Route Origin Authorization
$ rpki-client -vvf repo.rpki.space/repo/Infiniroute/1/326131343a3763303a346430303a3a2f34302d3438203d3e20323134373735.roa
File: 326131343a3763303a346430303a3a2f34302d3438203d3e20323134373735.roa (raw, json)
Hash identifier: 9E+MK7eDiEJL42coS73sPWb785PETWERTu0A/GzxdVc=
Subject key identifier: AD:37:7A:24:A1:BF:EC:0B:DE:B8:EA:4A:8F:7A:E8:EB:A6:5C:34:A5
Certificate issuer: /CN=5b8e21c6890bd79ab764d91b60c39c3b7e4985e1
Certificate serial: 525CF881A2AD774EDEC801BFD9AB71BB7E6531
Authority key identifier: 5B:8E:21:C6:89:0B:D7:9A:B7:64:D9:1B:60:C3:9C:3B:7E:49:85:E1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/W44hxokL15q3ZNkbYMOcO35JheE.cer
Subject info access: rsync://repo.rpki.space/repo/Infiniroute/1/326131343a3763303a346430303a3a2f34302d3438203d3e20323134373735.roa
Signing time: Sat 11 Apr 2026 21:52:35 +0000
ROA not before: Sat 11 Apr 2026 21:47:35 +0000
ROA not after: Sat 10 Apr 2027 21:52:35 +0000
asID: 214775
IP address blocks: 2a14:7c0:4d00::/40 maxlen: 48
Validation: OK
Signature path: rsync://repo.rpki.space/repo/Infiniroute/1/5B8E21C6890BD79AB764D91B60C39C3B7E4985E1.crl
rsync://repo.rpki.space/repo/Infiniroute/1/5B8E21C6890BD79AB764D91B60C39C3B7E4985E1.mft
rsync://rpki.ripe.net/repository/DEFAULT/W44hxokL15q3ZNkbYMOcO35JheE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 06:18:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
52:5c:f8:81:a2:ad:77:4e:de:c8:01:bf:d9:ab:71:bb:7e:65:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5b8e21c6890bd79ab764d91b60c39c3b7e4985e1
Validity
Not Before: Apr 11 21:47:35 2026 GMT
Not After : Apr 10 21:52:35 2027 GMT
Subject: CN=AD377A24A1BFEC0BDEB8EA4A8F7AE8EBA65C34A5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f6:41:99:c1:07:08:d3:1b:54:98:c1:15:32:49:
4b:51:81:f8:6e:d2:64:ce:d0:0b:f5:41:29:88:a6:
e4:78:7f:2b:55:85:c9:39:68:0d:a7:b2:1e:2d:9e:
2a:2b:0d:94:5e:d2:a1:73:02:f9:39:1f:a9:14:b0:
4a:90:63:b7:57:ee:be:c8:86:9c:1d:62:3e:b2:88:
2f:45:97:cf:a9:dd:58:a6:e9:1d:db:07:ba:0f:1b:
e0:b9:cc:83:bc:73:84:ca:09:4c:d3:7f:67:bf:33:
53:6f:a9:bd:f1:75:1a:d5:1f:98:48:8d:e7:98:4d:
04:1b:b9:3f:24:f5:38:d4:87:54:2a:53:e2:4d:b3:
16:ef:3b:39:97:61:36:7d:b1:05:48:f6:fe:33:27:
18:df:65:fb:2d:82:1f:5f:2a:29:3c:18:91:bb:dd:
c4:09:0d:e8:59:19:ac:47:ff:54:8e:14:5e:8b:c1:
de:cf:c3:8a:99:ed:a6:f8:7e:3b:a0:59:60:ae:d0:
0c:d8:d8:7b:51:e1:7a:02:f4:c9:b3:9a:87:f0:c3:
b9:00:c8:03:18:b2:b0:11:88:6c:48:5e:70:38:f1:
4e:95:6b:e9:e5:9f:b1:d1:85:b2:2e:8b:cc:ce:77:
3d:26:ed:aa:81:b0:fa:80:bf:0f:21:99:eb:0b:c4:
a7:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:37:7A:24:A1:BF:EC:0B:DE:B8:EA:4A:8F:7A:E8:EB:A6:5C:34:A5
X509v3 Authority Key Identifier:
keyid:5B:8E:21:C6:89:0B:D7:9A:B7:64:D9:1B:60:C3:9C:3B:7E:49:85:E1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo.rpki.space/repo/Infiniroute/1/5B8E21C6890BD79AB764D91B60C39C3B7E4985E1.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W44hxokL15q3ZNkbYMOcO35JheE.cer
Subject Information Access:
Signed Object - URI:rsync://repo.rpki.space/repo/Infiniroute/1/326131343a3763303a346430303a3a2f34302d3438203d3e20323134373735.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7c0:4d00::/40
Signature Algorithm: sha256WithRSAEncryption
73:4f:b2:1b:e0:db:d1:95:40:69:f7:43:5b:d3:55:18:db:12:
bb:ff:05:13:94:3f:0a:ad:87:7c:a8:e6:f7:05:4e:db:70:46:
6d:d9:a5:6a:44:9f:6b:37:e9:25:b5:16:d4:0d:d7:14:a7:db:
42:bb:d8:71:da:37:cf:68:68:57:4b:bb:8a:36:c3:e9:51:b3:
d2:94:df:d5:8e:ea:7f:cd:be:04:0f:26:9a:4c:58:24:a2:7d:
9d:6a:1b:ee:74:e4:a3:03:c5:7d:5c:6d:e5:8a:f9:ab:15:1f:
9f:6a:19:bc:eb:7f:4f:79:c2:48:99:93:86:9d:85:cd:c3:d0:
64:6a:b2:b5:7e:d8:41:f7:f0:2f:31:bd:fb:72:e6:14:9c:51:
fc:d9:ff:c9:3f:05:f1:c8:0c:a0:69:bd:64:b7:a9:8d:e2:d9:
b0:93:2d:82:3e:d3:c5:1d:4d:d3:c0:4d:50:6e:38:2d:fc:a0:
fe:b9:20:55:73:05:98:50:1f:b2:61:cb:c0:4a:ab:fe:42:50:
59:0c:5e:12:4b:d7:d5:57:49:eb:8b:b9:02:a7:e1:85:65:fc:
1d:25:09:70:01:52:02:b5:49:c1:88:6d:34:e0:5e:89:28:16:
53:9c:72:44:c0:67:bd:23:a9:7d:f9:f3:83:46:f0:be:ca:1e:
2b:26:f5:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 19:26:55 2026 by rpki-client