
$ rpki-client -vvf r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/3136392e34302e3135392e302f32342d3234203d3e20383334.roa
File: 3136392e34302e3135392e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier: 1IspZ6oYk8jWgTAeqAW69oE++QzGfKwcYleAU9fKyKs=
Subject key identifier: 37:F3:5B:CE:AA:C6:7E:54:FD:82:26:99:D9:C4:CC:F5:73:04:A4:9C
Certificate issuer: /CN=AEF766F103B2EF99DF8C71978A7FE519D730B155
Certificate serial: 30A0A79F6DFEB7CEE7BCD2D2DA8B2FA3ED904A37
Authority key identifier: AE:F7:66:F1:03:B2:EF:99:DF:8C:71:97:8A:7F:E5:19:D7:30:B1:55
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AEF766F103B2EF99DF8C71978A7FE519D730B155.cer
Subject info access: rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/3136392e34302e3135392e302f32342d3234203d3e20383334.roa
Signing time: Sun 01 Mar 2026 13:20:52 +0000
ROA not before: Sun 01 Mar 2026 13:15:52 +0000
ROA not after: Sun 28 Feb 2027 13:20:52 +0000
asID: 834
IP address blocks: 169.40.159.0/24 maxlen: 24
Validation: OK
Signature path: rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AEF766F103B2EF99DF8C71978A7FE519D730B155.crl
rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AEF766F103B2EF99DF8C71978A7FE519D730B155.mft
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AEF766F103B2EF99DF8C71978A7FE519D730B155.cer
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 06:04:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
30:a0:a7:9f:6d:fe:b7:ce:e7:bc:d2:d2:da:8b:2f:a3:ed:90:4a:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=AEF766F103B2EF99DF8C71978A7FE519D730B155
Validity
Not Before: Mar 1 13:15:52 2026 GMT
Not After : Feb 28 13:20:52 2027 GMT
Subject: CN=37F35BCEAAC67E54FD822699D9C4CCF57304A49C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:98:1b:0f:90:56:23:e7:c5:b3:72:a8:a3:75:
02:07:69:5d:b4:aa:20:aa:0d:a5:e1:c0:07:f7:98:
65:35:4e:b2:bd:cc:4b:6b:b0:8a:bb:52:48:d8:d9:
df:4b:45:4b:bd:76:b7:0b:6b:ca:8c:25:b7:ad:af:
26:8a:2f:28:d9:ce:e5:d1:4e:a4:22:2f:a8:01:81:
5d:55:41:58:18:fd:43:19:ee:e5:2f:63:ea:d3:96:
7e:2d:4e:13:d3:e6:27:84:f3:2f:9b:a0:7d:fe:99:
bb:fe:1c:cf:bb:c4:21:ab:84:41:98:d8:dd:2e:6f:
76:dc:cf:c7:a1:24:98:82:4a:b3:11:61:89:6f:aa:
80:2b:a4:24:e6:b6:8c:65:f8:62:aa:62:3c:96:31:
87:6b:a8:47:b6:7a:98:33:f2:0e:41:9f:9a:27:f8:
98:d9:d6:7f:88:73:fa:b1:da:c9:65:dd:be:c5:dd:
ed:72:95:e6:83:6c:cf:b8:20:90:80:a3:d2:84:55:
d5:1e:4d:5d:db:3f:f1:49:a7:62:27:d6:72:dc:5e:
0e:17:95:75:8a:77:43:f2:f8:9b:8b:df:d8:43:12:
f1:ac:32:40:b8:01:49:44:3a:59:e2:24:15:13:92:
d6:0c:79:53:53:55:4d:b9:10:93:41:36:b3:06:63:
16:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:F3:5B:CE:AA:C6:7E:54:FD:82:26:99:D9:C4:CC:F5:73:04:A4:9C
X509v3 Authority Key Identifier:
keyid:AE:F7:66:F1:03:B2:EF:99:DF:8C:71:97:8A:7F:E5:19:D7:30:B1:55
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AEF766F103B2EF99DF8C71978A7FE519D730B155.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AEF766F103B2EF99DF8C71978A7FE519D730B155.cer
Subject Information Access:
Signed Object - URI:rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/3136392e34302e3135392e302f32342d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
169.40.159.0/24
Signature Algorithm: sha256WithRSAEncryption
8e:b9:9a:c5:10:09:b3:bf:b2:a3:67:9d:be:c1:52:fd:47:1a:
8f:6a:75:2b:2f:23:bb:45:fb:b5:51:a4:5b:19:38:5d:28:37:
06:ce:f3:06:d4:ea:9a:e2:f1:6b:98:df:7d:3e:03:47:ee:ed:
0b:a5:9a:d2:eb:15:27:75:2c:73:dd:3c:34:b4:80:a4:7b:97:
05:ea:fe:ff:28:84:20:0f:ab:bf:07:98:dc:0e:65:b2:e0:84:
1b:1f:f3:15:29:ba:34:96:dc:03:f0:ff:14:bc:bd:96:f4:51:
86:3d:f1:6a:99:66:1b:e8:d1:68:9c:93:ad:87:1f:c1:89:81:
ac:19:88:01:8a:88:d3:48:f8:d3:fa:ba:b6:a4:ef:15:bf:3e:
97:17:8e:e6:a9:92:be:ca:a9:3d:32:8e:a0:80:99:3e:f6:e0:
60:8a:c7:bd:71:f6:09:79:db:1f:ef:60:22:a2:ea:cf:3e:d6:
b0:d2:27:4a:58:04:e5:6f:29:28:13:2c:00:06:7b:7a:6e:aa:
0e:c6:37:27:94:18:17:79:1a:00:53:81:b2:55:10:33:f9:21:
1d:e3:ec:20:39:10:3b:c9:29:36:73:f1:51:cc:8c:c6:c4:c9:
fb:cc:c0:1f:30:c7:41:70:42:da:7c:95:7f:62:1b:a3:d1:1c:
98:ec:32:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 22:32:16 2026 by rpki-client