Route Origin Authorization
$ rpki-client -vvf repo.rpki.space/repo/Infiniroute/1/326131343a3763303a623030303a3a2f33362d3438203d3e20323135343336.roa
File: 326131343a3763303a623030303a3a2f33362d3438203d3e20323135343336.roa (raw, json)
Hash identifier: 6GucU3cNuiUdibcaUgqEucyplDAuEEu00t9o/po35/0=
Subject key identifier: 33:DC:C3:5E:4E:58:2D:5F:6D:32:DA:74:AF:DC:0D:53:59:8E:D9:7F
Certificate issuer: /CN=5b8e21c6890bd79ab764d91b60c39c3b7e4985e1
Certificate serial: 0BD090615A34BC29C2468F1D3298F3C1E314FD12
Authority key identifier: 5B:8E:21:C6:89:0B:D7:9A:B7:64:D9:1B:60:C3:9C:3B:7E:49:85:E1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/W44hxokL15q3ZNkbYMOcO35JheE.cer
Subject info access: rsync://repo.rpki.space/repo/Infiniroute/1/326131343a3763303a623030303a3a2f33362d3438203d3e20323135343336.roa
Signing time: Tue 31 Mar 2026 15:52:09 +0000
ROA not before: Tue 31 Mar 2026 15:47:09 +0000
ROA not after: Tue 30 Mar 2027 15:52:09 +0000
asID: 215436
IP address blocks: 2a14:7c0:b000::/36 maxlen: 48
Validation: OK
Signature path: rsync://repo.rpki.space/repo/Infiniroute/1/5B8E21C6890BD79AB764D91B60C39C3B7E4985E1.crl
rsync://repo.rpki.space/repo/Infiniroute/1/5B8E21C6890BD79AB764D91B60C39C3B7E4985E1.mft
rsync://rpki.ripe.net/repository/DEFAULT/W44hxokL15q3ZNkbYMOcO35JheE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 23:15:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0b:d0:90:61:5a:34:bc:29:c2:46:8f:1d:32:98:f3:c1:e3:14:fd:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5b8e21c6890bd79ab764d91b60c39c3b7e4985e1
Validity
Not Before: Mar 31 15:47:09 2026 GMT
Not After : Mar 30 15:52:09 2027 GMT
Subject: CN=33DCC35E4E582D5F6D32DA74AFDC0D53598ED97F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:ce:04:8e:25:23:c2:54:6c:5d:9b:78:14:c3:
d4:fb:1c:85:eb:ab:4e:0c:81:f9:1a:8d:ac:51:8f:
a5:dc:26:dd:fe:8e:82:da:6e:bc:b6:88:bd:42:99:
eb:a5:33:98:d2:f5:cf:01:53:e3:f1:06:fc:e1:dd:
78:a3:47:72:f6:4d:67:80:fe:ea:ee:c5:ed:1a:74:
0c:9f:79:ab:8a:80:30:0d:ab:f2:ab:bf:14:f0:4b:
e0:e1:2a:d9:3f:2c:aa:87:51:f4:e6:db:93:2a:8c:
04:41:7a:ae:da:f0:55:9b:f6:b3:d1:17:47:a3:79:
88:51:0c:07:53:4d:66:71:71:9e:81:20:21:ec:ff:
7e:8c:00:f2:0a:f8:ed:de:b9:17:8b:0f:d0:fe:24:
1f:be:b7:91:59:e2:e9:41:38:b2:88:f3:03:c7:bf:
da:c4:26:34:ed:ec:a7:51:b0:d9:f0:52:33:02:fe:
83:70:ab:3a:05:75:d0:32:9b:b2:f7:43:16:0b:ae:
ac:de:82:54:70:9d:a4:43:9b:c9:f6:ca:38:bc:40:
57:ea:cc:97:93:0b:4f:5a:e1:dc:f2:43:9e:dd:76:
46:3d:ad:86:9b:72:9c:35:45:af:6a:d3:c3:d5:3f:
e5:40:65:f4:22:a8:03:50:fd:7a:83:68:cf:1e:18:
a2:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:DC:C3:5E:4E:58:2D:5F:6D:32:DA:74:AF:DC:0D:53:59:8E:D9:7F
X509v3 Authority Key Identifier:
keyid:5B:8E:21:C6:89:0B:D7:9A:B7:64:D9:1B:60:C3:9C:3B:7E:49:85:E1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo.rpki.space/repo/Infiniroute/1/5B8E21C6890BD79AB764D91B60C39C3B7E4985E1.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W44hxokL15q3ZNkbYMOcO35JheE.cer
Subject Information Access:
Signed Object - URI:rsync://repo.rpki.space/repo/Infiniroute/1/326131343a3763303a623030303a3a2f33362d3438203d3e20323135343336.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7c0:b000::/36
Signature Algorithm: sha256WithRSAEncryption
09:52:f2:1b:17:fc:57:9a:d9:96:c9:12:9c:3e:9c:e3:aa:fa:
5f:d6:f6:0d:35:15:c2:4f:77:50:b7:14:6f:36:ba:27:4e:2a:
6c:ad:37:a3:65:c1:fd:35:fa:90:d8:66:ca:1d:c0:73:50:32:
2b:55:3b:a7:c6:0b:79:04:f8:97:f1:82:29:4b:02:7c:7b:ee:
54:0c:a7:45:83:fa:a2:11:10:b1:02:f5:98:93:e0:c0:c3:92:
a8:36:1e:85:80:2d:23:6d:38:d9:58:11:83:39:0d:1a:ff:04:
89:cb:d7:65:cb:03:2c:ac:59:2a:e6:6f:23:83:f9:f9:4c:e5:
22:47:45:9b:e8:fd:dd:a3:43:ca:23:ed:c9:00:42:50:f9:01:
1b:f1:cd:1e:6d:59:f3:2d:2e:8d:d2:09:11:86:40:d1:79:70:
8d:2d:03:93:e8:44:eb:d7:a2:10:aa:4a:2e:0f:87:3a:67:ea:
a0:ab:bd:c8:21:09:6b:a7:d8:8a:6a:67:ba:ed:66:0a:d6:fd:
ac:f2:bb:00:d2:0f:28:e3:6d:2b:c2:ef:f7:be:f6:d9:d9:8f:
b7:e4:e9:da:f5:f6:fd:72:93:a1:a2:89:fe:05:c5:95:ca:ae:
54:db:08:7b:aa:75:a4:77:66:6b:f7:1d:e6:27:62:db:d8:ed:
2e:b0:9e:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 08:55:28 2026 by rpki-client