Route Origin Authorization
$ rpki-client -vvvf repo.rpki.space/repo/Infiniroute/1/326131343a3763303a663130303a3a2f34302d3430203d3e203634343537.roa
File: 326131343a3763303a663130303a3a2f34302d3430203d3e203634343537.roa (raw, json)
Hash identifier: 6qhJClFV2cu0uPdWrueLmDr4xwe0C9Emchwyzk3sQLg=
Subject key identifier: B5:66:39:31:33:D2:42:2F:04:CF:6D:4D:BF:EE:D2:27:48:E8:4D:26
Certificate issuer: /CN=5b8e21c6890bd79ab764d91b60c39c3b7e4985e1
Certificate serial: 66541A088C3C77CEE7E92CB845616387BDAD983F
Authority key identifier: 5B:8E:21:C6:89:0B:D7:9A:B7:64:D9:1B:60:C3:9C:3B:7E:49:85:E1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/W44hxokL15q3ZNkbYMOcO35JheE.cer
Subject info access: rsync://repo.rpki.space/repo/Infiniroute/1/326131343a3763303a663130303a3a2f34302d3430203d3e203634343537.roa
Signing time: Wed 23 Sep 2026 19:55:38 +0000
ROA not before: Wed 23 Sep 2026 19:50:38 +0000
ROA not after: Wed 22 Sep 2027 19:55:38 +0000
asID: 64457
IP address blocks: 2a14:7c0:f100::/40 maxlen: 40
Validation: OK
Signature path: rsync://repo.rpki.space/repo/Infiniroute/1/5B8E21C6890BD79AB764D91B60C39C3B7E4985E1.crl
rsync://repo.rpki.space/repo/Infiniroute/1/5B8E21C6890BD79AB764D91B60C39C3B7E4985E1.mft
rsync://rpki.ripe.net/repository/DEFAULT/W44hxokL15q3ZNkbYMOcO35JheE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 00:06:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
66:54:1a:08:8c:3c:77:ce:e7:e9:2c:b8:45:61:63:87:bd:ad:98:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5b8e21c6890bd79ab764d91b60c39c3b7e4985e1
Validity
Not Before: Sep 23 19:50:38 2026 GMT
Not After : Sep 22 19:55:38 2027 GMT
Subject: CN=B566393133D2422F04CF6D4DBFEED22748E84D26
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:be:71:96:14:70:a4:e3:ae:3f:a3:c1:8b:93:
ba:17:ac:04:a1:e0:c8:ec:c8:52:6d:f5:c4:27:c8:
a7:72:c2:6a:05:b9:48:b6:53:4e:84:d2:83:1c:46:
4e:dd:07:a6:a9:65:38:61:a6:64:81:90:e7:58:d8:
1b:3c:3e:a2:f3:b5:4b:01:1e:9a:b9:71:49:4b:be:
4d:86:3d:be:01:2c:23:6b:2d:3c:d9:95:e7:59:2d:
c2:d6:06:84:46:69:e0:d0:5b:0d:35:0a:d5:3d:02:
7b:ac:37:fa:7f:d3:5a:c7:13:df:94:1e:96:a5:fb:
9e:7f:3c:8a:35:92:8f:cf:ea:08:93:14:dd:6b:30:
bc:43:06:ce:6f:34:45:8b:41:fe:2c:2e:8d:e7:a7:
8b:98:b4:72:b6:50:82:45:a5:77:95:bd:c1:ef:a9:
f4:91:36:a6:f7:ba:0d:80:ec:84:ea:f2:d7:cc:b4:
d1:f9:0e:15:71:0a:24:95:49:d2:37:fb:75:80:49:
2d:32:0b:25:18:32:c4:89:7e:83:f4:28:d0:8c:64:
94:2b:4b:d7:dd:d9:d7:de:ed:ee:ab:98:db:77:0b:
43:5b:3c:05:f7:12:fd:56:e5:f8:70:62:9c:c3:73:
f4:94:33:50:d1:3b:dc:bc:49:b0:e5:dc:8b:61:1c:
5f:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:66:39:31:33:D2:42:2F:04:CF:6D:4D:BF:EE:D2:27:48:E8:4D:26
X509v3 Authority Key Identifier:
keyid:5B:8E:21:C6:89:0B:D7:9A:B7:64:D9:1B:60:C3:9C:3B:7E:49:85:E1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo.rpki.space/repo/Infiniroute/1/5B8E21C6890BD79AB764D91B60C39C3B7E4985E1.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W44hxokL15q3ZNkbYMOcO35JheE.cer
Subject Information Access:
Signed Object - URI:rsync://repo.rpki.space/repo/Infiniroute/1/326131343a3763303a663130303a3a2f34302d3430203d3e203634343537.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7c0:f100::/40
Signature Algorithm: sha256WithRSAEncryption
82:17:6c:ff:4b:76:a1:2e:13:b8:71:0e:dc:b0:24:cd:37:7a:
1a:10:86:71:40:6d:de:2b:c6:02:e5:6f:79:6a:65:be:cd:0d:
df:02:ee:bc:86:17:0f:aa:b8:8b:6c:0d:1e:cb:19:a6:3e:18:
60:46:8c:bc:fa:dd:5d:fc:0d:d8:22:72:33:76:72:00:8e:ec:
4e:c9:08:77:79:6f:29:98:16:db:c8:e0:51:54:84:fd:97:1a:
f7:05:a8:5a:1f:02:1c:b5:65:7c:64:c1:63:72:fa:00:b3:0d:
14:7b:af:4b:cd:54:9b:7f:5c:5e:2b:b0:b8:74:8f:77:67:ac:
9c:9d:2c:ba:38:cb:25:21:6a:86:d1:f5:85:c7:25:d3:59:c3:
f0:42:b0:1a:58:c2:1d:4d:1b:ca:c6:44:e2:e5:42:24:19:49:
cf:e9:f7:6d:8b:7a:d1:88:69:7f:5e:27:6e:30:c1:14:6e:2e:
8e:a1:ea:21:00:a7:25:6c:7e:0b:e7:01:1c:9f:71:52:6c:f0:
96:e8:bb:26:81:74:fe:f6:32:9e:95:d4:28:b5:86:31:a4:8f:
ba:39:52:8d:94:dc:c5:05:37:ab:85:ca:7a:92:63:71:50:28:
57:1a:1e:c7:d8:65:02:a7:cb:98:6d:95:dd:c3:1d:48:72:97:
fe:f1:c0:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 07:12:12 2026 by rpki-client