
$ rpki-client -vvvf r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AS137897.roa
File: AS137897.roa (raw, json)
Hash identifier: uDBm/hVhfJg3+h/uWXJt4sslx7mf7PUGIaJpCd1SvtQ=
Subject key identifier: C0:93:23:0A:C4:70:AA:D2:AE:A1:47:CD:AC:E2:A8:0D:4F:1A:64:FF
Certificate issuer: /CN=AEF766F103B2EF99DF8C71978A7FE519D730B155
Certificate serial: 3A6B6E530AEF8406C4E8E35A8EED5E72447C7984
Authority key identifier: AE:F7:66:F1:03:B2:EF:99:DF:8C:71:97:8A:7F:E5:19:D7:30:B1:55
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AEF766F103B2EF99DF8C71978A7FE519D730B155.cer
Subject info access: rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AS137897.roa
Signing time: Thu 12 Nov 2026 13:37:38 +0000
ROA not before: Thu 12 Nov 2026 13:32:38 +0000
ROA not after: Thu 11 Nov 2027 13:37:38 +0000
asID: 137897
IP address blocks: 169.40.133.0/24 maxlen: 24
169.40.208.0/22 maxlen: 24
Validation: OK
Signature path: rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AEF766F103B2EF99DF8C71978A7FE519D730B155.crl
rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AEF766F103B2EF99DF8C71978A7FE519D730B155.mft
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AEF766F103B2EF99DF8C71978A7FE519D730B155.cer
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Nov 2026 16:36:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3a:6b:6e:53:0a:ef:84:06:c4:e8:e3:5a:8e:ed:5e:72:44:7c:79:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=AEF766F103B2EF99DF8C71978A7FE519D730B155
Validity
Not Before: Nov 12 13:32:38 2026 GMT
Not After : Nov 11 13:37:38 2027 GMT
Subject: CN=C093230AC470AAD2AEA147CDACE2A80D4F1A64FF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:b2:26:fe:2c:6f:df:d5:d7:d9:84:94:8f:48:
80:b8:f2:ab:cf:db:8f:18:d2:b0:58:a1:56:2d:07:
3f:1c:14:8c:61:41:88:95:5d:f5:4a:09:cf:9c:26:
40:43:a5:d4:3c:1b:9e:ce:19:9d:02:ff:c5:91:c1:
08:05:6f:a8:cc:a0:7b:e8:6d:b6:b5:ae:02:5c:f4:
41:46:f9:3f:70:f7:80:26:94:67:ea:a4:93:af:ec:
01:69:e4:95:e5:6f:5b:b1:c6:c2:13:f5:99:b4:1d:
0e:ab:ce:ce:bd:89:b0:e1:8a:18:a4:91:36:0f:ba:
5f:6c:75:85:b5:7a:cc:50:a9:8a:15:06:54:fc:a5:
71:6b:ce:df:5e:03:a1:31:66:a0:d0:71:84:e4:bd:
e0:f7:51:08:e0:95:d6:cc:fe:6b:fe:fe:8b:ab:de:
68:48:08:59:a7:07:41:46:4e:6a:e2:f3:ee:59:0c:
cc:03:14:df:c4:8a:25:4b:87:19:91:31:3c:53:06:
d1:8d:a1:24:8d:8f:4e:7c:ea:46:3e:a7:30:af:0a:
f0:8d:77:91:a6:9a:9d:5d:f7:be:a3:6e:34:93:90:
05:a9:31:78:a0:29:5c:fd:07:5d:82:f0:c8:99:a2:
a2:d0:16:97:88:59:f7:5f:86:fd:5d:71:67:54:4b:
86:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:93:23:0A:C4:70:AA:D2:AE:A1:47:CD:AC:E2:A8:0D:4F:1A:64:FF
X509v3 Authority Key Identifier:
keyid:AE:F7:66:F1:03:B2:EF:99:DF:8C:71:97:8A:7F:E5:19:D7:30:B1:55
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AEF766F103B2EF99DF8C71978A7FE519D730B155.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AEF766F103B2EF99DF8C71978A7FE519D730B155.cer
Subject Information Access:
Signed Object - URI:rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AS137897.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
169.40.133.0/24
169.40.208.0/22
Signature Algorithm: sha256WithRSAEncryption
4b:74:50:f8:e8:aa:48:71:4d:5c:ec:1c:df:4a:7c:f7:18:fb:
ed:14:de:f8:b9:81:4f:d0:47:6e:03:2f:fe:37:6c:f8:bc:8a:
b5:76:c8:66:03:21:80:55:29:09:1b:e5:7c:fd:71:2f:e1:dd:
1c:b5:5d:b7:6c:c7:e1:93:75:94:92:33:fb:a2:f9:ca:a1:10:
8e:ef:71:3a:31:a8:90:51:0b:1a:9b:1e:94:1c:44:dd:dc:6d:
c0:ec:d8:df:89:38:73:91:63:6d:86:be:d0:48:6a:ec:c6:4b:
80:f2:0a:34:eb:05:e2:a7:b6:06:35:a5:83:fa:c2:60:38:17:
6a:74:34:96:f9:a5:10:88:7f:c5:6f:19:1e:f1:5e:17:e9:7c:
fb:e3:17:f7:0d:ce:da:13:ce:67:76:47:2c:52:41:fc:13:33:
77:55:ff:8c:93:a8:b8:1e:6f:15:da:1b:08:f0:c7:17:4c:71:
1f:cf:0f:04:cc:5c:4d:78:59:b5:1e:c8:7c:49:7a:82:cc:dd:
f1:68:4d:69:8e:21:1e:82:5e:91:e3:5b:57:ea:c2:b3:32:f5:
63:8f:67:2d:53:47:3e:4e:cb:ef:82:e3:3b:b5:6b:cb:e2:8e:
93:f0:3d:3e:46:e0:2d:99:37:dd:48:65:0c:57:1e:57:09:4d:
c7:5a:70:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 14 23:43:13 2026 by rpki-client