Route Origin Authorization
$ rpki-client -vvf repo.rpki.space/repo/Infiniroute/1/326131343a3763303a64303a3a2f34342d3438203d3e20323135323033.roa
File: 326131343a3763303a64303a3a2f34342d3438203d3e20323135323033.roa (raw, json)
Hash identifier: HPwy8LmYIp9zXUCuOg6zaULO/Whs9Lsz5jLR/UinrVI=
Subject key identifier: 3F:5C:FE:02:2B:42:93:35:A6:07:C0:EE:4D:28:9B:5F:53:7C:78:8D
Certificate issuer: /CN=5b8e21c6890bd79ab764d91b60c39c3b7e4985e1
Certificate serial: 1229B7299B9F98E8594C3D932A4F8412EFA1FD5B
Authority key identifier: 5B:8E:21:C6:89:0B:D7:9A:B7:64:D9:1B:60:C3:9C:3B:7E:49:85:E1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/W44hxokL15q3ZNkbYMOcO35JheE.cer
Subject info access: rsync://repo.rpki.space/repo/Infiniroute/1/326131343a3763303a64303a3a2f34342d3438203d3e20323135323033.roa
Signing time: Tue 31 Mar 2026 15:52:16 +0000
ROA not before: Tue 31 Mar 2026 15:47:16 +0000
ROA not after: Tue 30 Mar 2027 15:52:16 +0000
asID: 215203
IP address blocks: 2a14:7c0:d0::/44 maxlen: 48
Validation: OK
Signature path: rsync://repo.rpki.space/repo/Infiniroute/1/5B8E21C6890BD79AB764D91B60C39C3B7E4985E1.crl
rsync://repo.rpki.space/repo/Infiniroute/1/5B8E21C6890BD79AB764D91B60C39C3B7E4985E1.mft
rsync://rpki.ripe.net/repository/DEFAULT/W44hxokL15q3ZNkbYMOcO35JheE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 06:18:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
12:29:b7:29:9b:9f:98:e8:59:4c:3d:93:2a:4f:84:12:ef:a1:fd:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5b8e21c6890bd79ab764d91b60c39c3b7e4985e1
Validity
Not Before: Mar 31 15:47:16 2026 GMT
Not After : Mar 30 15:52:16 2027 GMT
Subject: CN=3F5CFE022B429335A607C0EE4D289B5F537C788D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:86:6e:22:ba:a0:df:4a:30:d4:db:48:e0:35:
fd:23:0e:9b:47:b4:bc:b0:6d:dd:21:57:6d:7c:88:
ad:0c:b3:76:6f:fa:da:08:58:eb:bd:5c:e5:76:bc:
5c:a7:33:38:3c:76:ae:6f:5f:83:1b:44:79:3b:45:
7b:72:59:1e:07:01:16:7b:47:60:80:52:29:55:d7:
45:dc:e6:3a:cc:dd:19:25:13:3a:df:26:34:70:8b:
aa:71:b8:a7:73:39:f1:23:e7:9d:18:4b:2d:bd:aa:
6a:d7:7a:ef:f1:11:75:f9:f0:49:26:06:86:6d:18:
31:94:c6:44:15:f7:54:3a:3a:25:1b:42:87:ed:c0:
41:ab:77:06:63:ef:a6:55:54:6e:23:1c:4e:ef:ce:
57:2b:89:cb:23:2d:7b:48:bd:03:d9:4d:8a:47:1e:
80:14:2f:7d:55:11:d7:4f:39:a0:f0:89:76:a0:86:
f1:ff:3d:b3:92:72:8f:1a:a8:8f:d4:cf:f1:9e:b8:
ed:25:b6:14:b4:4e:ad:de:e0:b8:11:10:81:bf:a4:
00:db:b8:2f:ca:f0:da:fa:fc:08:d8:05:68:84:8b:
91:9d:0f:fe:cd:cf:09:5e:8e:ce:97:7a:27:a3:30:
fe:ad:77:d6:23:49:44:46:74:57:cf:aa:02:a6:04:
3b:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:5C:FE:02:2B:42:93:35:A6:07:C0:EE:4D:28:9B:5F:53:7C:78:8D
X509v3 Authority Key Identifier:
keyid:5B:8E:21:C6:89:0B:D7:9A:B7:64:D9:1B:60:C3:9C:3B:7E:49:85:E1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo.rpki.space/repo/Infiniroute/1/5B8E21C6890BD79AB764D91B60C39C3B7E4985E1.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W44hxokL15q3ZNkbYMOcO35JheE.cer
Subject Information Access:
Signed Object - URI:rsync://repo.rpki.space/repo/Infiniroute/1/326131343a3763303a64303a3a2f34342d3438203d3e20323135323033.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7c0:d0::/44
Signature Algorithm: sha256WithRSAEncryption
25:a9:35:c3:a1:9e:28:3a:87:de:d2:e9:30:97:1c:17:c4:fe:
90:6e:4b:13:86:dc:9d:b3:9e:43:d3:7e:c3:9b:aa:9d:7a:45:
37:de:db:38:f1:46:a4:d1:97:79:87:cb:1b:a1:ad:63:8e:25:
8c:90:ec:ce:c9:d9:e7:b0:13:05:45:89:34:20:5f:53:6f:0e:
6d:e7:e9:46:9f:35:85:a0:0e:a5:8d:54:c2:6a:3e:f9:d1:3f:
e0:eb:7c:22:87:6f:c4:7a:10:53:25:87:74:af:45:3f:55:e3:
a4:12:f9:78:6d:66:79:7f:65:43:c2:37:91:a1:ba:8c:0d:4e:
ee:d3:02:43:3d:f0:3d:ff:f7:2f:cf:8f:39:c6:60:e7:6b:07:
d4:d4:c6:50:11:80:07:bc:62:81:1a:f8:e7:c3:7c:a2:8d:f9:
5d:b9:ab:b4:75:10:90:57:d4:ea:39:e5:0a:55:e3:5f:9b:79:
24:cb:f9:bf:25:54:6a:bb:3a:c2:1a:87:19:49:fb:5e:68:b9:
dc:c9:75:2c:1e:c0:dc:c2:73:d3:43:80:c5:77:da:f6:a9:b1:
fb:bd:3c:f0:84:83:fe:d1:fc:5b:d1:db:45:71:b8:ce:6a:ae:
6f:63:ef:82:43:78:f1:ca:34:cd:6e:b0:9d:40:74:bb:a9:91:
51:dc:83:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 14:31:50 2026 by rpki-client