Route Origin Authorization
$ rpki-client -vvf rpki.xindi.eu/repo/XINDI/0/3138352e3137332e31382e302f32342d3234203d3e20323036373633.roa
File: 3138352e3137332e31382e302f32342d3234203d3e20323036373633.roa (raw, json)
Hash identifier: S4BlR28lc6JGbm65Vbh+5k1xebqTYiupRu2yVG+LzX0=
Subject key identifier: 5D:CE:6A:C4:80:03:7D:9D:10:89:FB:16:E1:29:E4:68:24:AA:45:5E
Certificate issuer: /CN=60183287eb08ece0c65fa49a3f45621c612ddbd1
Certificate serial: 15B6A60AA40871D221A94CF1B927237070356D77
Authority key identifier: 60:18:32:87:EB:08:EC:E0:C6:5F:A4:9A:3F:45:62:1C:61:2D:DB:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YBgyh-sI7ODGX6SaP0ViHGEt29E.cer
Subject info access: rsync://rpki.xindi.eu/repo/XINDI/0/3138352e3137332e31382e302f32342d3234203d3e20323036373633.roa
Signing time: Wed 01 Jul 2026 13:24:08 +0000
ROA not before: Wed 01 Jul 2026 13:19:08 +0000
ROA not after: Wed 30 Jun 2027 13:24:08 +0000
asID: 206763
IP address blocks: 185.173.18.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.xindi.eu/repo/XINDI/0/60183287EB08ECE0C65FA49A3F45621C612DDBD1.crl
rsync://rpki.xindi.eu/repo/XINDI/0/60183287EB08ECE0C65FA49A3F45621C612DDBD1.mft
rsync://rpki.ripe.net/repository/DEFAULT/YBgyh-sI7ODGX6SaP0ViHGEt29E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
15:b6:a6:0a:a4:08:71:d2:21:a9:4c:f1:b9:27:23:70:70:35:6d:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=60183287eb08ece0c65fa49a3f45621c612ddbd1
Validity
Not Before: Jul 1 13:19:08 2026 GMT
Not After : Jun 30 13:24:08 2027 GMT
Subject: CN=5DCE6AC480037D9D1089FB16E129E46824AA455E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:20:73:16:f8:3b:3d:42:00:6e:b9:d2:5d:ae:
68:fa:d0:2c:39:cc:05:2c:51:59:ff:00:77:a2:ac:
75:45:69:b2:53:eb:b3:38:1d:b2:75:1f:be:8d:ec:
5b:2d:37:7d:7f:b0:5d:64:a9:30:b6:1e:89:03:cb:
20:9f:20:fd:44:a2:3a:be:ef:ce:d4:c2:fd:5f:9b:
a4:ad:d5:36:10:2f:d5:6e:a4:93:98:f1:30:1a:81:
4e:46:ea:f7:ac:97:0d:95:75:8b:b3:e4:6b:5a:9e:
a4:bc:82:0f:88:ec:d0:6f:9a:d1:b0:16:ba:8e:48:
ce:50:e7:bb:79:b3:8c:54:df:50:33:a9:d8:a5:3b:
d3:b3:9a:6c:92:1a:c6:e4:32:bf:3e:6b:0d:0c:d2:
fb:3a:35:55:4a:d2:d8:e8:dc:60:7b:71:c0:e0:03:
71:9a:95:c7:48:eb:18:47:85:da:69:c9:5d:5b:ef:
1f:15:2f:04:3c:3b:89:47:a8:3a:a1:8e:72:6d:92:
50:78:4f:7e:45:4c:6a:cd:6a:09:28:00:b9:aa:06:
b3:cb:6c:d5:69:4b:e5:7e:91:58:3c:39:c5:cc:85:
89:10:6a:eb:9c:cd:b0:81:96:68:36:99:69:ff:7e:
4c:ca:ce:04:10:a3:63:5e:57:2c:d0:7a:da:66:a4:
d0:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:CE:6A:C4:80:03:7D:9D:10:89:FB:16:E1:29:E4:68:24:AA:45:5E
X509v3 Authority Key Identifier:
keyid:60:18:32:87:EB:08:EC:E0:C6:5F:A4:9A:3F:45:62:1C:61:2D:DB:D1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.xindi.eu/repo/XINDI/0/60183287EB08ECE0C65FA49A3F45621C612DDBD1.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YBgyh-sI7ODGX6SaP0ViHGEt29E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.xindi.eu/repo/XINDI/0/3138352e3137332e31382e302f32342d3234203d3e20323036373633.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.173.18.0/24
Signature Algorithm: sha256WithRSAEncryption
1e:77:08:76:a5:0b:56:bf:2e:45:a4:c4:16:7c:ff:5c:7e:5a:
95:87:2a:2f:4e:6e:6a:4d:30:50:e6:45:bc:0c:1d:11:02:7c:
17:d2:b7:19:76:ee:cb:31:a2:8f:cb:04:3f:eb:57:46:85:fb:
fa:a4:72:0c:6c:2e:35:40:c1:15:9f:2a:88:c6:31:1a:76:45:
81:41:1e:5a:bd:f0:71:10:73:43:05:e4:72:bd:7c:c2:f9:c4:
48:30:df:cd:9c:1d:46:4b:f5:73:de:09:b6:65:54:4f:2f:f7:
6a:89:92:85:9e:9e:46:eb:e6:04:eb:3b:95:fe:09:59:40:6b:
bb:14:30:9f:5f:87:13:14:0d:95:07:e9:cc:bd:8e:3c:b6:02:
68:1e:fc:2b:b1:c6:13:8b:56:6f:ee:c2:c2:82:93:b1:14:0e:
06:39:04:28:ef:3d:b1:d1:5f:61:3b:83:9b:f8:99:c1:38:6c:
e6:2f:84:29:88:74:ce:26:f0:ca:d0:01:a7:8e:a4:de:42:5b:
fa:f5:da:66:78:62:d6:58:33:07:6e:68:01:21:4b:54:cb:92:
63:3d:ad:90:c8:19:45:b5:91:8f:a0:e9:3e:b4:e7:b9:e6:6c:
29:06:6e:65:25:b3:10:68:8d:95:4d:63:35:85:4a:22:9d:a6:
ac:e1:a1:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 00:07:43 2026 by rpki-client