
$ rpki-client -vvf r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/3136392e34302e3133302e302f32332d3234203d3e2039303039.roa
File: 3136392e34302e3133302e302f32332d3234203d3e2039303039.roa (raw, json)
Hash identifier: YtrxCAly14yANpvFFDA3dhRXhgcyqJHWm787CkvZots=
Subject key identifier: 09:03:E1:FE:F2:0A:A9:A1:FC:28:DD:72:32:6E:D4:12:14:6D:36:45
Certificate issuer: /CN=AEF766F103B2EF99DF8C71978A7FE519D730B155
Certificate serial: 2B01DE37DA645470752D82C8616FB90B127ADBC3
Authority key identifier: AE:F7:66:F1:03:B2:EF:99:DF:8C:71:97:8A:7F:E5:19:D7:30:B1:55
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AEF766F103B2EF99DF8C71978A7FE519D730B155.cer
Subject info access: rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/3136392e34302e3133302e302f32332d3234203d3e2039303039.roa
Signing time: Thu 12 Feb 2026 01:05:06 +0000
ROA not before: Thu 12 Feb 2026 01:00:06 +0000
ROA not after: Thu 11 Feb 2027 01:05:06 +0000
asID: 9009
IP address blocks: 169.40.130.0/23 maxlen: 24
Validation: OK
Signature path: rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AEF766F103B2EF99DF8C71978A7FE519D730B155.crl
rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AEF766F103B2EF99DF8C71978A7FE519D730B155.mft
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AEF766F103B2EF99DF8C71978A7FE519D730B155.cer
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 06:04:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2b:01:de:37:da:64:54:70:75:2d:82:c8:61:6f:b9:0b:12:7a:db:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=AEF766F103B2EF99DF8C71978A7FE519D730B155
Validity
Not Before: Feb 12 01:00:06 2026 GMT
Not After : Feb 11 01:05:06 2027 GMT
Subject: CN=0903E1FEF20AA9A1FC28DD72326ED412146D3645
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:a5:1e:b0:59:5e:d8:68:12:d0:d7:18:69:a0:
a8:4d:b9:41:47:29:0e:09:e9:6c:a1:3e:4b:ee:47:
12:61:d4:10:02:6a:df:52:13:65:c8:15:83:5d:2e:
b0:2c:9f:01:f8:cd:05:1e:75:3c:8c:9e:48:dd:b0:
aa:eb:ea:4f:51:8a:f4:9c:9a:96:aa:ad:4a:da:f7:
b1:9b:81:7b:b4:50:31:57:67:c8:41:ea:27:fe:62:
d5:86:b0:6a:75:a0:ad:52:2c:b2:8b:56:cd:31:f4:
0c:80:74:fe:44:b2:95:f1:88:24:cd:24:bc:48:3f:
62:1b:07:91:52:ef:ec:69:d9:22:3d:ef:ba:61:0f:
39:9b:2a:c2:4e:2f:a5:36:40:a2:6a:58:7c:4b:d8:
fa:77:f3:5a:91:41:ca:c1:aa:5e:dc:48:ec:48:60:
ef:84:77:d8:80:15:33:01:a1:6c:38:1f:21:17:70:
38:3c:54:a6:47:27:21:d3:46:fe:4e:e8:c6:d4:3d:
ef:ec:6d:7e:d5:a1:0f:e0:f3:32:18:65:1d:c4:be:
fc:90:99:c1:a2:de:26:c1:1b:6f:48:22:d4:3f:22:
5a:80:e8:fc:3a:27:d1:9e:ec:26:ba:15:68:b6:8d:
73:1a:c1:33:f0:15:ae:1b:c2:30:c8:5d:0e:66:cf:
e9:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:03:E1:FE:F2:0A:A9:A1:FC:28:DD:72:32:6E:D4:12:14:6D:36:45
X509v3 Authority Key Identifier:
keyid:AE:F7:66:F1:03:B2:EF:99:DF:8C:71:97:8A:7F:E5:19:D7:30:B1:55
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AEF766F103B2EF99DF8C71978A7FE519D730B155.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AEF766F103B2EF99DF8C71978A7FE519D730B155.cer
Subject Information Access:
Signed Object - URI:rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/3136392e34302e3133302e302f32332d3234203d3e2039303039.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
169.40.130.0/23
Signature Algorithm: sha256WithRSAEncryption
0e:c5:ba:8f:c6:ca:d4:1c:a3:45:d0:5c:44:0e:1c:6e:a0:de:
eb:e4:ca:05:8c:98:ba:64:15:f9:67:0b:fb:15:6c:68:8e:3c:
4a:e6:f0:5a:1d:2e:2d:76:2e:f1:e1:7d:16:94:84:99:e7:42:
fd:cd:d9:8e:b4:fd:b6:84:62:ad:a3:07:b1:e2:20:32:c2:8f:
b6:46:2a:99:0f:ed:c2:16:72:8b:49:8f:ab:05:52:74:c7:22:
85:30:2a:16:6d:52:13:d4:29:c5:d8:53:0b:fe:6f:54:60:d7:
33:e0:db:78:ba:61:57:78:2f:ac:34:51:f8:18:ed:be:9c:a0:
bd:1e:6e:bf:47:32:d8:31:c8:de:5a:b7:83:c8:73:c1:b8:9a:
9c:db:28:18:3c:b2:fe:2e:d0:b7:c0:ef:c8:7e:5f:34:67:6a:
36:5f:96:95:2b:18:a4:fa:6e:b4:c5:73:58:5a:ca:58:4d:74:
cd:ee:db:f1:23:ea:cc:ca:fa:87:b9:4b:28:21:3f:fc:f4:7a:
87:60:7a:d3:cb:ac:b8:8f:38:cb:da:b3:2a:f8:e7:17:0f:7c:
cb:1d:a4:e3:70:f2:37:09:19:05:5c:19:fb:a1:4e:f8:80:83:
80:c9:b3:a9:b4:90:f3:6c:46:0d:b0:52:36:8e:0e:44:95:55:
20:ab:0e:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 22:47:00 2026 by rpki-client