
$ rpki-client -vvf r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/3136392e34302e3230342e302f32322d3232203d3e2035363530.roa
File: 3136392e34302e3230342e302f32322d3232203d3e2035363530.roa (raw, json)
Hash identifier: 5gLj5cce4kaedp6f3Wnm9XeuQUy7jND09vS0B5HRDbE=
Subject key identifier: DE:58:BA:22:21:AB:F8:13:60:00:7A:FB:19:10:8B:CD:CC:87:B0:C3
Certificate issuer: /CN=AEF766F103B2EF99DF8C71978A7FE519D730B155
Certificate serial: 3950DDB6D74E76369669721FF09A91A94858670F
Authority key identifier: AE:F7:66:F1:03:B2:EF:99:DF:8C:71:97:8A:7F:E5:19:D7:30:B1:55
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AEF766F103B2EF99DF8C71978A7FE519D730B155.cer
Subject info access: rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/3136392e34302e3230342e302f32322d3232203d3e2035363530.roa
Signing time: Thu 12 Feb 2026 01:05:04 +0000
ROA not before: Thu 12 Feb 2026 01:00:04 +0000
ROA not after: Thu 11 Feb 2027 01:05:04 +0000
asID: 5650
IP address blocks: 169.40.204.0/22 maxlen: 22
Validation: OK
Signature path: rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AEF766F103B2EF99DF8C71978A7FE519D730B155.crl
rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AEF766F103B2EF99DF8C71978A7FE519D730B155.mft
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AEF766F103B2EF99DF8C71978A7FE519D730B155.cer
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 06:04:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
39:50:dd:b6:d7:4e:76:36:96:69:72:1f:f0:9a:91:a9:48:58:67:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=AEF766F103B2EF99DF8C71978A7FE519D730B155
Validity
Not Before: Feb 12 01:00:04 2026 GMT
Not After : Feb 11 01:05:04 2027 GMT
Subject: CN=DE58BA2221ABF81360007AFB19108BCDCC87B0C3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:51:d3:e3:7f:0d:46:82:a2:1f:38:db:b0:32:
08:01:6e:f5:5b:3f:5f:b3:ae:18:b4:6a:0b:8a:cd:
13:b1:dc:79:5b:38:45:71:38:46:07:9e:b9:03:4e:
93:72:c2:bf:1b:fc:96:04:ab:80:b1:e2:ec:a0:fb:
fc:05:42:c2:4d:a1:fa:ff:0f:62:a4:e3:90:31:10:
11:d2:2a:43:fd:58:c3:33:32:43:7f:d2:7d:cf:1e:
4c:8b:5f:eb:8e:0d:c4:b6:76:04:01:47:3d:19:58:
f7:3f:fd:ac:56:d5:6c:aa:30:c2:47:c8:03:c8:cf:
d3:05:58:6b:27:72:37:25:d6:38:54:f4:5e:7b:76:
9c:9a:7c:b3:2f:69:08:77:7d:49:33:1d:57:37:85:
0a:27:a7:00:2f:4f:4f:55:a3:50:7d:3d:da:07:65:
81:1b:7e:a9:b3:53:72:85:ee:e6:a3:5b:38:4c:56:
80:47:94:08:86:d4:6b:49:34:e6:79:d6:45:aa:e3:
a6:f5:5a:3f:a4:bd:c1:74:90:ea:8a:5f:0f:67:d1:
87:1d:95:e6:90:7f:7f:8d:26:0f:5b:9a:1c:d7:7c:
56:05:37:4e:a6:39:fb:5e:af:cc:d0:e4:62:55:37:
d4:4a:cc:7a:d0:50:19:79:f0:9b:75:64:e9:8a:f2:
ab:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:58:BA:22:21:AB:F8:13:60:00:7A:FB:19:10:8B:CD:CC:87:B0:C3
X509v3 Authority Key Identifier:
keyid:AE:F7:66:F1:03:B2:EF:99:DF:8C:71:97:8A:7F:E5:19:D7:30:B1:55
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AEF766F103B2EF99DF8C71978A7FE519D730B155.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AEF766F103B2EF99DF8C71978A7FE519D730B155.cer
Subject Information Access:
Signed Object - URI:rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/3136392e34302e3230342e302f32322d3232203d3e2035363530.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
169.40.204.0/22
Signature Algorithm: sha256WithRSAEncryption
0d:dd:7b:3c:25:dc:f6:0a:d7:ab:7d:b6:c2:07:bd:19:3f:32:
83:93:8a:99:16:b0:39:6a:00:30:eb:3b:c6:c0:6f:ce:9f:0a:
d3:7f:20:ff:8d:90:bd:eb:2b:ee:cd:fe:b4:03:ca:f3:2b:30:
6a:73:b5:6c:71:b4:09:a3:ee:b2:e2:f6:d8:73:e2:02:30:82:
01:b8:81:c2:a1:92:c0:0f:c9:a7:90:30:f8:f4:03:a4:6a:8f:
39:fd:77:53:2e:67:9a:f2:7d:d0:35:db:e2:01:43:dc:36:52:
fd:bf:ef:d0:db:84:50:8b:e9:b1:be:64:eb:4d:62:5c:0b:90:
dc:9e:b9:05:89:ca:0c:28:ce:02:76:85:f7:a9:30:74:d5:67:
cc:0b:26:d4:24:47:96:57:53:4e:1e:78:e8:10:4a:69:b3:09:
c3:3a:39:69:b3:01:3b:52:6b:f4:c1:f8:33:0a:08:a0:72:d9:
e7:1f:83:b1:4f:2b:41:62:fe:b5:ab:3a:00:3c:a7:b5:1e:1f:
76:94:f6:38:ff:55:c1:84:73:81:34:39:f8:37:3f:81:23:88:
9a:2c:2e:90:61:15:e8:bb:e2:75:fc:29:dd:58:60:81:9d:21:
6d:9c:2a:37:38:5c:92:6f:34:da:8a:3c:b2:3d:ff:d6:b6:cd:
27:f4:26:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 00:02:23 2026 by rpki-client