
$ rpki-client -vvf r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/37372e37352e3139372e302f32342d3234203d3e2033323537.roa
File: 37372e37352e3139372e302f32342d3234203d3e2033323537.roa (raw, json)
Hash identifier: mcXO+HfFOGXnTAUqP6MDTqByCSRjRbtr4LaBtK68V5Q=
Subject key identifier: CD:DF:19:66:AC:C8:B2:21:CE:94:56:DB:AA:F6:6F:AE:D9:4F:43:C0
Certificate issuer: /CN=2A2FB4DB0AA4D006958316872E467B554E0FD0BE
Certificate serial: 03C9ACE307E1CAFD82D1DDD2E78C430C98BDAEFB
Authority key identifier: 2A:2F:B4:DB:0A:A4:D0:06:95:83:16:87:2E:46:7B:55:4E:0F:D0:BE
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.cer
Subject info access: rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/37372e37352e3139372e302f32342d3234203d3e2033323537.roa
Signing time: Tue 28 Apr 2026 09:48:04 +0000
ROA not before: Tue 28 Apr 2026 09:43:04 +0000
ROA not after: Tue 27 Apr 2027 09:48:04 +0000
asID: 3257
IP address blocks: 77.75.197.0/24 maxlen: 24
Validation: OK
Signature path: rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.crl
rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.mft
rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.cer
rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.crl
rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft
rsync://rpki.ripe.net/repository/DEFAULT/RQLmPOAcrSOaw5e8K7Xmw0fc7uo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 04:39:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
03:c9:ac:e3:07:e1:ca:fd:82:d1:dd:d2:e7:8c:43:0c:98:bd:ae:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2A2FB4DB0AA4D006958316872E467B554E0FD0BE
Validity
Not Before: Apr 28 09:43:04 2026 GMT
Not After : Apr 27 09:48:04 2027 GMT
Subject: CN=CDDF1966ACC8B221CE9456DBAAF66FAED94F43C0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:bb:72:60:97:f2:32:51:22:7c:dd:04:cc:3e:
df:a1:ea:ae:91:c7:51:3b:00:e0:2b:1b:da:a3:d4:
9c:ab:7c:ee:8c:9b:9d:31:fd:5f:6c:c2:2e:3c:f7:
df:86:23:9b:31:dc:14:75:51:20:92:53:0f:a9:d1:
2b:83:83:20:bb:e5:bf:6d:b7:b2:19:ef:de:a9:f4:
e4:8b:88:69:3a:a7:13:50:17:77:0b:0c:ab:e3:07:
e7:4f:96:38:01:50:ef:f0:94:da:93:43:a5:b4:38:
44:b4:55:3f:4b:3f:81:54:7b:67:c8:86:c8:10:6e:
5a:79:37:ea:b3:66:25:7c:cf:b8:c4:87:34:e4:68:
25:5a:1e:91:07:c4:63:d4:e2:8c:24:ba:f9:5d:0a:
e2:ef:52:e0:93:d9:9a:74:b1:d7:47:fd:2c:31:d5:
f3:4a:0e:93:e5:39:2c:08:7f:30:45:2f:06:3f:28:
67:3e:a5:21:56:8a:71:c0:90:00:91:92:55:48:c6:
b8:aa:aa:da:7a:7a:66:d7:4a:68:ed:d8:1a:f4:80:
00:b4:a2:70:b4:86:c1:a0:32:67:2b:59:a9:0b:c0:
83:69:35:d6:26:a4:1c:32:27:a2:65:b0:94:21:76:
5a:ed:c9:4c:da:cb:22:3e:ba:b8:80:eb:26:92:e2:
81:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:DF:19:66:AC:C8:B2:21:CE:94:56:DB:AA:F6:6F:AE:D9:4F:43:C0
X509v3 Authority Key Identifier:
keyid:2A:2F:B4:DB:0A:A4:D0:06:95:83:16:87:2E:46:7B:55:4E:0F:D0:BE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.cer
Subject Information Access:
Signed Object - URI:rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/37372e37352e3139372e302f32342d3234203d3e2033323537.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.75.197.0/24
Signature Algorithm: sha256WithRSAEncryption
6a:90:dd:75:d4:8c:0f:1b:a4:92:3b:56:4d:e8:09:c0:6b:b9:
44:c1:f1:8b:0b:6d:be:42:42:0c:88:80:a2:95:54:a6:9e:93:
25:25:a7:0b:1c:bd:fe:c8:23:18:87:99:ec:34:ca:34:6e:2f:
cb:7e:ef:d5:31:5b:cc:a7:88:db:db:9a:fa:30:35:ea:70:6c:
34:b0:13:a4:ec:30:b1:b9:90:ee:61:a1:f3:3f:8c:da:ce:6e:
84:69:60:9e:bb:31:84:e3:b5:eb:9d:6d:b1:85:a0:82:cc:58:
47:69:88:5f:17:77:5e:4a:5d:65:cb:f1:3f:2e:76:6e:a7:5f:
39:d4:97:50:8b:7e:c7:5e:cf:af:c2:59:09:30:20:5a:c6:94:
a3:1d:a5:f6:18:27:6b:2b:cf:ee:ff:aa:7c:2e:15:db:0c:52:
ab:19:7a:bb:1d:e4:3f:b3:4b:a0:40:d3:b4:85:d7:0a:c0:b9:
2a:be:3b:3c:a3:5d:fc:07:f8:8b:2f:7e:3b:e6:6d:fe:48:ef:
59:43:8e:2a:bb:7e:fc:a3:f6:b1:4d:bf:fe:40:f3:e6:6e:d8:
14:34:55:a8:20:b5:7a:df:b2:a7:5d:41:74:4e:69:57:a5:14:
da:51:96:e6:40:a2:b8:b5:3d:87:bf:13:76:f1:ef:19:3e:55:
4a:ae:74:81
-----BEGIN CERTIFICATE-----
MIIFVDCCBDygAwIBAgIUA8ms4wfhyv2C0d3S54xDDJi9rvswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMkEyRkI0REIwQUE0RDAwNjk1ODMxNjg3MkU0NjdCNTU0
RTBGRDBCRTAeFw0yNjA0MjgwOTQzMDRaFw0yNzA0MjcwOTQ4MDRaMDMxMTAvBgNV
BAMTKENEREYxOTY2QUNDOEIyMjFDRTk0NTZEQkFBRjY2RkFFRDk0RjQzQzAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCou3Jgl/IyUSJ83QTMPt+h6q6R
x1E7AOArG9qj1JyrfO6Mm50x/V9swi4899+GI5sx3BR1USCSUw+p0SuDgyC75b9t
t7IZ796p9OSLiGk6pxNQF3cLDKvjB+dPljgBUO/wlNqTQ6W0OES0VT9LP4FUe2fI
hsgQblp5N+qzZiV8z7jEhzTkaCVaHpEHxGPU4owkuvldCuLvUuCT2Zp0sddH/Swx
1fNKDpPlOSwIfzBFLwY/KGc+pSFWinHAkACRklVIxriqqtp6embXSmjt2Br0gAC0
onC0hsGgMmcrWakLwINpNdYmpBwyJ6JlsJQhdlrtyUzayyI+uriA6yaS4oFjAgMB
AAGjggJeMIICWjAdBgNVHQ4EFgQUzd8ZZqzIsiHOlFbbqvZvrtlPQ8AwHwYDVR0j
BBgwFoAUKi+02wqk0AaVgxaHLkZ7VU4P0L4wDgYDVR0PAQH/BAQDAgeAMIGIBgNV
HR8EgYAwfjB8oHqgeIZ2cnN5bmM6Ly9yLm1hZ2VsbGFuLmlweG8uY29tL3JlcG8v
YTZmMjE0N2EtZGU4YS00NDQwLWJjYTItNmQ4YjdjODc2ZmRhLTAvMC8yQTJGQjRE
QjBBQTREMDA2OTU4MzE2ODcyRTQ2N0I1NTRFMEZEMEJFLmNybDCBngYIKwYBBQUH
AQEEgZEwgY4wgYsGCCsGAQUFBzAChn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5y
aXBlLm5ldC9yZXBvc2l0b3J5LzlkZjMzYTU3LTdlNGYtNDg0NC04NGUyLWI3MTUz
YjU1MTFiNC8wLzJBMkZCNERCMEFBNEQwMDY5NTgzMTY4NzJFNDY3QjU1NEUwRkQw
QkUuY2VyMIGgBggrBgEFBQcBCwSBkzCBkDCBjQYIKwYBBQUHMAuGgYByc3luYzov
L3IubWFnZWxsYW4uaXB4by5jb20vcmVwby9hNmYyMTQ3YS1kZThhLTQ0NDAtYmNh
Mi02ZDhiN2M4NzZmZGEtMC8wLzM3MzcyZTM3MzUyZTMxMzkzNzJlMzAyZjMyMzQy
ZDMyMzQyMDNkM2UyMDMzMzIzNTM3LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUF
Bw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQATUvFMA0GCSqGSIb3DQEB
CwUAA4IBAQBqkN111IwPG6SSO1ZN6AnAa7lEwfGLC22+QkIMiICilVSmnpMlJacL
HL3+yCMYh5nsNMo0bi/Lfu/VMVvMp4jb25r6MDXqcGw0sBOk7DCxuZDuYaHzP4za
zm6EaWCeuzGE47XrnW2xhaCCzFhHaYhfF3deSl1ly/E/LnZup1851JdQi37HXs+v
wlkJMCBaxpSjHaX2GCdrK8/u/6p8LhXbDFKrGXq7HeQ/s0ugQNO0hdcKwLkqvjs8
o138B/iLL3475m3+SO9ZQ44qu378o/axTb/+QPPmbtgUNFWoILV637KnXUF0TmlX
pRTaUZbmQKK4tT2HvxN28e8ZPlVKrnSB
-----END CERTIFICATE-----
Generated at Tue May 12 21:53:41 2026 by rpki-client