Route Origin Authorization
$ rpki-client -vvvf r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/AS212238.roa
File: AS212238.roa (raw, json)
Hash identifier: klrHU3QgLOiK4UjPFnIEtwRy5IEQSAR4EG9pW+9m4o0=
Subject key identifier: D7:C0:BA:0F:B7:41:59:9D:BC:B8:D2:BD:38:78:B1:4D:65:E0:E8:23
Certificate issuer: /CN=D34606949D385DB42714FE71274FAC9948EF279C
Certificate serial: 7B0E23237392BFAEEAFEFC1EC6FA673381F2FF0C
Authority key identifier: D3:46:06:94:9D:38:5D:B4:27:14:FE:71:27:4F:AC:99:48:EF:27:9C
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/D34606949D385DB42714FE71274FAC9948EF279C.cer
Subject info access: rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/AS212238.roa
Signing time: Sat 31 Oct 2026 11:33:46 +0000
ROA not before: Sat 31 Oct 2026 11:28:46 +0000
ROA not after: Sat 30 Oct 2027 11:33:46 +0000
asID: 212238
IP address blocks: 82.140.182.0/24 maxlen: 24
82.140.183.0/24 maxlen: 24
84.46.171.0/24 maxlen: 24
84.46.237.0/24 maxlen: 24
84.46.238.0/24 maxlen: 24
86.38.5.0/24 maxlen: 24
86.38.156.0/24 maxlen: 24
86.38.177.0/24 maxlen: 24
86.38.180.0/24 maxlen: 24
86.38.181.0/24 maxlen: 24
86.38.219.0/24 maxlen: 24
86.38.247.0/24 maxlen: 24
89.116.65.0/24 maxlen: 24
89.116.66.0/24 maxlen: 24
89.116.67.0/24 maxlen: 24
89.116.75.0/24 maxlen: 24
89.116.103.0/24 maxlen: 24
89.116.131.0/24 maxlen: 24
89.116.141.0/24 maxlen: 24
89.116.168.0/24 maxlen: 24
89.116.169.0/24 maxlen: 24
89.116.183.0/24 maxlen: 24
89.116.255.0/24 maxlen: 24
89.117.13.0/24 maxlen: 24
89.117.41.0/24 maxlen: 24
89.117.95.0/24 maxlen: 24
89.117.97.0/24 maxlen: 24
89.117.98.0/24 maxlen: 24
89.117.99.0/24 maxlen: 24
89.117.109.0/24 maxlen: 24
89.117.111.0/24 maxlen: 24
89.117.121.0/24 maxlen: 24
89.117.122.0/24 maxlen: 24
Validation: OK
Signature path: rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/D34606949D385DB42714FE71274FAC9948EF279C.crl
rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/D34606949D385DB42714FE71274FAC9948EF279C.mft
rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/D34606949D385DB42714FE71274FAC9948EF279C.cer
rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/9DF85997B1B9B358E1C43F36765AA0A4A02144AE.crl
rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/9DF85997B1B9B358E1C43F36765AA0A4A02144AE.mft
rsync://rpki.ripe.net/repository/DEFAULT/nfhZl7G5s1jhxD82dlqgpKAhRK4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 06 Nov 2026 02:38:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7b:0e:23:23:73:92:bf:ae:ea:fe:fc:1e:c6:fa:67:33:81:f2:ff:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D34606949D385DB42714FE71274FAC9948EF279C
Validity
Not Before: Oct 31 11:28:46 2026 GMT
Not After : Oct 30 11:33:46 2027 GMT
Subject: CN=D7C0BA0FB741599DBCB8D2BD3878B14D65E0E823
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:5b:07:3a:97:dc:8b:08:35:1d:11:67:64:8c:
2a:1d:04:31:13:81:df:62:77:65:5a:db:71:f4:9d:
c8:63:ee:bd:6f:f3:fc:d8:cd:06:cc:8b:9d:1c:87:
d7:b6:77:62:b3:50:f8:4a:4d:2e:b8:35:e8:84:c5:
68:6d:9c:88:9a:70:3f:1f:55:e5:fd:8d:96:3b:34:
13:4c:4f:59:80:64:ce:71:74:8e:20:ea:3a:58:99:
e5:0e:5c:49:cc:09:54:c5:78:b6:1f:a4:e9:10:4c:
d4:53:f0:cf:32:ba:48:c6:1d:0e:a5:3b:7c:70:fd:
de:e0:1d:3e:b7:33:3c:dd:d3:26:d6:e8:0c:5b:d2:
6a:c5:c4:5d:36:d7:c3:1c:cd:7f:5c:a4:a5:6b:8c:
23:1c:1b:57:83:d3:70:8a:f8:c0:77:e9:76:65:1d:
34:fc:9f:79:9e:db:5f:40:52:ba:2a:0b:b0:32:cd:
40:b9:42:89:42:31:20:26:f2:ba:ba:e3:ee:6b:6e:
9a:e8:d6:aa:69:17:b7:ea:f6:e2:19:4b:78:57:c9:
4e:2a:da:08:52:1b:23:d8:e4:b7:c6:6f:00:fa:e1:
d2:d0:e6:92:50:f5:65:47:19:3d:24:81:4e:38:a1:
d6:29:31:72:f6:67:81:11:ac:e1:b9:88:47:40:0e:
98:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:C0:BA:0F:B7:41:59:9D:BC:B8:D2:BD:38:78:B1:4D:65:E0:E8:23
X509v3 Authority Key Identifier:
keyid:D3:46:06:94:9D:38:5D:B4:27:14:FE:71:27:4F:AC:99:48:EF:27:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/D34606949D385DB42714FE71274FAC9948EF279C.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/D34606949D385DB42714FE71274FAC9948EF279C.cer
Subject Information Access:
Signed Object - URI:rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/AS212238.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.140.182.0/23
84.46.171.0/24
84.46.237.0-84.46.238.255
86.38.5.0/24
86.38.156.0/24
86.38.177.0/24
86.38.180.0/23
86.38.219.0/24
86.38.247.0/24
89.116.65.0-89.116.67.255
89.116.75.0/24
89.116.103.0/24
89.116.131.0/24
89.116.141.0/24
89.116.168.0/23
89.116.183.0/24
89.116.255.0/24
89.117.13.0/24
89.117.41.0/24
89.117.95.0/24
89.117.97.0-89.117.99.255
89.117.109.0/24
89.117.111.0/24
89.117.121.0-89.117.122.255
Signature Algorithm: sha256WithRSAEncryption
4a:9d:82:30:0a:78:e2:aa:cf:82:89:1d:42:05:8f:78:15:d0:
f5:69:2c:a8:59:c0:ae:5e:3d:24:f8:58:55:9c:8c:2b:5a:71:
5e:27:22:a2:3e:f9:13:55:b4:d4:a1:07:fe:ab:4a:ca:dd:7f:
3e:48:88:e1:e4:8b:05:a7:50:b7:83:26:34:b4:55:73:b2:04:
9a:29:82:d4:4e:ed:e6:f1:de:a2:fe:73:4b:76:e8:18:75:31:
06:d0:f3:63:8d:0a:a8:cb:8f:c6:80:ab:9b:68:c4:57:42:e1:
f0:06:6d:05:7e:27:45:e2:10:d7:64:19:ed:b3:d4:04:a9:5b:
31:88:8a:12:41:61:44:47:3a:6b:39:30:35:7e:98:71:f5:9f:
40:ea:09:69:c3:5f:65:f6:e6:08:bb:45:84:c9:12:c2:25:ce:
13:b6:07:66:6f:17:89:a4:41:29:97:74:97:bc:21:39:d4:43:
04:bb:b8:c8:3d:4e:ca:80:77:aa:ce:97:b4:4f:17:da:36:0d:
f6:64:02:5e:97:9d:6c:c5:fc:1f:7c:c9:eb:0e:d4:bc:cb:98:
fa:82:ad:9b:8a:71:77:9e:53:4a:95:09:cc:f3:88:cf:89:e2:
b4:7a:c1:e4:f6:e5:08:b1:fe:4a:c1:db:c6:30:1a:6f:7b:d2:
51:b1:67:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 5 19:10:44 2026 by rpki-client