Route Origin Authorization
$ rpki-client -vvf repo.rpki.space/repo/Infiniroute/1/326131343a3763303a363230303a3a2f33392d3438203d3e20313939303532.roa
File: 326131343a3763303a363230303a3a2f33392d3438203d3e20313939303532.roa (raw, json)
Hash identifier: MKxrXkIDrDgy9EtlIWLbZ6lN1/rmmCGeCtAi9bDsNVE=
Subject key identifier: E0:85:46:41:3B:FE:FE:E3:6F:26:B9:01:9A:F2:D9:EF:E1:4D:36:1F
Certificate issuer: /CN=5b8e21c6890bd79ab764d91b60c39c3b7e4985e1
Certificate serial: 52AA0AB7E2FACF36A72503CBFB787EE86531B8CA
Authority key identifier: 5B:8E:21:C6:89:0B:D7:9A:B7:64:D9:1B:60:C3:9C:3B:7E:49:85:E1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/W44hxokL15q3ZNkbYMOcO35JheE.cer
Subject info access: rsync://repo.rpki.space/repo/Infiniroute/1/326131343a3763303a363230303a3a2f33392d3438203d3e20313939303532.roa
Signing time: Mon 27 Jul 2026 08:15:00 +0000
ROA not before: Mon 27 Jul 2026 08:10:00 +0000
ROA not after: Mon 26 Jul 2027 08:15:00 +0000
asID: 199052
IP address blocks: 2a14:7c0:6200::/39 maxlen: 48
Validation: OK
Signature path: rsync://repo.rpki.space/repo/Infiniroute/1/5B8E21C6890BD79AB764D91B60C39C3B7E4985E1.crl
rsync://repo.rpki.space/repo/Infiniroute/1/5B8E21C6890BD79AB764D91B60C39C3B7E4985E1.mft
rsync://rpki.ripe.net/repository/DEFAULT/W44hxokL15q3ZNkbYMOcO35JheE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
52:aa:0a:b7:e2:fa:cf:36:a7:25:03:cb:fb:78:7e:e8:65:31:b8:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5b8e21c6890bd79ab764d91b60c39c3b7e4985e1
Validity
Not Before: Jul 27 08:10:00 2026 GMT
Not After : Jul 26 08:15:00 2027 GMT
Subject: CN=E08546413BFEFEE36F26B9019AF2D9EFE14D361F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:34:f1:78:08:8c:b6:2f:aa:1c:92:e4:82:53:
12:71:ea:9c:ab:d9:10:64:35:76:c4:d5:fd:fe:37:
85:e6:db:fd:64:14:63:4d:c0:9e:7f:ba:17:f9:52:
4e:78:55:4f:26:2f:83:79:db:e2:1c:b1:0c:5e:db:
e9:75:89:eb:7b:f4:61:c8:7a:d7:3a:1e:61:9e:21:
ac:c7:c2:8d:ae:10:ad:0c:3e:d3:16:12:3c:c8:41:
19:89:2c:23:fe:d3:d7:42:f3:1f:44:96:99:76:f7:
98:f0:23:f5:19:3b:e3:65:4a:5a:95:bf:50:86:32:
42:33:16:60:f1:5d:2d:d3:86:b9:b9:a7:db:7a:9f:
61:f2:6c:e6:17:bd:9b:9b:c6:d3:be:ce:8b:a3:49:
c6:ae:1e:c7:38:63:11:26:c3:34:7d:f1:1b:27:96:
d2:c5:32:77:b0:e9:a1:b7:5d:c9:57:86:bf:08:93:
a9:de:24:79:68:84:d2:52:2c:75:0a:c0:f5:5d:3b:
0b:59:25:eb:d4:83:f6:b2:a2:52:cc:69:62:42:d4:
37:c5:67:d6:27:14:0f:48:91:8c:76:9f:71:15:42:
b3:07:57:ab:6a:3e:0b:df:31:22:29:1e:51:77:fc:
75:5d:4c:f5:54:eb:7a:c7:83:e1:85:6b:80:f4:f2:
6d:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:85:46:41:3B:FE:FE:E3:6F:26:B9:01:9A:F2:D9:EF:E1:4D:36:1F
X509v3 Authority Key Identifier:
keyid:5B:8E:21:C6:89:0B:D7:9A:B7:64:D9:1B:60:C3:9C:3B:7E:49:85:E1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo.rpki.space/repo/Infiniroute/1/5B8E21C6890BD79AB764D91B60C39C3B7E4985E1.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W44hxokL15q3ZNkbYMOcO35JheE.cer
Subject Information Access:
Signed Object - URI:rsync://repo.rpki.space/repo/Infiniroute/1/326131343a3763303a363230303a3a2f33392d3438203d3e20313939303532.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7c0:6200::/39
Signature Algorithm: sha256WithRSAEncryption
2e:2e:0e:58:ec:e6:2b:66:53:f6:95:4a:a7:29:f9:ba:66:d5:
1c:84:44:93:4d:6f:5c:c8:01:dc:77:ec:c5:5c:c5:16:e6:71:
45:14:9a:5a:1d:3e:28:55:e1:a7:bb:16:82:d0:88:50:4c:d2:
9e:d0:10:ff:db:3d:19:13:12:6d:60:7e:7f:19:36:f7:29:84:
8c:b4:d7:f6:74:48:c0:f7:67:8e:2d:cb:70:26:be:74:e0:18:
23:0f:e7:b1:bb:05:13:eb:86:43:86:ca:2e:c5:6a:7a:be:3d:
0a:d5:8c:b2:92:b2:e9:4f:1c:dd:76:b5:a3:27:67:ec:bf:04:
25:0b:a1:ab:3d:bc:51:79:45:9e:68:99:75:c0:a1:61:a6:4f:
0e:28:23:48:2c:50:4f:61:0b:e7:4a:71:62:f9:ab:ba:71:48:
ff:a9:46:1c:96:f4:d8:f9:96:c9:3b:41:29:2a:27:4d:59:6a:
0c:5a:2a:04:b1:84:fc:4c:f8:2c:70:cf:db:ec:df:67:33:a5:
02:e0:d0:c3:ec:e4:a4:cb:8a:17:c1:74:3e:35:12:0c:b3:bd:
35:31:7b:c2:66:fc:d6:dd:41:25:14:f2:83:c3:63:ed:0d:4c:
49:10:c5:f9:16:3f:8b:55:6f:0f:2c:81:15:a0:7b:d6:ab:3a:
1e:50:c7:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 03:42:32 2026 by rpki-client