Route Origin Authorization
$ rpki-client -vvf rpki.xindi.eu/repo/XINDI/0/39312e3230372e3132312e302f32342d3234203d3e203438313132.roa
File: 39312e3230372e3132312e302f32342d3234203d3e203438313132.roa (raw, json)
Hash identifier: VtxiVDgs+2LAlW3u/7M4AyWvAro+5rMY7aYagKuRBC4=
Subject key identifier: 93:7D:36:EB:BE:8C:B3:3A:76:40:77:2A:41:AE:EA:CE:DB:0A:4E:5F
Certificate issuer: /CN=60183287eb08ece0c65fa49a3f45621c612ddbd1
Certificate serial: 7A74DB24AC829A9B42EAD3E4D29901072FF28506
Authority key identifier: 60:18:32:87:EB:08:EC:E0:C6:5F:A4:9A:3F:45:62:1C:61:2D:DB:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YBgyh-sI7ODGX6SaP0ViHGEt29E.cer
Subject info access: rsync://rpki.xindi.eu/repo/XINDI/0/39312e3230372e3132312e302f32342d3234203d3e203438313132.roa
Signing time: Wed 01 Jul 2026 13:24:03 +0000
ROA not before: Wed 01 Jul 2026 13:19:03 +0000
ROA not after: Wed 30 Jun 2027 13:24:03 +0000
asID: 48112
IP address blocks: 91.207.121.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.xindi.eu/repo/XINDI/0/60183287EB08ECE0C65FA49A3F45621C612DDBD1.crl
rsync://rpki.xindi.eu/repo/XINDI/0/60183287EB08ECE0C65FA49A3F45621C612DDBD1.mft
rsync://rpki.ripe.net/repository/DEFAULT/YBgyh-sI7ODGX6SaP0ViHGEt29E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7a:74:db:24:ac:82:9a:9b:42:ea:d3:e4:d2:99:01:07:2f:f2:85:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=60183287eb08ece0c65fa49a3f45621c612ddbd1
Validity
Not Before: Jul 1 13:19:03 2026 GMT
Not After : Jun 30 13:24:03 2027 GMT
Subject: CN=937D36EBBE8CB33A7640772A41AEEACEDB0A4E5F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:bf:2d:24:b1:27:3d:cc:79:f5:54:71:a3:88:
55:81:39:c1:51:9f:82:c3:34:73:75:9b:af:03:bb:
70:de:54:ab:a2:41:ab:93:b5:9d:5c:45:06:c3:3f:
aa:0e:c5:97:02:66:67:56:96:fe:f9:c6:82:7d:7b:
cc:6e:ae:da:39:e4:9f:a9:b6:24:63:13:ac:6d:43:
d9:5f:25:46:4e:44:a4:0a:1e:05:c3:f9:7a:18:db:
ef:d2:81:fa:9f:19:38:6d:7d:5a:5d:c4:e0:35:c5:
87:97:11:d1:23:13:68:61:7c:1e:ba:7e:2c:a1:d4:
0c:b9:a0:a5:f3:37:c5:04:31:f2:db:f8:54:86:cc:
59:c6:a3:39:e4:ce:f0:18:b7:23:2b:ef:08:45:89:
ea:ed:18:93:27:97:12:8c:85:50:03:a8:f1:80:35:
6b:73:f9:f7:7f:0f:84:68:74:1d:e4:44:37:87:55:
ed:b3:ce:ef:18:cc:3c:c1:d5:04:ad:f1:95:b5:e0:
2d:0d:7f:43:37:24:12:1b:1f:62:c1:04:80:d4:30:
d2:e9:b9:2e:f5:5b:b8:86:28:fd:e6:5b:d8:0a:07:
4d:48:8a:5b:67:36:1b:08:d3:ed:10:eb:3e:56:9c:
c5:ef:2b:f4:1c:e5:aa:55:75:a1:a9:bb:ec:20:54:
6f:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:7D:36:EB:BE:8C:B3:3A:76:40:77:2A:41:AE:EA:CE:DB:0A:4E:5F
X509v3 Authority Key Identifier:
keyid:60:18:32:87:EB:08:EC:E0:C6:5F:A4:9A:3F:45:62:1C:61:2D:DB:D1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.xindi.eu/repo/XINDI/0/60183287EB08ECE0C65FA49A3F45621C612DDBD1.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YBgyh-sI7ODGX6SaP0ViHGEt29E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.xindi.eu/repo/XINDI/0/39312e3230372e3132312e302f32342d3234203d3e203438313132.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.207.121.0/24
Signature Algorithm: sha256WithRSAEncryption
5c:bf:77:e2:99:60:c9:93:52:e8:99:33:47:8c:e2:66:d8:94:
5c:49:72:52:73:14:ea:4c:e3:96:6d:91:9a:d3:f6:8a:6a:cb:
5c:f3:dd:8c:e2:15:fc:2c:00:2a:5d:bf:05:49:ea:f7:94:23:
95:e5:2e:5d:7f:fa:a4:6c:7b:a8:82:34:86:92:8c:40:15:a0:
b4:f5:a4:8e:ed:68:70:ef:a8:31:30:2d:ca:ea:2e:98:58:c5:
17:b5:57:9d:4f:34:56:d3:37:5f:94:fc:0c:ef:aa:f5:f7:81:
ed:85:8b:cb:48:4d:ea:05:e4:66:54:9e:14:76:52:d1:17:17:
7a:08:61:64:04:b2:49:a2:da:52:b7:b2:8a:26:b8:38:c8:b5:
d5:06:a5:fa:f4:11:9b:08:53:08:d0:88:6e:08:95:06:3c:c7:
dc:d4:be:5a:46:72:73:b8:13:c9:16:6a:e0:73:23:32:ab:c9:
62:9a:aa:59:c2:89:47:c2:58:55:71:09:0a:52:93:20:f1:42:
80:74:f2:88:cd:36:c3:d2:db:c0:ed:fc:45:1b:22:72:e4:1e:
b9:55:2d:8b:48:1e:a3:5a:d2:79:18:5e:05:39:55:b2:85:c5:
17:f1:b7:cb:51:28:7c:87:84:60:75:26:30:f8:dd:7b:a2:af:
01:9c:2a:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 21:31:32 2026 by rpki-client