Route Origin Authorization
$ rpki-client -vvf repo.rpki.space/repo/Infiniroute/1/326131343a3763303a336130303a3a2f34302d3430203d3e203531333936.roa
File: 326131343a3763303a336130303a3a2f34302d3430203d3e203531333936.roa (raw, json)
Hash identifier: kBdjaGCBoib+72jQAyOSpTY391SySQ1Xv3RNsIv6qiY=
Subject key identifier: 9B:3B:92:20:4F:32:A8:09:AD:DB:AA:87:86:56:78:7F:E9:25:8A:2A
Certificate issuer: /CN=5b8e21c6890bd79ab764d91b60c39c3b7e4985e1
Certificate serial: 20201758A7E229A4A3DD2393917BDA44434187DF
Authority key identifier: 5B:8E:21:C6:89:0B:D7:9A:B7:64:D9:1B:60:C3:9C:3B:7E:49:85:E1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/W44hxokL15q3ZNkbYMOcO35JheE.cer
Subject info access: rsync://repo.rpki.space/repo/Infiniroute/1/326131343a3763303a336130303a3a2f34302d3430203d3e203531333936.roa
Signing time: Wed 04 Feb 2026 09:31:46 +0000
ROA not before: Wed 04 Feb 2026 09:26:46 +0000
ROA not after: Wed 03 Feb 2027 09:31:46 +0000
asID: 51396
IP address blocks: 2a14:7c0:3a00::/40 maxlen: 40
Validation: OK
Signature path: rsync://repo.rpki.space/repo/Infiniroute/1/5B8E21C6890BD79AB764D91B60C39C3B7E4985E1.crl
rsync://repo.rpki.space/repo/Infiniroute/1/5B8E21C6890BD79AB764D91B60C39C3B7E4985E1.mft
rsync://rpki.ripe.net/repository/DEFAULT/W44hxokL15q3ZNkbYMOcO35JheE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 02:03:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
20:20:17:58:a7:e2:29:a4:a3:dd:23:93:91:7b:da:44:43:41:87:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5b8e21c6890bd79ab764d91b60c39c3b7e4985e1
Validity
Not Before: Feb 4 09:26:46 2026 GMT
Not After : Feb 3 09:31:46 2027 GMT
Subject: CN=9B3B92204F32A809ADDBAA878656787FE9258A2A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:86:9d:82:a3:20:e5:f1:07:5f:b8:8a:e2:16:
fe:b8:1e:8e:04:60:03:e8:8a:16:23:cd:96:62:e8:
ae:d7:ab:b1:b7:a5:8b:42:64:67:fe:b7:73:e8:ae:
da:0a:08:03:ac:fd:d8:e6:bb:09:9a:70:f5:e5:8f:
c6:29:46:4a:af:7e:c6:e3:ff:ce:1a:37:d4:16:1b:
33:ac:a3:9b:ff:4a:68:c3:38:e5:13:3a:65:06:6d:
ca:3f:93:56:43:99:e4:3e:95:aa:84:0a:3f:09:ea:
ed:82:1f:e1:18:51:c6:4f:30:7f:06:b6:17:a7:b6:
d4:16:8a:cb:c0:67:ed:2c:bb:09:19:a7:49:38:df:
61:21:c3:57:15:77:de:ff:81:c8:0c:37:21:43:ef:
26:53:54:51:33:b4:a0:a3:16:00:3a:39:2e:39:6a:
aa:37:bd:c6:3d:1d:22:90:92:e3:4e:1a:73:b9:4f:
c7:fc:88:08:0e:e9:5a:6a:8b:ad:2f:f4:c6:dd:43:
36:40:41:9e:ed:13:1f:21:01:33:3f:fa:d0:40:47:
8d:b8:da:cd:5e:1d:ce:02:ac:f5:88:6f:6e:d2:2d:
3a:22:4d:1a:63:b1:16:cb:43:42:90:95:3c:7b:67:
63:d0:ed:54:d0:9e:b2:34:cf:73:5d:d1:a1:13:50:
db:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:3B:92:20:4F:32:A8:09:AD:DB:AA:87:86:56:78:7F:E9:25:8A:2A
X509v3 Authority Key Identifier:
keyid:5B:8E:21:C6:89:0B:D7:9A:B7:64:D9:1B:60:C3:9C:3B:7E:49:85:E1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo.rpki.space/repo/Infiniroute/1/5B8E21C6890BD79AB764D91B60C39C3B7E4985E1.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W44hxokL15q3ZNkbYMOcO35JheE.cer
Subject Information Access:
Signed Object - URI:rsync://repo.rpki.space/repo/Infiniroute/1/326131343a3763303a336130303a3a2f34302d3430203d3e203531333936.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7c0:3a00::/40
Signature Algorithm: sha256WithRSAEncryption
18:be:bd:ec:23:c2:a5:e1:4b:f3:a3:05:87:b6:45:65:ec:d7:
ec:e5:3b:48:41:3d:a2:57:5f:6f:cd:25:be:7c:21:1a:6e:f8:
b0:8c:f7:86:c2:e9:c2:ad:b9:7a:63:c5:b6:f0:bc:98:27:d6:
b4:56:3d:e1:ba:02:43:a6:65:3e:45:83:29:b5:61:d7:2b:b1:
7a:7e:b4:aa:df:86:a6:a7:29:0c:8e:f6:04:6f:59:c9:9f:a4:
51:e5:e9:d8:a1:dd:3a:c9:96:d6:a2:76:2e:d0:9e:9a:49:12:
69:99:17:31:89:f1:83:06:09:73:83:33:45:b7:f7:a0:ed:5e:
e8:5c:72:4c:9b:96:27:7b:d7:1b:6c:c4:f3:6f:10:f7:d2:5e:
f0:80:21:2c:f7:24:96:43:31:51:2d:6a:eb:54:36:3e:68:42:
91:26:9a:b5:67:3d:9d:1b:83:3a:fa:9f:79:7e:e0:cd:ba:69:
f7:e4:15:b1:67:1e:62:df:c2:ee:11:5c:46:7e:4d:a4:ab:5f:
03:1f:62:14:13:dc:17:8a:b3:f6:33:4d:23:94:1f:c3:5e:ad:
6b:d5:ea:57:22:e9:90:7d:17:c2:03:6d:f6:cd:1c:5d:4c:cc:
f0:72:49:e4:ff:74:b4:fe:35:c3:e6:f3:c5:51:50:eb:9b:38:
38:d0:dc:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 14:42:06 2026 by rpki-client