Route Origin Authorization
$ rpki-client -vvf rpki.xindi.eu/repo/XINDI/0/3138352e3137332e31392e302f32342d3234203d3e203438313132.roa
File: 3138352e3137332e31392e302f32342d3234203d3e203438313132.roa (raw, json)
Hash identifier: NkgYh7Utsigo14nDdmZp4Iv8o9cgguG8HeSjLQwEApM=
Subject key identifier: 2D:E7:95:8D:86:F7:1A:58:A3:6C:C8:61:70:1C:98:E8:3F:7C:A2:D3
Certificate issuer: /CN=60183287eb08ece0c65fa49a3f45621c612ddbd1
Certificate serial: 37CE3B71A9EB58414A70C29A534C08EDD504D624
Authority key identifier: 60:18:32:87:EB:08:EC:E0:C6:5F:A4:9A:3F:45:62:1C:61:2D:DB:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YBgyh-sI7ODGX6SaP0ViHGEt29E.cer
Subject info access: rsync://rpki.xindi.eu/repo/XINDI/0/3138352e3137332e31392e302f32342d3234203d3e203438313132.roa
Signing time: Wed 01 Jul 2026 13:23:58 +0000
ROA not before: Wed 01 Jul 2026 13:18:58 +0000
ROA not after: Wed 30 Jun 2027 13:23:58 +0000
asID: 48112
IP address blocks: 185.173.19.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.xindi.eu/repo/XINDI/0/60183287EB08ECE0C65FA49A3F45621C612DDBD1.crl
rsync://rpki.xindi.eu/repo/XINDI/0/60183287EB08ECE0C65FA49A3F45621C612DDBD1.mft
rsync://rpki.ripe.net/repository/DEFAULT/YBgyh-sI7ODGX6SaP0ViHGEt29E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 15:07:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
37:ce:3b:71:a9:eb:58:41:4a:70:c2:9a:53:4c:08:ed:d5:04:d6:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=60183287eb08ece0c65fa49a3f45621c612ddbd1
Validity
Not Before: Jul 1 13:18:58 2026 GMT
Not After : Jun 30 13:23:58 2027 GMT
Subject: CN=2DE7958D86F71A58A36CC861701C98E83F7CA2D3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:3d:68:66:aa:45:92:d5:64:9b:15:11:bb:e8:
75:63:11:e0:ab:c1:89:4b:7e:f3:8e:91:af:cd:95:
15:91:e4:b1:e8:41:62:d1:b7:90:06:3d:d8:04:98:
8d:e4:21:32:a8:1f:76:29:ea:a3:13:57:5c:2d:00:
c8:42:99:18:48:33:51:34:5d:8d:69:a6:77:df:36:
65:25:2b:77:b5:f5:21:7e:20:cd:07:39:f9:58:21:
d7:e9:3c:03:d4:7a:51:2b:3b:40:72:d5:79:99:95:
33:f1:61:f6:14:ed:17:cc:7f:d0:a1:3e:08:f8:a1:
2e:d2:f3:cc:2a:6f:53:c5:1f:59:8e:5e:5b:9d:ba:
f5:2d:bf:7f:07:a1:e2:9b:f5:10:fc:cc:c2:ca:f0:
7d:c9:c0:dd:3e:88:ea:2a:d5:c0:e9:04:36:4f:3a:
84:4e:ee:6c:90:5b:32:84:d6:dc:5f:76:7e:36:82:
07:ee:4b:e8:be:ef:52:25:70:30:b2:3e:f6:80:70:
b7:84:1c:a4:f0:7f:fa:23:93:e9:bf:c0:42:4f:39:
6d:0e:47:e9:dc:e3:c8:80:66:9d:d1:5a:43:ce:62:
c9:f1:84:94:93:da:73:62:b8:cb:33:a9:ff:ac:81:
7f:05:93:68:a8:e4:36:02:42:5e:5f:64:2d:b1:2c:
65:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:E7:95:8D:86:F7:1A:58:A3:6C:C8:61:70:1C:98:E8:3F:7C:A2:D3
X509v3 Authority Key Identifier:
keyid:60:18:32:87:EB:08:EC:E0:C6:5F:A4:9A:3F:45:62:1C:61:2D:DB:D1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.xindi.eu/repo/XINDI/0/60183287EB08ECE0C65FA49A3F45621C612DDBD1.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YBgyh-sI7ODGX6SaP0ViHGEt29E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.xindi.eu/repo/XINDI/0/3138352e3137332e31392e302f32342d3234203d3e203438313132.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.173.19.0/24
Signature Algorithm: sha256WithRSAEncryption
60:27:4e:e0:65:44:17:85:e0:b9:ed:c1:bb:80:01:44:64:4e:
db:60:c3:7c:94:77:aa:ae:88:96:ab:d1:37:f2:93:b0:04:67:
d9:b0:8f:21:69:ed:ea:2c:68:0f:4e:80:83:c6:99:80:a5:7e:
1d:1e:ea:73:6e:a9:9b:b2:46:7f:6f:06:86:63:c3:eb:4e:47:
e2:06:7f:45:dc:2a:15:d8:13:2d:48:fd:eb:a7:bc:b8:ef:d2:
20:36:5e:e8:dc:56:3d:32:e9:c7:c3:27:8e:c9:5b:57:03:ae:
de:57:10:50:69:02:8f:d0:50:7b:39:bd:a3:98:2a:fd:f1:2c:
4b:6d:f8:8d:26:2e:74:e8:71:da:c3:57:4c:35:34:69:dc:45:
69:bf:30:25:ac:54:e7:6c:7d:e7:86:97:e4:9c:5c:d8:8f:4b:
3d:18:14:f5:6d:c7:74:7d:c5:7e:ca:03:a1:77:cb:18:9d:ea:
26:5a:7f:56:3f:23:c7:e4:17:ea:a8:69:e8:06:b5:54:ad:fa:
b4:e1:47:d1:db:27:ce:43:3b:b3:14:87:5a:85:3a:db:c4:b3:
83:18:13:28:09:7b:f2:25:4a:4d:41:37:23:ff:53:55:4c:cd:
5e:36:0b:f7:d0:88:2d:f8:bf:ab:3e:42:d8:4a:3a:b1:a4:2d:
27:ff:d3:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 05:35:06 2026 by rpki-client