Route Origin Authorization
$ rpki-client -vvf repo.rpki.space/repo/Infiniroute/1/326131343a3763303a333930303a3a2f34302d3430203d3e203630323233.roa
File: 326131343a3763303a333930303a3a2f34302d3430203d3e203630323233.roa (raw, json)
Hash identifier: mSqWLcEezlZx5j2w6WRVCTvUR9fG5jkC2oeF/fwNPmI=
Subject key identifier: CC:89:A2:8B:4D:F8:91:14:85:5A:F7:26:21:43:D8:4D:26:DB:96:35
Certificate issuer: /CN=5b8e21c6890bd79ab764d91b60c39c3b7e4985e1
Certificate serial: 5D0DA9B865EDB54B4E7591B13211CF32564A9C25
Authority key identifier: 5B:8E:21:C6:89:0B:D7:9A:B7:64:D9:1B:60:C3:9C:3B:7E:49:85:E1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/W44hxokL15q3ZNkbYMOcO35JheE.cer
Subject info access: rsync://repo.rpki.space/repo/Infiniroute/1/326131343a3763303a333930303a3a2f34302d3430203d3e203630323233.roa
Signing time: Tue 31 Mar 2026 15:52:16 +0000
ROA not before: Tue 31 Mar 2026 15:47:16 +0000
ROA not after: Tue 30 Mar 2027 15:52:16 +0000
asID: 60223
IP address blocks: 2a14:7c0:3900::/40 maxlen: 40
Validation: OK
Signature path: rsync://repo.rpki.space/repo/Infiniroute/1/5B8E21C6890BD79AB764D91B60C39C3B7E4985E1.crl
rsync://repo.rpki.space/repo/Infiniroute/1/5B8E21C6890BD79AB764D91B60C39C3B7E4985E1.mft
rsync://rpki.ripe.net/repository/DEFAULT/W44hxokL15q3ZNkbYMOcO35JheE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 06:18:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5d:0d:a9:b8:65:ed:b5:4b:4e:75:91:b1:32:11:cf:32:56:4a:9c:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5b8e21c6890bd79ab764d91b60c39c3b7e4985e1
Validity
Not Before: Mar 31 15:47:16 2026 GMT
Not After : Mar 30 15:52:16 2027 GMT
Subject: CN=CC89A28B4DF89114855AF7262143D84D26DB9635
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:7c:c4:a8:61:fc:93:21:dc:19:64:1b:d5:5d:
19:70:44:1e:71:5e:b8:47:75:67:2a:49:89:d1:bb:
68:3e:05:ae:42:a0:66:a6:a0:eb:12:d5:91:cb:84:
0c:29:c6:7e:86:59:4b:8a:de:4a:af:4c:8f:16:3d:
d4:a9:bb:eb:5b:68:c5:6a:fa:66:f3:77:75:e3:8c:
76:57:68:5b:69:72:e9:ea:ad:27:42:b0:60:a8:3c:
8b:2e:5a:67:e3:6b:57:ee:52:f5:a4:ea:db:c5:3c:
37:d7:d4:46:d1:bd:a4:8f:5c:59:19:c0:3f:61:39:
37:7b:69:99:2d:f6:1b:9a:96:a9:28:f1:d4:24:13:
56:d8:c2:7a:63:21:12:28:b2:f0:c3:c9:37:85:95:
60:4e:c7:85:fd:83:91:3e:b1:de:df:da:d0:b0:f4:
04:10:fb:32:09:14:be:7f:90:4e:3f:ad:b2:c6:7e:
1e:84:08:57:a2:21:f9:1c:c5:d8:d1:29:dc:19:6a:
60:6d:c7:b4:1d:3c:4b:56:76:da:7e:26:37:6b:18:
1b:b9:6b:31:de:9b:17:74:85:7e:d2:9f:fc:4e:c1:
0b:b8:bf:f8:bf:28:8b:db:36:24:9f:ff:d3:d1:9c:
7b:42:a1:4a:72:b0:b5:89:b8:d1:29:6a:d6:d6:4d:
27:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:89:A2:8B:4D:F8:91:14:85:5A:F7:26:21:43:D8:4D:26:DB:96:35
X509v3 Authority Key Identifier:
keyid:5B:8E:21:C6:89:0B:D7:9A:B7:64:D9:1B:60:C3:9C:3B:7E:49:85:E1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo.rpki.space/repo/Infiniroute/1/5B8E21C6890BD79AB764D91B60C39C3B7E4985E1.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W44hxokL15q3ZNkbYMOcO35JheE.cer
Subject Information Access:
Signed Object - URI:rsync://repo.rpki.space/repo/Infiniroute/1/326131343a3763303a333930303a3a2f34302d3430203d3e203630323233.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7c0:3900::/40
Signature Algorithm: sha256WithRSAEncryption
79:5b:42:68:ca:b5:3a:aa:64:46:a2:ae:d4:19:35:19:30:f2:
62:b7:57:b1:e5:5f:eb:7e:b9:e9:51:a4:37:0b:f6:18:a9:4c:
bd:5a:58:64:2a:91:15:7d:6c:10:d5:48:b0:5f:76:a6:99:32:
3e:32:cd:f6:b4:72:07:d7:37:e4:b0:0d:bb:1d:23:d7:27:fd:
04:9f:00:59:ba:0f:43:9a:11:f3:fe:17:70:79:a2:e3:5f:7c:
62:17:d4:a7:6e:67:ae:78:7d:72:2d:e5:7b:89:8b:c2:64:11:
17:38:79:08:6b:78:8a:ae:d1:59:bc:f1:45:87:29:64:b6:88:
9d:34:99:d4:33:ff:f4:5e:f4:98:38:8c:0c:61:0c:89:04:cc:
5b:d5:93:f2:fb:93:ab:19:c8:57:b5:92:d3:5f:43:90:a4:1c:
ad:47:ff:d6:2e:05:f8:dc:54:ee:3d:c7:4a:77:03:36:2f:1f:
57:e1:12:c6:a0:40:62:dc:85:50:88:42:76:e4:0d:f1:d7:39:
8f:b5:05:34:f9:54:2a:ce:45:f1:d3:b9:c6:78:d6:d9:59:2f:
40:37:2d:7f:b3:b1:37:8f:85:61:e1:b9:c1:e4:bd:cd:82:a0:
78:97:f4:c6:05:6f:41:6f:7e:b5:41:1f:7a:5f:5f:09:82:47:
70:b9:32:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 17:52:56 2026 by rpki-client