
$ rpki-client -vvf r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/3136392e34302e3135322e302f32342d3234203d3e203331373135.roa
File: 3136392e34302e3135322e302f32342d3234203d3e203331373135.roa (raw, json)
Hash identifier: y8PLD+r1BSFrlJDH1MMBfuXAa+0uUF1sMaNiO2UE4EE=
Subject key identifier: B2:9C:9B:63:B4:B7:1D:7B:7B:9E:DE:D4:78:80:E0:AD:63:ED:8C:31
Certificate issuer: /CN=AEF766F103B2EF99DF8C71978A7FE519D730B155
Certificate serial: 1F8DC0AC0104CA9623FFA891D445EBEFA7889657
Authority key identifier: AE:F7:66:F1:03:B2:EF:99:DF:8C:71:97:8A:7F:E5:19:D7:30:B1:55
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AEF766F103B2EF99DF8C71978A7FE519D730B155.cer
Subject info access: rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/3136392e34302e3135322e302f32342d3234203d3e203331373135.roa
Signing time: Thu 12 Feb 2026 01:05:05 +0000
ROA not before: Thu 12 Feb 2026 01:00:05 +0000
ROA not after: Thu 11 Feb 2027 01:05:05 +0000
asID: 31715
IP address blocks: 169.40.152.0/24 maxlen: 24
Validation: OK
Signature path: rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AEF766F103B2EF99DF8C71978A7FE519D730B155.crl
rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AEF766F103B2EF99DF8C71978A7FE519D730B155.mft
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AEF766F103B2EF99DF8C71978A7FE519D730B155.cer
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 06:04:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1f:8d:c0:ac:01:04:ca:96:23:ff:a8:91:d4:45:eb:ef:a7:88:96:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=AEF766F103B2EF99DF8C71978A7FE519D730B155
Validity
Not Before: Feb 12 01:00:05 2026 GMT
Not After : Feb 11 01:05:05 2027 GMT
Subject: CN=B29C9B63B4B71D7B7B9EDED47880E0AD63ED8C31
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:57:20:2b:8f:e9:86:cb:17:f7:68:0f:35:f5:
46:34:1e:f9:1a:cc:20:d9:fa:fe:81:3b:cf:3b:fa:
f9:a8:05:41:5d:38:ee:66:8f:11:73:a3:f6:90:00:
e0:bd:8a:ea:51:b6:33:9d:ad:e5:8a:c9:f1:3d:74:
b3:a8:54:07:dc:b0:bc:65:d2:22:bb:fb:f1:1d:50:
91:6e:25:40:3d:4e:07:c1:90:77:2d:33:c5:08:bb:
11:5a:bc:44:fb:f7:ee:fb:fa:61:c3:e1:fd:ff:50:
95:d2:ba:bf:20:c2:6a:37:ba:5f:3f:06:19:00:2e:
f5:11:6f:da:c9:3c:57:75:23:0b:15:1f:8c:33:a8:
8e:8f:82:22:82:0a:b7:d0:4b:a2:0e:5f:8a:f7:19:
7b:b3:c1:03:60:4f:27:7e:c6:30:b6:5d:96:7d:b3:
f3:8f:09:e2:83:ac:88:e9:7f:50:d5:d5:e1:bf:0a:
86:35:26:94:5a:56:6f:e9:38:7e:d0:f2:d7:a9:76:
2e:a0:94:b8:51:42:95:dc:86:8d:42:f1:20:d9:f0:
25:3a:02:b8:b5:88:aa:ce:48:5a:0a:e3:47:35:54:
61:62:41:5f:9c:9a:81:e2:73:36:28:06:35:a5:50:
eb:2f:96:6f:7a:0e:bf:7b:2c:4d:3c:56:1c:5f:3c:
55:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:9C:9B:63:B4:B7:1D:7B:7B:9E:DE:D4:78:80:E0:AD:63:ED:8C:31
X509v3 Authority Key Identifier:
keyid:AE:F7:66:F1:03:B2:EF:99:DF:8C:71:97:8A:7F:E5:19:D7:30:B1:55
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AEF766F103B2EF99DF8C71978A7FE519D730B155.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AEF766F103B2EF99DF8C71978A7FE519D730B155.cer
Subject Information Access:
Signed Object - URI:rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/3136392e34302e3135322e302f32342d3234203d3e203331373135.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
169.40.152.0/24
Signature Algorithm: sha256WithRSAEncryption
0f:1a:b5:d3:d6:53:45:92:55:6b:28:be:fb:11:18:bb:25:84:
6f:86:3c:ce:f0:1c:da:0d:d7:cb:20:b7:a8:d8:64:72:5d:0e:
87:6c:90:59:64:9b:da:f2:48:f3:9f:5e:ad:ae:8b:91:e0:29:
38:8e:63:84:22:20:b9:d4:23:8f:3f:3a:e2:9f:8d:01:5a:82:
7b:dc:58:c9:0a:bd:a7:5b:4d:d0:69:a8:e4:8b:b3:ac:bf:c9:
2b:55:c5:dc:bc:ce:76:58:c3:62:61:16:75:bf:3d:78:e0:88:
9f:8a:6b:c7:a0:f7:29:7b:62:52:5e:e9:d9:dc:33:ee:bb:11:
35:36:ab:d3:00:ed:46:e7:ed:b0:0b:28:48:3e:1b:69:e9:d9:
15:b8:77:a4:33:01:c5:b8:f2:95:2f:a9:22:bc:2d:f3:62:85:
4e:4a:d9:0e:91:78:7a:11:81:7a:06:48:f4:9a:e5:2c:2e:bd:
5d:39:ab:54:b0:0f:f8:fb:6f:2f:69:6f:6a:66:f1:65:e4:11:
0e:29:a9:1a:c3:c5:cc:d7:a7:55:38:15:2d:66:9f:40:a5:a0:
1b:66:4a:bc:4b:ed:57:5a:82:ab:88:7d:01:ea:30:dc:ef:20:
e5:c6:67:4c:30:3e:cf:31:3f:fc:ee:b2:25:fe:0c:0c:c1:46:
2e:54:6c:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 22:58:17 2026 by rpki-client