Route Origin Authorization
$ rpki-client -vvf rpki.xindi.eu/repo/XINDI/0/3138352e3137332e31362e302f32322d3232203d3e203438313132.roa
File: 3138352e3137332e31362e302f32322d3232203d3e203438313132.roa (raw, json)
Hash identifier: 7Cw/mRJoryGzpBP7Ohxq19pGWnUMZX34UMmmsdbg2jE=
Subject key identifier: 51:11:49:76:9D:FC:4F:22:0F:C1:81:04:64:BE:12:4B:9C:E2:A2:CA
Certificate issuer: /CN=60183287eb08ece0c65fa49a3f45621c612ddbd1
Certificate serial: 20847E3DDE27C7864B6CF2E25CCF95362F88C6C0
Authority key identifier: 60:18:32:87:EB:08:EC:E0:C6:5F:A4:9A:3F:45:62:1C:61:2D:DB:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YBgyh-sI7ODGX6SaP0ViHGEt29E.cer
Subject info access: rsync://rpki.xindi.eu/repo/XINDI/0/3138352e3137332e31362e302f32322d3232203d3e203438313132.roa
Signing time: Wed 01 Jul 2026 13:23:59 +0000
ROA not before: Wed 01 Jul 2026 13:18:59 +0000
ROA not after: Wed 30 Jun 2027 13:23:59 +0000
asID: 48112
IP address blocks: 185.173.16.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.xindi.eu/repo/XINDI/0/60183287EB08ECE0C65FA49A3F45621C612DDBD1.crl
rsync://rpki.xindi.eu/repo/XINDI/0/60183287EB08ECE0C65FA49A3F45621C612DDBD1.mft
rsync://rpki.ripe.net/repository/DEFAULT/YBgyh-sI7ODGX6SaP0ViHGEt29E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
20:84:7e:3d:de:27:c7:86:4b:6c:f2:e2:5c:cf:95:36:2f:88:c6:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=60183287eb08ece0c65fa49a3f45621c612ddbd1
Validity
Not Before: Jul 1 13:18:59 2026 GMT
Not After : Jun 30 13:23:59 2027 GMT
Subject: CN=511149769DFC4F220FC1810464BE124B9CE2A2CA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:8d:e6:06:78:7f:78:75:d3:72:ea:f5:71:a6:
53:c6:b1:d0:ec:51:80:b6:af:fc:ff:8b:25:94:75:
cb:b2:27:ee:3e:ef:85:60:78:21:0a:7b:90:54:2b:
3e:f1:6a:86:b9:29:ca:97:01:e4:32:82:2c:aa:a5:
2b:7d:8c:1a:e8:58:e6:3c:4b:7a:bf:d3:1e:a1:c3:
76:64:38:bb:6a:d5:ce:5e:0d:e5:63:86:da:0f:1f:
08:dc:d2:b2:d3:cc:2d:f6:4d:72:96:ca:04:38:49:
57:a2:d3:70:9a:a3:a8:79:d2:b4:f1:6f:45:b8:60:
db:fd:b9:2b:0a:c2:e6:ac:63:a4:16:a2:5f:c7:55:
e3:d2:a2:2c:c9:8c:40:ad:e9:75:82:d5:f4:d4:bf:
91:12:9b:3a:c2:87:29:37:86:27:3f:95:5c:38:07:
81:b7:2e:45:a1:d1:ff:23:b3:e2:02:fd:cd:ef:5a:
1c:b9:79:90:cd:ee:9d:a7:e6:f9:ad:ff:0f:76:10:
21:ef:41:fa:01:27:98:4a:f4:cc:dc:9b:8d:5d:b5:
0a:bc:67:45:a2:14:9f:f1:09:5f:35:1a:99:f9:63:
33:08:ac:e9:db:fe:8e:42:68:3b:ff:21:cf:41:d4:
2a:0b:9d:7b:f9:59:63:14:bb:54:a2:6e:11:39:4e:
ce:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:11:49:76:9D:FC:4F:22:0F:C1:81:04:64:BE:12:4B:9C:E2:A2:CA
X509v3 Authority Key Identifier:
keyid:60:18:32:87:EB:08:EC:E0:C6:5F:A4:9A:3F:45:62:1C:61:2D:DB:D1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.xindi.eu/repo/XINDI/0/60183287EB08ECE0C65FA49A3F45621C612DDBD1.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YBgyh-sI7ODGX6SaP0ViHGEt29E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.xindi.eu/repo/XINDI/0/3138352e3137332e31362e302f32322d3232203d3e203438313132.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.173.16.0/22
Signature Algorithm: sha256WithRSAEncryption
9e:c8:72:d6:fc:02:7f:55:36:0c:f8:c2:c4:5d:32:b1:d9:c6:
a2:b9:0c:c8:3b:68:07:30:1d:58:ba:19:79:89:fe:3f:65:1d:
54:6a:37:98:de:4c:a9:7f:b2:2c:e1:45:e2:ef:0f:c4:2a:d4:
56:56:90:61:45:e3:16:18:22:33:c9:88:3b:74:c7:f1:eb:b7:
36:d8:0b:81:f3:c8:c6:3f:a5:24:13:8b:f2:a5:c6:79:e8:3c:
ff:b7:ac:3b:31:d1:84:12:3c:09:fd:ba:67:d4:42:b2:58:30:
cc:7a:7e:79:3b:1f:23:81:e3:d7:e6:c1:ea:d9:c8:89:b6:50:
dd:27:4a:76:69:99:d5:b5:f9:d7:96:c3:31:94:5f:c0:c8:1e:
ee:95:8d:89:c0:c0:b1:e0:91:46:9a:df:01:e2:f7:0c:ac:69:
fb:1c:bf:85:42:8d:31:7f:5a:07:4d:7b:10:5f:0e:42:3d:29:
09:7a:56:96:ca:f1:e6:40:77:b9:df:1f:be:75:4b:b5:07:09:
90:60:d9:dd:03:1d:c5:51:0a:32:5d:71:fb:d1:ab:c6:ea:0e:
2a:5b:7c:44:d5:f5:99:f2:6a:e4:8a:82:23:ab:77:ab:59:5d:
ab:f2:c3:85:ec:1c:40:cc:95:23:a9:f9:0c:dc:5c:4d:8e:31:
1c:63:9f:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 20:13:36 2026 by rpki-client