Route Origin Authorization
$ rpki-client -vvf rpki.xindi.eu/repo/XINDI/0/3138352e3137332e31362e302f32342d3234203d3e203438313132.roa
File: 3138352e3137332e31362e302f32342d3234203d3e203438313132.roa (raw, json)
Hash identifier: GFSvem4uQpLZblhqJEHwao1Pb5mAkTsbjXhOtsCwa90=
Subject key identifier: 60:33:49:06:CD:ED:C4:9B:92:00:7A:1F:E4:78:0E:87:5E:C9:57:91
Certificate issuer: /CN=60183287eb08ece0c65fa49a3f45621c612ddbd1
Certificate serial: 1D2BADC31BFC523E6355AA3F2363B5864E31BD9C
Authority key identifier: 60:18:32:87:EB:08:EC:E0:C6:5F:A4:9A:3F:45:62:1C:61:2D:DB:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YBgyh-sI7ODGX6SaP0ViHGEt29E.cer
Subject info access: rsync://rpki.xindi.eu/repo/XINDI/0/3138352e3137332e31362e302f32342d3234203d3e203438313132.roa
Signing time: Wed 01 Jul 2026 13:24:09 +0000
ROA not before: Wed 01 Jul 2026 13:19:09 +0000
ROA not after: Wed 30 Jun 2027 13:24:09 +0000
asID: 48112
IP address blocks: 185.173.16.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.xindi.eu/repo/XINDI/0/60183287EB08ECE0C65FA49A3F45621C612DDBD1.crl
rsync://rpki.xindi.eu/repo/XINDI/0/60183287EB08ECE0C65FA49A3F45621C612DDBD1.mft
rsync://rpki.ripe.net/repository/DEFAULT/YBgyh-sI7ODGX6SaP0ViHGEt29E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1d:2b:ad:c3:1b:fc:52:3e:63:55:aa:3f:23:63:b5:86:4e:31:bd:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=60183287eb08ece0c65fa49a3f45621c612ddbd1
Validity
Not Before: Jul 1 13:19:09 2026 GMT
Not After : Jun 30 13:24:09 2027 GMT
Subject: CN=60334906CDEDC49B92007A1FE4780E875EC95791
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:e5:21:14:05:80:64:d0:c4:52:1b:7c:45:e7:
0d:f7:e0:a8:b0:23:b9:55:b4:7d:36:d0:5f:bc:db:
09:03:6e:25:92:66:cd:c1:99:5b:fd:a5:c4:01:75:
cf:a9:c0:14:d5:a2:53:45:ce:5d:bb:04:98:02:03:
23:a2:7c:22:f4:62:f8:db:0f:3b:aa:d1:4f:ea:c3:
7a:32:06:05:51:fb:18:74:fe:cc:fa:a4:4f:3d:c8:
37:89:4e:4a:cc:4b:57:5e:8b:07:a7:70:34:06:cd:
0f:77:73:53:1f:26:b5:54:eb:0f:90:f8:6c:b6:0f:
f8:9e:2a:f8:df:e9:8c:39:bd:fc:47:f9:c3:8b:4e:
5b:b4:d0:53:f1:63:07:6d:d8:6b:88:45:40:48:99:
76:b1:82:06:02:43:c8:17:74:80:13:73:3c:6c:f3:
8a:19:00:6a:4b:2f:a6:67:af:f8:9e:11:79:52:40:
d9:cc:c9:d0:81:7f:8d:5e:67:a9:1a:30:48:2a:a7:
5a:fd:4a:81:62:1d:fc:07:6a:a7:f8:23:09:a4:a9:
7a:06:4f:4e:36:48:20:22:4e:d0:33:04:5e:f3:a6:
57:49:66:2b:b3:92:9c:fc:fd:69:03:7d:b7:5d:b1:
53:98:c2:89:d4:bf:1f:07:46:4e:a1:ec:66:4b:d2:
7f:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:33:49:06:CD:ED:C4:9B:92:00:7A:1F:E4:78:0E:87:5E:C9:57:91
X509v3 Authority Key Identifier:
keyid:60:18:32:87:EB:08:EC:E0:C6:5F:A4:9A:3F:45:62:1C:61:2D:DB:D1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.xindi.eu/repo/XINDI/0/60183287EB08ECE0C65FA49A3F45621C612DDBD1.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YBgyh-sI7ODGX6SaP0ViHGEt29E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.xindi.eu/repo/XINDI/0/3138352e3137332e31362e302f32342d3234203d3e203438313132.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.173.16.0/24
Signature Algorithm: sha256WithRSAEncryption
36:11:7d:b5:29:60:5c:37:ba:c6:0b:7c:c2:88:23:fb:16:4b:
c7:8f:df:3d:39:12:ba:7e:1b:43:0e:ba:5a:96:c8:f6:ec:24:
f9:74:25:18:db:cc:06:b3:3f:b2:ec:ea:ee:5e:ff:7d:dd:7f:
c1:3c:19:e1:4b:d6:65:ee:db:d8:93:06:14:9e:92:66:da:de:
82:61:2d:54:7f:87:5b:b3:3d:fc:57:f9:1a:9c:45:24:e6:69:
a3:57:db:60:c6:2b:1a:87:05:cc:4b:58:fe:8d:dc:ec:fa:36:
d1:55:63:6b:99:1e:62:46:b0:1e:cc:bd:25:00:6d:5d:c1:10:
09:51:06:f1:de:9e:10:85:c7:6d:ee:a2:e9:2d:14:08:de:f3:
e2:fe:dc:ad:8c:ce:8c:37:3b:61:a7:84:03:58:f1:57:0d:d0:
99:b7:18:80:5c:3b:24:ef:e9:f1:76:81:b6:b2:60:80:86:da:
43:8f:b5:58:c1:a5:ff:1e:2d:b4:dc:ef:e0:41:7f:09:05:19:
27:df:21:da:95:10:2d:75:7f:ee:bf:85:67:c1:66:29:a4:ba:
11:24:bf:db:be:db:be:80:58:35:75:fa:c2:94:5c:db:78:49:
57:29:43:00:44:16:e5:a1:18:28:cb:b1:23:25:a7:9e:62:e7:
d1:73:c8:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 20:14:56 2026 by rpki-client