Route Origin Authorization
$ rpki-client -vvf repo.rpki.space/repo/Infiniroute/1/326131343a3763303a346530303a3a2f34302d3438203d3e20323134373831.roa
File: 326131343a3763303a346530303a3a2f34302d3438203d3e20323134373831.roa (raw, json)
Hash identifier: yrVxVRX+vNOSqy7tWsX1avyW0dJt9hvvxoSLD9uMAeQ=
Subject key identifier: B4:FD:F4:BB:96:7C:2C:0D:92:0F:D3:33:84:0B:F0:22:2F:D7:8B:9F
Certificate issuer: /CN=5b8e21c6890bd79ab764d91b60c39c3b7e4985e1
Certificate serial: 2B5A3CD239883660D9B948EE19C9135F99079833
Authority key identifier: 5B:8E:21:C6:89:0B:D7:9A:B7:64:D9:1B:60:C3:9C:3B:7E:49:85:E1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/W44hxokL15q3ZNkbYMOcO35JheE.cer
Subject info access: rsync://repo.rpki.space/repo/Infiniroute/1/326131343a3763303a346530303a3a2f34302d3438203d3e20323134373831.roa
Signing time: Wed 08 Apr 2026 23:52:33 +0000
ROA not before: Wed 08 Apr 2026 23:47:33 +0000
ROA not after: Wed 07 Apr 2027 23:52:33 +0000
asID: 214781
IP address blocks: 2a14:7c0:4e00::/40 maxlen: 48
Validation: OK
Signature path: rsync://repo.rpki.space/repo/Infiniroute/1/5B8E21C6890BD79AB764D91B60C39C3B7E4985E1.crl
rsync://repo.rpki.space/repo/Infiniroute/1/5B8E21C6890BD79AB764D91B60C39C3B7E4985E1.mft
rsync://rpki.ripe.net/repository/DEFAULT/W44hxokL15q3ZNkbYMOcO35JheE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 06:18:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2b:5a:3c:d2:39:88:36:60:d9:b9:48:ee:19:c9:13:5f:99:07:98:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5b8e21c6890bd79ab764d91b60c39c3b7e4985e1
Validity
Not Before: Apr 8 23:47:33 2026 GMT
Not After : Apr 7 23:52:33 2027 GMT
Subject: CN=B4FDF4BB967C2C0D920FD333840BF0222FD78B9F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:f3:39:5c:76:94:b8:b2:ba:16:fc:01:2b:43:
aa:63:b9:71:4c:db:c9:2c:85:3b:41:21:f6:39:26:
d6:14:09:84:e0:09:7e:34:3a:e0:22:1f:a7:7d:32:
d3:e7:66:ee:41:7b:a8:71:f3:94:d6:6f:a5:58:d4:
0a:17:4f:0b:3a:91:b1:7b:2f:70:7a:28:b0:f3:64:
bb:6c:e1:4c:03:e8:ad:19:45:50:ac:4f:bb:a3:7c:
c4:db:9b:eb:58:92:32:96:d8:52:85:99:93:96:1d:
cb:1e:e1:0e:52:fc:b6:b7:54:26:f6:00:a8:da:77:
ad:f3:57:b7:58:75:e0:79:c6:d4:82:3b:12:39:e1:
9f:a5:b4:7d:00:c9:6b:b8:58:56:0d:4a:7a:f4:7f:
01:3a:80:a7:1e:37:7f:61:57:04:af:13:32:ad:86:
69:6b:a5:62:56:d5:cf:03:5e:2f:97:71:3f:9a:8b:
7d:f4:63:8b:bb:bf:04:89:9a:56:eb:76:3f:f4:99:
1d:90:ee:b8:36:31:77:29:bb:33:e2:63:b1:83:92:
8d:10:13:b7:2d:d2:52:0f:28:39:28:9a:3f:68:59:
cc:1f:06:42:1e:f1:d7:b6:38:d9:78:c5:35:81:23:
5d:9a:9c:36:45:2e:f1:30:d8:e5:17:6d:a2:46:83:
9a:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:FD:F4:BB:96:7C:2C:0D:92:0F:D3:33:84:0B:F0:22:2F:D7:8B:9F
X509v3 Authority Key Identifier:
keyid:5B:8E:21:C6:89:0B:D7:9A:B7:64:D9:1B:60:C3:9C:3B:7E:49:85:E1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo.rpki.space/repo/Infiniroute/1/5B8E21C6890BD79AB764D91B60C39C3B7E4985E1.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W44hxokL15q3ZNkbYMOcO35JheE.cer
Subject Information Access:
Signed Object - URI:rsync://repo.rpki.space/repo/Infiniroute/1/326131343a3763303a346530303a3a2f34302d3438203d3e20323134373831.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7c0:4e00::/40
Signature Algorithm: sha256WithRSAEncryption
16:34:f4:5c:b0:7a:56:c9:45:e2:18:df:3b:7c:db:81:88:8d:
26:92:a4:92:38:52:8d:d6:f9:82:67:b6:da:cb:1f:15:ad:fe:
4a:b4:9b:21:28:0a:ba:bd:ec:00:68:93:c1:90:88:09:27:de:
db:80:d0:a1:80:2a:0b:26:6a:9a:c1:e0:70:c2:94:67:e7:e7:
f6:5a:35:cf:04:75:92:77:dc:e9:a8:cd:26:aa:ff:bd:26:02:
55:52:1e:7a:f5:61:82:b1:91:36:89:5e:8c:52:27:4b:9d:21:
b7:f2:d1:49:95:0b:84:ac:28:82:7f:aa:c4:03:05:de:97:42:
90:06:71:e0:c4:ac:82:7a:ac:64:f9:e0:64:67:53:5b:d7:cc:
37:2a:3f:2f:ba:b1:dc:5c:39:2b:66:bc:ab:fe:b0:c7:56:d4:
64:38:2e:61:70:74:a2:32:00:09:ea:1b:b1:c9:d1:cc:97:7e:
1f:07:ea:c9:b5:b9:e3:f4:2d:2a:27:47:ac:c7:19:70:f3:f8:
31:85:ba:ba:bf:6b:29:50:bd:2b:e8:51:19:3a:00:bb:51:69:
92:70:6e:a9:16:0f:85:ea:4f:89:7f:f9:eb:37:5e:31:68:b4:
e8:7a:9b:00:03:22:d0:9d:ab:44:92:e0:42:43:79:28:65:d8:
bd:40:b1:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 17:15:09 2026 by rpki-client