Route Origin Authorization
$ rpki-client -vvf repo.rpki.space/repo/Infiniroute/1/326131343a3763353a3a2f33322d3332203d3e203531333936.roa
File: 326131343a3763353a3a2f33322d3332203d3e203531333936.roa (raw, json)
Hash identifier: Af7HG2Q/Qsy8TA/zdx0g3EjEmIgRibuC3F4Zw73g54U=
Subject key identifier: F3:AD:A6:C9:34:6B:37:0A:B9:15:8D:E1:10:76:C8:E1:C6:2B:04:8E
Certificate issuer: /CN=5b8e21c6890bd79ab764d91b60c39c3b7e4985e1
Certificate serial: 3FBB67BC4F8C57B32E033ED9FC0A72B6BDF7C1CF
Authority key identifier: 5B:8E:21:C6:89:0B:D7:9A:B7:64:D9:1B:60:C3:9C:3B:7E:49:85:E1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/W44hxokL15q3ZNkbYMOcO35JheE.cer
Subject info access: rsync://repo.rpki.space/repo/Infiniroute/1/326131343a3763353a3a2f33322d3332203d3e203531333936.roa
Signing time: Sun 22 Feb 2026 00:53:10 +0000
ROA not before: Sun 22 Feb 2026 00:48:10 +0000
ROA not after: Sun 21 Feb 2027 00:53:10 +0000
asID: 51396
IP address blocks: 2a14:7c5::/32 maxlen: 32
Validation: OK
Signature path: rsync://repo.rpki.space/repo/Infiniroute/1/5B8E21C6890BD79AB764D91B60C39C3B7E4985E1.crl
rsync://repo.rpki.space/repo/Infiniroute/1/5B8E21C6890BD79AB764D91B60C39C3B7E4985E1.mft
rsync://rpki.ripe.net/repository/DEFAULT/W44hxokL15q3ZNkbYMOcO35JheE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 02:03:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3f:bb:67:bc:4f:8c:57:b3:2e:03:3e:d9:fc:0a:72:b6:bd:f7:c1:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5b8e21c6890bd79ab764d91b60c39c3b7e4985e1
Validity
Not Before: Feb 22 00:48:10 2026 GMT
Not After : Feb 21 00:53:10 2027 GMT
Subject: CN=F3ADA6C9346B370AB9158DE11076C8E1C62B048E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:72:7a:a9:78:a6:be:62:85:78:cf:6b:cc:5b:
41:43:4c:d6:00:b0:cc:02:e9:77:f7:13:0e:85:99:
a2:d0:85:0e:e6:ce:e5:3f:20:92:7f:0e:3b:a3:17:
19:d8:4e:f3:07:eb:ee:5f:81:e3:25:88:7f:b2:1b:
0f:23:9b:d0:f2:6b:68:fe:44:94:2d:74:23:84:95:
5b:15:0f:a8:b5:99:6e:17:42:ca:6e:58:03:0d:de:
23:4c:79:c2:53:0e:03:80:6d:cd:fc:75:f2:65:46:
af:24:f5:b8:e0:e5:6a:57:17:60:de:d2:f1:dd:0f:
ee:9b:44:db:e2:d4:a7:7b:1f:9c:0b:6d:b4:84:68:
99:fd:c5:12:da:d5:e6:9d:ca:72:81:b3:4f:79:23:
ea:73:7a:36:63:4d:6a:75:14:28:61:4f:9f:de:7f:
a7:62:0c:25:b9:b8:91:00:59:48:f8:ea:d7:37:b4:
39:e1:5d:7d:0e:9e:5e:c5:8f:78:a7:fe:97:33:87:
1b:52:55:e0:bc:2f:3a:65:4f:40:5b:87:91:82:0c:
12:62:17:ab:dc:c5:f7:9a:86:74:55:50:fe:83:7a:
83:b9:6d:a9:02:b9:71:f8:00:ed:33:b4:80:b3:fd:
f9:ae:7e:aa:11:83:3b:ab:a5:fc:09:63:30:3c:2f:
b3:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:AD:A6:C9:34:6B:37:0A:B9:15:8D:E1:10:76:C8:E1:C6:2B:04:8E
X509v3 Authority Key Identifier:
keyid:5B:8E:21:C6:89:0B:D7:9A:B7:64:D9:1B:60:C3:9C:3B:7E:49:85:E1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo.rpki.space/repo/Infiniroute/1/5B8E21C6890BD79AB764D91B60C39C3B7E4985E1.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W44hxokL15q3ZNkbYMOcO35JheE.cer
Subject Information Access:
Signed Object - URI:rsync://repo.rpki.space/repo/Infiniroute/1/326131343a3763353a3a2f33322d3332203d3e203531333936.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7c5::/32
Signature Algorithm: sha256WithRSAEncryption
26:05:fd:de:b4:57:e4:5c:65:24:79:30:f5:ff:cd:02:b5:2a:
62:10:7f:2a:d5:f3:53:2a:22:1f:83:20:fb:18:a2:d2:c3:24:
60:a3:7f:ee:e6:f1:54:de:28:ca:b5:16:62:30:7f:9f:19:63:
b7:f1:51:85:8f:75:ce:73:87:37:39:7b:b8:23:79:5c:05:84:
9c:cc:a8:77:46:7a:5b:85:8e:c2:03:5a:dd:8f:73:65:09:cb:
67:49:2d:f0:f9:67:a0:71:f6:76:c0:5e:d4:bc:9f:15:eb:1b:
67:2e:d4:68:32:34:25:1a:6d:72:c2:1b:08:8e:07:8d:04:f2:
9a:b1:fe:38:1d:47:15:45:e5:19:93:18:02:95:d1:c1:d5:80:
0b:dc:6c:ab:34:d1:5f:3c:a2:82:51:cb:09:a6:f6:93:64:0c:
a6:8e:4b:eb:f3:56:88:9f:7b:12:b5:47:86:64:62:14:77:fc:
10:90:24:32:19:b6:31:a5:eb:0b:ba:70:9f:c5:3a:d5:6e:09:
82:e1:6d:68:68:da:43:f5:68:11:02:a8:41:d9:16:7a:be:37:
af:2d:e8:91:9b:6d:fe:2e:78:90:b1:90:e2:5a:0a:36:9f:b6:
88:ec:af:b4:e6:10:71:f7:f2:ea:13:5e:9b:07:c2:a4:ac:3c:
b7:7a:5c:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 14:42:49 2026 by rpki-client