Route Origin Authorization
$ rpki-client -vvf rpki.xindi.eu/repo/XINDI/0/326130623a326630373a3a2f33322d3332203d3e203339303032.roa
File: 326130623a326630373a3a2f33322d3332203d3e203339303032.roa (raw, json)
Hash identifier: A+6VcU1yswUgI5ZmV46V3QPJP5KPlaydnqG0CeiImTI=
Subject key identifier: 63:95:14:E1:95:87:85:9F:08:3E:C3:01:DB:E7:6F:AE:9C:74:26:19
Certificate issuer: /CN=60183287eb08ece0c65fa49a3f45621c612ddbd1
Certificate serial: 4684AE8DC663CCA81E021A1B170EB75F98521984
Authority key identifier: 60:18:32:87:EB:08:EC:E0:C6:5F:A4:9A:3F:45:62:1C:61:2D:DB:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YBgyh-sI7ODGX6SaP0ViHGEt29E.cer
Subject info access: rsync://rpki.xindi.eu/repo/XINDI/0/326130623a326630373a3a2f33322d3332203d3e203339303032.roa
Signing time: Wed 12 Aug 2026 04:34:32 +0000
ROA not before: Wed 12 Aug 2026 04:29:32 +0000
ROA not after: Wed 11 Aug 2027 04:34:32 +0000
asID: 39002
IP address blocks: 2a0b:2f07::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.xindi.eu/repo/XINDI/0/60183287EB08ECE0C65FA49A3F45621C612DDBD1.crl
rsync://rpki.xindi.eu/repo/XINDI/0/60183287EB08ECE0C65FA49A3F45621C612DDBD1.mft
rsync://rpki.ripe.net/repository/DEFAULT/YBgyh-sI7ODGX6SaP0ViHGEt29E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 19 Aug 2026 05:20:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
46:84:ae:8d:c6:63:cc:a8:1e:02:1a:1b:17:0e:b7:5f:98:52:19:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=60183287eb08ece0c65fa49a3f45621c612ddbd1
Validity
Not Before: Aug 12 04:29:32 2026 GMT
Not After : Aug 11 04:34:32 2027 GMT
Subject: CN=639514E19587859F083EC301DBE76FAE9C742619
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:35:e2:8f:94:c6:82:77:de:0f:4e:76:76:e8:
f2:fb:aa:19:65:83:1c:b9:d9:99:8c:2b:88:43:6f:
15:2c:42:b5:3f:2a:6c:a1:19:0b:36:77:54:3e:ed:
f6:c0:2a:60:fa:c1:f4:9e:73:80:b3:f7:96:b2:bc:
bd:ec:5f:66:7a:6b:9a:2e:ca:dc:3b:b1:9c:72:ca:
e3:04:5d:b8:25:6c:0c:6c:95:bd:c8:80:d3:75:96:
a7:ac:02:36:5c:ed:7a:21:a6:3c:ec:3e:0e:64:a5:
f0:7f:be:a2:50:0c:0a:2b:a3:e9:a1:5f:fc:b7:24:
44:39:1c:13:35:ff:d9:25:81:62:61:08:11:01:1f:
fe:57:4f:13:f3:53:2b:85:f4:95:b9:d8:e4:ec:0a:
1b:28:43:a8:49:6f:6f:ba:69:0e:8b:2c:f4:5c:35:
1a:72:61:88:c0:7c:69:70:3c:a3:fa:40:bc:7c:fd:
ee:85:a2:be:2d:e3:73:02:98:45:2e:2b:eb:23:33:
0f:67:3b:b0:a3:34:db:ba:54:96:7b:8b:86:d2:f8:
13:de:44:82:e2:0e:16:b4:74:30:d9:7c:22:90:18:
24:92:65:b3:c0:10:5b:5f:60:94:8f:f8:dc:17:97:
b7:58:7b:a6:2a:d8:4d:8d:cd:e5:bf:de:aa:56:88:
67:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:95:14:E1:95:87:85:9F:08:3E:C3:01:DB:E7:6F:AE:9C:74:26:19
X509v3 Authority Key Identifier:
keyid:60:18:32:87:EB:08:EC:E0:C6:5F:A4:9A:3F:45:62:1C:61:2D:DB:D1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.xindi.eu/repo/XINDI/0/60183287EB08ECE0C65FA49A3F45621C612DDBD1.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YBgyh-sI7ODGX6SaP0ViHGEt29E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.xindi.eu/repo/XINDI/0/326130623a326630373a3a2f33322d3332203d3e203339303032.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0b:2f07::/32
Signature Algorithm: sha256WithRSAEncryption
79:61:7e:d5:94:dd:a6:4d:6a:eb:a3:09:c7:20:cb:8b:10:01:
13:00:47:e7:d2:a9:3b:58:80:76:4a:5c:b0:b7:92:a9:82:71:
87:50:a9:22:76:d6:0e:a2:4f:94:13:7d:7f:0c:13:a2:95:60:
b2:bf:2d:cc:d9:ba:c2:22:07:83:6e:9d:a0:2c:2c:35:50:13:
12:03:9a:89:17:c1:aa:e4:31:0e:03:90:e2:15:f1:55:65:5d:
c0:f9:45:d1:30:11:76:a3:e0:18:4b:61:91:be:cd:be:d9:c3:
86:f0:34:e2:9c:3b:d5:11:6c:60:26:18:2c:20:fd:7a:9f:23:
5f:6b:7a:76:56:a4:54:ad:ae:b6:54:16:da:dd:a3:f6:04:6b:
d2:fe:f7:1e:fb:58:94:df:a4:8c:d8:3c:0f:42:47:33:67:6c:
71:7d:6e:7d:be:f7:28:a9:33:8c:d5:fe:d5:80:aa:8c:52:42:
19:a0:d9:b9:3e:d3:9e:44:f5:0a:05:bb:83:b1:3b:79:11:a0:
8b:be:1e:07:f0:65:20:e6:ea:63:ea:e6:fc:d9:1f:2e:00:09:
40:23:35:54:35:e2:ea:02:e3:35:8c:95:af:cf:3a:03:f1:8c:
f6:b3:87:47:02:0e:01:aa:bf:66:62:a9:8a:96:11:36:e3:5f:
fb:a0:7c:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 18 21:40:41 2026 by rpki-client