
$ rpki-client -vvf r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/3136392e34302e3135332e302f32342d3234203d3e2039333034.roa
File: 3136392e34302e3135332e302f32342d3234203d3e2039333034.roa (raw, json)
Hash identifier: bi4dY0HzVpmXdLHMhdOqLSe/iz+e7P++6230AKofwlY=
Subject key identifier: D0:C7:82:1C:A2:80:C0:AB:CF:0F:35:1F:A3:D7:E5:8B:77:A6:76:D2
Certificate issuer: /CN=AEF766F103B2EF99DF8C71978A7FE519D730B155
Certificate serial: 769487ECEAA3B5A8CFCABBDDF0C1D728EF7BB52A
Authority key identifier: AE:F7:66:F1:03:B2:EF:99:DF:8C:71:97:8A:7F:E5:19:D7:30:B1:55
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AEF766F103B2EF99DF8C71978A7FE519D730B155.cer
Subject info access: rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/3136392e34302e3135332e302f32342d3234203d3e2039333034.roa
Signing time: Thu 12 Feb 2026 01:05:04 +0000
ROA not before: Thu 12 Feb 2026 01:00:04 +0000
ROA not after: Thu 11 Feb 2027 01:05:04 +0000
asID: 9304
IP address blocks: 169.40.153.0/24 maxlen: 24
Validation: OK
Signature path: rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AEF766F103B2EF99DF8C71978A7FE519D730B155.crl
rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AEF766F103B2EF99DF8C71978A7FE519D730B155.mft
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AEF766F103B2EF99DF8C71978A7FE519D730B155.cer
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 14:28:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
76:94:87:ec:ea:a3:b5:a8:cf:ca:bb:dd:f0:c1:d7:28:ef:7b:b5:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=AEF766F103B2EF99DF8C71978A7FE519D730B155
Validity
Not Before: Feb 12 01:00:04 2026 GMT
Not After : Feb 11 01:05:04 2027 GMT
Subject: CN=D0C7821CA280C0ABCF0F351FA3D7E58B77A676D2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:5a:2a:54:33:e3:bf:19:fc:d0:08:68:a3:cb:
ef:52:da:c9:88:6d:4a:6e:b5:b1:36:24:fb:84:16:
8a:35:8f:f7:29:29:ad:8d:a8:39:44:f2:6b:8a:6f:
29:0c:01:b3:ee:d2:67:fb:5a:51:18:27:18:3d:0a:
3f:a5:8c:fc:b3:3c:19:b0:a5:82:cc:07:c6:a8:53:
2b:03:2c:28:1f:99:fe:c3:39:5c:9a:c1:a4:4c:90:
04:34:88:e5:c2:b1:f2:af:b3:0e:7b:c7:7e:f5:ab:
5b:f4:53:95:bc:b8:8a:4c:ca:28:76:17:9d:2c:6d:
a4:af:9a:bf:43:f0:5e:8f:1b:24:e5:b5:51:12:00:
37:f1:44:3e:cb:6a:0a:63:ae:6e:4f:7d:f4:cb:14:
5a:fb:d6:76:0e:94:1c:c8:fb:99:20:46:ec:ec:1d:
13:4d:fe:a9:22:c0:61:1a:ef:a3:c3:9d:7a:eb:3d:
f2:33:3a:ad:bf:b7:58:14:3d:ae:c1:6b:0d:27:ad:
28:60:6b:de:3a:77:4e:64:7a:86:a3:23:d9:32:f7:
ba:b9:23:da:9f:51:3f:4b:8a:a3:85:4b:64:2a:0d:
82:5f:cc:6e:77:9c:f3:7e:d9:5c:45:c3:a1:a3:7a:
2b:b4:d5:b1:69:80:7f:bf:d3:9b:30:0d:86:21:37:
d0:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:C7:82:1C:A2:80:C0:AB:CF:0F:35:1F:A3:D7:E5:8B:77:A6:76:D2
X509v3 Authority Key Identifier:
keyid:AE:F7:66:F1:03:B2:EF:99:DF:8C:71:97:8A:7F:E5:19:D7:30:B1:55
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AEF766F103B2EF99DF8C71978A7FE519D730B155.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AEF766F103B2EF99DF8C71978A7FE519D730B155.cer
Subject Information Access:
Signed Object - URI:rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/3136392e34302e3135332e302f32342d3234203d3e2039333034.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
169.40.153.0/24
Signature Algorithm: sha256WithRSAEncryption
96:d5:7d:02:0c:65:e5:79:8b:d8:a8:f3:3e:26:78:ee:6c:be:
54:22:e5:1c:21:b6:8b:a3:d4:c4:b1:51:a2:76:a2:2b:d3:b9:
3c:8a:33:77:64:dd:74:a7:ff:d3:13:a0:d8:3f:e5:ba:9e:73:
1f:f5:8e:cf:69:3f:d8:58:f7:5f:ce:9b:77:3c:73:83:36:e3:
f5:35:c0:d6:64:0f:0d:71:c0:0d:0f:64:77:0e:ef:12:70:68:
4a:85:75:f1:63:6d:9e:0c:30:9b:ed:dc:90:02:67:a8:01:71:
a4:d3:7e:16:8a:4b:73:df:64:cf:41:d9:aa:e1:24:a1:a4:db:
64:3a:58:e3:f8:02:b9:81:a3:f8:9e:ea:20:41:68:0c:27:27:
75:19:34:69:d9:74:9f:6f:bd:15:1b:6a:fe:32:1f:69:15:7f:
d6:45:2a:f7:17:29:06:6f:9e:c7:9d:82:4a:d8:92:07:57:5a:
1a:be:17:be:30:9c:99:a9:b5:59:85:a0:fc:f6:71:c6:d2:06:
6a:a2:f9:b6:58:4b:57:3b:6e:9b:57:6b:cf:6e:44:41:67:81:
04:ef:21:01:28:75:ec:bc:b0:30:11:ce:f5:36:9f:e2:67:a4:
2a:23:d8:2b:37:b6:58:5d:09:60:ab:4d:65:79:20:97:90:1c:
9e:09:1a:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 00:30:26 2026 by rpki-client