
$ rpki-client -vvf r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/AS199257.roa
File: AS199257.roa (raw, json)
Hash identifier: btE6vozyT/ncGxxqY04HgC1g73Dwf4bazprI3pmjj1o=
Subject key identifier: A7:F5:94:31:CC:F1:22:4C:FF:58:27:73:97:D4:F7:61:C3:82:46:B1
Certificate issuer: /CN=D34606949D385DB42714FE71274FAC9948EF279C
Certificate serial: 3F252020F004E562C2253CCC894012B0E80B6A4D
Authority key identifier: D3:46:06:94:9D:38:5D:B4:27:14:FE:71:27:4F:AC:99:48:EF:27:9C
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/D34606949D385DB42714FE71274FAC9948EF279C.cer
Subject info access: rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/AS199257.roa
Signing time: Fri 24 Apr 2026 09:53:36 +0000
ROA not before: Fri 24 Apr 2026 09:48:36 +0000
ROA not after: Fri 23 Apr 2027 09:53:36 +0000
asID: 199257
IP address blocks: 86.38.251.0/24 maxlen: 24
Validation: OK
Signature path: rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/D34606949D385DB42714FE71274FAC9948EF279C.crl
rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/D34606949D385DB42714FE71274FAC9948EF279C.mft
rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/D34606949D385DB42714FE71274FAC9948EF279C.cer
rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/9DF85997B1B9B358E1C43F36765AA0A4A02144AE.crl
rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/9DF85997B1B9B358E1C43F36765AA0A4A02144AE.mft
rsync://rpki.ripe.net/repository/DEFAULT/nfhZl7G5s1jhxD82dlqgpKAhRK4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3f:25:20:20:f0:04:e5:62:c2:25:3c:cc:89:40:12:b0:e8:0b:6a:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D34606949D385DB42714FE71274FAC9948EF279C
Validity
Not Before: Apr 24 09:48:36 2026 GMT
Not After : Apr 23 09:53:36 2027 GMT
Subject: CN=A7F59431CCF1224CFF58277397D4F761C38246B1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:d4:d8:30:e7:78:69:6a:ae:88:87:68:db:6f:
20:4b:4a:52:a3:2b:18:81:da:04:8e:a3:a3:b6:74:
a4:99:4e:14:f8:78:4f:82:02:66:f7:66:e9:93:ee:
71:d0:7f:aa:55:92:ce:ed:5e:a1:20:14:15:dd:06:
e5:e0:23:6f:2e:2c:b0:3f:90:62:8d:0f:64:73:05:
4e:cb:7d:15:ec:fd:0a:88:e5:3b:35:69:5b:14:aa:
62:eb:7c:75:70:ef:c4:e7:0b:e5:08:14:00:9d:2d:
5f:45:7e:9d:18:d3:61:8f:fd:31:54:a6:91:06:90:
e8:5e:87:9a:1a:52:aa:b5:12:ca:70:e8:2b:6c:75:
db:72:f5:3b:b4:49:3b:fb:dc:7e:26:a6:19:e8:95:
dc:ab:91:0e:c5:2e:2c:4c:23:93:fb:0d:27:e0:c5:
df:e4:38:9d:65:29:18:5d:c2:59:99:96:23:78:a3:
3d:93:11:53:1f:be:30:22:ee:95:02:c6:e5:d5:ce:
c1:e0:17:8d:f1:94:16:03:1c:3e:7a:34:a4:fa:bb:
8d:e2:07:85:da:8a:c7:90:82:8d:c9:02:eb:14:c2:
3a:f6:0a:b0:49:05:a8:51:4b:d3:84:eb:86:13:d2:
66:ee:81:a1:36:3a:7d:94:2e:23:7f:77:ed:e3:87:
c5:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:F5:94:31:CC:F1:22:4C:FF:58:27:73:97:D4:F7:61:C3:82:46:B1
X509v3 Authority Key Identifier:
keyid:D3:46:06:94:9D:38:5D:B4:27:14:FE:71:27:4F:AC:99:48:EF:27:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/D34606949D385DB42714FE71274FAC9948EF279C.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/D34606949D385DB42714FE71274FAC9948EF279C.cer
Subject Information Access:
Signed Object - URI:rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/AS199257.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
86.38.251.0/24
Signature Algorithm: sha256WithRSAEncryption
83:99:df:db:0f:fc:fb:1c:74:e3:06:ae:c4:f3:9d:c2:97:4c:
2b:89:d5:f6:7f:b6:ae:0e:76:54:70:2d:e1:d4:ee:07:b0:f4:
6f:64:ea:a7:b5:9e:6d:ad:a8:63:6a:00:a6:94:39:a1:98:3f:
68:48:dd:18:b6:f4:58:3e:e8:70:bb:40:4a:f5:e6:db:f1:e7:
4a:db:64:44:42:ab:28:49:72:55:e7:5e:6f:11:86:db:6d:94:
78:0b:c5:e7:c8:c7:3e:09:5d:67:c1:1d:b5:69:b5:1b:dd:4d:
e0:2a:81:62:91:d9:32:21:6a:b3:0c:5c:e7:fa:20:e6:6d:48:
d9:2f:a6:c0:97:db:c6:be:67:c1:4d:c5:52:09:d7:a6:c3:2f:
62:aa:63:09:87:2b:33:25:3c:2c:a6:8f:a9:01:35:11:7f:f5:
45:c8:1c:66:3b:16:36:f1:78:e4:a2:4e:ce:7f:ba:cf:53:67:
5e:06:50:f7:a5:b0:e5:5b:14:2d:a9:ab:26:0d:c1:68:66:2f:
a8:5f:54:76:25:d1:6a:06:84:59:02:4d:ae:74:17:ba:4b:b5:
0c:59:c6:ee:df:20:ce:fa:01:09:17:6e:32:c2:20:7f:38:cf:
bb:d2:51:52:b8:0c:3c:bd:0b:78:26:37:55:68:6f:25:5c:12:
32:29:bb:4a
-----BEGIN CERTIFICATE-----
MIIFJTCCBA2gAwIBAgIUPyUgIPAE5WLCJTzMiUASsOgLak0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRDM0NjA2OTQ5RDM4NURCNDI3MTRGRTcxMjc0RkFDOTk0
OEVGMjc5QzAeFw0yNjA0MjQwOTQ4MzZaFw0yNzA0MjMwOTUzMzZaMDMxMTAvBgNV
BAMTKEE3RjU5NDMxQ0NGMTIyNENGRjU4Mjc3Mzk3RDRGNzYxQzM4MjQ2QjEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCp1Ngw53hpaq6Ih2jbbyBLSlKj
KxiB2gSOo6O2dKSZThT4eE+CAmb3ZumT7nHQf6pVks7tXqEgFBXdBuXgI28uLLA/
kGKND2RzBU7LfRXs/QqI5Ts1aVsUqmLrfHVw78TnC+UIFACdLV9Ffp0Y02GP/TFU
ppEGkOheh5oaUqq1Espw6Ctsddty9Tu0STv73H4mphnoldyrkQ7FLixMI5P7DSfg
xd/kOJ1lKRhdwlmZliN4oz2TEVMfvjAi7pUCxuXVzsHgF43xlBYDHD56NKT6u43i
B4XaiseQgo3JAusUwjr2CrBJBahRS9OE64YT0mbugaE2On2ULiN/d+3jh8UpAgMB
AAGjggIvMIICKzAdBgNVHQ4EFgQUp/WUMczxIkz/WCdzl9T3YcOCRrEwHwYDVR0j
BBgwFoAU00YGlJ04XbQnFP5xJ0+smUjvJ5wwDgYDVR0PAQH/BAQDAgeAMIGIBgNV
HR8EgYAwfjB8oHqgeIZ2cnN5bmM6Ly9yLm1hZ2VsbGFuLmlweG8uY29tL3JlcG8v
NTI4YTIxOGYtYWQyOC00MGQyLWJkN2YtMzUwZWFkYTNkNzA1LTAvMC9EMzQ2MDY5
NDlEMzg1REI0MjcxNEZFNzEyNzRGQUM5OTQ4RUYyNzlDLmNybDCBngYIKwYBBQUH
AQEEgZEwgY4wgYsGCCsGAQUFBzAChn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5y
aXBlLm5ldC9yZXBvc2l0b3J5LzAwMmUwYmEzLWZlNjAtNDViMS05MTYwLTg2OGEy
ZjhhNDNiMS8zL0QzNDYwNjk0OUQzODVEQjQyNzE0RkU3MTI3NEZBQzk5NDhFRjI3
OUMuY2VyMHIGCCsGAQUFBwELBGYwZDBiBggrBgEFBQcwC4ZWcnN5bmM6Ly9yLm1h
Z2VsbGFuLmlweG8uY29tL3JlcG8vNTI4YTIxOGYtYWQyOC00MGQyLWJkN2YtMzUw
ZWFkYTNkNzA1LTAvMC9BUzE5OTI1Ny5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEF
BQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAFYm+zANBgkqhkiG9w0B
AQsFAAOCAQEAg5nf2w/8+xx04wauxPOdwpdMK4nV9n+2rg52VHAt4dTuB7D0b2Tq
p7Weba2oY2oAppQ5oZg/aEjdGLb0WD7ocLtASvXm2/HnSttkREKrKElyVedebxGG
222UeAvF58jHPgldZ8EdtWm1G91N4CqBYpHZMiFqswxc5/og5m1I2S+mwJfbxr5n
wU3FUgnXpsMvYqpjCYcrMyU8LKaPqQE1EX/1RcgcZjsWNvF45KJOzn+6z1NnXgZQ
96Ww5VsULamrJg3BaGYvqF9UdiXRagaEWQJNrnQXuku1DFnG7t8gzvoBCRduMsIg
fzjPu9JRUrgMPL0LeCY3VWhvJVwSMim7Sg==
-----END CERTIFICATE-----
Generated at Tue May 12 22:53:31 2026 by rpki-client