
$ rpki-client -vvf r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/3136392e34302e3134352e302f32342d3234203d3e2035363530.roa
File: 3136392e34302e3134352e302f32342d3234203d3e2035363530.roa (raw, json)
Hash identifier: j4HrBWV+Ng8zlT9UJYpXhyF++aisXjptLOoXxutugvY=
Subject key identifier: CF:12:FF:F8:BD:2D:BE:3E:01:B7:BE:7A:C7:27:C1:64:C7:B7:EF:EA
Certificate issuer: /CN=AEF766F103B2EF99DF8C71978A7FE519D730B155
Certificate serial: 28528B36E8D2BEC299361B0431CC34087673940A
Authority key identifier: AE:F7:66:F1:03:B2:EF:99:DF:8C:71:97:8A:7F:E5:19:D7:30:B1:55
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AEF766F103B2EF99DF8C71978A7FE519D730B155.cer
Subject info access: rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/3136392e34302e3134352e302f32342d3234203d3e2035363530.roa
Signing time: Thu 12 Feb 2026 01:05:06 +0000
ROA not before: Thu 12 Feb 2026 01:00:06 +0000
ROA not after: Thu 11 Feb 2027 01:05:06 +0000
asID: 5650
IP address blocks: 169.40.145.0/24 maxlen: 24
Validation: OK
Signature path: rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AEF766F103B2EF99DF8C71978A7FE519D730B155.crl
rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AEF766F103B2EF99DF8C71978A7FE519D730B155.mft
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AEF766F103B2EF99DF8C71978A7FE519D730B155.cer
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 06:04:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
28:52:8b:36:e8:d2:be:c2:99:36:1b:04:31:cc:34:08:76:73:94:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=AEF766F103B2EF99DF8C71978A7FE519D730B155
Validity
Not Before: Feb 12 01:00:06 2026 GMT
Not After : Feb 11 01:05:06 2027 GMT
Subject: CN=CF12FFF8BD2DBE3E01B7BE7AC727C164C7B7EFEA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:b2:0e:bf:8e:40:03:39:7b:7c:75:b5:24:0b:
9f:d9:69:62:21:12:b7:5d:fa:d2:f6:2f:25:59:40:
ad:4a:06:bd:de:b2:df:86:67:3a:49:0e:76:3f:7d:
24:d0:f2:56:e4:d1:03:50:ee:01:53:e6:cf:04:52:
14:71:66:3e:3e:17:be:f6:70:4d:7d:3f:4d:0c:30:
2a:74:02:5b:39:2b:94:86:e1:79:ce:26:60:a5:ae:
10:3c:c3:37:5f:d2:8a:ff:c6:15:01:c3:c8:3c:61:
8e:dc:71:ff:bf:92:36:0d:05:2b:c9:35:6b:70:83:
4e:91:32:22:69:09:55:63:63:16:39:52:d7:70:a1:
c2:2e:3d:58:ba:f2:1a:2a:34:bc:aa:85:ff:e8:cc:
ab:78:5c:d2:3c:ba:44:8f:af:37:12:1b:5e:a2:af:
09:bd:3d:e1:74:26:64:9b:e0:42:aa:62:58:50:d6:
c3:e6:26:60:ae:9b:8e:f4:82:85:72:4f:d2:76:43:
8e:10:94:7b:1e:d3:02:57:24:02:0b:8a:18:14:36:
f0:50:84:d0:57:51:c3:ad:08:17:d0:7c:ba:a6:c4:
f4:72:71:26:61:e9:19:06:90:a6:ee:f9:87:e4:d6:
3a:32:57:6d:16:40:3d:bb:43:d7:e7:d3:6c:1f:3a:
82:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:12:FF:F8:BD:2D:BE:3E:01:B7:BE:7A:C7:27:C1:64:C7:B7:EF:EA
X509v3 Authority Key Identifier:
keyid:AE:F7:66:F1:03:B2:EF:99:DF:8C:71:97:8A:7F:E5:19:D7:30:B1:55
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AEF766F103B2EF99DF8C71978A7FE519D730B155.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AEF766F103B2EF99DF8C71978A7FE519D730B155.cer
Subject Information Access:
Signed Object - URI:rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/3136392e34302e3134352e302f32342d3234203d3e2035363530.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
169.40.145.0/24
Signature Algorithm: sha256WithRSAEncryption
9b:b7:17:75:ff:8e:0f:f7:e6:e5:52:bd:0e:f7:55:9a:b2:de:
40:44:da:aa:78:32:f1:b9:10:ae:a5:98:14:1b:af:8e:17:d0:
00:28:f0:6f:f3:65:01:6c:ae:0b:1b:ec:37:5b:fc:f4:61:e8:
4a:cf:df:31:83:9d:fa:ed:8a:39:e3:58:15:20:c8:a6:90:46:
25:5f:0c:47:73:97:8d:82:be:29:96:47:26:dd:61:7a:d5:cb:
02:81:d9:6e:ef:d3:af:9b:8c:6a:3d:73:e6:b5:38:c7:56:3b:
54:cf:18:82:eb:83:5b:4c:ec:84:f9:cb:04:5c:3f:0b:44:b6:
6f:bf:bd:7b:7c:b3:3f:7a:80:eb:b9:f1:bd:64:7d:98:8e:94:
41:98:fb:7d:32:e5:4e:50:2a:c7:98:66:bd:06:8b:b1:03:24:
4b:2a:77:a0:5d:09:01:c6:91:68:b7:f0:0f:09:d2:6c:2c:08:
82:39:34:2d:f2:45:a5:50:a2:1f:3c:31:49:df:90:0b:ea:f3:
32:41:89:6e:34:09:06:8e:9a:c0:e2:11:62:c1:94:80:16:d5:
b0:01:73:76:d7:c8:22:50:71:1d:3b:c5:9d:ab:d6:d9:f0:c7:
fe:32:aa:0f:ca:76:18:2c:b8:8b:45:f2:02:70:8d:eb:cb:9e:
9d:0f:14:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 22:23:03 2026 by rpki-client