
$ rpki-client -vvf r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AS137517.roa
File: AS137517.roa (raw, json)
Hash identifier: N0dMr1lyAZM5wOIjqViJbcj4OAzb7nsHf5ZeSAl93+Q=
Subject key identifier: 46:DA:8A:A6:A9:C8:CC:7D:E3:85:78:76:C3:5D:92:C0:C5:F5:6E:6E
Certificate issuer: /CN=AEF766F103B2EF99DF8C71978A7FE519D730B155
Certificate serial: 058CCB757B1B4E6D2AC58E5CD6B4248ED263EB84
Authority key identifier: AE:F7:66:F1:03:B2:EF:99:DF:8C:71:97:8A:7F:E5:19:D7:30:B1:55
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AEF766F103B2EF99DF8C71978A7FE519D730B155.cer
Subject info access: rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AS137517.roa
Signing time: Thu 12 Mar 2026 15:11:00 +0000
ROA not before: Thu 12 Mar 2026 15:06:00 +0000
ROA not after: Thu 11 Mar 2027 15:11:00 +0000
asID: 137517
IP address blocks: 169.40.141.0/24 maxlen: 24
Validation: OK
Signature path: rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AEF766F103B2EF99DF8C71978A7FE519D730B155.crl
rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AEF766F103B2EF99DF8C71978A7FE519D730B155.mft
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AEF766F103B2EF99DF8C71978A7FE519D730B155.cer
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:21:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
05:8c:cb:75:7b:1b:4e:6d:2a:c5:8e:5c:d6:b4:24:8e:d2:63:eb:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=AEF766F103B2EF99DF8C71978A7FE519D730B155
Validity
Not Before: Mar 12 15:06:00 2026 GMT
Not After : Mar 11 15:11:00 2027 GMT
Subject: CN=46DA8AA6A9C8CC7DE3857876C35D92C0C5F56E6E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:bb:90:9f:7c:80:4a:41:3f:2f:eb:fe:92:84:
b3:37:bf:8b:db:71:cd:a4:8e:f8:4a:9d:7f:fc:f2:
f1:3a:0a:8c:19:e0:34:8a:13:ba:0d:7c:ca:ba:7d:
68:85:e3:40:e3:59:87:54:f4:2c:28:93:a6:1b:e5:
3b:14:47:c6:76:cd:1d:34:f6:b7:64:1b:59:72:76:
41:b8:df:53:58:21:dd:36:80:16:be:5f:3a:38:9f:
74:99:41:57:09:15:fc:7c:99:8e:44:a4:78:ba:c3:
69:0f:0d:04:b2:ff:27:f2:0a:9c:ef:18:30:82:f4:
f3:60:93:a5:4d:47:49:5b:7d:73:8b:67:c5:e4:bb:
72:1e:a9:29:5c:ed:d1:8e:3c:ca:2f:59:3e:e2:ae:
e5:01:ca:0f:2f:f9:32:a3:a0:c5:d2:4c:35:84:d9:
86:53:c4:26:06:ab:5b:c9:ba:c2:25:7d:c0:2d:a9:
e6:3e:31:5b:d9:93:0d:4c:51:ce:7e:1c:26:21:fb:
2c:53:00:58:a9:da:a9:80:c1:ba:12:26:8e:86:bb:
7a:6f:a7:3c:5f:35:6e:66:3a:7a:80:6c:19:0b:7d:
df:d6:68:99:df:5d:8a:32:36:14:46:81:aa:e6:10:
30:09:41:86:b4:34:94:00:0e:9f:a8:c1:65:28:24:
f6:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:DA:8A:A6:A9:C8:CC:7D:E3:85:78:76:C3:5D:92:C0:C5:F5:6E:6E
X509v3 Authority Key Identifier:
keyid:AE:F7:66:F1:03:B2:EF:99:DF:8C:71:97:8A:7F:E5:19:D7:30:B1:55
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AEF766F103B2EF99DF8C71978A7FE519D730B155.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AEF766F103B2EF99DF8C71978A7FE519D730B155.cer
Subject Information Access:
Signed Object - URI:rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AS137517.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
169.40.141.0/24
Signature Algorithm: sha256WithRSAEncryption
13:40:b8:bf:ab:f9:40:2c:e9:fa:06:36:03:ee:e6:2d:94:64:
2a:ed:02:6f:83:4b:0b:d5:70:30:8b:9b:6c:ca:1f:6a:5e:e0:
2c:18:1e:12:0c:d1:e2:e6:b8:03:3d:4c:ce:92:12:87:5f:64:
1b:0f:0f:70:94:ec:6b:b2:16:f3:72:59:67:3a:a8:11:ad:69:
eb:84:8e:b6:41:28:b8:69:36:27:b4:cb:71:25:50:d5:1b:17:
33:26:e7:4f:e7:62:2d:dd:82:7c:02:c6:c1:7f:04:59:7e:70:
36:0f:5b:d5:4e:03:ef:36:72:d9:18:5a:50:75:25:9a:24:21:
0d:aa:e1:0d:6f:81:93:c2:f1:3c:5d:76:54:4e:d6:0f:e3:3f:
a9:58:9c:38:12:62:e6:56:93:92:11:b9:71:97:a5:f6:1f:13:
db:d4:25:2c:48:fe:f5:a0:fe:95:9e:a1:76:10:9c:26:b7:2e:
09:da:30:31:1b:13:a5:f2:4f:fb:3f:77:36:6d:d7:5a:4d:f5:
ef:51:0b:99:9b:80:3f:7f:30:30:72:c5:c8:6f:c5:00:e2:47:
c1:00:e1:0f:ed:32:40:6b:55:2c:d1:b6:53:88:b6:b4:46:8a:
83:2b:6b:a6:fa:b7:4c:59:e6:dc:78:ab:2b:e5:47:64:f3:d5:
02:09:0d:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 08:13:16 2026 by rpki-client