Route Origin Authorization
$ rpki-client -vvf repo.rpki.space/repo/Infiniroute/1/326131343a3763303a323430303a3a2f33382d3438203d3e20323135313538.roa
File: 326131343a3763303a323430303a3a2f33382d3438203d3e20323135313538.roa (raw, json)
Hash identifier: OPXt/B/+aRzZ2GvaBNo0UHhK3iATomBZBnOKVJwvk8M=
Subject key identifier: C8:9E:79:E9:5A:8A:A9:99:67:87:5C:1C:F6:66:A1:E3:A1:95:3A:AD
Certificate issuer: /CN=5b8e21c6890bd79ab764d91b60c39c3b7e4985e1
Certificate serial: 2D8F466FAB0AC91FBBA825FD4BD18CD1629B9D4C
Authority key identifier: 5B:8E:21:C6:89:0B:D7:9A:B7:64:D9:1B:60:C3:9C:3B:7E:49:85:E1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/W44hxokL15q3ZNkbYMOcO35JheE.cer
Subject info access: rsync://repo.rpki.space/repo/Infiniroute/1/326131343a3763303a323430303a3a2f33382d3438203d3e20323135313538.roa
Signing time: Tue 31 Mar 2026 15:52:14 +0000
ROA not before: Tue 31 Mar 2026 15:47:14 +0000
ROA not after: Tue 30 Mar 2027 15:52:14 +0000
asID: 215158
IP address blocks: 2a14:7c0:2400::/38 maxlen: 48
Validation: OK
Signature path: rsync://repo.rpki.space/repo/Infiniroute/1/5B8E21C6890BD79AB764D91B60C39C3B7E4985E1.crl
rsync://repo.rpki.space/repo/Infiniroute/1/5B8E21C6890BD79AB764D91B60C39C3B7E4985E1.mft
rsync://rpki.ripe.net/repository/DEFAULT/W44hxokL15q3ZNkbYMOcO35JheE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 06:18:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2d:8f:46:6f:ab:0a:c9:1f:bb:a8:25:fd:4b:d1:8c:d1:62:9b:9d:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5b8e21c6890bd79ab764d91b60c39c3b7e4985e1
Validity
Not Before: Mar 31 15:47:14 2026 GMT
Not After : Mar 30 15:52:14 2027 GMT
Subject: CN=C89E79E95A8AA99967875C1CF666A1E3A1953AAD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:9c:09:10:bc:7f:32:db:a4:8c:3e:fc:11:09:
00:66:10:76:c8:38:2e:2f:f4:64:10:42:48:09:09:
94:d7:c5:19:31:0a:57:59:6f:68:3f:6d:ba:11:55:
12:e7:fc:88:b8:5e:08:95:a6:f9:d3:26:3d:7b:d6:
6b:81:3e:cd:56:7a:16:2c:25:5e:a4:8a:57:70:ba:
01:c2:af:08:3a:2e:7b:43:b7:8a:b9:56:c7:04:72:
42:4d:4c:6e:32:9e:36:8a:a9:f4:7c:b9:70:f5:0b:
f2:f1:b4:30:c1:f7:42:74:75:75:ca:d2:7b:3f:62:
73:52:16:a7:41:46:24:00:87:06:3b:39:4c:ad:6c:
5c:ee:4c:81:89:6e:94:01:24:2d:6e:c0:0a:75:cf:
c9:e4:ee:7f:20:3a:80:8a:96:df:f8:73:eb:ea:ff:
51:f6:be:94:10:fa:ed:c4:cb:1c:41:39:67:e4:08:
24:5e:bd:f3:f4:e8:71:5f:93:8e:73:3a:10:32:14:
52:57:cd:d0:ed:ba:2e:67:ee:61:3a:c4:75:86:84:
e8:dd:d1:e8:e8:ad:66:f9:b1:25:d5:57:86:fd:33:
0e:62:ed:4b:33:53:7b:37:56:9f:ed:8b:10:58:c5:
2f:5e:3e:cc:58:16:3c:42:36:e5:72:f8:b3:2a:7e:
58:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:9E:79:E9:5A:8A:A9:99:67:87:5C:1C:F6:66:A1:E3:A1:95:3A:AD
X509v3 Authority Key Identifier:
keyid:5B:8E:21:C6:89:0B:D7:9A:B7:64:D9:1B:60:C3:9C:3B:7E:49:85:E1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo.rpki.space/repo/Infiniroute/1/5B8E21C6890BD79AB764D91B60C39C3B7E4985E1.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W44hxokL15q3ZNkbYMOcO35JheE.cer
Subject Information Access:
Signed Object - URI:rsync://repo.rpki.space/repo/Infiniroute/1/326131343a3763303a323430303a3a2f33382d3438203d3e20323135313538.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7c0:2400::/38
Signature Algorithm: sha256WithRSAEncryption
44:be:b8:89:d4:d6:a9:db:cc:4d:42:84:66:66:5b:48:dc:9e:
ac:5d:3d:3c:b0:56:cf:df:a5:14:d8:30:a5:e5:93:6d:7c:bd:
ad:3b:55:f7:d1:64:e5:d2:0f:57:5e:83:e5:13:57:d6:6e:23:
9a:3d:fc:db:4b:fc:08:43:c1:bb:ea:6a:b6:66:8e:36:8b:67:
22:42:2b:b3:15:33:d3:38:d2:c6:b6:29:5f:d6:5a:69:c5:a7:
49:4d:45:2b:30:64:ca:d2:d7:31:cc:77:2d:85:ed:66:a8:bd:
2e:12:24:d4:9c:d9:f3:52:14:44:ab:b7:30:54:3e:be:0e:0b:
8b:5f:8a:55:f0:e4:38:ad:17:d7:54:5b:11:44:47:ba:cb:8c:
6e:82:47:18:8a:1f:59:18:1d:aa:15:a9:65:58:43:85:dd:91:
e3:a2:24:d7:12:a1:fe:2b:e2:63:40:fd:05:8a:77:5a:67:27:
f6:1d:36:95:05:0e:19:13:f9:d5:d8:90:f5:a0:47:a3:e8:0a:
b0:54:c4:63:14:ae:ed:72:82:93:8a:9b:0f:4c:34:8c:7f:93:
d3:7a:05:a1:53:e3:b5:30:3a:9d:c9:06:8f:6c:ac:20:40:ea:
b1:61:36:96:05:02:bd:21:29:64:45:58:a5:fb:55:2d:c3:39:
1b:f8:73:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 18:48:40 2026 by rpki-client