
$ rpki-client -vvf r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/3136392e34302e3134382e302f32332d3234203d3e2035363530.roa
File: 3136392e34302e3134382e302f32332d3234203d3e2035363530.roa (raw, json)
Hash identifier: LBzPDmkxp7Q/NKiBrPYI6n2vtxub65S3a5GNv2ydAhg=
Subject key identifier: 1C:A3:53:17:F5:F5:50:13:76:E4:F4:BA:D0:D5:E4:F1:E5:E8:23:D6
Certificate issuer: /CN=AEF766F103B2EF99DF8C71978A7FE519D730B155
Certificate serial: 1B3CB71014C208048A761EC286990FDBE99A0C18
Authority key identifier: AE:F7:66:F1:03:B2:EF:99:DF:8C:71:97:8A:7F:E5:19:D7:30:B1:55
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AEF766F103B2EF99DF8C71978A7FE519D730B155.cer
Subject info access: rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/3136392e34302e3134382e302f32332d3234203d3e2035363530.roa
Signing time: Thu 12 Feb 2026 01:05:06 +0000
ROA not before: Thu 12 Feb 2026 01:00:06 +0000
ROA not after: Thu 11 Feb 2027 01:05:06 +0000
asID: 5650
IP address blocks: 169.40.148.0/23 maxlen: 24
Validation: OK
Signature path: rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AEF766F103B2EF99DF8C71978A7FE519D730B155.crl
rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AEF766F103B2EF99DF8C71978A7FE519D730B155.mft
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AEF766F103B2EF99DF8C71978A7FE519D730B155.cer
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 06:04:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1b:3c:b7:10:14:c2:08:04:8a:76:1e:c2:86:99:0f:db:e9:9a:0c:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=AEF766F103B2EF99DF8C71978A7FE519D730B155
Validity
Not Before: Feb 12 01:00:06 2026 GMT
Not After : Feb 11 01:05:06 2027 GMT
Subject: CN=1CA35317F5F5501376E4F4BAD0D5E4F1E5E823D6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:5b:7d:3e:e4:0e:14:3b:ff:6b:f9:39:7f:1c:
3f:b7:5f:f7:8e:5c:78:dd:ee:49:ee:38:91:6a:a0:
ef:d5:93:38:31:ea:dd:fb:7b:df:6f:b8:dc:3c:39:
d0:b7:03:85:82:de:6a:64:d3:62:99:9d:f9:77:dd:
91:9b:4b:e6:5d:d9:e2:2d:e9:f8:38:d9:f4:40:f1:
f3:2c:dd:55:8f:91:b0:e2:a9:82:ad:14:db:be:9c:
ea:68:f1:09:7c:12:07:35:2c:39:92:c4:b3:b0:f4:
c2:39:69:a6:51:46:1b:3c:3a:cd:b8:fa:9a:4f:dc:
03:ae:ca:73:25:a5:98:b7:a6:30:7b:05:0f:4c:d8:
87:e6:39:f3:cb:5d:94:be:d5:64:71:64:80:34:7e:
fa:5d:f3:9e:23:29:73:b4:54:c5:9e:3f:1d:20:c3:
3e:7e:37:a4:1f:38:2c:ee:e3:7a:01:7f:17:4f:ce:
7a:af:cb:f8:25:f7:a6:79:b0:03:02:ed:45:ee:f6:
82:dc:a2:39:28:ee:86:67:70:cb:b4:49:97:27:1b:
48:72:73:43:e4:27:35:c4:48:fc:d6:30:e5:31:db:
28:5f:da:7e:25:80:31:37:fa:b8:d1:e2:25:52:46:
68:ec:00:0b:0e:e9:3e:84:d0:3f:90:95:bf:56:e9:
32:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:A3:53:17:F5:F5:50:13:76:E4:F4:BA:D0:D5:E4:F1:E5:E8:23:D6
X509v3 Authority Key Identifier:
keyid:AE:F7:66:F1:03:B2:EF:99:DF:8C:71:97:8A:7F:E5:19:D7:30:B1:55
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AEF766F103B2EF99DF8C71978A7FE519D730B155.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AEF766F103B2EF99DF8C71978A7FE519D730B155.cer
Subject Information Access:
Signed Object - URI:rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/3136392e34302e3134382e302f32332d3234203d3e2035363530.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
169.40.148.0/23
Signature Algorithm: sha256WithRSAEncryption
70:9f:ab:2f:e7:f7:22:b1:bf:35:84:ff:7b:70:cb:e8:8a:29:
4d:14:27:bf:c3:7e:02:7a:4e:59:4c:0e:a8:bc:b3:f5:ca:ae:
3e:f4:3c:37:5d:4e:89:a7:70:2b:76:36:0b:9b:61:84:3d:52:
98:59:ef:03:64:45:83:5e:c0:7a:86:9f:6a:2f:46:e8:80:df:
9f:d8:4d:57:74:bf:81:e7:7f:0a:4b:4d:14:7b:ba:39:98:09:
e4:36:e3:ff:eb:b5:9e:7b:e2:80:81:49:55:ee:65:3f:ac:bb:
9e:88:f6:5e:24:44:89:ff:e7:29:29:a8:f1:18:f2:ce:50:b1:
70:f9:d0:4d:28:1a:69:cc:51:77:03:4b:43:86:b2:cb:59:7e:
28:28:52:24:2d:50:d2:a5:49:27:6a:95:46:d9:e5:ee:e7:02:
87:4d:77:6d:e0:a4:6b:59:a0:9d:e0:fd:34:2f:46:29:51:42:
fd:c7:f2:80:67:7c:af:80:87:d0:04:57:0c:9c:09:96:7f:4f:
80:dc:a1:f6:11:47:0f:ba:a9:a1:d1:78:0c:78:27:f6:a6:40:
79:ce:de:38:7a:7d:b5:41:c3:e6:bf:e8:cf:97:17:33:72:a7:
1f:82:28:90:6f:6a:2a:27:a2:76:01:bd:31:cc:92:ed:0e:da:
59:3c:4b:03
-----BEGIN CERTIFICATE-----
MIIFVjCCBD6gAwIBAgIUGzy3EBTCCASKdh7ChpkP2+maDBgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQUVGNzY2RjEwM0IyRUY5OURGOEM3MTk3OEE3RkU1MTlE
NzMwQjE1NTAeFw0yNjAyMTIwMTAwMDZaFw0yNzAyMTEwMTA1MDZaMDMxMTAvBgNV
BAMTKDFDQTM1MzE3RjVGNTUwMTM3NkU0RjRCQUQwRDVFNEYxRTVFODIzRDYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCgW30+5A4UO/9r+Tl/HD+3X/eO
XHjd7knuOJFqoO/Vkzgx6t37e99vuNw8OdC3A4WC3mpk02KZnfl33ZGbS+Zd2eIt
6fg42fRA8fMs3VWPkbDiqYKtFNu+nOpo8Ql8Egc1LDmSxLOw9MI5aaZRRhs8Os24
+ppP3AOuynMlpZi3pjB7BQ9M2IfmOfPLXZS+1WRxZIA0fvpd854jKXO0VMWePx0g
wz5+N6QfOCzu43oBfxdPznqvy/gl96Z5sAMC7UXu9oLcojko7oZncMu0SZcnG0hy
c0PkJzXESPzWMOUx2yhf2n4lgDE3+rjR4iVSRmjsAAsO6T6E0D+Qlb9W6TKhAgMB
AAGjggJgMIICXDAdBgNVHQ4EFgQUHKNTF/X1UBN25PS60NXk8eXoI9YwHwYDVR0j
BBgwFoAUrvdm8QOy75nfjHGXin/lGdcwsVUwDgYDVR0PAQH/BAQDAgeAMIGIBgNV
HR8EgYAwfjB8oHqgeIZ2cnN5bmM6Ly9yLm1hZ2VsbGFuLmlweG8uY29tL3JlcG8v
MzAzMjdiOWUtMjI3YS00ZWJkLTgyNWItM2I5ODA5NWRjOTI3LTAvMC9BRUY3NjZG
MTAzQjJFRjk5REY4QzcxOTc4QTdGRTUxOUQ3MzBCMTU1LmNybDCBngYIKwYBBQUH
AQEEgZEwgY4wgYsGCCsGAQUFBzAChn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5y
aXBlLm5ldC9yZXBvc2l0b3J5L2ZlMzcwOGEwLTY3ZDUtNGFjMi1hYmM0LWEzMzI1
OTBiOTlhZi80L0FFRjc2NkYxMDNCMkVGOTlERjhDNzE5NzhBN0ZFNTE5RDczMEIx
NTUuY2VyMIGiBggrBgEFBQcBCwSBlTCBkjCBjwYIKwYBBQUHMAuGgYJyc3luYzov
L3IubWFnZWxsYW4uaXB4by5jb20vcmVwby8zMDMyN2I5ZS0yMjdhLTRlYmQtODI1
Yi0zYjk4MDk1ZGM5MjctMC8wLzMxMzYzOTJlMzQzMDJlMzEzNDM4MmUzMDJmMzIz
MzJkMzIzNDIwM2QzZTIwMzUzNjM1MzAucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYB
BQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAGpKJQwDQYJKoZIhvcN
AQELBQADggEBAHCfqy/n9yKxvzWE/3twy+iKKU0UJ7/DfgJ6TllMDqi8s/XKrj70
PDddTomncCt2NgubYYQ9UphZ7wNkRYNewHqGn2ovRuiA35/YTVd0v4HnfwpLTRR7
ujmYCeQ24//rtZ574oCBSVXuZT+su56I9l4kRIn/5ykpqPEY8s5QsXD50E0oGmnM
UXcDS0OGsstZfigoUiQtUNKlSSdqlUbZ5e7nAodNd23gpGtZoJ3g/TQvRilRQv3H
8oBnfK+Ah9AEVwycCZZ/T4DcofYRRw+6qaHReAx4J/amQHnO3jh6fbVBw+a/6M+X
FzNypx+CKJBvaiononYBvTHMku0O2lk8SwM=
-----END CERTIFICATE-----
Generated at Sun Mar 1 22:39:33 2026 by rpki-client