Route Origin Authorization
$ rpki-client -vvvf r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/AS212238.roa
File: AS212238.roa (raw, json)
Hash identifier: NifAkK04rMhdlXf2GurCn29kILWtpxRnfMvf7vbvzeM=
Subject key identifier: DB:72:A7:AA:01:FC:15:67:31:7C:CF:EA:47:F5:0D:68:EE:6C:93:24
Certificate issuer: /CN=D34606949D385DB42714FE71274FAC9948EF279C
Certificate serial: 586171E25AE12D30BBCE72539CB82E674E123C47
Authority key identifier: D3:46:06:94:9D:38:5D:B4:27:14:FE:71:27:4F:AC:99:48:EF:27:9C
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/D34606949D385DB42714FE71274FAC9948EF279C.cer
Subject info access: rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/AS212238.roa
Signing time: Wed 11 Nov 2026 07:38:37 +0000
ROA not before: Wed 11 Nov 2026 07:33:37 +0000
ROA not after: Wed 10 Nov 2027 07:38:37 +0000
asID: 212238
IP address blocks: 82.140.182.0/24 maxlen: 24
82.140.183.0/24 maxlen: 24
84.46.171.0/24 maxlen: 24
84.46.237.0/24 maxlen: 24
84.46.238.0/24 maxlen: 24
86.38.5.0/24 maxlen: 24
86.38.156.0/24 maxlen: 24
86.38.177.0/24 maxlen: 24
86.38.180.0/24 maxlen: 24
86.38.181.0/24 maxlen: 24
86.38.219.0/24 maxlen: 24
86.38.247.0/24 maxlen: 24
89.116.65.0/24 maxlen: 24
89.116.66.0/24 maxlen: 24
89.116.67.0/24 maxlen: 24
89.116.75.0/24 maxlen: 24
89.116.103.0/24 maxlen: 24
89.116.131.0/24 maxlen: 24
89.116.168.0/24 maxlen: 24
89.116.169.0/24 maxlen: 24
89.116.182.0/24 maxlen: 24
89.116.183.0/24 maxlen: 24
89.116.255.0/24 maxlen: 24
89.117.13.0/24 maxlen: 24
89.117.41.0/24 maxlen: 24
89.117.95.0/24 maxlen: 24
89.117.97.0/24 maxlen: 24
89.117.98.0/24 maxlen: 24
89.117.99.0/24 maxlen: 24
89.117.109.0/24 maxlen: 24
89.117.111.0/24 maxlen: 24
89.117.121.0/24 maxlen: 24
89.117.122.0/24 maxlen: 24
Validation: OK
Signature path: rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/D34606949D385DB42714FE71274FAC9948EF279C.crl
rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/D34606949D385DB42714FE71274FAC9948EF279C.mft
rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/D34606949D385DB42714FE71274FAC9948EF279C.cer
rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/9DF85997B1B9B358E1C43F36765AA0A4A02144AE.crl
rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/9DF85997B1B9B358E1C43F36765AA0A4A02144AE.mft
rsync://rpki.ripe.net/repository/DEFAULT/nfhZl7G5s1jhxD82dlqgpKAhRK4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 11 Nov 2026 23:56:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
58:61:71:e2:5a:e1:2d:30:bb:ce:72:53:9c:b8:2e:67:4e:12:3c:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D34606949D385DB42714FE71274FAC9948EF279C
Validity
Not Before: Nov 11 07:33:37 2026 GMT
Not After : Nov 10 07:38:37 2027 GMT
Subject: CN=DB72A7AA01FC1567317CCFEA47F50D68EE6C9324
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:a1:51:26:57:aa:0a:0c:a4:05:81:17:f3:10:
ff:05:89:5e:12:97:e5:e3:e3:1a:08:08:0d:1b:44:
fa:30:99:ca:4b:cc:ae:2a:8d:70:e7:0f:5b:70:56:
dc:cc:1b:59:14:a2:af:e2:db:77:a3:6f:f2:bf:2a:
30:b7:f3:d0:06:8d:57:bb:7a:6d:ca:8b:57:b5:13:
cc:9a:65:64:f4:ac:8c:42:1c:2b:27:5a:e2:f1:69:
fe:59:94:43:6d:89:ab:80:f6:a7:64:63:40:b3:7a:
86:28:82:23:ac:91:b0:99:25:24:60:2a:b2:2a:e6:
d3:11:5b:36:20:37:7b:0f:e6:d5:51:01:7d:2b:92:
0c:c9:7c:52:b3:4d:5e:83:8f:ff:f5:52:93:05:63:
c0:a9:04:29:d7:e7:f9:ee:e9:38:5c:d6:76:38:13:
54:22:a8:2b:62:b1:88:84:ea:41:4a:95:e7:d9:b0:
83:e6:b0:0f:60:5b:47:35:a3:46:59:eb:cb:ac:ea:
f1:f9:c5:34:29:97:2a:db:d1:fd:89:c4:a2:bd:af:
5d:55:26:8a:3c:b3:4d:82:65:35:e3:6d:3b:7f:cf:
e1:56:04:7b:95:48:ed:9d:d4:9b:7a:ba:d2:0c:23:
b6:d3:eb:67:d6:1e:2e:3c:73:94:6d:68:57:ee:c6:
e7:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:72:A7:AA:01:FC:15:67:31:7C:CF:EA:47:F5:0D:68:EE:6C:93:24
X509v3 Authority Key Identifier:
keyid:D3:46:06:94:9D:38:5D:B4:27:14:FE:71:27:4F:AC:99:48:EF:27:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/D34606949D385DB42714FE71274FAC9948EF279C.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/D34606949D385DB42714FE71274FAC9948EF279C.cer
Subject Information Access:
Signed Object - URI:rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/AS212238.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.140.182.0/23
84.46.171.0/24
84.46.237.0-84.46.238.255
86.38.5.0/24
86.38.156.0/24
86.38.177.0/24
86.38.180.0/23
86.38.219.0/24
86.38.247.0/24
89.116.65.0-89.116.67.255
89.116.75.0/24
89.116.103.0/24
89.116.131.0/24
89.116.168.0/23
89.116.182.0/23
89.116.255.0/24
89.117.13.0/24
89.117.41.0/24
89.117.95.0/24
89.117.97.0-89.117.99.255
89.117.109.0/24
89.117.111.0/24
89.117.121.0-89.117.122.255
Signature Algorithm: sha256WithRSAEncryption
12:1b:47:32:7e:1a:7b:59:2b:bb:50:b5:f0:fc:5a:20:2d:01:
cd:a2:f6:f4:70:07:09:4a:32:fb:8c:76:f2:85:50:b1:70:f4:
c8:d4:1f:ef:d2:d1:63:76:de:5e:9b:a3:e2:8f:f7:05:59:e0:
eb:d3:b3:92:ea:15:7c:9e:5e:21:9a:d0:e0:ae:cd:7b:75:d8:
0d:f8:cf:e7:59:13:70:e9:18:5b:c5:d0:f8:3f:63:0e:c0:51:
80:67:2a:28:51:b2:bb:38:50:e2:22:60:fe:ea:ba:4d:d8:d2:
5c:15:c5:50:46:d7:72:c1:43:92:a0:e7:37:95:21:d5:c8:07:
d0:b9:42:f6:cb:8d:b5:fa:08:6f:61:ba:79:2f:35:00:e4:82:
6a:4e:78:b2:a6:d6:63:0a:e7:5c:37:9a:3f:63:e1:4c:59:0d:
d7:19:f9:e4:19:f6:0a:e7:20:80:f8:91:58:b5:08:bf:7e:81:
2b:75:90:1b:58:35:09:2c:35:45:bf:5f:1f:30:16:d4:ee:7b:
7c:46:47:ac:7f:06:dd:47:ee:ea:13:25:46:a7:0d:47:c9:4a:
97:09:4e:e5:04:91:4d:0e:b3:41:e4:e7:dc:ec:ed:72:0b:44:
a2:77:17:52:ff:99:01:79:e2:6d:ae:8b:5e:44:4b:91:44:7b:
c7:b0:fa:52
-----BEGIN CERTIFICATE-----
MIIFzjCCBLagAwIBAgIUWGFx4lrhLTC7znJTnLguZ04SPEcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRDM0NjA2OTQ5RDM4NURCNDI3MTRGRTcxMjc0RkFDOTk0
OEVGMjc5QzAeFw0yNjExMTEwNzMzMzdaFw0yNzExMTAwNzM4MzdaMDMxMTAvBgNV
BAMTKERCNzJBN0FBMDFGQzE1NjczMTdDQ0ZFQTQ3RjUwRDY4RUU2QzkzMjQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1oVEmV6oKDKQFgRfzEP8FiV4S
l+Xj4xoICA0bRPowmcpLzK4qjXDnD1twVtzMG1kUoq/i23ejb/K/KjC389AGjVe7
em3Ki1e1E8yaZWT0rIxCHCsnWuLxaf5ZlENtiauA9qdkY0CzeoYogiOskbCZJSRg
KrIq5tMRWzYgN3sP5tVRAX0rkgzJfFKzTV6Dj//1UpMFY8CpBCnX5/nu6Thc1nY4
E1QiqCtisYiE6kFKlefZsIPmsA9gW0c1o0ZZ68us6vH5xTQplyrb0f2JxKK9r11V
Joo8s02CZTXjbTt/z+FWBHuVSO2d1Jt6utIMI7bT62fWHi48c5RtaFfuxucDAgMB
AAGjggLYMIIC1DAdBgNVHQ4EFgQU23KnqgH8FWcxfM/qR/UNaO5skyQwHwYDVR0j
BBgwFoAU00YGlJ04XbQnFP5xJ0+smUjvJ5wwDgYDVR0PAQH/BAQDAgeAMIGIBgNV
HR8EgYAwfjB8oHqgeIZ2cnN5bmM6Ly9yLm1hZ2VsbGFuLmlweG8uY29tL3JlcG8v
NTI4YTIxOGYtYWQyOC00MGQyLWJkN2YtMzUwZWFkYTNkNzA1LTAvMC9EMzQ2MDY5
NDlEMzg1REI0MjcxNEZFNzEyNzRGQUM5OTQ4RUYyNzlDLmNybDCBngYIKwYBBQUH
AQEEgZEwgY4wgYsGCCsGAQUFBzAChn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5y
aXBlLm5ldC9yZXBvc2l0b3J5LzAwMmUwYmEzLWZlNjAtNDViMS05MTYwLTg2OGEy
ZjhhNDNiMS8zL0QzNDYwNjk0OUQzODVEQjQyNzE0RkU3MTI3NEZBQzk5NDhFRjI3
OUMuY2VyMHIGCCsGAQUFBwELBGYwZDBiBggrBgEFBQcwC4ZWcnN5bmM6Ly9yLm1h
Z2VsbGFuLmlweG8uY29tL3JlcG8vNTI4YTIxOGYtYWQyOC00MGQyLWJkN2YtMzUw
ZWFkYTNkNzA1LTAvMC9BUzIxMjIzOC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEF
BQcOAjCBxwYIKwYBBQUHAQcBAf8EgbcwgbQwgbEEAgABMIGqAwQBUoy2AwQAVC6r
MAwDBABULu0DBABULu4DBABWJgUDBABWJpwDBABWJrEDBAFWJrQDBABWJtsDBABW
JvcwDAMEAFl0QQMEAll0QAMEAFl0SwMEAFl0ZwMEAFl0gwMEAVl0qAMEAVl0tgME
AFl0/wMEAFl1DQMEAFl1KQMEAFl1XzAMAwQAWXVhAwQCWXVgAwQAWXVtAwQAWXVv
MAwDBABZdXkDBABZdXowDQYJKoZIhvcNAQELBQADggEBABIbRzJ+GntZK7tQtfD8
WiAtAc2i9vRwBwlKMvuMdvKFULFw9MjUH+/S0WN23l6bo+KP9wVZ4OvTs5LqFXye
XiGa0OCuzXt12A34z+dZE3DpGFvF0Pg/Yw7AUYBnKihRsrs4UOIiYP7quk3Y0lwV
xVBG13LBQ5Kg5zeVIdXIB9C5QvbLjbX6CG9hunkvNQDkgmpOeLKm1mMK51w3mj9j
4UxZDdcZ+eQZ9grnIID4kVi1CL9+gSt1kBtYNQksNUW/Xx8wFtTue3xGR6x/Bt1H
7uoTJUanDUfJSpcJTuUEkU0Os0Hk59zs7XILRKJ3F1L/mQF54m2ui15ES5FEe8ew
+lI=
-----END CERTIFICATE-----
Generated at Wed Nov 11 17:26:03 2026 by rpki-client