.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W44hxokL15q3ZNkbYMOcO35JheE.cer
Subject Information Access:
Signed Object - URI:rsync://repo.rpki.space/repo/Infiniroute/1/326131343a3763303a313830303a3a2f33382d3438203d3e20323135323932.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7c0:1800::/38
Signature Algorithm: sha256WithRSAEncryption
77:49:dd:19:f3:0f:76:99:14:eb:96:98:f8:4e:74:08:02:b5:
4d:5a:6e:ba:40:8b:f3:86:d2:46:9f:f6:7b:a3:58:97:64:06:
52:48:00:e4:0b:d1:6b:1e:18:ea:a5:ea:61:88:94:ea:27:b8:
e8:30:76:00:ab:07:5e:c5:09:88:6b:4d:f2:11:00:37:bc:62:
a3:6b:fe:e6:14:23:a8:3e:bf:a0:ef:50:20:cb:3a:a0:ad:59:
60:98:a1:b2:b1:88:cf:c8:1e:be:e4:73:6f:32:96:71:cc:83:
bf:85:54:3f:6f:b0:03:a9:60:66:56:c4:e8:86:9a:d1:4b:26:
c3:f6:4d:6b:b4:91:2e:44:a3:d9:54:21:3d:ee:d3:a5:3c:63:
1b:43:b8:85:8b:73:d7:4d:3e:61:b4:da:c7:9a:a4:96:1f:80:
0f:fc:3f:46:8c:e7:3e:e1:24:8f:1c:0c:45:fa:34:e3:66:ea:
16:2d:5d:92:fc:eb:35:29:a5:97:b0:65:e9:c9:17:ba:78:cf:
ee:66:b9:15:1b:02:a2:04:f7:6a:98:88:58:90:96:23:89:b0:
e1:35:22:30:a3:fc:1c:cd:b8:8b:c7:1b:4d:35:17:b9:d7:02:
76:ce:cf:a3:d6:7d:6f:ed:cd:9d:20:82:64:25:09:4d:36:8e:
62:c1:f0:d0
-----BEGIN CERTIFICATE-----
MIIE4zCCA8ugAwIBAgIUOeYUrnfzX/RRCTYzzg9+2Vaz64IwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNWI4ZTIxYzY4OTBiZDc5YWI3NjRkOTFiNjBjMzljM2I3
ZTQ5ODVlMTAeFw0yNjAzMzExNTQ3MTVaFw0yNzAzMzAxNTUyMTVaMDMxMTAvBgNV
BAMTKDcwMjk2MzZFOTExQjFDMzNCNTNGMjdGQ0FFRTU1Qzc1NDE1MDhGQjYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5KUEP+plxVTvbYGHp7ItWXpbP
sRetLA4f2FExZCUU2OQNheYWq6uXm6PojB/7yWtFBSp49CiM2suT5Exa60TGrUTr
Zg7EEcc495PhfQZqOkldkexJgrpx7M9WrIbQ+pe+Z+uumjmNrEM3fIW3uzR9o41t
7SjurcQC6z+xvvZZC96AYkdI0G9rROvj7yIns8eCOyRxPl9PQK2UJHjqdK0j7YXv
ozHGcfc4OA5lYMxcS5VmZRihNgFpB7sJOpschWN985IgcXRLjgGdr20D09TANTeT
7oAuMg/KVaAZG+pU1fN9v3+DldFalqi1XULehoS2kAunfPxOauzaX858ksRTAgMB
AAGjggHtMIIB6TAdBgNVHQ4EFgQUcCljbpEbHDO1Pyf8ruVcdUFQj7YwHwYDVR0j
BBgwFoAUW44hxokL15q3ZNkbYMOcO35JheEwDgYDVR0PAQH/BAQDAgeAMGgGA1Ud
HwRhMF8wXaBboFmGV3JzeW5jOi8vcmVwby5ycGtpLnNwYWNlL3JlcG8vSW5maW5p
cm91dGUvMS81QjhFMjFDNjg5MEJENzlBQjc2NEQ5MUI2MEMzOUMzQjdFNDk4NUUx
LmNybDBkBggrBgEFBQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5y
aXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvVzQ0aHhva0wxNXEzWk5rYllNT2NP
MzVKaGVFLmNlcjCBiQYIKwYBBQUHAQsEfTB7MHkGCCsGAQUFBzALhm1yc3luYzov
L3JlcG8ucnBraS5zcGFjZS9yZXBvL0luZmluaXJvdXRlLzEvMzI2MTMxMzQzYTM3
NjMzMDNhMzEzODMwMzAzYTNhMmYzMzM4MmQzNDM4MjAzZDNlMjAzMjMxMzUzMjM5
MzIucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8E
EjAQMA4EAgACMAgDBgIqFAfAGDANBgkqhkiG9w0BAQsFAAOCAQEAd0ndGfMPdpkU
65aY+E50CAK1TVpuukCL84bSRp/2e6NYl2QGUkgA5AvRax4Y6qXqYYiU6ie46DB2
AKsHXsUJiGtN8hEAN7xio2v+5hQjqD6/oO9QIMs6oK1ZYJihsrGIz8gevuRzbzKW
ccyDv4VUP2+wA6lgZlbE6Iaa0Usmw/ZNa7SRLkSj2VQhPe7TpTxjG0O4hYtz100+
YbTax5qklh+AD/w/RoznPuEkjxwMRfo042bqFi1dkvzrNSmll7Bl6ckXunjP7ma5
FRsCogT3apiIWJCWI4mw4TUiMKP8HM24i8cbTTUXudcCds7Po9Z9b+3NnSCCZCUJ
TTaOYsHw0A==
-----END CERTIFICATE-----
Generated at Fri Apr 17 19:30:07 2026 by rpki-client