Route Origin Authorization
$ rpki-client -vvf repo.rpki.space/repo/Infiniroute/1/326131343a3763303a633030303a3a2f33352d3438203d3e20323134373831.roa
File: 326131343a3763303a633030303a3a2f33352d3438203d3e20323134373831.roa (raw, json)
Hash identifier: PGJQdrHd0Ncz30/VrRTa8jHHSwyjEqqHAWIRl2PelX4=
Subject key identifier: B3:D6:53:5E:21:F5:1E:14:97:F1:BC:07:06:7B:56:A6:56:E2:33:A4
Certificate issuer: /CN=5b8e21c6890bd79ab764d91b60c39c3b7e4985e1
Certificate serial: 0782829225CB8A118DCD863CF5438ADD9CCBCBD7
Authority key identifier: 5B:8E:21:C6:89:0B:D7:9A:B7:64:D9:1B:60:C3:9C:3B:7E:49:85:E1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/W44hxokL15q3ZNkbYMOcO35JheE.cer
Subject info access: rsync://repo.rpki.space/repo/Infiniroute/1/326131343a3763303a633030303a3a2f33352d3438203d3e20323134373831.roa
Signing time: Sat 02 May 2026 17:14:47 +0000
ROA not before: Sat 02 May 2026 17:09:47 +0000
ROA not after: Sat 01 May 2027 17:14:47 +0000
asID: 214781
IP address blocks: 2a14:7c0:c000::/35 maxlen: 48
Validation: OK
Signature path: rsync://repo.rpki.space/repo/Infiniroute/1/5B8E21C6890BD79AB764D91B60C39C3B7E4985E1.crl
rsync://repo.rpki.space/repo/Infiniroute/1/5B8E21C6890BD79AB764D91B60C39C3B7E4985E1.mft
rsync://rpki.ripe.net/repository/DEFAULT/W44hxokL15q3ZNkbYMOcO35JheE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 06:33:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
07:82:82:92:25:cb:8a:11:8d:cd:86:3c:f5:43:8a:dd:9c:cb:cb:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5b8e21c6890bd79ab764d91b60c39c3b7e4985e1
Validity
Not Before: May 2 17:09:47 2026 GMT
Not After : May 1 17:14:47 2027 GMT
Subject: CN=B3D6535E21F51E1497F1BC07067B56A656E233A4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:ec:5b:7b:1f:c7:94:d6:bc:c1:c5:ea:0f:1c:
22:42:18:f3:0f:a1:28:a0:e4:81:5e:30:9f:0c:2a:
6a:52:c5:7d:06:7b:8c:d8:49:15:8c:e0:9a:84:75:
6e:08:ef:05:ac:c1:07:e0:78:d1:b9:1c:35:47:52:
6b:9e:44:3f:99:66:cf:2f:c5:8d:be:06:20:4e:c9:
6b:2c:d2:38:56:33:9d:39:8b:4c:bb:52:82:6b:7e:
8a:0b:6e:15:a8:44:13:08:bd:3f:19:3c:d7:33:23:
fc:1f:b2:7a:47:a4:4f:42:b5:14:3c:de:d3:40:7b:
d3:01:0d:c4:f3:f0:44:94:3c:12:16:e8:83:47:3d:
59:9b:93:48:e2:22:8c:6d:23:c8:62:e8:c9:47:42:
a9:80:f3:96:9d:26:44:6b:bd:55:09:f3:ca:eb:2e:
06:2d:d7:15:96:99:27:58:4f:e2:5f:a8:ef:3c:d0:
08:ab:f3:7d:33:f7:a7:cf:de:83:f6:71:4d:6c:3d:
ad:d1:25:2c:75:51:3d:39:3f:f2:2d:4d:fb:b9:9a:
8a:22:ad:32:35:ae:0a:00:34:7c:4e:3a:4c:75:e5:
d7:f8:51:71:ee:72:98:60:dc:a4:1a:1b:24:50:eb:
72:fe:63:0e:0b:c9:5b:91:e3:ad:7d:92:b4:7e:f8:
b6:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:D6:53:5E:21:F5:1E:14:97:F1:BC:07:06:7B:56:A6:56:E2:33:A4
X509v3 Authority Key Identifier:
keyid:5B:8E:21:C6:89:0B:D7:9A:B7:64:D9:1B:60:C3:9C:3B:7E:49:85:E1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo.rpki.space/repo/Infiniroute/1/5B8E21C6890BD79AB764D91B60C39C3B7E4985E1.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W44hxokL15q3ZNkbYMOcO35JheE.cer
Subject Information Access:
Signed Object - URI:rsync://repo.rpki.space/repo/Infiniroute/1/326131343a3763303a633030303a3a2f33352d3438203d3e20323134373831.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7c0:c000::/35
Signature Algorithm: sha256WithRSAEncryption
63:0a:29:bb:ce:45:ac:80:ee:7f:18:ea:46:89:b4:49:79:3c:
3a:68:18:fa:0e:e1:45:4a:92:d5:4b:3f:b1:0f:64:2c:aa:7e:
10:00:36:22:79:01:d9:5a:64:ed:14:07:1a:2f:d7:dc:f7:f9:
a6:ce:4c:1f:04:b3:4d:5f:9d:9a:01:96:1f:97:58:38:51:6a:
c8:95:09:ef:90:f8:52:55:6a:7c:58:22:02:cb:85:8a:9f:99:
31:65:77:0a:f3:5d:c0:e9:0c:c7:9b:3a:3c:77:92:44:d6:17:
fc:f2:4d:75:6c:ad:f9:fa:1b:9b:2b:c0:37:4b:59:fc:b9:d3:
d7:9d:1b:17:76:54:5c:a2:9f:d6:b0:a9:65:de:f0:1e:ad:88:
70:75:ec:82:b2:a0:02:e8:ad:33:e7:e8:c9:b8:00:38:2a:ab:
08:9c:bc:00:60:0b:7d:77:88:cb:42:4c:9d:39:c4:df:be:0c:
d3:43:36:ba:eb:e8:b0:34:d5:1f:c4:66:c8:cb:b6:bd:2e:db:
83:55:ee:e0:e0:65:db:af:bf:3d:98:69:f3:a7:b9:d9:70:1b:
07:cc:e8:fa:a7:3a:14:aa:bd:62:eb:a4:67:59:2d:f7:70:40:
8c:36:96:ce:34:b1:b1:b9:77:69:6d:ae:c1:6d:1e:e3:2d:60:
1f:f5:50:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 15:38:17 2026 by rpki-client