
$ rpki-client -vvf r.magellan.ipxo.com/repo/ddd1818b-9fbf-440c-aaec-44a4d1590f87-0/0/38312e32322e3133352e302f32342d3234203d3e2036303739.roa
File: 38312e32322e3133352e302f32342d3234203d3e2036303739.roa (raw, json)
Hash identifier: 3AI6Iwn4uWk5079UypjWGN+41OK1NtFddJOwR61pju8=
Subject key identifier: 59:81:63:E3:64:6E:2E:61:13:50:90:70:D6:5D:D3:D7:42:92:B7:1F
Certificate issuer: /CN=C972E8671DEDC43FE908B548531C969A051CD34C
Certificate serial: 1A0E795C75DC06E6BB16F0C88E56574C3A464E4C
Authority key identifier: C9:72:E8:67:1D:ED:C4:3F:E9:08:B5:48:53:1C:96:9A:05:1C:D3:4C
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/2/C972E8671DEDC43FE908B548531C969A051CD34C.cer
Subject info access: rsync://r.magellan.ipxo.com/repo/ddd1818b-9fbf-440c-aaec-44a4d1590f87-0/0/38312e32322e3133352e302f32342d3234203d3e2036303739.roa
Signing time: Sat 14 Mar 2026 11:23:51 +0000
ROA not before: Sat 14 Mar 2026 11:18:51 +0000
ROA not after: Sat 13 Mar 2027 11:23:51 +0000
asID: 6079
IP address blocks: 81.22.135.0/24 maxlen: 24
Validation: OK
Signature path: rsync://r.magellan.ipxo.com/repo/ddd1818b-9fbf-440c-aaec-44a4d1590f87-0/0/C972E8671DEDC43FE908B548531C969A051CD34C.crl
rsync://r.magellan.ipxo.com/repo/ddd1818b-9fbf-440c-aaec-44a4d1590f87-0/0/C972E8671DEDC43FE908B548531C969A051CD34C.mft
rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/2/C972E8671DEDC43FE908B548531C969A051CD34C.cer
rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/2/CF0631D33A3C9DC5C45424D55C3E7663838657A3.crl
rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/2/CF0631D33A3C9DC5C45424D55C3E7663838657A3.mft
rsync://rpki.ripe.net/repository/DEFAULT/zwYx0zo8ncXEVCTVXD52Y4OGV6M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 12:51:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1a:0e:79:5c:75:dc:06:e6:bb:16:f0:c8:8e:56:57:4c:3a:46:4e:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C972E8671DEDC43FE908B548531C969A051CD34C
Validity
Not Before: Mar 14 11:18:51 2026 GMT
Not After : Mar 13 11:23:51 2027 GMT
Subject: CN=598163E3646E2E6113509070D65DD3D74292B71F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:f8:f2:da:9e:91:fa:d0:3a:d0:d4:be:c2:71:
cd:c6:d8:5a:74:f0:db:c2:bf:42:01:99:4c:d2:3b:
39:ce:0e:b2:a1:88:56:31:6b:33:5c:5a:58:fb:51:
6a:c5:ef:7e:fe:31:ae:1d:70:1c:3b:93:fb:9f:33:
da:dc:a4:41:42:12:cb:54:b3:30:a7:b4:bb:15:4a:
68:b5:b7:ea:03:6e:a7:7d:1b:a3:65:3a:45:59:58:
17:3d:c0:6c:3d:6c:4e:7c:50:ef:43:f4:ab:ab:13:
93:3d:d0:fc:cf:7f:37:98:dd:27:e1:ff:dc:af:27:
5c:2f:84:79:de:6b:77:70:4a:af:3b:36:3d:46:0b:
0a:6c:34:1c:7a:fa:a0:fc:90:d9:1a:bf:68:6c:b0:
23:34:7b:5e:63:25:1c:f2:d3:b8:52:e4:58:48:8d:
42:b7:49:00:72:fd:17:21:b2:c9:92:12:8b:86:8e:
2b:d7:f2:79:4c:58:9a:d7:26:95:4e:a0:6e:f2:87:
f3:e3:8f:bc:f6:2c:4a:59:af:11:1f:92:8c:9f:2f:
ab:76:08:88:68:e4:36:26:43:29:29:51:80:c0:eb:
d0:57:30:06:81:56:5b:3d:30:2e:61:59:36:43:ba:
ba:4f:96:7a:1d:1c:21:a8:1c:cd:19:1c:3b:64:8a:
b2:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:81:63:E3:64:6E:2E:61:13:50:90:70:D6:5D:D3:D7:42:92:B7:1F
X509v3 Authority Key Identifier:
keyid:C9:72:E8:67:1D:ED:C4:3F:E9:08:B5:48:53:1C:96:9A:05:1C:D3:4C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://r.magellan.ipxo.com/repo/ddd1818b-9fbf-440c-aaec-44a4d1590f87-0/0/C972E8671DEDC43FE908B548531C969A051CD34C.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/2/C972E8671DEDC43FE908B548531C969A051CD34C.cer
Subject Information Access:
Signed Object - URI:rsync://r.magellan.ipxo.com/repo/ddd1818b-9fbf-440c-aaec-44a4d1590f87-0/0/38312e32322e3133352e302f32342d3234203d3e2036303739.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.22.135.0/24
Signature Algorithm: sha256WithRSAEncryption
82:72:1a:46:ec:05:d9:e9:a3:c6:80:08:75:93:49:12:de:95:
a3:a9:f3:16:91:a7:c4:67:48:8e:73:ba:82:62:f3:2b:f1:b5:
36:91:fb:97:26:92:79:b1:18:4e:7e:89:f8:3d:15:e3:ec:98:
85:f6:bb:4a:60:17:f2:02:e7:b4:07:ec:77:b7:68:7e:41:9a:
e3:82:58:ab:d0:8f:cc:f5:c1:18:d4:63:2d:5b:3e:b0:43:ec:
62:57:3c:f6:9d:11:3f:ff:f8:83:a8:af:2d:e3:ad:19:e7:b7:
b5:c6:9a:8c:0d:d3:28:63:09:f9:b7:01:b0:e1:68:6a:0b:dd:
66:ca:1c:55:99:8b:d8:27:79:a1:7a:c6:14:fc:10:08:e7:0a:
38:ab:07:f0:6b:7d:b4:e9:be:a9:76:e5:9c:62:1f:a9:12:61:
8e:ec:3c:b0:a1:75:39:c5:f6:f8:b5:05:0e:0c:c1:71:20:b9:
d4:45:7b:82:7c:14:1a:5b:10:ea:37:d0:b1:92:19:79:5a:af:
a7:64:6c:2f:10:b8:90:87:fb:12:d9:5c:b5:2e:1b:b7:58:b0:
77:ba:b3:83:d2:0c:6a:90:50:de:3b:5f:c6:35:f5:f5:ba:ac:
12:ed:b9:73:85:0c:5f:c6:ae:01:56:8b:0b:71:75:de:90:f5:
be:06:ab:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 01:48:57 2026 by rpki-client