This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.xindi.eu/repo/XINDI/0/326130623a326630303a3a2f33322d3332203d3e203438313132.roa
File:                     326130623a326630303a3a2f33322d3332203d3e203438313132.roa (raw, json)
Hash identifier:          ZSW3cKJ86prLK67Qsjy47S7Nu4D//3GOcSh1rgLA/Fg=
Subject key identifier:   21:20:C5:7C:D3:F8:E7:FF:C5:59:87:33:B9:20:01:B9:FC:0B:9F:E6
Certificate issuer:       /CN=60183287eb08ece0c65fa49a3f45621c612ddbd1
Certificate serial:       387DBEBCA5B8AF34622E3DC3EB8FA05524B8BFF5
Authority key identifier: 60:18:32:87:EB:08:EC:E0:C6:5F:A4:9A:3F:45:62:1C:61:2D:DB:D1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YBgyh-sI7ODGX6SaP0ViHGEt29E.cer
Subject info access:      rsync://rpki.xindi.eu/repo/XINDI/0/326130623a326630303a3a2f33322d3332203d3e203438313132.roa
Signing time:             Thu 05 Feb 2026 19:47:05 +0000
ROA not before:           Thu 05 Feb 2026 19:42:05 +0000
ROA not after:            Thu 04 Feb 2027 19:47:05 +0000
asID:                     48112
IP address blocks:        2a0b:2f00::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.xindi.eu/repo/XINDI/0/60183287EB08ECE0C65FA49A3F45621C612DDBD1.crl
                          rsync://rpki.xindi.eu/repo/XINDI/0/60183287EB08ECE0C65FA49A3F45621C612DDBD1.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/YBgyh-sI7ODGX6SaP0ViHGEt29E.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 10:34:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            38:7d:be:bc:a5:b8:af:34:62:2e:3d:c3:eb:8f:a0:55:24:b8:bf:f5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=60183287eb08ece0c65fa49a3f45621c612ddbd1
        Validity
            Not Before: Feb  5 19:42:05 2026 GMT
            Not After : Feb  4 19:47:05 2027 GMT
        Subject: CN=2120C57CD3F8E7FFC5598733B92001B9FC0B9FE6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:f5:3a:75:56:73:9d:25:12:17:3b:7e:80:26:
                    6d:ac:21:e8:8b:2e:95:18:64:30:0d:94:c9:bd:7f:
                    99:c9:8d:a7:3d:f7:d3:c7:ff:fd:84:0d:81:d1:13:
                    8a:a4:a8:27:75:85:ad:dc:fe:c6:67:ff:d5:d7:69:
                    37:13:58:03:a3:94:61:4d:3d:b2:3d:e4:7b:a5:ea:
                    df:d9:6c:26:f3:70:42:00:df:03:01:d5:95:e9:82:
                    12:97:66:a0:80:3a:f2:f0:71:0c:b7:d2:3e:48:38:
                    eb:12:82:58:70:d3:a5:64:54:7e:e1:72:94:a8:0d:
                    11:58:9c:96:e7:74:1c:8d:d6:b8:93:38:e9:35:11:
                    06:1e:2e:04:b5:de:42:47:61:5e:29:40:45:5a:e5:
                    af:0c:17:1c:0f:65:a9:60:09:81:3c:f1:20:e7:26:
                    84:e0:40:67:d1:9e:8c:3f:8c:8d:b9:03:66:ac:54:
                    b8:e7:23:6c:8c:d2:4a:2a:d0:c8:16:fb:fe:0b:99:
                    80:6d:74:77:82:10:bd:86:f6:d2:97:77:2c:73:3d:
                    62:f0:12:6f:dc:32:b3:27:0b:b2:ad:16:48:76:8a:
                    70:f5:10:96:a9:ea:b5:44:43:55:21:9f:ce:6c:02:
                    b5:82:2d:de:48:f3:ff:d8:8d:98:15:ad:97:49:bf:
                    41:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:20:C5:7C:D3:F8:E7:FF:C5:59:87:33:B9:20:01:B9:FC:0B:9F:E6
            X509v3 Authority Key Identifier:
                keyid:60:18:32:87:EB:08:EC:E0:C6:5F:A4:9A:3F:45:62:1C:61:2D:DB:D1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.xindi.eu/repo/XINDI/0/60183287EB08ECE0C65FA49A3F45621C612DDBD1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YBgyh-sI7ODGX6SaP0ViHGEt29E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.xindi.eu/repo/XINDI/0/326130623a326630303a3a2f33322d3332203d3e203438313132.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0b:2f00::/32

    Signature Algorithm: sha256WithRSAEncryption
         9f:3d:aa:c7:69:7b:e8:cb:94:86:b7:b8:ce:5b:ce:db:3c:54:
         ed:ad:e8:0b:ad:3f:b8:34:97:4e:60:cb:dc:1e:7f:54:4c:d0:
         0f:18:5d:e6:8c:5a:c8:31:bb:c3:b5:17:ba:b6:00:d4:5e:15:
         da:ca:ae:61:72:81:b1:dd:07:bf:70:cf:8b:c7:55:26:90:a5:
         06:c3:c2:79:31:86:a5:00:1c:c1:9a:5a:8a:9d:b8:cd:31:64:
         08:67:69:70:91:b2:01:d8:ef:36:c5:48:36:01:3f:09:15:0d:
         55:bc:3a:73:99:c7:a4:77:c1:d1:6c:94:45:2f:00:fb:af:ec:
         7c:33:e6:c0:19:97:71:ea:9f:17:c1:90:7a:61:1b:02:58:75:
         de:14:71:c6:fd:17:ea:15:4f:bf:2d:c2:57:ee:e8:78:66:86:
         63:6a:7b:c4:7f:ae:55:eb:56:c6:51:b2:7c:11:46:be:3a:08:
         02:8c:3d:47:29:98:f4:34:bb:6a:8a:83:af:b7:32:09:16:75:
         d7:5d:8a:e2:85:23:da:f4:49:ca:6a:a3:bd:44:ee:bf:71:7b:
         67:2d:ac:fd:24:b2:72:5e:37:7c:a4:ae:48:23:10:bd:63:39:
         4f:76:ca:28:fa:6d:d2:87:a5:75:87:78:36:c3:3c:1e:53:11:
         f7:c1:f7:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 22:43:00 2026 by rpki-client