
$ rpki-client -vvvf r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/AS7029.roa
File: AS7029.roa (raw, json)
Hash identifier: mUydzlAmXyvQbqE/9Wi9XDjfvymnXd8tJc6RqppzPtE=
Subject key identifier: 55:0E:5A:F3:FB:6B:D8:D8:B3:75:0F:3C:9C:9A:B4:9E:B4:7B:22:F2
Certificate issuer: /CN=D34606949D385DB42714FE71274FAC9948EF279C
Certificate serial: 6E43344F7C069849DB1B62CB8826B0C676848A00
Authority key identifier: D3:46:06:94:9D:38:5D:B4:27:14:FE:71:27:4F:AC:99:48:EF:27:9C
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/D34606949D385DB42714FE71274FAC9948EF279C.cer
Subject info access: rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/AS7029.roa
Signing time: Tue 03 Nov 2026 13:49:39 +0000
ROA not before: Tue 03 Nov 2026 13:44:39 +0000
ROA not after: Tue 02 Nov 2027 13:49:39 +0000
asID: 7029
IP address blocks: 86.38.4.0/23 maxlen: 24
86.38.184.0/23 maxlen: 24
86.38.186.0/23 maxlen: 24
89.116.242.0/23 maxlen: 24
89.116.246.0/23 maxlen: 24
Validation: OK
Signature path: rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/D34606949D385DB42714FE71274FAC9948EF279C.crl
rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/D34606949D385DB42714FE71274FAC9948EF279C.mft
rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/D34606949D385DB42714FE71274FAC9948EF279C.cer
rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/9DF85997B1B9B358E1C43F36765AA0A4A02144AE.crl
rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/9DF85997B1B9B358E1C43F36765AA0A4A02144AE.mft
rsync://rpki.ripe.net/repository/DEFAULT/nfhZl7G5s1jhxD82dlqgpKAhRK4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 05 Nov 2026 22:58:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6e:43:34:4f:7c:06:98:49:db:1b:62:cb:88:26:b0:c6:76:84:8a:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D34606949D385DB42714FE71274FAC9948EF279C
Validity
Not Before: Nov 3 13:44:39 2026 GMT
Not After : Nov 2 13:49:39 2027 GMT
Subject: CN=550E5AF3FB6BD8D8B3750F3C9C9AB49EB47B22F2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fb:c1:c2:4c:60:c5:4b:7c:3e:cd:b1:35:53:f1:
ff:32:4c:5d:df:75:e8:0e:c5:16:32:38:df:45:d6:
e2:cd:29:a0:15:4c:50:dc:0c:7a:82:b8:dc:99:28:
c9:c4:a2:c7:92:61:c1:2f:09:44:b0:8f:bc:b1:5d:
ab:d9:66:74:85:4d:1f:e4:37:35:df:e2:fc:d4:c5:
aa:6c:eb:ce:f9:9e:e6:a6:0d:db:58:68:29:93:af:
06:58:3a:e2:5d:c7:61:99:1b:9a:cb:aa:1f:9f:c9:
dc:d7:a6:93:82:23:f8:e1:21:17:ff:6a:05:74:ec:
2c:f1:84:5b:02:b7:25:9c:19:da:25:80:39:be:78:
55:98:4d:6e:10:c9:01:3f:4e:ae:f9:38:93:20:02:
1f:cb:81:ce:64:3d:da:1a:52:39:61:eb:a5:c5:08:
23:d0:5d:ba:34:8f:35:ea:75:3a:d3:5f:36:31:32:
61:7f:13:55:20:8b:17:9e:37:8d:c8:b4:db:eb:37:
96:63:f5:28:50:01:7a:a4:ee:95:ac:d6:cf:43:65:
df:83:96:40:49:b7:0c:59:44:f8:3c:bd:ea:9c:95:
7c:99:d1:23:c7:1e:b3:0a:d3:a4:dd:6b:2b:c5:cb:
ab:05:0f:b8:c7:fc:2b:b9:60:1d:56:9f:cd:b5:bd:
22:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:0E:5A:F3:FB:6B:D8:D8:B3:75:0F:3C:9C:9A:B4:9E:B4:7B:22:F2
X509v3 Authority Key Identifier:
keyid:D3:46:06:94:9D:38:5D:B4:27:14:FE:71:27:4F:AC:99:48:EF:27:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/D34606949D385DB42714FE71274FAC9948EF279C.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/D34606949D385DB42714FE71274FAC9948EF279C.cer
Subject Information Access:
Signed Object - URI:rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/AS7029.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
86.38.4.0/23
86.38.184.0/22
89.116.242.0/23
89.116.246.0/23
Signature Algorithm: sha256WithRSAEncryption
b5:5b:96:a7:c2:fa:85:18:2a:25:cf:7b:6e:91:4c:2e:ed:d2:
7c:3c:42:9b:62:4c:5c:c9:63:40:22:2a:1f:bc:59:f3:10:ab:
06:17:e5:12:37:4d:d6:f8:8f:a8:93:5d:e5:6d:7b:09:4c:e7:
e0:f1:7a:4f:5b:e1:84:12:df:4c:38:dd:bc:2f:29:b7:d9:c7:
45:5e:26:cc:35:7f:4a:1c:72:45:e3:9c:d7:86:8f:d7:23:e6:
79:e7:a5:fa:37:fc:4b:94:eb:77:e1:c9:70:c4:84:00:3e:2a:
9e:aa:4d:94:6f:a7:23:06:20:34:c6:89:fa:6f:44:67:09:f3:
ed:b9:ec:52:c7:44:46:68:2e:3d:e3:f0:96:f8:55:5f:61:46:
50:51:41:69:10:ee:64:74:c1:d4:1a:8a:c6:f3:17:74:7e:0b:
37:18:f9:53:59:cb:32:b5:2f:f0:89:10:0a:84:e8:9b:b5:60:
ed:1d:bf:b3:af:5c:49:4c:b8:3d:dd:d3:71:cc:76:ee:77:42:
41:a7:30:29:e7:16:27:75:01:3b:a4:63:ad:79:fd:01:bf:6c:
2b:64:3b:5d:43:64:f2:06:55:d0:fb:fa:d1:75:42:f5:51:c2:
6b:a6:4e:82:25:35:1b:d7:55:dc:be:82:6c:ef:3e:32:7c:4d:
64:7f:e8:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 5 12:08:55 2026 by rpki-client