Route Origin Authorization
$ rpki-client -vvf rpki.xindi.eu/repo/XINDI/0/323030313a3637383a3261633a3a2f34382d3438203d3e20323036373633.roa
File: 323030313a3637383a3261633a3a2f34382d3438203d3e20323036373633.roa (raw, json)
Hash identifier: 2Q5OJhGH4JfEQS1pLH6V37Nw0ZjKcXq4N6HkcVyxlaI=
Subject key identifier: E8:56:79:E7:EF:29:D4:89:00:F7:3B:D3:D5:7A:F2:6C:18:C1:35:EA
Certificate issuer: /CN=60183287eb08ece0c65fa49a3f45621c612ddbd1
Certificate serial: 17BDE6F5F99D3272756B8D12F2805AD3E928FFAF
Authority key identifier: 60:18:32:87:EB:08:EC:E0:C6:5F:A4:9A:3F:45:62:1C:61:2D:DB:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YBgyh-sI7ODGX6SaP0ViHGEt29E.cer
Subject info access: rsync://rpki.xindi.eu/repo/XINDI/0/323030313a3637383a3261633a3a2f34382d3438203d3e20323036373633.roa
Signing time: Wed 01 Jul 2026 13:24:07 +0000
ROA not before: Wed 01 Jul 2026 13:19:07 +0000
ROA not after: Wed 30 Jun 2027 13:24:07 +0000
asID: 206763
IP address blocks: 2001:678:2ac::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.xindi.eu/repo/XINDI/0/60183287EB08ECE0C65FA49A3F45621C612DDBD1.crl
rsync://rpki.xindi.eu/repo/XINDI/0/60183287EB08ECE0C65FA49A3F45621C612DDBD1.mft
rsync://rpki.ripe.net/repository/DEFAULT/YBgyh-sI7ODGX6SaP0ViHGEt29E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
17:bd:e6:f5:f9:9d:32:72:75:6b:8d:12:f2:80:5a:d3:e9:28:ff:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=60183287eb08ece0c65fa49a3f45621c612ddbd1
Validity
Not Before: Jul 1 13:19:07 2026 GMT
Not After : Jun 30 13:24:07 2027 GMT
Subject: CN=E85679E7EF29D48900F73BD3D57AF26C18C135EA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:6c:c1:be:52:ec:14:26:c3:18:26:82:28:a3:
da:db:85:d4:5a:35:f7:18:08:7b:13:19:4a:4a:4e:
1f:e8:12:c0:1c:5d:3c:3c:42:8d:e0:30:b5:0a:36:
f0:ce:aa:36:f7:41:f9:42:d8:c4:3e:bb:a7:88:d8:
35:b3:60:48:d6:cb:3e:b7:80:a7:fd:a5:eb:05:da:
b0:9f:e7:1a:0c:20:44:9c:e1:da:95:4c:5b:a2:11:
2d:f9:b8:9b:13:90:85:74:45:60:52:48:29:e1:3d:
fe:5c:82:02:a5:83:33:f2:d7:b6:bc:3e:a0:d9:b7:
ed:61:b5:af:06:6d:ea:35:57:00:69:d7:8c:ac:94:
bb:2a:1f:41:e9:9f:24:3b:bb:7e:56:a3:3b:63:b3:
30:27:20:42:dc:d3:73:44:83:14:92:2a:e0:33:8f:
8c:58:bc:18:65:b8:0d:dd:7c:5d:72:b9:80:bf:81:
3f:0d:4c:a7:10:3c:1e:45:e3:c7:75:87:35:38:ac:
7e:48:83:4e:46:60:f3:90:48:bb:f2:d6:9e:59:56:
44:18:de:5e:e4:b8:88:fb:b0:2d:94:98:7c:58:4d:
16:69:3b:4d:b3:80:3c:07:6c:83:20:45:b8:02:ca:
25:c3:d2:7b:fe:d6:9c:2f:5d:73:83:d8:85:19:de:
13:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:56:79:E7:EF:29:D4:89:00:F7:3B:D3:D5:7A:F2:6C:18:C1:35:EA
X509v3 Authority Key Identifier:
keyid:60:18:32:87:EB:08:EC:E0:C6:5F:A4:9A:3F:45:62:1C:61:2D:DB:D1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.xindi.eu/repo/XINDI/0/60183287EB08ECE0C65FA49A3F45621C612DDBD1.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YBgyh-sI7ODGX6SaP0ViHGEt29E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.xindi.eu/repo/XINDI/0/323030313a3637383a3261633a3a2f34382d3438203d3e20323036373633.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:678:2ac::/48
Signature Algorithm: sha256WithRSAEncryption
26:50:a7:c4:da:e7:97:89:b6:36:1b:d5:7a:91:57:4d:94:06:
84:f6:a0:f8:bf:4f:9b:99:06:31:e4:8b:be:cb:93:12:fa:9a:
eb:15:d4:fb:b4:19:b4:b5:79:98:d4:92:0b:d4:96:3d:fe:41:
61:c1:94:90:83:72:19:24:d7:42:d8:7a:e2:f2:7d:0e:79:4c:
24:96:3c:e6:7c:1b:ba:a7:8c:88:cf:cc:a0:5f:5f:c4:88:66:
c7:b6:7e:62:16:b5:32:03:0a:7f:60:43:59:54:ce:1e:d8:fa:
aa:e7:8d:2b:c1:75:63:79:e5:96:4b:10:5e:77:7b:70:e6:79:
c3:7a:fc:5d:64:e3:89:9a:cb:d2:40:a4:e1:26:09:76:8d:63:
7a:7c:05:b3:ab:24:a3:11:b6:14:b2:be:09:67:b0:3b:14:04:
2d:53:54:5b:88:da:eb:a7:fb:0d:af:e1:62:93:c1:3f:8c:30:
89:f8:d9:0d:0c:71:04:81:13:b8:0a:03:fe:14:f8:52:d3:24:
ea:c4:3e:f5:9f:4a:b3:c8:76:e9:3d:47:50:e2:87:e4:65:a0:
f9:dc:4d:5b:84:7e:e1:28:13:31:b5:f7:8f:52:ed:91:07:a8:
52:a7:82:a7:dd:1c:d7:9d:e3:9f:9d:be:5f:48:ad:b0:45:38:
0c:90:53:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 21:37:40 2026 by rpki-client