Route Origin Authorization
$ rpki-client -vvf r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/AS834.roa
File: AS834.roa (raw, json)
Hash identifier: qYKfK5XlMvd2b3vvY+pRJStkmVFAFeWvApHq9wd2ITc=
Subject key identifier: CC:AF:A5:4B:51:8B:25:33:2A:45:F7:C7:01:F2:57:2D:70:B8:34:8B
Certificate issuer: /CN=D34606949D385DB42714FE71274FAC9948EF279C
Certificate serial: 46AEC434FAEAF9C1C5322F4510854E6D7BC4FAD6
Authority key identifier: D3:46:06:94:9D:38:5D:B4:27:14:FE:71:27:4F:AC:99:48:EF:27:9C
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/D34606949D385DB42714FE71274FAC9948EF279C.cer
Subject info access: rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/AS834.roa
Signing time: Tue 05 May 2026 02:08:39 +0000
ROA not before: Tue 05 May 2026 02:03:39 +0000
ROA not after: Tue 04 May 2027 02:08:39 +0000
asID: 834
IP address blocks: 84.46.236.0/22 maxlen: 24
86.38.180.0/23 maxlen: 24
86.38.182.0/23 maxlen: 24
86.38.184.0/24 maxlen: 24
86.38.187.0/24 maxlen: 24
86.38.246.0/24 maxlen: 24
86.38.255.0/24 maxlen: 24
89.116.8.0/22 maxlen: 24
89.116.45.0/24 maxlen: 24
89.116.64.0/22 maxlen: 24
89.116.72.0/23 maxlen: 24
89.116.127.0/24 maxlen: 24
89.116.148.0/23 maxlen: 23
89.116.164.0/23 maxlen: 24
89.116.172.0/24 maxlen: 24
89.116.184.0/23 maxlen: 24
89.116.210.0/23 maxlen: 23
89.117.0.0/22 maxlen: 24
89.117.12.0/23 maxlen: 24
89.117.65.0/24 maxlen: 24
89.117.81.0/24 maxlen: 24
89.117.84.0/24 maxlen: 24
89.117.94.0/23 maxlen: 24
89.117.96.0/22 maxlen: 24
89.117.112.0/22 maxlen: 22
89.117.120.0/22 maxlen: 24
89.117.132.0/23 maxlen: 24
89.117.142.0/23 maxlen: 24
89.117.158.0/23 maxlen: 24
89.117.172.0/22 maxlen: 24
89.117.216.0/23 maxlen: 23
Validation: OK
Signature path: rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/D34606949D385DB42714FE71274FAC9948EF279C.crl
rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/D34606949D385DB42714FE71274FAC9948EF279C.mft
rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/D34606949D385DB42714FE71274FAC9948EF279C.cer
rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/9DF85997B1B9B358E1C43F36765AA0A4A02144AE.crl
rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/9DF85997B1B9B358E1C43F36765AA0A4A02144AE.mft
rsync://rpki.ripe.net/repository/DEFAULT/nfhZl7G5s1jhxD82dlqgpKAhRK4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
46:ae:c4:34:fa:ea:f9:c1:c5:32:2f:45:10:85:4e:6d:7b:c4:fa:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D34606949D385DB42714FE71274FAC9948EF279C
Validity
Not Before: May 5 02:03:39 2026 GMT
Not After : May 4 02:08:39 2027 GMT
Subject: CN=CCAFA54B518B25332A45F7C701F2572D70B8348B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:bb:b0:7f:3a:28:03:03:96:a9:1c:42:3f:92:
46:3a:f6:b1:86:6b:f8:2f:f3:56:03:a7:fd:ad:0b:
94:66:25:3b:de:01:cb:73:40:69:2d:ff:96:5e:f8:
83:fb:f5:68:8d:bc:18:25:6f:77:5d:a2:28:7d:30:
d8:d3:10:1c:b1:f4:1a:c9:2d:a9:d1:ba:dc:b8:22:
4a:dd:00:ec:10:30:97:f1:97:08:b3:f7:0c:54:20:
44:40:81:44:dd:7d:a2:89:e4:5e:f1:e0:67:e9:f6:
20:82:3f:d5:22:a5:2c:fd:94:73:a5:e2:45:65:3c:
c8:66:b8:70:f5:ee:e4:1b:66:ad:e2:9e:d0:44:30:
48:28:84:68:a5:1b:9d:dc:43:91:7e:43:0e:7b:08:
5e:71:2e:1c:66:99:70:64:d5:88:19:ce:43:7d:d5:
9b:35:bd:06:45:da:84:7e:86:41:cb:97:56:2c:77:
22:59:16:e4:db:ab:75:af:a1:d8:f4:03:76:71:1b:
bf:f8:4e:75:34:d9:53:ce:55:23:2c:4c:69:5f:03:
1f:e0:a7:f1:70:e7:85:ee:d7:81:b4:25:8c:95:61:
66:1f:9f:95:8c:06:c5:58:44:a1:48:08:61:e4:b0:
01:68:61:08:96:b7:4e:cf:6d:34:00:ce:ad:60:80:
f6:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:AF:A5:4B:51:8B:25:33:2A:45:F7:C7:01:F2:57:2D:70:B8:34:8B
X509v3 Authority Key Identifier:
keyid:D3:46:06:94:9D:38:5D:B4:27:14:FE:71:27:4F:AC:99:48:EF:27:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/D34606949D385DB42714FE71274FAC9948EF279C.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/D34606949D385DB42714FE71274FAC9948EF279C.cer
Subject Information Access:
Signed Object - URI:rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/AS834.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.46.236.0/22
86.38.180.0-86.38.184.255
86.38.187.0/24
86.38.246.0/24
86.38.255.0/24
89.116.8.0/22
89.116.45.0/24
89.116.64.0/22
89.116.72.0/23
89.116.127.0/24
89.116.148.0/23
89.116.164.0/23
89.116.172.0/24
89.116.184.0/23
89.116.210.0/23
89.117.0.0/22
89.117.12.0/23
89.117.65.0/24
89.117.81.0/24
89.117.84.0/24
89.117.94.0-89.117.99.255
89.117.112.0/22
89.117.120.0/22
89.117.132.0/23
89.117.142.0/23
89.117.158.0/23
89.117.172.0/22
89.117.216.0/23
Signature Algorithm: sha256WithRSAEncryption
08:1f:88:e0:7e:c7:03:37:6a:34:4b:b1:a0:6d:4f:14:ed:57:
35:ca:64:0e:40:e4:8b:e8:c5:17:0c:e2:c6:e7:c2:f2:eb:8b:
0a:89:97:18:9d:5d:a8:b4:a4:f6:69:a4:b3:e7:01:35:12:fc:
ef:ce:c6:e1:84:f4:59:34:b1:9d:b6:f7:fc:0b:a2:90:27:8c:
83:e0:e5:41:08:42:41:84:99:0a:6a:67:cb:c4:10:c0:49:55:
c7:25:17:1d:f0:7d:f1:61:f5:8e:f8:ab:5f:75:1e:c0:40:54:
ec:41:a3:01:45:08:6c:4b:49:af:f9:f3:69:d6:78:b1:c0:73:
82:3b:7a:23:d9:81:c8:f6:cd:b5:dc:9e:61:f3:b2:81:99:27:
46:3a:27:d8:07:19:e7:c9:67:89:8e:f0:56:d0:24:c2:cf:f0:
3b:68:2d:b0:bf:06:b9:77:9f:fa:29:f3:a6:a1:84:91:ed:54:
b0:87:06:30:eb:fd:42:8c:f4:32:d9:60:09:23:d1:06:01:45:
35:f6:a0:b3:4c:4f:43:53:de:56:48:d2:f8:93:e3:fc:50:65:
c5:9b:da:26:34:88:46:e3:95:e0:d5:f4:1f:dd:49:71:ee:aa:
f2:ab:84:75:3f:75:46:ca:ea:a5:d8:d3:ab:c2:77:19:22:58:
e9:98:21:ae
-----BEGIN CERTIFICATE-----
MIIF2TCCBMGgAwIBAgIURq7ENPrq+cHFMi9FEIVObXvE+tYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRDM0NjA2OTQ5RDM4NURCNDI3MTRGRTcxMjc0RkFDOTk0
OEVGMjc5QzAeFw0yNjA1MDUwMjAzMzlaFw0yNzA1MDQwMjA4MzlaMDMxMTAvBgNV
BAMTKENDQUZBNTRCNTE4QjI1MzMyQTQ1RjdDNzAxRjI1NzJENzBCODM0OEIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJu7B/OigDA5apHEI/kkY69rGG
a/gv81YDp/2tC5RmJTveActzQGkt/5Ze+IP79WiNvBglb3ddoih9MNjTEByx9BrJ
LanRuty4IkrdAOwQMJfxlwiz9wxUIERAgUTdfaKJ5F7x4Gfp9iCCP9UipSz9lHOl
4kVlPMhmuHD17uQbZq3intBEMEgohGilG53cQ5F+Qw57CF5xLhxmmXBk1YgZzkN9
1Zs1vQZF2oR+hkHLl1YsdyJZFuTbq3Wvodj0A3ZxG7/4TnU02VPOVSMsTGlfAx/g
p/Fw54Xu14G0JYyVYWYfn5WMBsVYRKFICGHksAFoYQiWt07PbTQAzq1ggPYPAgMB
AAGjggLjMIIC3zAdBgNVHQ4EFgQUzK+lS1GLJTMqRffHAfJXLXC4NIswHwYDVR0j
BBgwFoAU00YGlJ04XbQnFP5xJ0+smUjvJ5wwDgYDVR0PAQH/BAQDAgeAMIGIBgNV
HR8EgYAwfjB8oHqgeIZ2cnN5bmM6Ly9yLm1hZ2VsbGFuLmlweG8uY29tL3JlcG8v
NTI4YTIxOGYtYWQyOC00MGQyLWJkN2YtMzUwZWFkYTNkNzA1LTAvMC9EMzQ2MDY5
NDlEMzg1REI0MjcxNEZFNzEyNzRGQUM5OTQ4RUYyNzlDLmNybDCBngYIKwYBBQUH
AQEEgZEwgY4wgYsGCCsGAQUFBzAChn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5y
aXBlLm5ldC9yZXBvc2l0b3J5LzAwMmUwYmEzLWZlNjAtNDViMS05MTYwLTg2OGEy
ZjhhNDNiMS8zL0QzNDYwNjk0OUQzODVEQjQyNzE0RkU3MTI3NEZBQzk5NDhFRjI3
OUMuY2VyMG8GCCsGAQUFBwELBGMwYTBfBggrBgEFBQcwC4ZTcnN5bmM6Ly9yLm1h
Z2VsbGFuLmlweG8uY29tL3JlcG8vNTI4YTIxOGYtYWQyOC00MGQyLWJkN2YtMzUw
ZWFkYTNkNzA1LTAvMC9BUzgzNC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcO
AjCB1QYIKwYBBQUHAQcBAf8EgcUwgcIwgb8EAgABMIG4AwQCVC7sMAwDBAJWJrQD
BABWJrgDBABWJrsDBABWJvYDBABWJv8DBAJZdAgDBABZdC0DBAJZdEADBAFZdEgD
BABZdH8DBAFZdJQDBAFZdKQDBABZdKwDBAFZdLgDBAFZdNIDBAJZdQADBAFZdQwD
BABZdUEDBABZdVEDBABZdVQwDAMEAVl1XgMEAll1YAMEAll1cAMEAll1eAMEAVl1
hAMEAVl1jgMEAVl1ngMEAll1rAMEAVl12DANBgkqhkiG9w0BAQsFAAOCAQEACB+I
4H7HAzdqNEuxoG1PFO1XNcpkDkDki+jFFwzixufC8uuLComXGJ1dqLSk9mmks+cB
NRL8787G4YT0WTSxnbb3/AuikCeMg+DlQQhCQYSZCmpny8QQwElVxyUXHfB98WH1
jvirX3UewEBU7EGjAUUIbEtJr/nzadZ4scBzgjt6I9mByPbNtdyeYfOygZknRjon
2AcZ58lniY7wVtAkws/wO2gtsL8GuXef+inzpqGEke1UsIcGMOv9Qoz0MtlgCSPR
BgFFNfags0xPQ1PeVkjS+JPj/FBlxZvaJjSIRuOV4NX0H91Jce6q8quEdT91Rsrq
pdjTq8J3GSJY6Zghrg==
-----END CERTIFICATE-----
Generated at Tue May 12 22:29:58 2026 by rpki-client