Route Origin Authorization
$ rpki-client -vvf rpki.xindi.eu/repo/XINDI/0/326130633a343230303a3a2f32392d3239203d3e203438313132.roa
File: 326130633a343230303a3a2f32392d3239203d3e203438313132.roa (raw, json)
Hash identifier: YMgJ+JnhW5yIXf6EQxO4ggmoweQqjle4h+Np17EiehA=
Subject key identifier: 1C:22:C4:21:0C:CE:5B:B5:FC:C3:99:BA:9E:A8:B4:6E:EE:52:49:F8
Certificate issuer: /CN=60183287eb08ece0c65fa49a3f45621c612ddbd1
Certificate serial: 024A4F1E50D86034E73FC149F7043E1389B33F67
Authority key identifier: 60:18:32:87:EB:08:EC:E0:C6:5F:A4:9A:3F:45:62:1C:61:2D:DB:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YBgyh-sI7ODGX6SaP0ViHGEt29E.cer
Subject info access: rsync://rpki.xindi.eu/repo/XINDI/0/326130633a343230303a3a2f32392d3239203d3e203438313132.roa
Signing time: Wed 01 Jul 2026 13:23:58 +0000
ROA not before: Wed 01 Jul 2026 13:18:58 +0000
ROA not after: Wed 30 Jun 2027 13:23:58 +0000
asID: 48112
IP address blocks: 2a0c:4200::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.xindi.eu/repo/XINDI/0/60183287EB08ECE0C65FA49A3F45621C612DDBD1.crl
rsync://rpki.xindi.eu/repo/XINDI/0/60183287EB08ECE0C65FA49A3F45621C612DDBD1.mft
rsync://rpki.ripe.net/repository/DEFAULT/YBgyh-sI7ODGX6SaP0ViHGEt29E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 15:07:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
02:4a:4f:1e:50:d8:60:34:e7:3f:c1:49:f7:04:3e:13:89:b3:3f:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=60183287eb08ece0c65fa49a3f45621c612ddbd1
Validity
Not Before: Jul 1 13:18:58 2026 GMT
Not After : Jun 30 13:23:58 2027 GMT
Subject: CN=1C22C4210CCE5BB5FCC399BA9EA8B46EEE5249F8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:df:c1:8b:5f:ba:ce:e9:e3:d0:00:ff:c4:ce:
af:94:8c:4e:c8:5d:a6:c4:c9:b7:72:b8:69:54:54:
7b:a8:cc:74:84:47:11:0f:6a:dd:db:29:bd:ed:3a:
b5:38:1f:7b:d7:92:49:ab:6c:8e:0c:9e:14:f3:e2:
cb:88:31:c6:2d:11:2a:33:f5:04:52:e0:2a:52:64:
41:f8:00:b8:bd:5e:ff:1d:76:99:9b:ba:18:9f:7e:
4f:d8:04:3d:c7:84:4f:8c:98:08:44:ac:7e:0e:fa:
7b:74:3b:83:20:a6:e0:e1:fc:33:a9:1b:85:9f:3e:
50:6c:98:05:e6:1c:b8:fa:ba:67:26:55:da:b0:6a:
03:19:fa:68:3e:77:a8:04:17:f5:72:db:e8:c0:17:
97:48:fe:c6:9e:17:36:83:e0:62:a3:ef:11:5d:fb:
a5:6e:ff:53:5c:fd:12:48:46:0e:0e:60:90:56:80:
0c:93:95:e8:d6:8c:ed:d5:b8:e8:45:80:a1:38:97:
1f:dd:43:32:90:51:7a:e0:76:22:87:bb:1d:f0:aa:
ad:b2:e9:f3:d9:4c:20:e5:28:b7:d4:68:06:f3:88:
55:e2:1a:b0:fd:7e:8c:5c:67:30:94:c9:e9:eb:1c:
74:de:21:2d:72:50:d6:58:93:92:05:6b:dd:e4:51:
78:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:22:C4:21:0C:CE:5B:B5:FC:C3:99:BA:9E:A8:B4:6E:EE:52:49:F8
X509v3 Authority Key Identifier:
keyid:60:18:32:87:EB:08:EC:E0:C6:5F:A4:9A:3F:45:62:1C:61:2D:DB:D1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.xindi.eu/repo/XINDI/0/60183287EB08ECE0C65FA49A3F45621C612DDBD1.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YBgyh-sI7ODGX6SaP0ViHGEt29E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.xindi.eu/repo/XINDI/0/326130633a343230303a3a2f32392d3239203d3e203438313132.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0c:4200::/29
Signature Algorithm: sha256WithRSAEncryption
a1:d1:7a:21:8a:b2:2d:39:c5:62:e7:89:31:37:09:2b:7a:37:
80:1b:f5:cd:62:50:c7:83:de:9d:91:17:65:42:1b:b2:fa:3f:
58:4d:32:78:a2:9c:3e:38:44:f5:88:d6:93:dd:4c:ed:a0:9a:
65:2d:b7:50:48:c2:a1:b7:78:15:88:96:71:9d:f3:4d:7a:e0:
11:20:5f:a5:3f:68:f4:f7:27:5e:2d:e2:c8:e2:5b:04:db:42:
31:89:4d:2c:09:3d:bd:c2:27:c9:24:8a:91:0c:06:f5:2f:16:
7c:73:96:2c:02:7c:12:56:86:bf:15:fb:dc:92:20:e4:dc:af:
6a:cd:7e:9a:19:84:53:e3:fa:64:e8:8b:3f:70:6f:d9:50:bc:
f2:8e:fe:a0:90:08:70:e5:65:e5:9c:92:8f:a3:e0:c5:4d:89:
34:18:29:1a:dc:e8:90:f0:a0:43:37:a8:68:31:63:42:c0:fd:
54:36:d6:29:3c:3b:5b:f5:9c:de:1c:33:83:d2:83:b5:09:66:
76:5f:41:c4:38:f0:f2:7a:6b:ed:54:34:6e:f5:00:c0:51:ab:
3a:63:ed:44:c7:33:0c:ff:ef:61:c6:aa:83:c2:0a:09:aa:b4:
f2:43:36:62:79:20:f3:26:48:9b:5d:50:d8:47:ba:9c:a7:7e:
3f:a3:7b:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 02:41:40 2026 by rpki-client