This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repo.rpki.space/repo/Infiniroute/1/326131343a3763333a3a2f33322d3332203d3e203531333936.roa
File:                     326131343a3763333a3a2f33322d3332203d3e203531333936.roa (raw, json)
Hash identifier:          PHniP/HJv7CUl9Z8WTg+rWm6y1aVunCuQEhiOH+cKIE=
Subject key identifier:   56:93:05:CB:FB:F9:AB:B1:F2:F9:E1:6A:DA:65:9A:18:02:25:9F:E8
Certificate issuer:       /CN=5b8e21c6890bd79ab764d91b60c39c3b7e4985e1
Certificate serial:       A315D690F657070ABC9D9541F11B6A6517F420
Authority key identifier: 5B:8E:21:C6:89:0B:D7:9A:B7:64:D9:1B:60:C3:9C:3B:7E:49:85:E1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/W44hxokL15q3ZNkbYMOcO35JheE.cer
Subject info access:      rsync://repo.rpki.space/repo/Infiniroute/1/326131343a3763333a3a2f33322d3332203d3e203531333936.roa
Signing time:             Sun 18 Jan 2026 00:56:18 +0000
ROA not before:           Sun 18 Jan 2026 00:51:18 +0000
ROA not after:            Sun 17 Jan 2027 00:56:18 +0000
asID:                     51396
IP address blocks:        2a14:7c3::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://repo.rpki.space/repo/Infiniroute/1/5B8E21C6890BD79AB764D91B60C39C3B7E4985E1.crl
                          rsync://repo.rpki.space/repo/Infiniroute/1/5B8E21C6890BD79AB764D91B60C39C3B7E4985E1.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/W44hxokL15q3ZNkbYMOcO35JheE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 10:19:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            a3:15:d6:90:f6:57:07:0a:bc:9d:95:41:f1:1b:6a:65:17:f4:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5b8e21c6890bd79ab764d91b60c39c3b7e4985e1
        Validity
            Not Before: Jan 18 00:51:18 2026 GMT
            Not After : Jan 17 00:56:18 2027 GMT
        Subject: CN=569305CBFBF9ABB1F2F9E16ADA659A1802259FE8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:c8:14:82:e2:7d:20:36:32:43:d5:98:c9:8c:
                    0d:76:68:79:a2:66:32:f4:e6:b1:f2:ea:cd:7c:c4:
                    3f:33:9c:14:34:a7:10:d0:5c:53:c2:8a:cd:a8:6e:
                    db:b9:f0:c0:3c:bf:e6:78:b4:49:0b:0d:a4:11:b4:
                    11:af:be:02:d7:7f:5f:31:c2:f4:8b:cf:2f:11:e7:
                    86:25:d7:00:d9:5e:c6:92:d2:f1:d9:f7:7d:58:f7:
                    b6:39:5e:5a:d6:2f:e4:7a:bb:9e:fb:68:80:05:0d:
                    80:74:bb:89:fe:5e:3c:86:41:7d:88:9a:45:7c:0b:
                    fc:46:b6:eb:6a:c1:6f:6f:54:02:c5:0a:54:06:72:
                    fd:ed:99:d7:79:fa:1e:35:29:69:75:b4:ab:ad:39:
                    86:70:76:8b:79:cd:d0:0d:ee:39:1f:50:a5:82:b9:
                    22:23:27:d7:d5:c7:11:68:c8:29:2c:33:86:a5:f6:
                    16:b9:61:db:f0:1c:18:82:74:40:40:8f:9a:ef:35:
                    45:68:d6:ed:22:a1:ae:af:9e:ab:3d:9e:22:8c:bb:
                    3b:a3:5f:1f:8a:52:6d:57:1a:4a:39:99:d3:3b:ff:
                    93:56:47:1d:12:bc:c1:97:ec:d0:3f:33:fd:70:7f:
                    58:0f:fc:0c:5c:83:96:21:0a:76:cf:84:01:d2:57:
                    51:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:93:05:CB:FB:F9:AB:B1:F2:F9:E1:6A:DA:65:9A:18:02:25:9F:E8
            X509v3 Authority Key Identifier:
                keyid:5B:8E:21:C6:89:0B:D7:9A:B7:64:D9:1B:60:C3:9C:3B:7E:49:85:E1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo.rpki.space/repo/Infiniroute/1/5B8E21C6890BD79AB764D91B60C39C3B7E4985E1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W44hxokL15q3ZNkbYMOcO35JheE.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo.rpki.space/repo/Infiniroute/1/326131343a3763333a3a2f33322d3332203d3e203531333936.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a14:7c3::/32

    Signature Algorithm: sha256WithRSAEncryption
         67:db:f1:28:17:b1:61:80:a1:7e:1e:82:98:4a:4e:b9:6f:86:
         5b:74:61:e1:f6:84:fa:2b:62:75:12:f6:da:ea:27:97:ba:ee:
         fc:09:c7:cd:d8:51:16:9e:8c:6d:bc:49:38:13:7e:f7:36:3c:
         e9:d4:79:fc:d6:31:8d:f2:88:5c:11:77:7e:28:de:e6:f1:88:
         54:ef:30:60:0e:eb:e0:2b:8b:9a:0c:8d:51:8f:95:d1:f2:86:
         b7:ee:dd:29:d7:b2:04:8f:b0:0c:7c:53:e4:83:1e:ef:6a:db:
         fe:3b:5f:be:d1:99:65:d9:6f:af:ad:41:8f:93:57:a0:14:99:
         01:93:31:3c:5c:18:cb:a7:6b:df:c8:42:39:77:bb:14:3d:de:
         37:e7:d7:86:85:d6:ef:b4:48:c6:98:de:7f:33:ec:f3:43:34:
         02:3a:e9:34:43:f3:77:e1:cc:50:6d:76:ff:68:6a:61:58:ae:
         7c:bd:35:b9:ec:51:c8:9a:c6:79:54:28:a7:b5:00:62:29:cf:
         be:b0:b7:d2:bf:aa:76:a8:53:74:0d:d0:d6:47:b5:d7:c5:53:
         a1:92:4f:42:12:8f:0e:41:61:b9:e4:70:fd:b2:db:8f:44:95:
         b7:05:d1:d8:0c:a6:b4:ed:bd:53:a9:19:7a:ad:17:cc:60:fe:
         27:b9:a2:3b
-----BEGIN CERTIFICATE-----
MIIE1TCCA72gAwIBAgIUAKMV1pD2VwcKvJ2VQfEbamUX9CAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNWI4ZTIxYzY4OTBiZDc5YWI3NjRkOTFiNjBjMzljM2I3
ZTQ5ODVlMTAeFw0yNjAxMTgwMDUxMThaFw0yNzAxMTcwMDU2MThaMDMxMTAvBgNV
BAMTKDU2OTMwNUNCRkJGOUFCQjFGMkY5RTE2QURBNjU5QTE4MDIyNTlGRTgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCyyBSC4n0gNjJD1ZjJjA12aHmi
ZjL05rHy6s18xD8znBQ0pxDQXFPCis2obtu58MA8v+Z4tEkLDaQRtBGvvgLXf18x
wvSLzy8R54Yl1wDZXsaS0vHZ931Y97Y5XlrWL+R6u577aIAFDYB0u4n+XjyGQX2I
mkV8C/xGtutqwW9vVALFClQGcv3tmdd5+h41KWl1tKutOYZwdot5zdAN7jkfUKWC
uSIjJ9fVxxFoyCksM4al9ha5YdvwHBiCdEBAj5rvNUVo1u0ioa6vnqs9niKMuzuj
Xx+KUm1XGko5mdM7/5NWRx0SvMGX7NA/M/1wf1gP/Axcg5YhCnbPhAHSV1F/AgMB
AAGjggHfMIIB2zAdBgNVHQ4EFgQUVpMFy/v5q7Hy+eFq2mWaGAIln+gwHwYDVR0j
BBgwFoAUW44hxokL15q3ZNkbYMOcO35JheEwDgYDVR0PAQH/BAQDAgeAMGgGA1Ud
HwRhMF8wXaBboFmGV3JzeW5jOi8vcmVwby5ycGtpLnNwYWNlL3JlcG8vSW5maW5p
cm91dGUvMS81QjhFMjFDNjg5MEJENzlBQjc2NEQ5MUI2MEMzOUMzQjdFNDk4NUUx
LmNybDBkBggrBgEFBQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5y
aXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvVzQ0aHhva0wxNXEzWk5rYllNT2NP
MzVKaGVFLmNlcjB9BggrBgEFBQcBCwRxMG8wbQYIKwYBBQUHMAuGYXJzeW5jOi8v
cmVwby5ycGtpLnNwYWNlL3JlcG8vSW5maW5pcm91dGUvMS8zMjYxMzEzNDNhMzc2
MzMzM2EzYTJmMzMzMjJkMzMzMjIwM2QzZTIwMzUzMTMzMzkzNi5yb2EwGAYDVR0g
AQH/BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMF
ACoUB8MwDQYJKoZIhvcNAQELBQADggEBAGfb8SgXsWGAoX4egphKTrlvhlt0YeH2
hPorYnUS9trqJ5e67vwJx83YURaejG28STgTfvc2POnUefzWMY3yiFwRd34o3ubx
iFTvMGAO6+Ari5oMjVGPldHyhrfu3SnXsgSPsAx8U+SDHu9q2/47X77RmWXZb6+t
QY+TV6AUmQGTMTxcGMuna9/IQjl3uxQ93jfn14aF1u+0SMaY3n8z7PNDNAI66TRD
83fhzFBtdv9oamFYrny9NbnsUciaxnlUKKe1AGIpz76wt9K/qnaoU3QN0NZHtdfF
U6GST0ISjw5BYbnkcP2y249ElbcF0dgMprTtvVOpGXqtF8xg/ie5ojs=
-----END CERTIFICATE-----
Generated at Sun Jan 25 20:00:47 2026 by rpki-client