
$ rpki-client -vvf r.magellan.ipxo.com/repo/ddd1818b-9fbf-440c-aaec-44a4d1590f87-0/0/38312e32322e3133352e302f32342d3234203d3e20333938343635.roa
File: 38312e32322e3133352e302f32342d3234203d3e20333938343635.roa (raw, json)
Hash identifier: Si9CUGeYU1YEsur2+bt9h4OKV8mVgoMgkgd3dqq9m78=
Subject key identifier: EF:B7:C8:AA:AE:A8:9C:4F:C1:7D:3C:4D:BB:01:E7:78:64:19:5C:16
Certificate issuer: /CN=C972E8671DEDC43FE908B548531C969A051CD34C
Certificate serial: 1EB0C0CDB32EB9E90EF3260CF10CDE5397DF6DDF
Authority key identifier: C9:72:E8:67:1D:ED:C4:3F:E9:08:B5:48:53:1C:96:9A:05:1C:D3:4C
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/2/C972E8671DEDC43FE908B548531C969A051CD34C.cer
Subject info access: rsync://r.magellan.ipxo.com/repo/ddd1818b-9fbf-440c-aaec-44a4d1590f87-0/0/38312e32322e3133352e302f32342d3234203d3e20333938343635.roa
Signing time: Sat 14 Mar 2026 11:23:52 +0000
ROA not before: Sat 14 Mar 2026 11:18:52 +0000
ROA not after: Sat 13 Mar 2027 11:23:52 +0000
asID: 398465
IP address blocks: 81.22.135.0/24 maxlen: 24
Validation: OK
Signature path: rsync://r.magellan.ipxo.com/repo/ddd1818b-9fbf-440c-aaec-44a4d1590f87-0/0/C972E8671DEDC43FE908B548531C969A051CD34C.crl
rsync://r.magellan.ipxo.com/repo/ddd1818b-9fbf-440c-aaec-44a4d1590f87-0/0/C972E8671DEDC43FE908B548531C969A051CD34C.mft
rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/2/C972E8671DEDC43FE908B548531C969A051CD34C.cer
rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/2/CF0631D33A3C9DC5C45424D55C3E7663838657A3.crl
rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/2/CF0631D33A3C9DC5C45424D55C3E7663838657A3.mft
rsync://rpki.ripe.net/repository/DEFAULT/zwYx0zo8ncXEVCTVXD52Y4OGV6M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 12:51:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1e:b0:c0:cd:b3:2e:b9:e9:0e:f3:26:0c:f1:0c:de:53:97:df:6d:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C972E8671DEDC43FE908B548531C969A051CD34C
Validity
Not Before: Mar 14 11:18:52 2026 GMT
Not After : Mar 13 11:23:52 2027 GMT
Subject: CN=EFB7C8AAAEA89C4FC17D3C4DBB01E77864195C16
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:9a:0e:3d:e5:32:75:95:e5:f7:45:50:95:98:
93:fc:40:72:58:1c:53:2a:f1:15:33:a7:19:5f:29:
86:b7:52:b6:ed:16:e7:73:7a:af:16:0b:62:e0:23:
19:67:42:a5:e7:97:f0:9a:90:ae:6b:45:46:2e:cc:
25:c0:c7:4e:9e:d5:77:7e:78:ee:3f:11:c6:23:23:
ca:52:d3:2f:5b:8e:b8:67:a7:6e:f5:dd:b8:ef:6c:
ee:1e:b3:fd:e9:d4:f5:9c:03:7d:cf:da:b3:1f:ba:
3c:f1:63:cf:80:8e:30:fb:5d:55:df:c6:c4:8f:dc:
b5:51:53:b8:6f:ea:c3:48:30:5b:b6:a0:6d:5b:f4:
cf:4d:99:4f:7d:ee:66:7f:ac:b2:71:f1:f3:76:d2:
6a:8e:70:67:a1:f2:6e:d0:d7:2e:41:78:f5:1b:22:
09:f4:92:4f:b2:79:51:9c:76:15:f9:78:94:46:53:
b4:41:e0:25:3c:9b:52:a4:13:25:1c:72:87:b4:3d:
c4:1a:a0:f3:a6:6a:75:68:0b:fa:b4:56:42:47:a6:
59:58:e4:0c:a3:00:1d:83:65:f2:27:60:7d:9f:20:
9d:3c:60:79:05:5d:ff:73:24:af:b0:a8:31:b5:2e:
c6:70:bb:75:2a:86:fa:45:c8:02:cb:7b:7b:02:72:
f4:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:B7:C8:AA:AE:A8:9C:4F:C1:7D:3C:4D:BB:01:E7:78:64:19:5C:16
X509v3 Authority Key Identifier:
keyid:C9:72:E8:67:1D:ED:C4:3F:E9:08:B5:48:53:1C:96:9A:05:1C:D3:4C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://r.magellan.ipxo.com/repo/ddd1818b-9fbf-440c-aaec-44a4d1590f87-0/0/C972E8671DEDC43FE908B548531C969A051CD34C.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/2/C972E8671DEDC43FE908B548531C969A051CD34C.cer
Subject Information Access:
Signed Object - URI:rsync://r.magellan.ipxo.com/repo/ddd1818b-9fbf-440c-aaec-44a4d1590f87-0/0/38312e32322e3133352e302f32342d3234203d3e20333938343635.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.22.135.0/24
Signature Algorithm: sha256WithRSAEncryption
5b:b7:35:c1:d5:af:5f:65:b9:b1:2e:d5:55:ee:ff:7f:fe:d0:
02:7e:f5:b1:f8:66:c4:f4:9d:e1:eb:7f:96:06:7e:cf:6b:fe:
a8:c0:41:03:12:ca:e9:bd:5b:b2:41:fb:6b:46:6d:a3:c1:fc:
72:bc:60:e4:15:cc:f0:8d:2f:62:21:c7:27:1f:c4:d7:63:fc:
01:b5:0d:33:46:09:2f:34:e8:b7:3e:2d:75:ed:bd:28:26:2e:
02:4f:ad:54:16:85:b8:2c:f6:62:c3:68:da:e7:de:fc:ac:d8:
e9:ce:4b:f5:42:24:83:d8:9a:bb:4b:e2:82:49:76:94:f6:24:
72:12:09:73:22:f9:a1:a6:38:43:b9:55:4b:d2:77:78:41:b2:
df:b9:61:91:00:e4:b6:47:d8:2b:83:21:cf:e4:84:9e:a9:9d:
03:86:c6:9d:ab:fe:fd:e0:e1:7b:b1:01:e3:05:27:f6:2c:09:
3c:04:7b:32:70:d5:80:91:72:85:03:d0:2b:44:36:c6:bb:d4:
4e:70:bc:0a:56:d8:03:a0:f9:66:30:33:34:89:28:cb:42:f1:
ec:25:ca:df:9d:0f:30:e5:fc:a8:27:61:d9:79:6c:48:a9:4a:
4b:98:c2:10:02:6d:26:f5:33:60:67:4b:b0:8e:8f:75:47:8c:
0c:2c:17:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 03:13:44 2026 by rpki-client