
$ rpki-client -vvvf r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/AS207267.roa
File: AS207267.roa (raw, json)
Hash identifier: GOhCbRkdjtQX97JOqgGKmyXJYzpm4Q97QLeQ+VgHGoM=
Subject key identifier: 0A:9D:08:D7:D2:B9:D3:B9:77:08:6C:20:73:E7:68:B3:A2:C9:18:9D
Certificate issuer: /CN=B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5
Certificate serial: 3E8C359FBD84A2242FC101EA3559B55E9F3A6A86
Authority key identifier: B3:54:D3:28:CB:BF:D1:EF:3C:D2:92:68:A2:3B:0F:CC:60:E3:A2:C5
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.cer
Subject info access: rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/AS207267.roa
Signing time: Sun 27 Sep 2026 15:53:18 +0000
ROA not before: Sun 27 Sep 2026 15:48:18 +0000
ROA not after: Sun 26 Sep 2027 15:53:18 +0000
asID: 207267
IP address blocks: 164.37.236.0/24 maxlen: 24
Validation: OK
Signature path: rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.crl
rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.mft
rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.cer
rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/D0A516B50426202A424F0EBFCB7D2BD4F744F964.crl
rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/D0A516B50426202A424F0EBFCB7D2BD4F744F964.mft
rsync://rpki.ripe.net/repository/DEFAULT/0KUWtQQmICpCTw6_y30r1PdE-WQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 02 Oct 2026 03:44:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3e:8c:35:9f:bd:84:a2:24:2f:c1:01:ea:35:59:b5:5e:9f:3a:6a:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5
Validity
Not Before: Sep 27 15:48:18 2026 GMT
Not After : Sep 26 15:53:18 2027 GMT
Subject: CN=0A9D08D7D2B9D3B977086C2073E768B3A2C9189D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:9d:c4:42:d2:42:18:dd:0d:06:3a:e5:22:26:
7a:1c:b2:e0:b8:99:d5:7e:a2:d3:72:b0:c7:4a:b4:
9f:ee:53:27:dd:d7:67:83:2f:27:a5:fe:a2:96:bc:
0c:e2:3b:67:1d:67:d1:ff:c4:c6:d0:1c:38:27:00:
9e:3d:94:e3:40:da:4b:1d:d5:14:07:a6:32:cd:e8:
35:70:42:dc:8b:3f:94:9a:f4:61:5b:8a:24:ca:bd:
73:1b:96:ba:be:7b:39:38:77:7d:27:fe:b6:f0:5d:
aa:9d:e6:8f:bd:71:0f:a4:2e:e2:30:9d:31:2d:74:
cf:3d:dd:74:47:9e:2b:85:ea:07:a6:af:df:ac:bd:
89:28:10:60:8d:bd:4b:10:3a:e4:74:7f:fd:1b:53:
3b:b5:ef:8c:bd:99:1a:a0:7e:ec:57:38:7b:38:ab:
94:7d:5a:d0:9e:92:06:0b:45:e7:24:df:c3:91:fa:
da:06:94:f4:f4:bb:9b:d5:8b:42:9f:31:8e:8d:6c:
33:cd:b8:d0:ad:85:35:5c:f2:87:a4:0a:2d:21:6c:
ce:8e:32:af:6e:13:aa:0c:cc:61:e0:19:c1:75:0c:
02:32:96:7d:3f:f1:39:24:44:e4:89:1f:c0:4f:47:
39:3e:9b:ba:85:bf:88:f1:88:9d:9a:74:29:26:6b:
bd:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:9D:08:D7:D2:B9:D3:B9:77:08:6C:20:73:E7:68:B3:A2:C9:18:9D
X509v3 Authority Key Identifier:
keyid:B3:54:D3:28:CB:BF:D1:EF:3C:D2:92:68:A2:3B:0F:CC:60:E3:A2:C5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.cer
Subject Information Access:
Signed Object - URI:rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/AS207267.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
164.37.236.0/24
Signature Algorithm: sha256WithRSAEncryption
44:c3:ba:ab:c7:c3:c2:3e:c3:64:34:ee:0e:ea:c6:08:5a:3b:
13:99:a4:2f:d2:6a:2d:92:9e:63:02:24:12:2c:47:26:a9:ed:
80:a6:fc:9f:9b:6f:83:7f:7b:2a:96:70:ec:32:4f:bd:21:4b:
fe:49:19:27:b0:d8:37:d9:33:97:f3:ae:be:db:62:dd:cc:3b:
93:5d:80:37:42:3b:56:3e:72:38:8f:ca:17:2e:29:19:59:60:
34:57:c7:5f:f3:1b:77:4b:61:94:5d:95:b1:e2:98:1a:58:ab:
1d:25:a0:8f:76:14:57:59:81:69:da:11:1c:a2:34:93:d4:d5:
fc:4d:a8:57:8f:db:05:4a:a8:a5:c8:f3:bd:b7:f7:3c:59:9e:
f0:e8:e2:9c:6f:41:e7:2e:0e:85:a0:4a:9f:70:d9:a8:4a:e2:
74:0c:da:4b:1d:f5:be:77:1c:d3:c9:e1:28:9e:00:b5:86:00:
52:89:55:93:8f:76:8b:30:c9:09:32:cc:47:65:ae:23:cf:a9:
67:52:c6:ee:00:11:db:b2:94:3b:d4:e6:54:b1:eb:ee:7a:0a:
de:0b:a9:34:e3:9f:f3:82:da:a0:b4:98:da:41:8d:16:f9:ff:
7e:7d:2e:d0:be:73:01:67:35:01:ee:06:25:3d:bf:7d:2c:8d:
75:ea:6b:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 1 13:07:52 2026 by rpki-client