Route Origin Authorization
$ rpki-client -vvf rpki.xindi.eu/repo/XINDI/0/39312e3230372e3132302e302f32342d3234203d3e203537393834.roa
File: 39312e3230372e3132302e302f32342d3234203d3e203537393834.roa (raw, json)
Hash identifier: P21ZffiRCHPC+MrBSotYmfdts6D2qeRBlrv1+IgadUo=
Subject key identifier: CC:F5:7C:C7:07:AA:EB:DE:E8:A3:70:B7:35:B1:32:0F:0D:DF:3D:E5
Certificate issuer: /CN=60183287eb08ece0c65fa49a3f45621c612ddbd1
Certificate serial: 6A7CFE65A5C8EDACB2E05BF89D1992BD8BF09BB0
Authority key identifier: 60:18:32:87:EB:08:EC:E0:C6:5F:A4:9A:3F:45:62:1C:61:2D:DB:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YBgyh-sI7ODGX6SaP0ViHGEt29E.cer
Subject info access: rsync://rpki.xindi.eu/repo/XINDI/0/39312e3230372e3132302e302f32342d3234203d3e203537393834.roa
Signing time: Wed 01 Jul 2026 13:24:03 +0000
ROA not before: Wed 01 Jul 2026 13:19:03 +0000
ROA not after: Wed 30 Jun 2027 13:24:03 +0000
asID: 57984
IP address blocks: 91.207.120.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.xindi.eu/repo/XINDI/0/60183287EB08ECE0C65FA49A3F45621C612DDBD1.crl
rsync://rpki.xindi.eu/repo/XINDI/0/60183287EB08ECE0C65FA49A3F45621C612DDBD1.mft
rsync://rpki.ripe.net/repository/DEFAULT/YBgyh-sI7ODGX6SaP0ViHGEt29E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6a:7c:fe:65:a5:c8:ed:ac:b2:e0:5b:f8:9d:19:92:bd:8b:f0:9b:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=60183287eb08ece0c65fa49a3f45621c612ddbd1
Validity
Not Before: Jul 1 13:19:03 2026 GMT
Not After : Jun 30 13:24:03 2027 GMT
Subject: CN=CCF57CC707AAEBDEE8A370B735B1320F0DDF3DE5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:0e:5b:86:aa:e0:58:b5:54:09:1b:4f:95:2f:
ee:a8:3e:3b:b4:ac:6e:5a:6c:0c:af:2f:81:bb:f0:
fd:fa:09:51:4d:6c:49:ea:1e:9b:60:76:65:c4:19:
ad:e8:c6:46:b2:29:b5:a5:85:dd:f5:5d:34:bf:02:
74:42:85:21:4d:de:ea:a3:47:51:9a:5f:48:42:a5:
db:d1:48:a9:a4:96:7e:d1:14:6a:44:d8:14:18:ee:
33:96:f7:31:68:29:73:5b:d1:64:78:8f:bc:36:a0:
36:94:79:fd:04:08:dd:93:47:3d:a5:40:4b:c1:84:
e2:dc:b3:3f:e6:24:48:65:44:21:9a:f6:38:8c:5d:
74:4d:96:f5:c8:60:25:c5:b6:be:47:6c:5e:13:b6:
9c:43:07:18:ee:60:46:72:de:3e:74:60:ce:ae:b7:
05:50:31:c3:e1:e0:60:7c:ff:1c:45:5a:2a:84:f6:
11:d6:81:18:16:27:b7:85:8b:91:80:fc:9c:c9:49:
c0:15:25:56:77:06:32:47:75:52:89:9b:6d:7c:b9:
aa:ce:83:96:70:da:01:56:7d:20:65:39:93:3d:02:
62:7f:c9:1b:d1:97:52:f7:3a:35:07:df:82:dd:69:
b2:5a:96:1b:f5:ee:98:57:23:a5:fd:53:eb:54:42:
2c:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:F5:7C:C7:07:AA:EB:DE:E8:A3:70:B7:35:B1:32:0F:0D:DF:3D:E5
X509v3 Authority Key Identifier:
keyid:60:18:32:87:EB:08:EC:E0:C6:5F:A4:9A:3F:45:62:1C:61:2D:DB:D1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.xindi.eu/repo/XINDI/0/60183287EB08ECE0C65FA49A3F45621C612DDBD1.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YBgyh-sI7ODGX6SaP0ViHGEt29E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.xindi.eu/repo/XINDI/0/39312e3230372e3132302e302f32342d3234203d3e203537393834.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.207.120.0/24
Signature Algorithm: sha256WithRSAEncryption
c9:b3:d8:10:b5:95:70:c4:8e:ac:a9:b7:11:ed:2a:e3:4a:38:
bb:6f:46:9a:31:88:8d:05:15:0b:26:03:f4:eb:2b:19:0b:cc:
b5:82:5b:bb:83:0f:8f:c7:b4:23:98:a7:0a:da:61:5f:bf:28:
9b:d7:3a:1a:9a:6b:29:2a:aa:51:3e:0a:25:64:90:e7:fd:5b:
4c:c5:3c:92:73:c5:63:74:a6:5e:86:e9:28:ff:74:4c:af:87:
c7:0d:60:64:9c:db:17:38:12:91:60:3a:a2:51:36:f8:41:f1:
5e:a8:ce:c2:26:b7:95:f6:ae:fa:17:d0:43:8f:78:de:c4:23:
d1:25:8a:78:70:2e:d9:21:53:84:6f:e6:5d:80:f5:3a:e1:d6:
09:e2:2e:52:c7:a2:55:f5:91:37:21:a1:57:52:1c:48:0d:12:
ad:4c:60:48:01:5a:75:3a:44:ce:ce:47:fb:32:40:10:f0:cf:
34:50:bd:66:dd:5b:b9:de:01:ee:bd:05:31:13:dc:78:32:ba:
ca:8c:b0:ca:56:ce:41:74:30:0d:bd:2b:7c:9f:30:fd:58:7e:
93:ff:2d:4a:74:f9:3a:b0:fe:f0:cf:84:c8:09:2e:b0:cf:98:
de:d8:48:81:a7:13:96:da:88:84:e1:04:e4:ba:5d:e2:5e:f6:
30:cd:4d:58
-----BEGIN CERTIFICATE-----
MIIEyDCCA7CgAwIBAgIUanz+ZaXI7ayy4Fv4nRmSvYvwm7AwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjAxODMyODdlYjA4ZWNlMGM2NWZhNDlhM2Y0NTYyMWM2
MTJkZGJkMTAeFw0yNjA3MDExMzE5MDNaFw0yNzA2MzAxMzI0MDNaMDMxMTAvBgNV
BAMTKENDRjU3Q0M3MDdBQUVCREVFOEEzNzBCNzM1QjEzMjBGMERERjNERTUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3DluGquBYtVQJG0+VL+6oPju0
rG5abAyvL4G78P36CVFNbEnqHptgdmXEGa3oxkayKbWlhd31XTS/AnRChSFN3uqj
R1GaX0hCpdvRSKmkln7RFGpE2BQY7jOW9zFoKXNb0WR4j7w2oDaUef0ECN2TRz2l
QEvBhOLcsz/mJEhlRCGa9jiMXXRNlvXIYCXFtr5HbF4TtpxDBxjuYEZy3j50YM6u
twVQMcPh4GB8/xxFWiqE9hHWgRgWJ7eFi5GA/JzJScAVJVZ3BjJHdVKJm218uarO
g5Zw2gFWfSBlOZM9AmJ/yRvRl1L3OjUH34LdabJalhv17phXI6X9U+tUQiwFAgMB
AAGjggHSMIIBzjAdBgNVHQ4EFgQUzPV8xweq697oo3C3NbEyDw3fPeUwHwYDVR0j
BBgwFoAUYBgyh+sI7ODGX6SaP0ViHGEt29EwDgYDVR0PAQH/BAQDAgeAMGAGA1Ud
HwRZMFcwVaBToFGGT3JzeW5jOi8vcnBraS54aW5kaS5ldS9yZXBvL1hJTkRJLzAv
NjAxODMyODdFQjA4RUNFMEM2NUZBNDlBM0Y0NTYyMUM2MTJEREJEMS5jcmwwZAYI
KwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQv
cmVwb3NpdG9yeS9ERUZBVUxUL1lCZ3loLXNJN09ER1g2U2FQMFZpSEdFdDI5RS5j
ZXIweQYIKwYBBQUHAQsEbTBrMGkGCCsGAQUFBzALhl1yc3luYzovL3Jwa2kueGlu
ZGkuZXUvcmVwby9YSU5ESS8wLzM5MzEyZTMyMzAzNzJlMzEzMjMwMmUzMDJmMzIz
NDJkMzIzNDIwM2QzZTIwMzUzNzM5MzgzNC5yb2EwGAYDVR0gAQH/BA4wDDAKBggr
BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAFvPeDANBgkqhkiG
9w0BAQsFAAOCAQEAybPYELWVcMSOrKm3Ee0q40o4u29GmjGIjQUVCyYD9OsrGQvM
tYJbu4MPj8e0I5inCtphX78om9c6GpprKSqqUT4KJWSQ5/1bTMU8knPFY3SmXobp
KP90TK+Hxw1gZJzbFzgSkWA6olE2+EHxXqjOwia3lfau+hfQQ4943sQj0SWKeHAu
2SFThG/mXYD1OuHWCeIuUseiVfWRNyGhV1IcSA0SrUxgSAFadTpEzs5H+zJAEPDP
NFC9Zt1bud4B7r0FMRPceDK6yoywylbOQXQwDb0rfJ8w/Vh+k/8tSnT5OrD+8M+E
yAkusM+Y3thIgacTltqIhOEE5Lpd4l72MM1NWA==
-----END CERTIFICATE-----
Generated at Thu Jul 23 19:06:43 2026 by rpki-client