Route Origin Authorization
$ rpki-client -vvf repo.rpki.space/repo/Infiniroute/1/326131343a3763363a3a2f33322d3332203d3e203531333936.roa
File: 326131343a3763363a3a2f33322d3332203d3e203531333936.roa (raw, json)
Hash identifier: 4/sU6XEO7rhcNYqmINbUpgyOT/n8he/HG8dtxQiVewE=
Subject key identifier: 5E:AB:5D:03:C7:7C:60:F8:F8:61:0E:94:54:5B:22:D7:FD:B3:86:4E
Certificate issuer: /CN=5b8e21c6890bd79ab764d91b60c39c3b7e4985e1
Certificate serial: 40C658FD4DE66D35437194CA6F884244BB74B893
Authority key identifier: 5B:8E:21:C6:89:0B:D7:9A:B7:64:D9:1B:60:C3:9C:3B:7E:49:85:E1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/W44hxokL15q3ZNkbYMOcO35JheE.cer
Subject info access: rsync://repo.rpki.space/repo/Infiniroute/1/326131343a3763363a3a2f33322d3332203d3e203531333936.roa
Signing time: Sun 22 Feb 2026 00:53:16 +0000
ROA not before: Sun 22 Feb 2026 00:48:16 +0000
ROA not after: Sun 21 Feb 2027 00:53:16 +0000
asID: 51396
IP address blocks: 2a14:7c6::/32 maxlen: 32
Validation: OK
Signature path: rsync://repo.rpki.space/repo/Infiniroute/1/5B8E21C6890BD79AB764D91B60C39C3B7E4985E1.crl
rsync://repo.rpki.space/repo/Infiniroute/1/5B8E21C6890BD79AB764D91B60C39C3B7E4985E1.mft
rsync://rpki.ripe.net/repository/DEFAULT/W44hxokL15q3ZNkbYMOcO35JheE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 02:03:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
40:c6:58:fd:4d:e6:6d:35:43:71:94:ca:6f:88:42:44:bb:74:b8:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5b8e21c6890bd79ab764d91b60c39c3b7e4985e1
Validity
Not Before: Feb 22 00:48:16 2026 GMT
Not After : Feb 21 00:53:16 2027 GMT
Subject: CN=5EAB5D03C77C60F8F8610E94545B22D7FDB3864E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:f0:96:d9:61:80:fd:2a:ec:01:37:ba:3e:69:
1c:14:28:6d:db:5f:38:33:b9:4a:97:21:75:dc:bf:
ad:8e:12:b3:70:8a:b3:12:48:c2:e6:f2:3e:47:2e:
ec:88:b0:28:5e:43:60:24:7d:54:ed:84:0a:3a:d3:
7b:a4:b6:b1:19:e0:9d:66:7d:f2:a0:1a:3d:8d:f7:
50:55:55:a8:a9:7f:03:60:34:64:dd:c7:85:b6:c1:
0e:94:9e:b3:09:d4:c3:9e:0c:24:6c:0e:79:ee:55:
4b:11:ef:05:51:63:90:69:84:0b:01:e0:53:aa:8d:
c5:18:66:e2:65:53:a6:f5:bb:92:14:7e:91:e1:d4:
f3:94:a7:71:1a:68:5f:f8:1c:90:49:4f:9f:8a:ae:
b1:f0:71:46:cb:d0:bd:fe:d9:f8:80:fa:12:0a:ff:
13:37:13:1a:cf:1a:b0:ad:c0:58:54:29:31:e2:c5:
35:d6:58:d5:7b:ef:c0:54:3d:88:db:d0:dd:1f:fb:
e8:56:3c:01:37:f1:44:f4:7c:94:5f:dd:3c:75:3c:
39:bc:f2:6b:ba:68:42:08:8e:b7:aa:d4:09:94:c4:
40:68:22:ef:ea:c7:a0:db:f7:8c:f8:b3:43:42:21:
b8:e3:1d:11:3c:bd:bf:fe:78:37:6d:20:44:a0:f7:
67:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:AB:5D:03:C7:7C:60:F8:F8:61:0E:94:54:5B:22:D7:FD:B3:86:4E
X509v3 Authority Key Identifier:
keyid:5B:8E:21:C6:89:0B:D7:9A:B7:64:D9:1B:60:C3:9C:3B:7E:49:85:E1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo.rpki.space/repo/Infiniroute/1/5B8E21C6890BD79AB764D91B60C39C3B7E4985E1.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W44hxokL15q3ZNkbYMOcO35JheE.cer
Subject Information Access:
Signed Object - URI:rsync://repo.rpki.space/repo/Infiniroute/1/326131343a3763363a3a2f33322d3332203d3e203531333936.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7c6::/32
Signature Algorithm: sha256WithRSAEncryption
7e:fc:70:15:9a:38:07:61:8d:48:7a:64:b9:15:59:dc:06:5e:
f8:75:1e:9d:85:e9:be:64:9d:02:42:32:b6:81:e9:82:ee:c4:
b4:3d:76:39:eb:c9:41:9e:54:ea:a7:49:4b:23:8f:2a:c9:d3:
28:e4:02:00:1c:9a:b5:45:03:b8:e4:48:78:e9:f9:8f:a1:03:
a6:9d:d3:5a:c5:19:f3:eb:bd:12:f0:d7:aa:6a:54:39:6a:3c:
16:14:04:20:b9:fe:99:07:1d:48:79:31:fc:95:5d:b7:03:cf:
eb:af:f3:d1:6c:83:5b:9b:d3:ab:94:ce:8f:00:9b:41:ca:d4:
a1:60:d5:f2:be:ea:aa:04:1a:72:20:02:ce:15:a8:4f:f2:c1:
8d:2b:91:c5:0f:6b:ae:ba:31:75:0c:8d:24:49:4e:97:0f:75:
c5:3e:df:1b:ed:87:df:4d:8a:d9:28:b1:c2:a5:cc:4d:bf:64:
c9:7d:9b:eb:40:2c:ca:d5:52:50:db:31:54:4f:a0:74:ef:da:
21:b0:1f:36:68:3b:38:bb:f6:89:c5:91:55:d3:8c:8b:81:8b:
ee:23:6a:04:89:21:70:19:fb:70:f3:f3:f8:65:1c:50:3e:e5:
c6:c7:70:cb:e0:d2:07:9e:97:5a:9b:03:1e:0b:4f:ba:c9:52:
a2:86:a0:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 14:42:56 2026 by rpki-client