Route Origin Authorization
$ rpki-client -vvf r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/AS834.roa
File: AS834.roa (raw, json)
Hash identifier: wu2P3CFil5yJ9pW6ch0ftzQQpeXnIqDfYE/1ORaWpYo=
Subject key identifier: 23:C0:13:67:69:7D:EC:4A:6D:2B:CD:6A:26:A1:73:70:20:EE:44:89
Certificate issuer: /CN=D34606949D385DB42714FE71274FAC9948EF279C
Certificate serial: 3D386E2D211DDFB2E412090BAD446EBAA2750F0F
Authority key identifier: D3:46:06:94:9D:38:5D:B4:27:14:FE:71:27:4F:AC:99:48:EF:27:9C
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/D34606949D385DB42714FE71274FAC9948EF279C.cer
Subject info access: rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/AS834.roa
Signing time: Mon 23 Mar 2026 13:10:13 +0000
ROA not before: Mon 23 Mar 2026 13:05:13 +0000
ROA not after: Mon 22 Mar 2027 13:10:13 +0000
asID: 834
IP address blocks: 84.46.236.0/22 maxlen: 24
86.38.180.0/23 maxlen: 24
86.38.182.0/23 maxlen: 24
86.38.184.0/24 maxlen: 24
86.38.187.0/24 maxlen: 24
86.38.246.0/24 maxlen: 24
89.116.8.0/22 maxlen: 24
89.116.64.0/22 maxlen: 24
89.116.72.0/23 maxlen: 24
89.116.127.0/24 maxlen: 24
89.116.148.0/23 maxlen: 23
89.116.164.0/23 maxlen: 24
89.116.172.0/24 maxlen: 24
89.116.184.0/23 maxlen: 24
89.116.210.0/23 maxlen: 23
89.117.0.0/22 maxlen: 24
89.117.12.0/23 maxlen: 24
89.117.65.0/24 maxlen: 24
89.117.84.0/24 maxlen: 24
89.117.94.0/23 maxlen: 24
89.117.96.0/22 maxlen: 24
89.117.112.0/22 maxlen: 22
89.117.120.0/22 maxlen: 24
89.117.142.0/23 maxlen: 24
89.117.158.0/23 maxlen: 24
89.117.172.0/22 maxlen: 24
89.117.216.0/23 maxlen: 23
Validation: OK
Signature path: rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/D34606949D385DB42714FE71274FAC9948EF279C.crl
rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/D34606949D385DB42714FE71274FAC9948EF279C.mft
rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/D34606949D385DB42714FE71274FAC9948EF279C.cer
rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/9DF85997B1B9B358E1C43F36765AA0A4A02144AE.crl
rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/9DF85997B1B9B358E1C43F36765AA0A4A02144AE.mft
rsync://rpki.ripe.net/repository/DEFAULT/nfhZl7G5s1jhxD82dlqgpKAhRK4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 21:49:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3d:38:6e:2d:21:1d:df:b2:e4:12:09:0b:ad:44:6e:ba:a2:75:0f:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D34606949D385DB42714FE71274FAC9948EF279C
Validity
Not Before: Mar 23 13:05:13 2026 GMT
Not After : Mar 22 13:10:13 2027 GMT
Subject: CN=23C01367697DEC4A6D2BCD6A26A1737020EE4489
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:48:54:e9:cf:0d:29:c3:28:f9:d5:96:be:f2:
c3:dc:da:0c:d8:00:ed:1d:4a:59:f4:75:5e:d1:02:
89:d9:54:96:e6:90:28:6d:a2:67:3d:73:60:66:1d:
22:56:cf:76:eb:9d:9b:db:c7:a7:96:19:af:d4:66:
1e:2f:e3:67:1f:5e:81:81:dd:53:25:4a:59:15:c2:
20:6a:6d:6c:89:73:f7:78:d4:e0:39:5e:66:37:39:
1c:3a:f0:53:7d:f4:33:11:67:b9:6d:5c:de:04:9b:
f7:81:15:51:4d:06:8e:17:41:c0:02:42:a4:8d:5f:
5c:02:d6:bf:06:ea:6c:46:11:02:2c:b5:83:e0:04:
2f:0e:80:d9:d0:e0:d5:7c:51:01:f5:f5:f6:1b:91:
40:29:12:9b:55:db:3c:1d:76:50:bc:74:53:25:4d:
be:21:7f:d8:77:c5:ec:e8:f1:61:04:b7:d5:29:13:
40:ec:86:a4:5e:ec:3e:93:05:50:78:ba:ba:24:68:
ee:23:8c:9a:13:10:c7:4c:5a:70:68:13:a8:b6:a3:
b4:65:25:fa:b5:ef:4f:45:ef:c2:a2:9b:d0:0a:3d:
bb:f5:ae:be:19:9f:17:17:32:0a:87:5c:ce:bc:a6:
7f:04:bd:2c:98:e1:92:c9:a9:c7:ea:72:63:a1:3c:
f6:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:C0:13:67:69:7D:EC:4A:6D:2B:CD:6A:26:A1:73:70:20:EE:44:89
X509v3 Authority Key Identifier:
keyid:D3:46:06:94:9D:38:5D:B4:27:14:FE:71:27:4F:AC:99:48:EF:27:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/D34606949D385DB42714FE71274FAC9948EF279C.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/D34606949D385DB42714FE71274FAC9948EF279C.cer
Subject Information Access:
Signed Object - URI:rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/AS834.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.46.236.0/22
86.38.180.0-86.38.184.255
86.38.187.0/24
86.38.246.0/24
89.116.8.0/22
89.116.64.0/22
89.116.72.0/23
89.116.127.0/24
89.116.148.0/23
89.116.164.0/23
89.116.172.0/24
89.116.184.0/23
89.116.210.0/23
89.117.0.0/22
89.117.12.0/23
89.117.65.0/24
89.117.84.0/24
89.117.94.0-89.117.99.255
89.117.112.0/22
89.117.120.0/22
89.117.142.0/23
89.117.158.0/23
89.117.172.0/22
89.117.216.0/23
Signature Algorithm: sha256WithRSAEncryption
1d:15:dd:17:e2:3a:4c:de:a6:32:58:01:d8:44:9a:5c:97:5c:
11:f4:cd:ba:71:92:aa:d6:6a:1f:57:82:48:12:b6:44:7e:13:
59:ce:bf:f2:d8:a0:8a:cc:62:c6:59:40:13:7a:c9:cc:c1:2a:
30:86:90:88:c1:01:25:83:f2:4a:11:27:1b:74:fc:74:d6:28:
52:c7:e0:9f:75:38:4b:71:26:0d:e9:ad:1f:7d:a2:c6:95:67:
22:b5:28:29:c2:94:b7:52:eb:d8:03:e4:c6:7f:f8:d3:62:9c:
08:4f:93:39:56:bd:43:0a:b3:87:c0:57:c8:0a:8e:f5:e1:bf:
76:27:55:ee:2a:d8:31:a8:40:00:79:34:7e:ad:6a:08:18:57:
61:e4:b3:e7:9e:40:45:17:85:7c:cb:a9:8c:1b:74:1b:e5:93:
71:80:ee:42:f7:f9:9b:bb:79:a0:b1:e0:86:8c:43:c0:fe:fb:
e4:7f:6f:a2:d7:02:27:56:68:5d:60:2d:41:07:bc:ac:b1:1b:
77:b4:b7:09:63:64:ff:77:65:15:62:f5:96:66:29:29:25:93:
aa:e6:d4:b1:00:eb:eb:f5:78:5e:0b:23:56:30:78:2d:b6:bc:
39:8e:0c:fe:f5:14:60:23:8e:36:2a:c2:dc:9a:9d:fe:30:7a:
bd:4a:95:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 06:32:39 2026 by rpki-client