Route Origin Authorization
$ rpki-client -vvf repo.rpki.space/repo/Infiniroute/1/326131343a3763303a316530303a3a2f34302d3430203d3e20323132323934.roa
File: 326131343a3763303a316530303a3a2f34302d3430203d3e20323132323934.roa (raw, json)
Hash identifier: nGgLoiMld6si2z+ReuQs8FsNXzZKf5eASOqMt71ARDw=
Subject key identifier: 9F:16:2D:94:7F:B8:C3:A1:7C:1D:77:37:D8:BF:F4:1C:77:E4:79:14
Certificate issuer: /CN=5b8e21c6890bd79ab764d91b60c39c3b7e4985e1
Certificate serial: 3E40C89915CEF3628EBE79774CEB6CBC8C6AB183
Authority key identifier: 5B:8E:21:C6:89:0B:D7:9A:B7:64:D9:1B:60:C3:9C:3B:7E:49:85:E1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/W44hxokL15q3ZNkbYMOcO35JheE.cer
Subject info access: rsync://repo.rpki.space/repo/Infiniroute/1/326131343a3763303a316530303a3a2f34302d3430203d3e20323132323934.roa
Signing time: Tue 31 Mar 2026 15:52:12 +0000
ROA not before: Tue 31 Mar 2026 15:47:12 +0000
ROA not after: Tue 30 Mar 2027 15:52:12 +0000
asID: 212294
IP address blocks: 2a14:7c0:1e00::/40 maxlen: 40
Validation: OK
Signature path: rsync://repo.rpki.space/repo/Infiniroute/1/5B8E21C6890BD79AB764D91B60C39C3B7E4985E1.crl
rsync://repo.rpki.space/repo/Infiniroute/1/5B8E21C6890BD79AB764D91B60C39C3B7E4985E1.mft
rsync://rpki.ripe.net/repository/DEFAULT/W44hxokL15q3ZNkbYMOcO35JheE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 06:18:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3e:40:c8:99:15:ce:f3:62:8e:be:79:77:4c:eb:6c:bc:8c:6a:b1:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5b8e21c6890bd79ab764d91b60c39c3b7e4985e1
Validity
Not Before: Mar 31 15:47:12 2026 GMT
Not After : Mar 30 15:52:12 2027 GMT
Subject: CN=9F162D947FB8C3A17C1D7737D8BFF41C77E47914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:24:54:08:9c:c9:3e:e8:7b:45:b3:f5:dc:f5:
ad:9a:9b:e1:ce:13:1b:8c:2f:14:2f:ed:c2:87:7b:
42:b9:e9:7a:45:9e:7a:ec:99:23:5a:01:90:5e:29:
d7:5b:b5:f7:9a:8c:d4:0b:b3:0e:62:02:c1:a9:9f:
24:86:01:0c:1e:83:8f:13:99:42:8f:35:07:85:4d:
55:59:72:04:df:d3:b9:ce:85:db:4a:f5:21:57:e0:
c4:5b:aa:1c:c7:6d:02:73:3d:b2:21:d6:0a:37:fa:
1e:37:e4:fb:3a:a9:ef:cb:23:70:5b:4a:1c:05:0d:
99:a3:51:f2:17:c1:23:f8:4d:53:e6:b6:62:ae:57:
a5:90:3a:c9:06:54:bc:dd:69:4e:3c:c8:ec:10:fa:
47:9a:f4:f6:f6:1a:c4:18:37:8f:38:2d:47:fb:db:
86:be:14:f4:b0:bf:56:3b:f8:df:9e:c2:69:31:55:
6a:76:d4:12:0f:8e:8e:79:c1:21:98:7b:bf:a3:b8:
f0:27:71:28:a3:7e:03:fe:67:73:ce:4d:57:02:fc:
eb:2c:85:98:c5:33:23:24:ce:e1:6a:ab:b7:97:d6:
0c:08:f8:3b:ea:aa:ef:70:80:22:fa:41:78:c7:39:
b9:33:46:f4:b4:37:50:ed:ee:60:ce:b9:7e:e4:d3:
ab:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:16:2D:94:7F:B8:C3:A1:7C:1D:77:37:D8:BF:F4:1C:77:E4:79:14
X509v3 Authority Key Identifier:
keyid:5B:8E:21:C6:89:0B:D7:9A:B7:64:D9:1B:60:C3:9C:3B:7E:49:85:E1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo.rpki.space/repo/Infiniroute/1/5B8E21C6890BD79AB764D91B60C39C3B7E4985E1.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W44hxokL15q3ZNkbYMOcO35JheE.cer
Subject Information Access:
Signed Object - URI:rsync://repo.rpki.space/repo/Infiniroute/1/326131343a3763303a316530303a3a2f34302d3430203d3e20323132323934.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7c0:1e00::/40
Signature Algorithm: sha256WithRSAEncryption
65:7b:f5:8c:d5:92:49:03:12:7c:fc:d6:5d:e1:96:56:c6:e3:
bf:c7:a9:9e:03:fe:e4:26:30:5a:fd:6b:35:42:75:ea:7f:bd:
09:f1:bc:b4:c7:4f:bd:7d:51:d1:8f:55:5e:f2:1a:ff:c3:cb:
9a:49:9e:ce:dd:53:a8:b3:4d:4c:fb:35:20:a9:b7:bc:a2:a7:
fe:d1:3f:f5:59:bb:67:a2:6f:a9:96:db:83:10:b9:b0:d4:63:
ed:22:75:55:0d:b5:c3:89:5b:bf:ce:7d:15:d7:fd:ad:ca:19:
bd:52:3a:45:0f:dc:20:4b:4f:d7:bb:53:4a:6b:2c:5c:30:ad:
af:7d:6d:25:06:44:e1:00:31:3b:46:70:49:f5:45:1d:29:9f:
d0:17:7a:dd:1e:0d:a2:4c:73:d5:1a:e4:0d:46:ad:be:59:f0:
2f:c6:48:9b:5f:d0:bf:8f:cb:cf:8c:50:13:07:34:91:ed:e7:
41:52:19:fc:38:e9:44:ea:9d:39:df:f0:e4:ff:1c:49:1d:5d:
04:d5:be:3d:20:35:c0:4b:f4:80:f6:a4:72:df:09:8e:a7:99:
2e:96:78:87:03:b7:46:d1:45:b5:d7:ce:46:35:f3:62:e6:53:
87:5e:46:ef:73:2f:25:94:62:04:0c:f3:a8:42:d1:29:1c:90:
0b:a3:3a:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 16:47:26 2026 by rpki-client