
$ rpki-client -vvf r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/3136392e34302e3135342e302f32342d3234203d3e2039303039.roa
File: 3136392e34302e3135342e302f32342d3234203d3e2039303039.roa (raw, json)
Hash identifier: 2CyqY3LZWmboeedODN685KPiYUErX3Ot1BmPM9iMp8U=
Subject key identifier: 0B:2C:D3:A9:B4:C6:11:86:01:84:21:C3:89:B9:33:3F:88:8D:6F:D8
Certificate issuer: /CN=AEF766F103B2EF99DF8C71978A7FE519D730B155
Certificate serial: 2960F3874ED4D71F7CCB96CA3196C7B8019CA749
Authority key identifier: AE:F7:66:F1:03:B2:EF:99:DF:8C:71:97:8A:7F:E5:19:D7:30:B1:55
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AEF766F103B2EF99DF8C71978A7FE519D730B155.cer
Subject info access: rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/3136392e34302e3135342e302f32342d3234203d3e2039303039.roa
Signing time: Thu 12 Feb 2026 01:05:07 +0000
ROA not before: Thu 12 Feb 2026 01:00:07 +0000
ROA not after: Thu 11 Feb 2027 01:05:07 +0000
asID: 9009
IP address blocks: 169.40.154.0/24 maxlen: 24
Validation: OK
Signature path: rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AEF766F103B2EF99DF8C71978A7FE519D730B155.crl
rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AEF766F103B2EF99DF8C71978A7FE519D730B155.mft
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AEF766F103B2EF99DF8C71978A7FE519D730B155.cer
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 06:04:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
29:60:f3:87:4e:d4:d7:1f:7c:cb:96:ca:31:96:c7:b8:01:9c:a7:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=AEF766F103B2EF99DF8C71978A7FE519D730B155
Validity
Not Before: Feb 12 01:00:07 2026 GMT
Not After : Feb 11 01:05:07 2027 GMT
Subject: CN=0B2CD3A9B4C61186018421C389B9333F888D6FD8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:2f:b8:7f:48:5f:d9:7d:7a:0f:71:f5:f0:a9:
ef:ff:db:04:ab:78:73:2d:18:ea:e7:1c:fa:2c:43:
bc:d5:26:93:39:4d:69:00:4d:8c:d5:4c:f0:c9:a4:
69:6c:f8:6d:f7:d5:81:fa:23:66:b0:4f:80:02:1c:
98:e6:87:74:b9:f9:0e:58:d0:9f:80:5b:7f:c3:de:
a9:e7:c8:5e:28:4c:0e:be:53:5d:96:4f:2f:0a:ae:
31:1f:88:3b:3a:bb:c8:f8:9c:43:4b:36:71:fa:6c:
38:9e:cd:63:ae:8d:21:7f:8d:15:5d:29:db:c4:00:
88:c9:ec:17:e9:7d:bb:bd:cb:3d:57:1e:db:10:3f:
fb:f3:54:39:aa:5d:d9:83:73:9e:78:f7:ef:10:79:
c5:6e:4d:46:fd:42:b1:f6:5c:61:33:00:71:97:51:
e9:bc:d7:42:67:a4:ba:50:a5:5b:28:82:5f:16:91:
2f:ed:51:c6:3a:f5:4b:15:2f:47:9f:94:25:8f:8d:
aa:e4:a8:27:b7:e0:a7:af:fb:e3:50:e9:ee:08:8c:
a2:9d:a6:b9:cf:7b:2b:b4:f4:c2:8b:8e:4c:f7:81:
a2:dd:20:6a:c2:40:40:3f:9e:b6:9b:5b:5a:11:ec:
87:12:14:95:95:8b:28:10:79:98:03:26:35:1d:1b:
d5:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:2C:D3:A9:B4:C6:11:86:01:84:21:C3:89:B9:33:3F:88:8D:6F:D8
X509v3 Authority Key Identifier:
keyid:AE:F7:66:F1:03:B2:EF:99:DF:8C:71:97:8A:7F:E5:19:D7:30:B1:55
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AEF766F103B2EF99DF8C71978A7FE519D730B155.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AEF766F103B2EF99DF8C71978A7FE519D730B155.cer
Subject Information Access:
Signed Object - URI:rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/3136392e34302e3135342e302f32342d3234203d3e2039303039.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
169.40.154.0/24
Signature Algorithm: sha256WithRSAEncryption
75:f4:49:28:22:13:27:32:a1:46:9f:4b:ba:51:bb:90:fc:db:
45:53:43:f5:38:c5:4c:56:88:c0:92:00:43:b9:a0:46:22:ac:
9f:2d:98:1b:31:b4:34:92:ce:92:63:a0:a1:2c:71:74:96:9a:
46:2c:7c:e2:ad:98:55:90:8e:2d:66:6e:13:49:de:9e:f5:27:
de:b8:b6:fe:0a:c8:e5:bb:70:e7:84:d7:c7:2e:b6:41:6d:19:
1f:62:ce:9b:19:b4:cb:b6:59:98:50:cc:84:fb:b6:ce:d8:3c:
d3:8b:0e:b8:e2:0c:df:9e:64:45:ff:b3:b0:a0:80:10:45:5c:
6b:a1:22:d1:c7:51:63:ca:00:70:10:47:3d:47:5c:ae:18:c8:
89:b6:35:71:b2:3e:d8:ee:2d:32:16:62:1a:3a:df:d5:d3:4a:
a9:20:3c:f1:47:07:75:7d:7b:c2:cd:09:cf:6d:19:8d:b4:92:
80:1e:4f:2a:73:3a:8b:64:70:ca:d2:39:65:f5:7f:d1:5f:6d:
8c:22:2e:2c:d7:e0:4b:bc:53:6e:ac:ae:ee:f7:52:23:a4:f5:
3c:77:6c:4d:88:23:e9:96:61:39:1e:2e:8c:6c:26:5d:ff:fd:
b8:8e:99:1c:1f:08:64:e7:aa:cf:6d:be:f4:f6:40:a5:59:28:
ce:9b:b4:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 22:51:13 2026 by rpki-client