Route Origin Authorization
$ rpki-client -vvf repo.rpki.space/repo/Infiniroute/1/326131343a3763303a3330303a3a2f34302d3438203d3e20323136303631.roa
File: 326131343a3763303a3330303a3a2f34302d3438203d3e20323136303631.roa (raw, json)
Hash identifier: PXiWljGgadV+wxJ1NT6+/y5hW/cTpWzXLJgKfHOWk/s=
Subject key identifier: 49:F9:89:9C:C4:B7:E1:8D:E1:05:B0:69:4B:16:92:F7:F7:5F:B4:1B
Certificate issuer: /CN=5b8e21c6890bd79ab764d91b60c39c3b7e4985e1
Certificate serial: 79ECF0F5FF8430110E6F8D83107C1F74FA4E8B07
Authority key identifier: 5B:8E:21:C6:89:0B:D7:9A:B7:64:D9:1B:60:C3:9C:3B:7E:49:85:E1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/W44hxokL15q3ZNkbYMOcO35JheE.cer
Subject info access: rsync://repo.rpki.space/repo/Infiniroute/1/326131343a3763303a3330303a3a2f34302d3438203d3e20323136303631.roa
Signing time: Tue 31 Mar 2026 15:52:08 +0000
ROA not before: Tue 31 Mar 2026 15:47:08 +0000
ROA not after: Tue 30 Mar 2027 15:52:08 +0000
asID: 216061
IP address blocks: 2a14:7c0:300::/40 maxlen: 48
Validation: OK
Signature path: rsync://repo.rpki.space/repo/Infiniroute/1/5B8E21C6890BD79AB764D91B60C39C3B7E4985E1.crl
rsync://repo.rpki.space/repo/Infiniroute/1/5B8E21C6890BD79AB764D91B60C39C3B7E4985E1.mft
rsync://rpki.ripe.net/repository/DEFAULT/W44hxokL15q3ZNkbYMOcO35JheE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 06:18:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
79:ec:f0:f5:ff:84:30:11:0e:6f:8d:83:10:7c:1f:74:fa:4e:8b:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5b8e21c6890bd79ab764d91b60c39c3b7e4985e1
Validity
Not Before: Mar 31 15:47:08 2026 GMT
Not After : Mar 30 15:52:08 2027 GMT
Subject: CN=49F9899CC4B7E18DE105B0694B1692F7F75FB41B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:1f:f3:98:d3:1b:9c:bb:c0:cd:5a:f0:11:da:
93:32:b8:62:76:9e:52:06:78:97:7a:38:d4:6e:a3:
b0:68:2d:44:0e:87:e4:f5:cd:95:14:4e:54:21:e1:
49:5a:56:69:c5:50:a5:bc:43:ae:71:72:11:e4:d0:
40:6e:09:88:1d:e8:96:8c:0f:e3:07:23:a6:8e:03:
c4:43:bc:5e:38:85:0f:e5:fc:15:aa:00:3a:85:da:
51:51:82:3b:f2:2b:73:46:cc:99:19:2d:bc:bf:25:
0b:4a:e0:2b:c9:06:83:95:bc:36:04:63:32:58:77:
a6:0d:e1:36:9b:b5:a7:26:02:a3:cf:df:f5:44:6e:
9f:23:35:b4:f8:43:64:55:b1:75:bf:8d:66:fa:5a:
b0:c3:2b:84:23:fc:87:52:c6:35:d5:2a:72:49:38:
04:8a:d5:37:98:b2:93:0c:52:da:07:58:67:70:1b:
82:6d:25:0f:ad:db:0b:b9:e4:bb:6a:c9:c2:0c:4e:
54:0a:ca:7b:e6:2d:7e:63:66:98:f1:e2:f4:65:07:
6d:83:78:eb:38:ca:1a:48:5b:52:24:70:20:f0:65:
65:e3:50:c6:d5:57:42:6d:b4:b4:55:79:92:38:e6:
4f:b3:b7:27:03:46:67:18:40:01:45:cf:34:86:66:
44:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:F9:89:9C:C4:B7:E1:8D:E1:05:B0:69:4B:16:92:F7:F7:5F:B4:1B
X509v3 Authority Key Identifier:
keyid:5B:8E:21:C6:89:0B:D7:9A:B7:64:D9:1B:60:C3:9C:3B:7E:49:85:E1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo.rpki.space/repo/Infiniroute/1/5B8E21C6890BD79AB764D91B60C39C3B7E4985E1.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W44hxokL15q3ZNkbYMOcO35JheE.cer
Subject Information Access:
Signed Object - URI:rsync://repo.rpki.space/repo/Infiniroute/1/326131343a3763303a3330303a3a2f34302d3438203d3e20323136303631.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7c0:300::/40
Signature Algorithm: sha256WithRSAEncryption
53:62:ba:3b:a4:d5:48:b8:98:5f:f1:a0:7f:3d:0b:30:22:98:
59:2a:ff:7e:8e:b2:93:03:2c:33:67:1c:2b:d4:51:50:4b:3c:
00:34:1b:69:80:06:57:8f:32:e6:04:5c:ba:f3:0f:a5:0e:fc:
14:d1:60:14:70:df:ac:6e:d6:c7:74:6d:ab:6b:ac:70:8b:ba:
98:e3:1a:e5:70:7a:03:b5:dd:da:bd:c8:6f:db:5a:40:49:6a:
29:f3:30:1f:73:35:5d:f2:40:f9:8e:4a:af:ee:0d:2c:59:46:
2d:98:21:7b:28:f8:7c:ea:71:b7:88:fa:58:eb:d8:c5:a4:f3:
14:6c:fc:8c:fe:5a:b2:90:67:04:f9:24:e9:09:66:6f:14:03:
14:14:81:d5:95:38:9f:ad:91:53:17:7d:41:64:b1:29:32:ee:
a7:38:f1:f0:2e:cf:5e:d0:6a:bf:3c:f2:3b:37:e8:6a:eb:9d:
f5:73:f8:2c:76:ba:4d:fe:2b:19:9c:1e:4f:a2:b3:a5:28:58:
6b:67:81:07:8b:95:81:31:d4:41:3e:1f:63:52:41:81:72:e5:
6f:56:57:a5:dc:8b:6d:4f:b2:91:85:71:16:81:ed:d5:96:80:
a1:c5:29:61:45:e1:cc:dc:9e:f8:b3:88:1d:0c:c6:dd:60:a8:
2b:19:93:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 12:20:09 2026 by rpki-client