Route Origin Authorization
$ rpki-client -vvf repo.rpki.space/repo/Infiniroute/1/326131343a3763303a333430303a3a2f33382d3438203d3e20323135313237.roa
File: 326131343a3763303a333430303a3a2f33382d3438203d3e20323135313237.roa (raw, json)
Hash identifier: 1VmTM8TNDW7D5qlRvDG6zPbcmnqhtcZQDkJdoYHMDFY=
Subject key identifier: 2C:F8:D9:95:A2:D0:EB:9D:31:3B:50:CF:3F:4C:B4:CB:21:34:0D:AE
Certificate issuer: /CN=5b8e21c6890bd79ab764d91b60c39c3b7e4985e1
Certificate serial: 33AB26C174C804488C0C26C678038C7B86D7F68C
Authority key identifier: 5B:8E:21:C6:89:0B:D7:9A:B7:64:D9:1B:60:C3:9C:3B:7E:49:85:E1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/W44hxokL15q3ZNkbYMOcO35JheE.cer
Subject info access: rsync://repo.rpki.space/repo/Infiniroute/1/326131343a3763303a333430303a3a2f33382d3438203d3e20323135313237.roa
Signing time: Tue 31 Mar 2026 15:52:13 +0000
ROA not before: Tue 31 Mar 2026 15:47:13 +0000
ROA not after: Tue 30 Mar 2027 15:52:13 +0000
asID: 215127
IP address blocks: 2a14:7c0:3400::/38 maxlen: 48
Validation: OK
Signature path: rsync://repo.rpki.space/repo/Infiniroute/1/5B8E21C6890BD79AB764D91B60C39C3B7E4985E1.crl
rsync://repo.rpki.space/repo/Infiniroute/1/5B8E21C6890BD79AB764D91B60C39C3B7E4985E1.mft
rsync://rpki.ripe.net/repository/DEFAULT/W44hxokL15q3ZNkbYMOcO35JheE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 06:18:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
33:ab:26:c1:74:c8:04:48:8c:0c:26:c6:78:03:8c:7b:86:d7:f6:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5b8e21c6890bd79ab764d91b60c39c3b7e4985e1
Validity
Not Before: Mar 31 15:47:13 2026 GMT
Not After : Mar 30 15:52:13 2027 GMT
Subject: CN=2CF8D995A2D0EB9D313B50CF3F4CB4CB21340DAE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:0f:ab:3e:f6:93:37:79:31:dc:18:3a:4f:21:
05:00:a0:6d:d5:dc:64:65:a1:91:76:37:d5:e3:83:
7f:d6:f6:df:e3:6d:ab:3a:41:8a:56:3b:9f:bf:d4:
e9:de:05:02:fb:ae:63:a5:f0:e8:20:68:aa:5d:9b:
bc:61:07:f8:87:29:86:bd:eb:ed:0a:49:08:44:2c:
9a:79:4a:6d:84:44:a6:3e:7e:be:e8:8a:bd:c9:e7:
99:5d:bc:71:c0:24:79:58:45:34:98:ea:ce:d2:89:
9c:e0:52:62:90:a0:82:f0:c0:93:df:44:a1:8d:7b:
28:9a:88:68:8f:ba:f2:ca:f6:6c:0e:a6:1e:13:68:
76:88:20:20:e8:e5:fe:c5:4b:4a:85:f7:bc:b0:04:
54:54:e5:c8:62:86:77:f8:2b:59:d4:a3:08:89:95:
2f:da:7c:5f:46:3d:2e:23:ab:2c:bf:4b:9c:84:32:
f9:0c:c3:07:fb:53:8c:ce:0d:e4:51:e6:34:a6:33:
9d:af:23:ce:72:ae:6b:6e:59:87:1d:d8:62:b2:29:
17:da:39:ad:5b:5a:b0:e0:04:99:99:48:10:dd:e2:
b2:ed:7d:61:51:b0:6f:45:32:4f:1a:4d:2c:be:d9:
78:0f:69:e0:8a:8c:07:03:10:98:85:1a:4a:04:5e:
78:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:F8:D9:95:A2:D0:EB:9D:31:3B:50:CF:3F:4C:B4:CB:21:34:0D:AE
X509v3 Authority Key Identifier:
keyid:5B:8E:21:C6:89:0B:D7:9A:B7:64:D9:1B:60:C3:9C:3B:7E:49:85:E1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo.rpki.space/repo/Infiniroute/1/5B8E21C6890BD79AB764D91B60C39C3B7E4985E1.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W44hxokL15q3ZNkbYMOcO35JheE.cer
Subject Information Access:
Signed Object - URI:rsync://repo.rpki.space/repo/Infiniroute/1/326131343a3763303a333430303a3a2f33382d3438203d3e20323135313237.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7c0:3400::/38
Signature Algorithm: sha256WithRSAEncryption
77:cb:b0:74:32:57:a1:93:eb:8a:03:d8:25:26:3d:d8:5f:7f:
6d:a7:4f:55:2f:a4:e9:c8:67:60:f4:fa:01:7d:d0:c2:3d:cc:
f8:6f:de:73:55:7e:c0:0a:44:df:d7:bf:e1:72:4f:2e:44:ff:
28:ba:c2:94:3a:ce:2b:fb:bd:f3:70:09:9d:0c:18:0a:87:b2:
e4:23:15:01:32:c2:de:11:b1:90:ca:7f:0d:fd:d5:a5:b0:fd:
07:72:3f:74:04:17:d9:70:69:fe:9a:94:89:6e:d0:97:cc:dc:
58:c1:1b:3e:ad:6f:1a:e6:67:ae:d0:15:b1:21:08:0d:38:9c:
3c:fe:58:35:c0:01:9d:14:98:5b:c3:4d:3c:e7:67:ba:22:72:
88:0c:05:5e:5a:4f:c2:16:ae:22:da:9a:8a:05:76:57:96:3d:
56:f7:21:c3:53:93:37:65:93:2e:86:b0:21:56:a8:33:92:0b:
af:75:15:02:ee:52:41:96:01:9f:ea:58:2d:47:5c:1a:85:cb:
5a:c6:a5:11:75:6d:d1:1d:51:27:cc:b7:61:d4:f4:97:3d:2f:
0e:ed:fc:54:52:fe:15:29:ed:c3:88:a3:ad:d0:0d:dd:4c:0d:
01:f7:06:a6:a5:c4:21:e3:e9:74:a8:7e:d9:2c:9e:37:25:f1:
00:43:64:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 19:07:05 2026 by rpki-client