Route Origin Authorization
$ rpki-client -vvvf repo.rpki.space/repo/Infiniroute/1/326131343a3763303a663430303a3a2f33382d3338203d3e203531333936.roa
File: 326131343a3763303a663430303a3a2f33382d3338203d3e203531333936.roa (raw, json)
Hash identifier: iowFlkpkOW8RRk0h19TW7wxuzC7Kd4Kd30/w+ni3iTs=
Subject key identifier: 1E:65:0C:B5:7F:58:D9:7C:7A:68:88:A4:FF:36:5E:1E:A8:F6:14:2E
Certificate issuer: /CN=5b8e21c6890bd79ab764d91b60c39c3b7e4985e1
Certificate serial: 65824AE5DB39A538ADBB9AD71ADEAF89F5956F14
Authority key identifier: 5B:8E:21:C6:89:0B:D7:9A:B7:64:D9:1B:60:C3:9C:3B:7E:49:85:E1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/W44hxokL15q3ZNkbYMOcO35JheE.cer
Subject info access: rsync://repo.rpki.space/repo/Infiniroute/1/326131343a3763303a663430303a3a2f33382d3338203d3e203531333936.roa
Signing time: Wed 23 Sep 2026 20:55:39 +0000
ROA not before: Wed 23 Sep 2026 20:50:39 +0000
ROA not after: Wed 22 Sep 2027 20:55:39 +0000
asID: 51396
IP address blocks: 2a14:7c0:f400::/38 maxlen: 38
Validation: OK
Signature path: rsync://repo.rpki.space/repo/Infiniroute/1/5B8E21C6890BD79AB764D91B60C39C3B7E4985E1.crl
rsync://repo.rpki.space/repo/Infiniroute/1/5B8E21C6890BD79AB764D91B60C39C3B7E4985E1.mft
rsync://rpki.ripe.net/repository/DEFAULT/W44hxokL15q3ZNkbYMOcO35JheE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 07 Oct 2026 13:29:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
65:82:4a:e5:db:39:a5:38:ad:bb:9a:d7:1a:de:af:89:f5:95:6f:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5b8e21c6890bd79ab764d91b60c39c3b7e4985e1
Validity
Not Before: Sep 23 20:50:39 2026 GMT
Not After : Sep 22 20:55:39 2027 GMT
Subject: CN=1E650CB57F58D97C7A6888A4FF365E1EA8F6142E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:0d:6f:8f:8d:d1:ee:c3:8e:dc:88:0a:e0:c3:
35:3c:ef:3d:13:88:57:76:6f:88:f4:71:77:4a:d1:
22:1f:34:33:47:f1:50:35:06:c5:12:40:c7:e5:85:
fb:a5:58:c6:68:ef:60:7e:fc:8a:33:35:0f:21:dc:
b5:65:c4:e2:02:e3:97:1b:be:56:92:2d:03:0e:7c:
99:7b:a9:d4:87:21:ef:72:e3:0e:9f:c5:b6:ad:7e:
d4:72:7c:41:dc:be:f3:0f:64:c6:30:f2:3c:70:26:
e0:ba:41:57:2f:cc:95:e7:23:6d:db:98:fb:3e:c3:
c7:da:cf:05:75:30:ee:90:6a:06:53:da:6a:6e:2d:
5f:d9:61:ef:9c:dc:84:b2:35:62:60:0d:e2:76:46:
77:2f:53:63:c9:2e:d7:2d:1b:20:48:82:20:6e:4d:
52:79:53:9b:bc:c7:64:50:a7:cf:1d:6f:4b:52:37:
3a:1c:a5:09:9a:02:bf:c9:5e:cd:20:da:1e:ea:27:
cf:e3:45:59:74:90:21:68:f8:3f:5a:1e:96:50:4c:
e5:2b:4e:ed:73:83:7c:54:ca:84:34:06:a4:52:16:
9d:9f:db:32:e7:b9:1b:82:a9:b6:ea:d5:7a:89:c7:
a1:50:a2:f8:35:67:f5:28:4d:58:78:58:ad:5a:bd:
a9:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:65:0C:B5:7F:58:D9:7C:7A:68:88:A4:FF:36:5E:1E:A8:F6:14:2E
X509v3 Authority Key Identifier:
keyid:5B:8E:21:C6:89:0B:D7:9A:B7:64:D9:1B:60:C3:9C:3B:7E:49:85:E1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo.rpki.space/repo/Infiniroute/1/5B8E21C6890BD79AB764D91B60C39C3B7E4985E1.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W44hxokL15q3ZNkbYMOcO35JheE.cer
Subject Information Access:
Signed Object - URI:rsync://repo.rpki.space/repo/Infiniroute/1/326131343a3763303a663430303a3a2f33382d3338203d3e203531333936.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7c0:f400::/38
Signature Algorithm: sha256WithRSAEncryption
2a:cd:d2:91:e8:ab:b2:7a:47:80:62:7e:83:75:bc:02:35:a6:
4d:96:e2:98:d9:64:9f:3b:01:00:ce:5d:ec:c2:19:e1:06:04:
97:3f:ca:44:85:82:37:2a:f1:7b:e9:1e:61:fc:c4:f8:19:6a:
c5:94:1d:bd:e3:00:47:43:ed:d9:6d:ba:9d:76:ae:72:f4:76:
53:ce:1c:f8:ed:7f:60:a0:5e:00:74:eb:9e:bd:2b:d1:0e:9a:
27:5a:51:6b:39:f9:58:08:dd:d3:b6:b7:fa:1b:39:1a:94:9f:
94:db:13:da:48:2c:9a:b8:2a:b0:f0:f9:e5:b2:64:74:a3:1b:
1a:ea:df:38:64:cd:20:e8:aa:44:8f:37:11:0a:22:af:d4:51:
20:b3:f7:4d:a8:26:70:d3:55:74:14:2f:e2:fe:1e:46:8b:f4:
86:37:2c:b6:ae:39:dc:63:fd:8c:96:0a:0c:2a:29:08:a2:e0:
7c:bc:a0:8e:61:35:41:90:d3:c7:e1:46:0c:c1:84:f3:e0:0f:
f2:23:da:5c:68:6f:64:10:31:79:a2:ae:30:2d:e2:9a:0b:dc:
5d:d5:45:a8:ec:ee:06:b3:71:34:40:4c:24:eb:1b:23:eb:13:
64:23:8a:76:fe:f8:37:ea:63:01:ee:98:55:4b:36:78:91:9c:
7d:82:27:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 6 19:47:29 2026 by rpki-client