Route Origin Authorization
$ rpki-client -vvf rpki.xindi.eu/repo/XINDI/0/39312e3230372e3132302e302f32332d3233203d3e203438313132.roa
File: 39312e3230372e3132302e302f32332d3233203d3e203438313132.roa (raw, json)
Hash identifier: szZS3VmDlatFGWLbR1RLzWfXVv26rxHzBtKR42WEWZs=
Subject key identifier: 2C:73:9F:62:02:E8:4E:42:FD:1F:3D:89:EA:1A:1F:49:9C:2D:90:DE
Certificate issuer: /CN=60183287eb08ece0c65fa49a3f45621c612ddbd1
Certificate serial: 55A82B62E7AB42BBE67A95DE77B1AC76CBF5A65E
Authority key identifier: 60:18:32:87:EB:08:EC:E0:C6:5F:A4:9A:3F:45:62:1C:61:2D:DB:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YBgyh-sI7ODGX6SaP0ViHGEt29E.cer
Subject info access: rsync://rpki.xindi.eu/repo/XINDI/0/39312e3230372e3132302e302f32332d3233203d3e203438313132.roa
Signing time: Wed 01 Jul 2026 13:24:01 +0000
ROA not before: Wed 01 Jul 2026 13:19:01 +0000
ROA not after: Wed 30 Jun 2027 13:24:01 +0000
asID: 48112
IP address blocks: 91.207.120.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.xindi.eu/repo/XINDI/0/60183287EB08ECE0C65FA49A3F45621C612DDBD1.crl
rsync://rpki.xindi.eu/repo/XINDI/0/60183287EB08ECE0C65FA49A3F45621C612DDBD1.mft
rsync://rpki.ripe.net/repository/DEFAULT/YBgyh-sI7ODGX6SaP0ViHGEt29E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
55:a8:2b:62:e7:ab:42:bb:e6:7a:95:de:77:b1:ac:76:cb:f5:a6:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=60183287eb08ece0c65fa49a3f45621c612ddbd1
Validity
Not Before: Jul 1 13:19:01 2026 GMT
Not After : Jun 30 13:24:01 2027 GMT
Subject: CN=2C739F6202E84E42FD1F3D89EA1A1F499C2D90DE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:1a:cc:d9:9b:0f:84:eb:db:78:bf:3d:be:73:
ff:1f:f9:96:ca:38:91:ec:c7:f6:9f:43:0b:d0:d4:
8f:62:0a:c1:ed:d4:b9:19:eb:1c:93:9b:d4:cc:92:
24:61:14:f6:66:30:f0:bf:a1:e7:36:f6:c5:29:12:
5e:e9:b7:2d:5c:e8:3b:d8:df:18:ea:70:c6:87:b5:
0b:39:23:70:4a:5b:fd:4a:00:19:9c:c3:cc:45:d8:
33:81:35:da:87:51:3c:51:13:ea:9f:9c:a5:3e:27:
33:be:ad:6e:59:55:2d:4d:dd:00:10:90:50:e1:a8:
41:09:4e:fe:1f:ac:f0:0e:c8:bd:54:98:f9:f4:a7:
3d:54:94:a2:2b:08:d4:d0:33:1e:67:63:85:fa:92:
05:a2:16:d5:1e:2f:57:78:7d:d9:87:17:06:b3:34:
4f:cb:8f:4b:e1:45:ba:ef:64:4a:d4:72:18:ac:4e:
ad:01:8a:6c:14:44:a6:33:92:04:0d:66:3f:3f:29:
7d:4f:d2:11:2b:13:77:71:b4:9d:ca:10:43:d5:b8:
20:1d:ca:95:d3:ed:6d:ba:72:36:97:76:16:3b:8d:
6c:53:ab:2b:82:c9:0d:63:18:c9:7e:df:16:54:24:
d6:a8:d6:1f:1a:71:70:c7:18:a8:20:6b:35:3a:df:
9b:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:73:9F:62:02:E8:4E:42:FD:1F:3D:89:EA:1A:1F:49:9C:2D:90:DE
X509v3 Authority Key Identifier:
keyid:60:18:32:87:EB:08:EC:E0:C6:5F:A4:9A:3F:45:62:1C:61:2D:DB:D1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.xindi.eu/repo/XINDI/0/60183287EB08ECE0C65FA49A3F45621C612DDBD1.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YBgyh-sI7ODGX6SaP0ViHGEt29E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.xindi.eu/repo/XINDI/0/39312e3230372e3132302e302f32332d3233203d3e203438313132.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.207.120.0/23
Signature Algorithm: sha256WithRSAEncryption
14:63:08:df:87:6e:e0:37:59:7c:07:88:f4:5c:5f:09:e6:d4:
60:93:7e:f8:34:48:d8:e0:e0:93:f9:eb:f8:64:cf:47:5d:b3:
e7:49:86:3e:0e:19:08:cc:d6:5c:83:be:50:00:d5:f4:66:3e:
0d:7c:1c:95:73:b4:e3:dd:ef:71:c8:13:8c:4f:bd:32:ae:45:
1b:14:d2:ee:90:ef:09:f1:31:8a:6c:02:cc:d6:ca:dc:1b:33:
95:04:f0:7e:d2:51:b5:fe:63:5a:6a:29:c3:81:f9:09:33:61:
63:c2:21:3a:b9:f5:26:c2:fd:93:e2:23:af:e5:3c:de:31:14:
ff:64:05:78:b4:bc:1b:5d:02:5d:63:3d:aa:18:a5:23:c1:12:
75:1c:be:a4:90:7b:82:ae:db:1b:04:e8:a4:73:86:45:13:39:
6b:3a:18:f1:87:64:c2:98:66:6d:ef:0b:87:7e:4d:e6:54:79:
77:56:30:0b:93:f0:a2:7f:86:64:7c:91:6f:1f:55:74:ff:8f:
56:24:d5:cd:05:fb:3a:bc:da:82:bc:23:99:a2:13:15:66:cb:
e8:70:51:1f:a3:6c:67:88:ca:19:9a:46:4e:eb:d3:24:3e:0b:
c1:fb:cd:b8:ae:37:14:c5:54:d0:f1:6c:92:dc:9e:90:af:eb:
00:bb:91:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 20:11:56 2026 by rpki-client