
$ rpki-client -vvf r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/3136392e34302e3138302e302f32322d3234203d3e2035363530.roa
File: 3136392e34302e3138302e302f32322d3234203d3e2035363530.roa (raw, json)
Hash identifier: /8/73mrgUzIg/CefL+pW2O6fsyQob6/77oNVUmRK6pM=
Subject key identifier: 40:84:D2:AA:26:59:B9:AB:C4:45:A8:47:D1:BE:C6:C1:24:3E:C6:77
Certificate issuer: /CN=AEF766F103B2EF99DF8C71978A7FE519D730B155
Certificate serial: 22D2E0E9E8116E9597688F59CCAA2E8F946D1ABF
Authority key identifier: AE:F7:66:F1:03:B2:EF:99:DF:8C:71:97:8A:7F:E5:19:D7:30:B1:55
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AEF766F103B2EF99DF8C71978A7FE519D730B155.cer
Subject info access: rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/3136392e34302e3138302e302f32322d3234203d3e2035363530.roa
Signing time: Thu 12 Feb 2026 01:05:04 +0000
ROA not before: Thu 12 Feb 2026 01:00:04 +0000
ROA not after: Thu 11 Feb 2027 01:05:04 +0000
asID: 5650
IP address blocks: 169.40.180.0/22 maxlen: 24
Validation: OK
Signature path: rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AEF766F103B2EF99DF8C71978A7FE519D730B155.crl
rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AEF766F103B2EF99DF8C71978A7FE519D730B155.mft
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AEF766F103B2EF99DF8C71978A7FE519D730B155.cer
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 14:28:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
22:d2:e0:e9:e8:11:6e:95:97:68:8f:59:cc:aa:2e:8f:94:6d:1a:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=AEF766F103B2EF99DF8C71978A7FE519D730B155
Validity
Not Before: Feb 12 01:00:04 2026 GMT
Not After : Feb 11 01:05:04 2027 GMT
Subject: CN=4084D2AA2659B9ABC445A847D1BEC6C1243EC677
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:16:8e:5f:5c:cf:2e:a7:c4:db:ff:76:7b:f4:
b1:bd:96:92:78:9f:84:ac:07:87:93:ff:14:d9:6e:
df:32:4a:3b:61:cf:ce:3a:b2:92:f0:ce:b4:6b:fc:
c7:37:b6:e5:79:44:ee:95:cb:68:60:3b:ba:05:e7:
3f:58:04:8f:b2:04:be:1e:3f:7d:48:a2:39:6f:73:
4d:89:8e:52:67:0c:3e:d3:11:82:be:66:8f:7c:f2:
07:66:86:0b:57:18:bc:a5:11:b0:6a:16:0b:6c:b4:
8d:5d:4e:4b:e3:97:57:22:e7:32:ca:14:88:70:9c:
3b:66:e5:4b:e4:92:87:bf:65:35:76:7f:68:9e:99:
9a:ed:ec:44:e7:1a:e1:fd:c9:d3:0b:75:b2:25:70:
cf:08:1a:4a:32:ca:16:5b:42:1c:97:bf:86:b5:47:
68:56:e5:6e:5a:a1:b7:67:0c:f0:6d:04:57:e3:b2:
cb:0b:59:29:17:d3:8d:96:81:be:8e:82:74:27:86:
ea:d2:15:50:8b:57:ee:b2:6e:2c:e7:52:13:a6:5a:
a2:b6:66:0e:32:62:1c:b7:4a:62:ba:13:a2:9b:74:
bd:6c:67:72:d7:6d:e0:e1:ff:52:d7:e7:1d:a7:13:
97:dd:0d:f0:23:2e:74:5a:01:ce:0f:31:ef:31:28:
de:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:84:D2:AA:26:59:B9:AB:C4:45:A8:47:D1:BE:C6:C1:24:3E:C6:77
X509v3 Authority Key Identifier:
keyid:AE:F7:66:F1:03:B2:EF:99:DF:8C:71:97:8A:7F:E5:19:D7:30:B1:55
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AEF766F103B2EF99DF8C71978A7FE519D730B155.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AEF766F103B2EF99DF8C71978A7FE519D730B155.cer
Subject Information Access:
Signed Object - URI:rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/3136392e34302e3138302e302f32322d3234203d3e2035363530.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
169.40.180.0/22
Signature Algorithm: sha256WithRSAEncryption
38:59:4e:a9:0a:18:54:2c:d3:6a:c9:bf:b1:ae:eb:10:31:ac:
17:96:e8:0d:9f:15:1e:e0:8f:fb:99:cf:4b:2b:0a:c7:64:e6:
cd:b2:09:df:74:b6:d7:30:79:57:65:b7:ff:9b:60:4f:56:71:
ab:49:9a:5f:61:59:9e:87:e2:12:e8:0a:29:e0:0b:99:8e:4d:
b2:8a:a4:2c:3c:e4:73:4c:b9:97:fe:e2:63:bf:8b:d4:dc:cf:
4c:0f:7d:5f:08:db:90:77:af:41:1f:cc:f7:29:65:8a:fe:90:
89:91:d9:3e:cf:0f:ca:84:fe:50:f3:42:a6:13:41:ae:dd:99:
fe:75:9e:17:72:3b:f8:71:81:6f:a4:72:bc:63:1a:45:54:f2:
e2:f3:22:49:4e:08:2a:1e:6b:2f:f4:8a:20:55:9e:6c:7b:cc:
2b:b2:95:62:05:0c:bd:6d:f1:ea:98:5d:25:9b:56:e9:75:2d:
fc:f8:09:0b:ce:67:ae:15:f8:55:a0:ff:a7:e4:58:15:fe:a5:
ab:12:c2:dd:4a:9d:9b:f1:8a:bb:dd:4c:a5:c2:82:45:18:1f:
11:ab:c3:28:0c:f3:a4:18:41:e0:4e:34:51:28:39:1d:7a:2f:
28:f9:cb:c7:40:03:82:d1:44:cc:fe:0f:7c:d6:c9:58:83:f8:
e1:09:e7:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:21:43 2026 by rpki-client