Route Origin Authorization

$ rpki-client -vvf rpki.xindi.eu/repo/XINDI/0/326130623a326630303a3a2f32392d3239203d3e203438313132.roa
File:                     326130623a326630303a3a2f32392d3239203d3e203438313132.roa (raw, json)
Hash identifier:          5TCsAY4gDifJdbNMuHpyDAapNyvGt6/pU5yUHwlLpsk=
Subject key identifier:   C3:D8:0C:30:1A:A9:6B:EE:2C:5F:3A:67:36:57:A0:47:40:70:45:8F
Certificate issuer:       /CN=60183287eb08ece0c65fa49a3f45621c612ddbd1
Certificate serial:       71C8DC78FFE50D8EF216A7F60C26F612E0366376
Authority key identifier: 60:18:32:87:EB:08:EC:E0:C6:5F:A4:9A:3F:45:62:1C:61:2D:DB:D1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YBgyh-sI7ODGX6SaP0ViHGEt29E.cer
Subject info access:      rsync://rpki.xindi.eu/repo/XINDI/0/326130623a326630303a3a2f32392d3239203d3e203438313132.roa
Signing time:             Wed 01 Jul 2026 13:24:07 +0000
ROA not before:           Wed 01 Jul 2026 13:19:07 +0000
ROA not after:            Wed 30 Jun 2027 13:24:07 +0000
asID:                     48112
IP address blocks:        2a0b:2f00::/29 maxlen: 29
Validation:               OK
Signature path:           rsync://rpki.xindi.eu/repo/XINDI/0/60183287EB08ECE0C65FA49A3F45621C612DDBD1.crl
                          rsync://rpki.xindi.eu/repo/XINDI/0/60183287EB08ECE0C65FA49A3F45621C612DDBD1.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/YBgyh-sI7ODGX6SaP0ViHGEt29E.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 14:03:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            71:c8:dc:78:ff:e5:0d:8e:f2:16:a7:f6:0c:26:f6:12:e0:36:63:76
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=60183287eb08ece0c65fa49a3f45621c612ddbd1
        Validity
            Not Before: Jul  1 13:19:07 2026 GMT
            Not After : Jun 30 13:24:07 2027 GMT
        Subject: CN=C3D80C301AA96BEE2C5F3A673657A0474070458F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:48:5c:9e:a9:eb:9c:99:d8:a5:34:ad:68:05:
                    ac:0f:a3:22:82:d8:14:69:ef:7c:6a:93:bd:dd:25:
                    7c:b2:af:51:e2:86:a1:62:c2:db:81:04:39:1f:e2:
                    df:1c:21:b2:82:bd:45:19:07:99:40:14:69:fb:36:
                    1b:79:40:66:f0:c5:d5:23:6d:89:01:b0:9e:e8:ba:
                    ae:a0:6e:db:d3:24:37:a7:97:df:2b:f6:f9:36:4f:
                    fc:80:b9:b3:ff:ba:5d:80:31:d2:04:34:1b:42:ed:
                    45:67:58:0f:84:c1:c9:f6:00:ba:05:ae:85:45:46:
                    1f:4b:87:5b:ec:da:06:a1:de:21:08:12:72:a4:ce:
                    b2:08:8f:f3:65:ea:b4:97:76:8f:b8:01:68:81:a7:
                    70:25:9c:08:58:21:2b:6b:0b:f8:b1:cd:8c:61:7e:
                    ef:d4:10:3c:ea:ad:71:81:cd:b8:92:f9:1d:fd:c2:
                    63:ba:c0:13:81:eb:48:e8:e5:e5:df:17:a7:2c:1a:
                    ab:8b:34:d7:1b:03:06:94:4f:1a:2d:62:59:1b:b1:
                    16:6a:5d:14:40:06:4b:9a:9b:65:69:49:cc:17:8f:
                    17:2f:55:da:26:65:97:b9:26:eb:d5:5f:23:f6:0e:
                    8a:db:b0:a9:ef:1d:ce:de:8d:43:6b:38:de:6f:74:
                    e2:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:D8:0C:30:1A:A9:6B:EE:2C:5F:3A:67:36:57:A0:47:40:70:45:8F
            X509v3 Authority Key Identifier:
                keyid:60:18:32:87:EB:08:EC:E0:C6:5F:A4:9A:3F:45:62:1C:61:2D:DB:D1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.xindi.eu/repo/XINDI/0/60183287EB08ECE0C65FA49A3F45621C612DDBD1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YBgyh-sI7ODGX6SaP0ViHGEt29E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.xindi.eu/repo/XINDI/0/326130623a326630303a3a2f32392d3239203d3e203438313132.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0b:2f00::/29

    Signature Algorithm: sha256WithRSAEncryption
         0b:9f:42:42:b5:41:33:49:2a:2c:96:6c:3f:3f:12:e3:d6:48:
         4d:54:4b:e1:cd:96:10:de:5c:51:11:43:be:18:dc:ff:49:91:
         89:58:7d:4a:8f:56:bb:80:c2:67:d6:fc:11:97:51:8a:93:93:
         44:36:72:4b:88:ef:07:00:fa:62:18:5a:07:3b:7f:fc:f6:39:
         4d:ae:71:2a:81:f6:ab:d4:6e:42:18:26:20:31:a0:d6:a7:cb:
         5c:7f:22:56:6d:52:1c:4b:0b:70:68:91:23:68:61:6c:b9:aa:
         eb:34:59:22:b2:ea:39:95:40:0a:b6:d7:fc:9f:c1:60:58:b6:
         02:d0:8c:ae:c0:00:fd:7b:a3:2a:59:bf:66:77:4c:76:61:53:
         14:88:5f:a5:2b:84:4a:fa:7f:f7:a5:60:8f:df:a6:19:be:40:
         a2:f8:a9:5b:0a:10:d3:7c:4b:b6:41:f1:58:0d:99:84:ec:69:
         0c:9d:8c:1b:ac:0c:2e:59:1a:03:4f:02:12:fa:8b:a3:84:da:
         0d:e6:24:0b:76:73:93:d8:92:49:74:9e:6d:4d:5e:cd:e3:fc:
         30:4d:8b:e8:5b:3b:88:ec:0d:7c:df:bf:3c:26:03:87:cf:a4:
         72:29:48:d5:a9:be:91:2a:f4:8c:60:ac:98:63:39:4c:50:37:
         38:57:fa:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 20:14:05 2026 by rpki-client