Route Origin Authorization
$ rpki-client -vvf repo.rpki.space/repo/Infiniroute/1/326131343a3763303a3230303a3a2f34302d3438203d3e20323135333930.roa
File: 326131343a3763303a3230303a3a2f34302d3438203d3e20323135333930.roa (raw, json)
Hash identifier: 0C+PO2qLEE58jTVtzo2bVcawjEfhYeS98SDKOLzd4YM=
Subject key identifier: 94:77:BA:27:FC:50:53:E2:60:85:9D:2E:A2:44:FF:30:89:BA:C2:B5
Certificate issuer: /CN=5b8e21c6890bd79ab764d91b60c39c3b7e4985e1
Certificate serial: 06B899AD46C9D9F842C4A62BC5C309799A72136C
Authority key identifier: 5B:8E:21:C6:89:0B:D7:9A:B7:64:D9:1B:60:C3:9C:3B:7E:49:85:E1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/W44hxokL15q3ZNkbYMOcO35JheE.cer
Subject info access: rsync://repo.rpki.space/repo/Infiniroute/1/326131343a3763303a3230303a3a2f34302d3438203d3e20323135333930.roa
Signing time: Tue 31 Mar 2026 15:52:11 +0000
ROA not before: Tue 31 Mar 2026 15:47:11 +0000
ROA not after: Tue 30 Mar 2027 15:52:11 +0000
asID: 215390
IP address blocks: 2a14:7c0:200::/40 maxlen: 48
Validation: OK
Signature path: rsync://repo.rpki.space/repo/Infiniroute/1/5B8E21C6890BD79AB764D91B60C39C3B7E4985E1.crl
rsync://repo.rpki.space/repo/Infiniroute/1/5B8E21C6890BD79AB764D91B60C39C3B7E4985E1.mft
rsync://rpki.ripe.net/repository/DEFAULT/W44hxokL15q3ZNkbYMOcO35JheE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 06:18:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
06:b8:99:ad:46:c9:d9:f8:42:c4:a6:2b:c5:c3:09:79:9a:72:13:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5b8e21c6890bd79ab764d91b60c39c3b7e4985e1
Validity
Not Before: Mar 31 15:47:11 2026 GMT
Not After : Mar 30 15:52:11 2027 GMT
Subject: CN=9477BA27FC5053E260859D2EA244FF3089BAC2B5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:48:b8:23:83:54:13:77:df:cc:a2:6d:50:59:
25:20:00:32:e9:3c:e2:96:23:7c:48:0c:35:2a:07:
d5:09:18:b2:c5:84:73:78:e5:25:c1:0a:ef:0e:d4:
2a:0b:ed:4a:0d:2d:ef:14:b3:98:be:e2:0a:61:5c:
d5:8f:57:63:c4:ac:fb:51:0a:8e:8c:44:40:b9:76:
c4:42:a9:46:70:4a:4a:c0:16:de:a3:8d:6c:aa:e8:
ae:9a:91:d1:7f:11:58:11:11:a1:bc:13:1e:3f:75:
47:11:2c:76:5d:6c:2e:b8:2e:f7:73:a8:c6:ee:d6:
ab:95:b9:99:93:1f:1f:0e:e8:00:41:6e:0e:f0:cd:
d3:22:d3:f4:eb:0b:57:77:e3:e2:5d:49:e0:5b:2a:
70:8e:7c:86:c1:e1:0c:ca:8f:58:7d:e8:16:e6:74:
a1:e0:8f:a3:a2:57:26:85:b9:91:38:41:25:bf:d8:
3f:8a:e8:fc:74:1a:fd:40:54:09:0b:00:4a:3f:5d:
81:6e:d7:2f:0d:c9:ec:7a:9c:92:bb:ab:99:cd:52:
c7:7d:0a:4e:fc:e9:6a:17:bf:55:cf:b1:9c:f9:12:
ee:cd:39:1a:3e:77:4d:c2:4b:42:d4:88:39:6a:c5:
a6:d7:96:ed:a5:ab:77:75:05:56:6e:05:6e:6b:09:
7e:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:77:BA:27:FC:50:53:E2:60:85:9D:2E:A2:44:FF:30:89:BA:C2:B5
X509v3 Authority Key Identifier:
keyid:5B:8E:21:C6:89:0B:D7:9A:B7:64:D9:1B:60:C3:9C:3B:7E:49:85:E1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo.rpki.space/repo/Infiniroute/1/5B8E21C6890BD79AB764D91B60C39C3B7E4985E1.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W44hxokL15q3ZNkbYMOcO35JheE.cer
Subject Information Access:
Signed Object - URI:rsync://repo.rpki.space/repo/Infiniroute/1/326131343a3763303a3230303a3a2f34302d3438203d3e20323135333930.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7c0:200::/40
Signature Algorithm: sha256WithRSAEncryption
1e:9f:17:39:92:3b:97:64:80:4d:9d:ae:eb:3e:3f:3a:72:97:
f1:a2:c0:d2:5f:eb:1f:c7:53:57:e4:68:bb:d0:f5:ca:23:ff:
ff:72:cd:26:29:ea:ec:43:c7:34:c8:9d:f3:dd:75:47:b0:fa:
a5:3e:e3:77:dc:14:97:a7:b8:54:5f:dd:c3:76:80:f0:16:b3:
7b:ae:db:fe:a6:c8:15:b1:36:7e:37:01:bd:b3:5e:34:b0:1e:
d5:91:4f:e0:14:c9:d0:fa:1a:35:9d:d9:f7:bb:e2:01:79:80:
b5:11:85:ad:b2:a5:fe:d5:b1:17:17:fc:21:71:c2:e3:46:f8:
c8:4f:05:70:47:14:45:b1:df:87:42:96:5f:ca:40:5a:9e:3a:
39:0c:e2:42:66:27:03:be:89:42:d5:aa:e4:b4:2d:21:c7:20:
a3:29:e2:ff:44:73:68:75:d6:98:69:a5:f4:4d:f9:f4:87:e6:
ef:5a:02:80:28:8b:96:9d:18:0d:50:63:e8:80:35:8f:4a:d9:
34:98:09:07:40:88:c0:3f:e4:d5:0b:ed:b3:3f:63:4c:3e:99:
17:61:59:3f:6f:b4:10:0e:c2:1f:f1:d9:c3:60:55:a9:7e:33:
d6:ae:90:d8:a6:6b:32:5f:46:f8:b0:b3:9b:fd:81:8d:0b:66:
6d:7e:65:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 15:37:41 2026 by rpki-client