
$ rpki-client -vvf r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/3136392e34302e3136342e302f32322d3234203d3e2035363530.roa
File: 3136392e34302e3136342e302f32322d3234203d3e2035363530.roa (raw, json)
Hash identifier: U9xJlyBkTnpWnGcyHtPlnP7ZqHX46MQapGXp/BaYhBw=
Subject key identifier: 2D:AD:82:3B:09:A2:63:25:D5:8C:14:21:E2:80:19:32:3C:3E:97:BC
Certificate issuer: /CN=AEF766F103B2EF99DF8C71978A7FE519D730B155
Certificate serial: 7F189ED131375F63B40ED8F9A29729B9285AED04
Authority key identifier: AE:F7:66:F1:03:B2:EF:99:DF:8C:71:97:8A:7F:E5:19:D7:30:B1:55
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AEF766F103B2EF99DF8C71978A7FE519D730B155.cer
Subject info access: rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/3136392e34302e3136342e302f32322d3234203d3e2035363530.roa
Signing time: Thu 12 Feb 2026 01:05:03 +0000
ROA not before: Thu 12 Feb 2026 01:00:03 +0000
ROA not after: Thu 11 Feb 2027 01:05:03 +0000
asID: 5650
IP address blocks: 169.40.164.0/22 maxlen: 24
Validation: OK
Signature path: rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AEF766F103B2EF99DF8C71978A7FE519D730B155.crl
rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AEF766F103B2EF99DF8C71978A7FE519D730B155.mft
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AEF766F103B2EF99DF8C71978A7FE519D730B155.cer
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 06:04:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7f:18:9e:d1:31:37:5f:63:b4:0e:d8:f9:a2:97:29:b9:28:5a:ed:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=AEF766F103B2EF99DF8C71978A7FE519D730B155
Validity
Not Before: Feb 12 01:00:03 2026 GMT
Not After : Feb 11 01:05:03 2027 GMT
Subject: CN=2DAD823B09A26325D58C1421E28019323C3E97BC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:d7:d6:16:82:40:2a:12:d6:f5:64:07:8f:52:
d2:6f:da:5e:ac:d3:4c:3c:d9:df:d8:86:10:14:9e:
33:e4:a7:fe:37:e3:0d:d5:1c:b9:f2:3c:35:ec:4d:
25:28:df:6d:df:49:fe:a2:a3:0c:88:0a:bf:14:2f:
33:20:c0:0a:79:37:9d:b0:8f:65:f5:d6:ec:b2:64:
7d:87:da:75:d1:b8:04:7f:aa:c9:6f:e4:33:fd:7b:
7f:47:74:ab:c5:50:1e:47:6b:92:c4:9e:03:d3:9f:
4c:90:22:ea:ed:2f:ed:c8:0d:f3:ba:e2:e7:e4:02:
f2:47:2e:2a:fd:1d:df:72:94:cf:cf:5b:17:4d:6d:
b1:23:92:f6:da:4f:9c:16:ef:0f:82:54:5b:61:94:
8e:28:60:ac:99:6a:aa:3d:ad:f9:64:38:ff:e3:53:
5c:ce:c6:61:3c:81:e9:e8:1b:c0:20:74:e6:0b:46:
08:b6:cb:cb:62:1b:f1:d9:d5:6a:08:6e:69:a7:29:
be:a0:16:5e:6e:3e:4d:d0:ca:13:b4:80:f5:39:00:
73:ca:c5:6e:9b:b1:ee:21:d0:25:0d:6c:c2:78:aa:
17:f4:51:e2:e6:3f:11:84:dd:fa:54:8a:86:df:82:
3e:ec:cf:7c:3d:02:a0:18:bd:e3:f1:5e:b6:af:bf:
f2:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:AD:82:3B:09:A2:63:25:D5:8C:14:21:E2:80:19:32:3C:3E:97:BC
X509v3 Authority Key Identifier:
keyid:AE:F7:66:F1:03:B2:EF:99:DF:8C:71:97:8A:7F:E5:19:D7:30:B1:55
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AEF766F103B2EF99DF8C71978A7FE519D730B155.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AEF766F103B2EF99DF8C71978A7FE519D730B155.cer
Subject Information Access:
Signed Object - URI:rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/3136392e34302e3136342e302f32322d3234203d3e2035363530.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
169.40.164.0/22
Signature Algorithm: sha256WithRSAEncryption
01:9d:f8:d2:28:9a:9a:d9:b2:fa:50:20:d9:88:81:51:f1:95:
07:eb:ed:25:fa:ea:89:f4:a8:63:24:20:6f:9c:f5:a1:a4:06:
4f:ea:b8:cd:b7:79:cc:00:4a:4c:e2:42:16:b5:0a:b2:6b:6b:
43:d7:b4:f8:51:cb:bd:77:e7:98:48:4f:fe:0e:c1:fa:d0:bb:
14:62:57:45:b7:6d:ff:06:e9:92:ca:37:43:aa:b8:43:db:f8:
37:b5:7d:cb:e5:17:72:0f:4d:f3:29:54:a0:22:99:33:6d:c7:
69:84:6d:26:d4:d2:1d:0c:c7:8b:5d:a0:e8:fc:ef:6e:69:e1:
92:b4:d9:da:86:cc:1e:e5:6d:dd:02:e4:e6:62:50:b3:b6:f0:
36:5f:e2:72:0b:46:c2:82:26:6b:b5:b6:f9:69:ec:c1:16:8a:
85:dc:3e:ea:71:f6:21:c8:1f:6a:f4:1e:ea:45:f4:11:34:04:
66:8c:8d:97:63:4b:47:9e:c2:e2:c8:50:75:4d:53:36:00:45:
36:fb:34:ad:ef:6b:7e:2a:ef:4b:51:90:91:ad:d4:1a:bc:f3:
e7:4a:5d:12:6a:fd:ee:39:ae:b4:39:49:51:70:41:c2:4b:50:
b7:6b:ce:8b:bc:a3:fe:39:58:d6:f9:5c:20:29:90:4c:c9:a9:
9d:5c:79:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 22:37:50 2026 by rpki-client