This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.xindi.eu/repo/XINDI/0/3138352e3137332e31372e302f32342d3234203d3e203339303032.roa
File:                     3138352e3137332e31372e302f32342d3234203d3e203339303032.roa (raw, json)
Hash identifier:          F1T4PevqTiuAcN0ubG8JlLwq7nasmj8PgdNQut8fU5A=
Subject key identifier:   66:50:05:B7:2A:87:49:3B:D6:6C:99:56:B6:8E:D8:6C:C1:70:AE:8C
Certificate issuer:       /CN=60183287eb08ece0c65fa49a3f45621c612ddbd1
Certificate serial:       5CB2910012289A76C34406B60B6279608C37ADAF
Authority key identifier: 60:18:32:87:EB:08:EC:E0:C6:5F:A4:9A:3F:45:62:1C:61:2D:DB:D1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YBgyh-sI7ODGX6SaP0ViHGEt29E.cer
Subject info access:      rsync://rpki.xindi.eu/repo/XINDI/0/3138352e3137332e31372e302f32342d3234203d3e203339303032.roa
Signing time:             Fri 05 Dec 2025 08:11:12 +0000
ROA not before:           Fri 05 Dec 2025 08:06:12 +0000
ROA not after:            Fri 04 Dec 2026 08:11:12 +0000
asID:                     39002
IP address blocks:        185.173.17.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.xindi.eu/repo/XINDI/0/60183287EB08ECE0C65FA49A3F45621C612DDBD1.crl
                          rsync://rpki.xindi.eu/repo/XINDI/0/60183287EB08ECE0C65FA49A3F45621C612DDBD1.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/YBgyh-sI7ODGX6SaP0ViHGEt29E.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 06 Dec 2025 20:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5c:b2:91:00:12:28:9a:76:c3:44:06:b6:0b:62:79:60:8c:37:ad:af
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=60183287eb08ece0c65fa49a3f45621c612ddbd1
        Validity
            Not Before: Dec  5 08:06:12 2025 GMT
            Not After : Dec  4 08:11:12 2026 GMT
        Subject: CN=665005B72A87493BD66C9956B68ED86CC170AE8C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:ab:62:45:f9:83:9e:e9:90:9d:aa:7a:5a:92:
                    01:49:9c:f1:35:49:5f:b3:cc:fa:28:36:f2:f3:78:
                    02:fa:3f:d3:6e:2f:ca:b8:b6:68:2a:9c:0d:ba:ec:
                    e1:40:23:eb:aa:db:d2:19:00:4e:d9:e4:6c:b0:b9:
                    4b:00:ec:f8:c3:10:99:e1:c2:ab:da:26:d2:63:0b:
                    6f:2a:8e:d5:36:b2:e8:82:8b:ab:99:d0:97:68:0b:
                    26:03:4d:19:fb:73:54:31:85:22:48:1a:f6:a6:d2:
                    16:a4:6e:d9:01:4e:4d:cd:d1:c1:6c:2f:de:22:b3:
                    8f:92:ea:e8:51:a3:eb:38:26:40:bb:0d:d0:3a:62:
                    cc:03:a3:23:79:57:15:79:9a:5f:22:63:6b:94:99:
                    79:0a:f4:81:67:21:c7:d3:92:26:f7:b2:0b:31:57:
                    34:0d:ad:47:ae:bf:41:c1:76:0b:03:17:6f:de:24:
                    7b:67:45:82:f9:34:1e:6d:b1:38:47:74:92:77:be:
                    90:82:ef:26:c4:7b:f9:0b:ec:4a:cb:0b:0d:93:90:
                    59:a4:b9:d6:b1:b5:3d:37:3a:dd:3e:01:ce:b8:dd:
                    01:56:59:05:aa:2c:4c:1a:68:07:7a:a5:36:a9:a0:
                    cb:a8:a5:1e:fd:4e:74:1e:08:f8:91:5c:12:3f:fd:
                    0b:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:50:05:B7:2A:87:49:3B:D6:6C:99:56:B6:8E:D8:6C:C1:70:AE:8C
            X509v3 Authority Key Identifier:
                keyid:60:18:32:87:EB:08:EC:E0:C6:5F:A4:9A:3F:45:62:1C:61:2D:DB:D1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.xindi.eu/repo/XINDI/0/60183287EB08ECE0C65FA49A3F45621C612DDBD1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YBgyh-sI7ODGX6SaP0ViHGEt29E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.xindi.eu/repo/XINDI/0/3138352e3137332e31372e302f32342d3234203d3e203339303032.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.173.17.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0e:8f:93:cf:50:04:9e:c9:2d:9b:b1:22:65:6a:db:c9:22:8f:
         cd:c6:4c:f9:d5:9b:d0:a6:cf:c6:34:be:8b:3a:85:84:58:81:
         9c:b3:79:40:7f:d6:0a:a0:a1:3b:62:0c:42:64:a2:7b:6a:94:
         87:e9:c3:b3:7c:9f:3d:1e:63:aa:f2:a8:83:63:c7:76:f0:30:
         d4:4d:e0:9a:00:71:f0:56:9d:13:e6:bf:5f:ac:18:9a:ef:5d:
         d4:49:c3:e0:bb:12:87:b4:2c:b5:b0:01:32:f4:9f:e8:ef:60:
         1a:c5:94:65:62:1a:97:21:51:8d:3e:14:b2:ba:24:98:b9:6f:
         a3:4d:a0:d3:1d:f7:02:5a:4d:d4:6b:a0:11:82:35:aa:7f:c7:
         fb:f2:ca:7b:96:5a:c8:0c:83:dc:ab:c9:53:3f:b4:fc:db:6d:
         17:13:ff:98:72:6d:57:52:f3:74:0d:d6:fe:ba:ca:3c:15:84:
         dc:51:27:9c:a3:ac:e5:e9:bb:71:01:5b:b2:08:d7:8a:ce:5b:
         45:32:0c:22:c5:3e:3f:35:99:30:fb:d8:a9:6d:27:58:82:bd:
         ad:f8:32:da:3b:7a:61:6c:87:12:e6:5e:57:8f:92:cc:57:69:
         25:c2:8b:78:ef:59:da:a5:a5:87:57:79:9f:f7:3e:db:1f:b3:
         47:04:c0:a2
-----BEGIN CERTIFICATE-----
MIIEyDCCA7CgAwIBAgIUXLKRABIomnbDRAa2C2J5YIw3ra8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjAxODMyODdlYjA4ZWNlMGM2NWZhNDlhM2Y0NTYyMWM2
MTJkZGJkMTAeFw0yNTEyMDUwODA2MTJaFw0yNjEyMDQwODExMTJaMDMxMTAvBgNV
BAMTKDY2NTAwNUI3MkE4NzQ5M0JENjZDOTk1NkI2OEVEODZDQzE3MEFFOEMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDCq2JF+YOe6ZCdqnpakgFJnPE1
SV+zzPooNvLzeAL6P9NuL8q4tmgqnA267OFAI+uq29IZAE7Z5GywuUsA7PjDEJnh
wqvaJtJjC28qjtU2suiCi6uZ0JdoCyYDTRn7c1QxhSJIGvam0hakbtkBTk3N0cFs
L94is4+S6uhRo+s4JkC7DdA6YswDoyN5VxV5ml8iY2uUmXkK9IFnIcfTkib3sgsx
VzQNrUeuv0HBdgsDF2/eJHtnRYL5NB5tsThHdJJ3vpCC7ybEe/kL7ErLCw2TkFmk
udaxtT03Ot0+Ac643QFWWQWqLEwaaAd6pTapoMuopR79TnQeCPiRXBI//QvzAgMB
AAGjggHSMIIBzjAdBgNVHQ4EFgQUZlAFtyqHSTvWbJlWto7YbMFwrowwHwYDVR0j
BBgwFoAUYBgyh+sI7ODGX6SaP0ViHGEt29EwDgYDVR0PAQH/BAQDAgeAMGAGA1Ud
HwRZMFcwVaBToFGGT3JzeW5jOi8vcnBraS54aW5kaS5ldS9yZXBvL1hJTkRJLzAv
NjAxODMyODdFQjA4RUNFMEM2NUZBNDlBM0Y0NTYyMUM2MTJEREJEMS5jcmwwZAYI
KwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQv
cmVwb3NpdG9yeS9ERUZBVUxUL1lCZ3loLXNJN09ER1g2U2FQMFZpSEdFdDI5RS5j
ZXIweQYIKwYBBQUHAQsEbTBrMGkGCCsGAQUFBzALhl1yc3luYzovL3Jwa2kueGlu
ZGkuZXUvcmVwby9YSU5ESS8wLzMxMzgzNTJlMzEzNzMzMmUzMTM3MmUzMDJmMzIz
NDJkMzIzNDIwM2QzZTIwMzMzOTMwMzAzMi5yb2EwGAYDVR0gAQH/BA4wDDAKBggr
BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEALmtETANBgkqhkiG
9w0BAQsFAAOCAQEADo+Tz1AEnsktm7EiZWrbySKPzcZM+dWb0KbPxjS+izqFhFiB
nLN5QH/WCqChO2IMQmSie2qUh+nDs3yfPR5jqvKog2PHdvAw1E3gmgBx8FadE+a/
X6wYmu9d1EnD4LsSh7QstbABMvSf6O9gGsWUZWIalyFRjT4UsrokmLlvo02g0x33
AlpN1GugEYI1qn/H+/LKe5ZayAyD3KvJUz+0/NttFxP/mHJtV1LzdA3W/rrKPBWE
3FEnnKOs5em7cQFbsgjXis5bRTIMIsU+PzWZMPvYqW0nWIK9rfgy2jt6YWyHEuZe
V4+SzFdpJcKLeO9Z2qWlh1d5n/c+2x+zRwTAog==
-----END CERTIFICATE-----
Generated at Sat Dec 6 05:44:58 2025 by rpki-client