Route Origin Authorization
$ rpki-client -vvf rpki.xindi.eu/repo/XINDI/0/34352e38392e3136342e302f32322d3232203d3e203438313132.roa
File: 34352e38392e3136342e302f32322d3232203d3e203438313132.roa (raw, json)
Hash identifier: Sqp6KKmpAhKr1mS/HnQFadt31o6qN2mMrQjX25Tdr6I=
Subject key identifier: 31:4C:3F:04:C8:E4:8A:DF:5A:3F:4B:89:A3:8D:86:4A:C0:3D:A3:14
Certificate issuer: /CN=60183287eb08ece0c65fa49a3f45621c612ddbd1
Certificate serial: 3C529E32B4EDC073917D6CD2DC2AECE157DFDEBA
Authority key identifier: 60:18:32:87:EB:08:EC:E0:C6:5F:A4:9A:3F:45:62:1C:61:2D:DB:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YBgyh-sI7ODGX6SaP0ViHGEt29E.cer
Subject info access: rsync://rpki.xindi.eu/repo/XINDI/0/34352e38392e3136342e302f32322d3232203d3e203438313132.roa
Signing time: Wed 01 Jul 2026 13:24:00 +0000
ROA not before: Wed 01 Jul 2026 13:19:00 +0000
ROA not after: Wed 30 Jun 2027 13:24:00 +0000
asID: 48112
IP address blocks: 45.89.164.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.xindi.eu/repo/XINDI/0/60183287EB08ECE0C65FA49A3F45621C612DDBD1.crl
rsync://rpki.xindi.eu/repo/XINDI/0/60183287EB08ECE0C65FA49A3F45621C612DDBD1.mft
rsync://rpki.ripe.net/repository/DEFAULT/YBgyh-sI7ODGX6SaP0ViHGEt29E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3c:52:9e:32:b4:ed:c0:73:91:7d:6c:d2:dc:2a:ec:e1:57:df:de:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=60183287eb08ece0c65fa49a3f45621c612ddbd1
Validity
Not Before: Jul 1 13:19:00 2026 GMT
Not After : Jun 30 13:24:00 2027 GMT
Subject: CN=314C3F04C8E48ADF5A3F4B89A38D864AC03DA314
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:95:85:2d:b3:05:92:44:d7:cd:af:18:28:ef:
0d:a1:24:d0:e2:3b:bd:00:be:63:c1:e5:02:5e:88:
01:4b:eb:91:e6:63:ad:09:3b:64:c9:c7:98:66:42:
a8:18:0d:04:f1:4e:a9:a3:2b:39:bf:e9:bc:13:d7:
e7:f0:eb:bb:c1:23:7f:c5:49:b2:a7:34:8d:03:4b:
ed:a9:7d:f0:b2:b1:1d:49:c7:41:eb:d9:32:df:f0:
d9:0e:69:16:de:a1:df:a0:cc:cb:1b:17:9d:db:82:
8c:d4:e4:fe:86:35:45:e3:27:17:e3:f1:1d:3f:04:
82:b0:af:b5:0d:c4:55:f0:2c:63:e6:b1:47:fe:e6:
ad:c7:e3:06:67:cf:68:b6:83:df:bb:ba:30:b5:ca:
01:b3:60:20:64:c5:ec:7e:d8:ed:1c:f2:fb:81:8b:
25:ed:9f:9d:dc:ad:64:40:b6:46:58:cc:71:18:0e:
b1:6d:29:85:0f:66:65:01:6b:37:66:b1:bb:80:93:
ee:d6:45:a2:24:af:c2:1a:a3:c8:1a:aa:a1:88:45:
65:75:d8:ff:51:34:aa:42:af:00:12:d4:14:1d:a7:
3a:d1:21:88:d6:86:b4:69:a7:5a:d6:e1:2c:a0:85:
45:22:b2:a5:7d:8f:57:f9:46:9d:81:b3:97:48:6c:
d8:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:4C:3F:04:C8:E4:8A:DF:5A:3F:4B:89:A3:8D:86:4A:C0:3D:A3:14
X509v3 Authority Key Identifier:
keyid:60:18:32:87:EB:08:EC:E0:C6:5F:A4:9A:3F:45:62:1C:61:2D:DB:D1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.xindi.eu/repo/XINDI/0/60183287EB08ECE0C65FA49A3F45621C612DDBD1.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YBgyh-sI7ODGX6SaP0ViHGEt29E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.xindi.eu/repo/XINDI/0/34352e38392e3136342e302f32322d3232203d3e203438313132.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.89.164.0/22
Signature Algorithm: sha256WithRSAEncryption
b8:68:d3:6a:09:cc:00:b5:ff:12:e0:e3:6b:82:78:bf:ae:c2:
ec:52:a2:21:f1:a0:93:b6:7f:e8:a6:9b:6f:8e:5a:52:d2:8d:
04:ef:e0:f2:02:5a:d7:10:24:14:dc:a7:30:b0:da:2b:5c:a7:
e1:8e:af:1f:44:5b:68:5d:06:b3:cd:7a:68:59:17:ca:6c:3c:
1e:35:15:fc:03:6e:8d:d8:bc:74:37:29:8b:d7:5f:ed:a6:c9:
ba:49:db:65:2b:47:a3:24:ac:5b:f5:f7:b6:f5:e2:6d:2b:42:
af:db:61:66:3c:ef:72:af:41:64:1c:87:b7:91:77:67:60:1e:
61:fd:d9:99:b4:3b:64:cd:15:6f:61:49:1b:c1:1b:a9:83:a8:
98:f2:22:69:05:65:d6:38:f7:8b:4a:9d:37:98:05:1e:a6:0b:
f9:6d:f2:c6:f0:13:3d:87:ac:13:88:6f:13:7f:c6:87:01:78:
9b:c5:34:a6:76:d3:f1:87:c2:4a:f3:48:ab:f7:5c:90:bf:e9:
c5:65:6e:bf:a1:0f:6f:86:ef:02:6a:60:88:f5:33:0a:ae:b7:
bc:d3:08:57:15:72:f8:57:61:f7:9f:cd:10:c5:7c:54:b8:0d:
bf:22:01:66:fa:d6:80:40:41:64:b1:dd:72:2a:cf:36:c2:fe:
0c:c0:3d:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 00:07:58 2026 by rpki-client