
$ rpki-client -vvf r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/3136392e34302e38302e302f32302d3230203d3e203230333236.roa
File: 3136392e34302e38302e302f32302d3230203d3e203230333236.roa (raw, json)
Hash identifier: zK9WZ0AS3euTO/kPAOlra72bdwfa+cUuy5tb4clLMqc=
Subject key identifier: 96:D8:2E:A0:D7:8B:48:9A:91:84:7D:4B:8F:A6:CB:58:58:BF:FB:12
Certificate issuer: /CN=AEF766F103B2EF99DF8C71978A7FE519D730B155
Certificate serial: 060A6A9A535005F668A14D2038EC8B54F361E101
Authority key identifier: AE:F7:66:F1:03:B2:EF:99:DF:8C:71:97:8A:7F:E5:19:D7:30:B1:55
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AEF766F103B2EF99DF8C71978A7FE519D730B155.cer
Subject info access: rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/3136392e34302e38302e302f32302d3230203d3e203230333236.roa
Signing time: Thu 12 Feb 2026 01:05:03 +0000
ROA not before: Thu 12 Feb 2026 01:00:03 +0000
ROA not after: Thu 11 Feb 2027 01:05:03 +0000
asID: 20326
IP address blocks: 169.40.80.0/20 maxlen: 20
Validation: OK
Signature path: rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AEF766F103B2EF99DF8C71978A7FE519D730B155.crl
rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AEF766F103B2EF99DF8C71978A7FE519D730B155.mft
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AEF766F103B2EF99DF8C71978A7FE519D730B155.cer
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 06:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
06:0a:6a:9a:53:50:05:f6:68:a1:4d:20:38:ec:8b:54:f3:61:e1:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=AEF766F103B2EF99DF8C71978A7FE519D730B155
Validity
Not Before: Feb 12 01:00:03 2026 GMT
Not After : Feb 11 01:05:03 2027 GMT
Subject: CN=96D82EA0D78B489A91847D4B8FA6CB5858BFFB12
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:d2:77:38:5d:4d:85:ce:15:11:45:68:d7:40:
c4:a3:1f:d6:07:b5:4c:77:12:1e:50:ba:d3:3a:e1:
b0:a4:cd:c6:36:25:e1:d0:99:5e:eb:ef:88:a2:68:
d8:4f:4f:5b:fb:aa:59:a4:7b:1e:37:e6:55:e6:9f:
c7:ec:19:09:64:c3:68:d3:b7:ab:19:ca:3e:b5:81:
d9:6a:a1:15:b0:41:3c:36:3e:35:7a:df:b7:d7:32:
24:68:7e:47:93:7f:d1:9a:41:aa:ad:00:72:96:bb:
5f:de:7e:0b:34:7f:cf:35:74:a4:e7:a0:fc:85:f4:
c6:43:38:65:e2:52:cd:e7:47:8d:df:31:7c:b9:81:
1f:56:fe:16:f3:70:b8:b5:93:73:ea:61:60:58:69:
4b:13:09:95:7f:68:e1:a9:a9:53:9a:3d:a4:bd:bc:
c8:ef:d5:ef:cf:3e:3c:5c:9b:fb:af:b1:1e:c3:a6:
6b:15:3f:45:31:66:fa:87:80:0a:cb:86:aa:8a:54:
c6:00:09:c2:48:45:e3:d6:9e:65:77:37:2c:a4:0f:
4e:e9:ac:03:9a:e0:43:7e:6c:9e:14:6f:03:3f:22:
3d:e4:34:cc:8a:46:8e:da:73:8d:d5:ea:5e:67:12:
28:d8:12:ba:05:0e:c7:f8:6b:d4:a8:62:be:ed:8e:
04:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:D8:2E:A0:D7:8B:48:9A:91:84:7D:4B:8F:A6:CB:58:58:BF:FB:12
X509v3 Authority Key Identifier:
keyid:AE:F7:66:F1:03:B2:EF:99:DF:8C:71:97:8A:7F:E5:19:D7:30:B1:55
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AEF766F103B2EF99DF8C71978A7FE519D730B155.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AEF766F103B2EF99DF8C71978A7FE519D730B155.cer
Subject Information Access:
Signed Object - URI:rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/3136392e34302e38302e302f32302d3230203d3e203230333236.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
169.40.80.0/20
Signature Algorithm: sha256WithRSAEncryption
68:ca:8d:3c:64:fc:bf:ee:fb:21:13:68:f8:28:6a:5b:b7:63:
a5:ee:5a:da:76:f5:a3:33:bc:6b:6a:8d:22:67:d6:70:9c:40:
89:39:9f:88:9b:cd:2c:d5:ba:73:f0:ab:e2:b9:eb:e8:9e:aa:
39:a3:64:81:c0:79:17:4b:c8:7e:09:ec:53:83:28:2d:3b:a0:
e9:28:a7:7b:84:78:c0:29:72:f9:e4:2e:e7:12:1c:c0:ed:5f:
77:ab:1d:87:f4:7a:76:98:70:67:8a:04:e5:1c:c1:f5:87:2f:
85:11:bc:b4:41:d2:0f:35:57:65:17:5b:49:4c:6e:e8:d7:b9:
03:c9:d4:ae:f8:d6:3e:55:c5:07:ff:c0:3e:68:1e:8e:5e:c3:
4b:93:f0:bd:18:6a:75:65:f5:85:26:ff:46:99:d7:9b:6b:f8:
b7:4f:89:08:e3:db:49:e9:37:ed:9b:24:ca:87:b9:37:5c:db:
77:5b:1d:32:df:91:e0:10:fb:6d:f0:43:8c:42:ca:91:9b:35:
07:1d:ae:df:b0:ef:15:65:3c:23:41:65:da:10:3f:f3:3d:bd:
50:bc:54:5a:b3:83:73:f8:df:f2:5c:56:80:11:ba:44:cc:f4:
29:4c:8f:7a:1d:6d:41:4e:b4:1d:bd:bf:91:3f:f1:a6:7d:cf:
e0:d8:d9:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 16:22:07 2026 by rpki-client