Route Origin Authorization
$ rpki-client -vvf rpki.xindi.eu/repo/XINDI/0/3138352e3137332e31372e302f32342d3234203d3e203438313132.roa
File: 3138352e3137332e31372e302f32342d3234203d3e203438313132.roa (raw, json)
Hash identifier: nYgSK1PhJ/ujg170fe/3+YsIzl6VtP2e+vAS1NYeTGI=
Subject key identifier: D3:9D:C4:FF:D2:B6:04:3E:3C:8F:CA:1C:84:D5:AE:CD:A0:00:23:F1
Certificate issuer: /CN=60183287eb08ece0c65fa49a3f45621c612ddbd1
Certificate serial: 5FA8E78F9BE7E3231541B0A83367A7690409A513
Authority key identifier: 60:18:32:87:EB:08:EC:E0:C6:5F:A4:9A:3F:45:62:1C:61:2D:DB:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YBgyh-sI7ODGX6SaP0ViHGEt29E.cer
Subject info access: rsync://rpki.xindi.eu/repo/XINDI/0/3138352e3137332e31372e302f32342d3234203d3e203438313132.roa
Signing time: Wed 01 Jul 2026 13:24:02 +0000
ROA not before: Wed 01 Jul 2026 13:19:02 +0000
ROA not after: Wed 30 Jun 2027 13:24:02 +0000
asID: 48112
IP address blocks: 185.173.17.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.xindi.eu/repo/XINDI/0/60183287EB08ECE0C65FA49A3F45621C612DDBD1.crl
rsync://rpki.xindi.eu/repo/XINDI/0/60183287EB08ECE0C65FA49A3F45621C612DDBD1.mft
rsync://rpki.ripe.net/repository/DEFAULT/YBgyh-sI7ODGX6SaP0ViHGEt29E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5f:a8:e7:8f:9b:e7:e3:23:15:41:b0:a8:33:67:a7:69:04:09:a5:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=60183287eb08ece0c65fa49a3f45621c612ddbd1
Validity
Not Before: Jul 1 13:19:02 2026 GMT
Not After : Jun 30 13:24:02 2027 GMT
Subject: CN=D39DC4FFD2B6043E3C8FCA1C84D5AECDA00023F1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:95:75:65:38:e6:7c:62:a1:ca:b7:a7:e2:53:
24:6d:80:aa:e5:d3:10:bf:14:0d:48:3c:72:dc:46:
0d:83:e2:4b:24:10:17:73:f8:b0:be:10:4b:a3:c2:
e8:eb:09:6e:7a:b9:ba:d1:f9:a3:e8:5a:ad:48:3f:
ce:02:50:f4:17:3a:55:3f:f8:aa:2f:da:d0:3a:29:
31:00:c0:73:e1:06:84:6a:cc:49:78:1b:fa:98:fc:
38:84:05:f8:31:0d:e7:57:d5:3b:67:57:c1:85:6d:
9d:71:77:e0:9f:0d:42:89:be:9a:65:62:19:bc:33:
b1:16:bd:60:31:3b:a4:1a:bb:a1:55:2f:55:c4:97:
79:cc:0e:5c:08:e1:39:25:6a:7f:52:e9:ae:c6:10:
a5:5e:50:fe:59:59:ee:c7:6b:2c:fe:fc:8d:f4:91:
ae:88:8f:ce:bb:37:14:5d:6a:e0:da:87:c0:fd:73:
aa:8e:4f:00:ff:52:6a:95:99:71:bd:54:3a:ba:87:
cd:62:ec:1c:61:8e:62:ff:b9:24:4e:24:6d:7b:00:
a2:b4:bb:65:80:d4:d4:bf:07:1f:d8:e5:b3:b7:7d:
b8:fa:3f:56:ad:dd:c2:88:93:a9:5a:54:fb:fa:1a:
77:0b:37:b5:52:1b:82:1a:28:b1:fe:0d:5e:79:e4:
c1:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:9D:C4:FF:D2:B6:04:3E:3C:8F:CA:1C:84:D5:AE:CD:A0:00:23:F1
X509v3 Authority Key Identifier:
keyid:60:18:32:87:EB:08:EC:E0:C6:5F:A4:9A:3F:45:62:1C:61:2D:DB:D1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.xindi.eu/repo/XINDI/0/60183287EB08ECE0C65FA49A3F45621C612DDBD1.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YBgyh-sI7ODGX6SaP0ViHGEt29E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.xindi.eu/repo/XINDI/0/3138352e3137332e31372e302f32342d3234203d3e203438313132.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.173.17.0/24
Signature Algorithm: sha256WithRSAEncryption
0a:c0:be:10:fa:ec:9e:71:77:13:50:83:13:3a:5c:8b:b2:be:
4b:ce:69:1f:1b:fc:68:7c:bf:97:3e:ce:87:0f:fd:e3:ab:49:
2f:61:77:a3:a6:e2:1f:b1:52:e7:c4:e8:05:03:fc:53:1c:2a:
7c:60:66:e3:4e:e8:71:61:cd:2e:6c:c7:ca:df:58:15:bf:f8:
58:8b:57:69:6b:e6:fa:d1:9e:32:86:aa:be:cf:94:eb:d8:04:
26:b1:54:cd:ed:34:ae:31:33:fa:c4:67:d7:c3:ea:ac:8b:dc:
7a:ee:e0:b7:12:cb:9f:d3:b5:fd:15:84:61:ff:c3:f0:14:30:
66:1e:e2:bc:6e:6f:f6:1d:3e:bd:71:db:f3:5f:59:47:86:6c:
15:5d:25:e1:b3:7b:2c:7d:60:a4:01:78:92:59:c9:44:24:d9:
45:74:ae:88:2b:6a:a1:71:13:58:fe:ac:53:9a:b1:1b:96:67:
dc:67:48:ef:59:92:05:a3:06:be:a2:ae:b4:b4:bd:ce:77:19:
7d:46:d3:ec:b2:53:c0:a6:e7:e4:11:7c:18:a7:73:e6:2b:31:
03:b5:a7:5e:30:7d:60:7e:43:c8:02:30:c9:8d:ec:32:65:55:
4b:2f:6c:ac:91:a2:5d:47:89:5e:ac:46:bc:0a:58:57:ee:c9:
fb:7f:fe:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 20:15:07 2026 by rpki-client