Route Origin Authorization

$ rpki-client -vvf rpki.xindi.eu/repo/XINDI/0/326130623a326630373a616263643a3a2f34382d3438203d3e203537393834.roa
File:                     326130623a326630373a616263643a3a2f34382d3438203d3e203537393834.roa (raw, json)
Hash identifier:          HcoYzpsD68RVnnzePAfHlMjQ6rIel0vVgIrsSpdjXGE=
Subject key identifier:   27:EB:EF:47:6E:FC:8C:BB:E8:3B:B8:AC:FB:C9:B1:4D:F1:A8:10:8B
Certificate issuer:       /CN=60183287eb08ece0c65fa49a3f45621c612ddbd1
Certificate serial:       12886B220FCFE6C73180A598B945C977047BB0C2
Authority key identifier: 60:18:32:87:EB:08:EC:E0:C6:5F:A4:9A:3F:45:62:1C:61:2D:DB:D1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YBgyh-sI7ODGX6SaP0ViHGEt29E.cer
Subject info access:      rsync://rpki.xindi.eu/repo/XINDI/0/326130623a326630373a616263643a3a2f34382d3438203d3e203537393834.roa
Signing time:             Sun 05 Jul 2026 17:24:11 +0000
ROA not before:           Sun 05 Jul 2026 17:19:11 +0000
ROA not after:            Sun 04 Jul 2027 17:24:11 +0000
asID:                     57984
IP address blocks:        2a0b:2f07:abcd::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.xindi.eu/repo/XINDI/0/60183287EB08ECE0C65FA49A3F45621C612DDBD1.crl
                          rsync://rpki.xindi.eu/repo/XINDI/0/60183287EB08ECE0C65FA49A3F45621C612DDBD1.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/YBgyh-sI7ODGX6SaP0ViHGEt29E.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 14:03:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            12:88:6b:22:0f:cf:e6:c7:31:80:a5:98:b9:45:c9:77:04:7b:b0:c2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=60183287eb08ece0c65fa49a3f45621c612ddbd1
        Validity
            Not Before: Jul  5 17:19:11 2026 GMT
            Not After : Jul  4 17:24:11 2027 GMT
        Subject: CN=27EBEF476EFC8CBBE83BB8ACFBC9B14DF1A8108B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:31:c3:aa:99:16:6a:d4:41:8f:38:96:d7:75:
                    19:c3:f6:61:da:d9:7d:f9:9b:8c:cc:a9:5e:8e:ef:
                    e8:b1:34:1f:d2:ad:cb:e3:a6:7c:d4:14:76:b1:d9:
                    e1:7b:08:19:b4:5a:78:7e:73:39:f4:2c:05:1f:54:
                    d8:6d:98:99:6f:df:24:48:37:bf:27:6b:4e:86:25:
                    9b:41:0b:65:92:ca:7a:d6:9b:ef:54:b2:27:24:d8:
                    64:7f:83:8d:a5:76:cb:be:da:03:83:99:96:90:d5:
                    9a:53:cf:01:1d:76:a7:98:02:e5:28:8b:e0:0e:28:
                    c6:4b:cc:09:13:85:f6:85:94:c4:c4:e2:5c:3c:0c:
                    f2:39:9d:4e:cf:79:9a:be:c9:f4:23:39:b7:00:10:
                    59:9b:04:8c:51:35:7e:12:d7:c8:02:99:93:80:8d:
                    d2:39:ed:78:fe:c4:a6:e2:11:c1:08:c2:3c:13:1a:
                    a1:f4:e1:62:08:6e:be:93:a8:1b:82:d4:09:77:da:
                    8d:24:bf:51:b1:c5:2b:ba:34:18:28:f7:3d:31:2b:
                    a5:0e:80:ac:d9:86:11:ca:47:bd:0a:a6:91:4c:2c:
                    8e:d9:1f:7c:ff:a1:2f:d9:0f:4b:76:33:16:22:bd:
                    57:6c:19:12:ee:78:a1:67:a9:35:b0:92:84:d8:94:
                    b8:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:EB:EF:47:6E:FC:8C:BB:E8:3B:B8:AC:FB:C9:B1:4D:F1:A8:10:8B
            X509v3 Authority Key Identifier:
                keyid:60:18:32:87:EB:08:EC:E0:C6:5F:A4:9A:3F:45:62:1C:61:2D:DB:D1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.xindi.eu/repo/XINDI/0/60183287EB08ECE0C65FA49A3F45621C612DDBD1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YBgyh-sI7ODGX6SaP0ViHGEt29E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.xindi.eu/repo/XINDI/0/326130623a326630373a616263643a3a2f34382d3438203d3e203537393834.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0b:2f07:abcd::/48

    Signature Algorithm: sha256WithRSAEncryption
         29:ea:a9:70:42:66:ec:9b:8d:30:02:df:2f:27:39:24:c3:b2:
         8a:65:ad:cf:0b:d3:99:75:13:3e:35:d3:74:67:8f:32:34:1c:
         db:e1:69:16:eb:76:16:9b:e0:69:2b:e4:33:85:8d:06:b5:52:
         ee:f7:cf:d8:32:e9:94:e0:f5:8d:cb:97:aa:c2:ce:05:34:88:
         ef:f2:33:a6:2f:65:46:31:bf:ed:35:57:cf:b5:37:6b:da:a8:
         e6:66:ca:a0:bb:90:89:48:b3:fc:04:fa:0d:54:d0:3e:33:ea:
         09:69:9f:44:35:45:07:9b:2c:08:bd:b6:f1:e7:59:c2:34:ad:
         b2:a3:a3:e6:db:fc:25:00:c7:2b:6d:2a:4f:77:b7:3f:3e:7f:
         eb:87:46:f1:58:a6:93:06:40:a6:3b:90:5e:e9:7c:4f:79:d9:
         61:83:6a:35:4c:a9:6e:63:80:b3:83:49:14:4c:e8:ad:5f:53:
         23:3b:8e:8e:6d:ac:a1:19:b2:b2:96:5d:04:ab:3e:71:2c:38:
         ce:e6:3c:6c:3e:5a:94:40:92:e1:f4:cb:6b:03:1d:5e:56:1d:
         bd:5e:c5:52:ae:01:21:3b:f9:92:cc:25:6a:b2:24:a1:46:81:
         66:39:a7:dd:4a:d5:72:9d:15:70:f0:9c:53:64:a7:0f:ad:ac:
         d9:cf:16:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 19:09:23 2026 by rpki-client