Route Origin Authorization
$ rpki-client -vvvf r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/AS834.roa
File: AS834.roa (raw, json)
Hash identifier: xBXHzUcTXwpUOtisWVBgROBBlhK7VOrRI5UF7vd2RiI=
Subject key identifier: 36:EA:E6:9B:C9:02:DD:0F:21:7A:99:6B:A1:76:C9:A8:17:8F:CB:FA
Certificate issuer: /CN=D34606949D385DB42714FE71274FAC9948EF279C
Certificate serial: 4AC3E8F8B24D802231F8B1E7943BFC3879F6ABD0
Authority key identifier: D3:46:06:94:9D:38:5D:B4:27:14:FE:71:27:4F:AC:99:48:EF:27:9C
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/D34606949D385DB42714FE71274FAC9948EF279C.cer
Subject info access: rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/AS834.roa
Signing time: Sat 19 Sep 2026 21:15:45 +0000
ROA not before: Sat 19 Sep 2026 21:10:45 +0000
ROA not after: Sat 18 Sep 2027 21:15:45 +0000
asID: 834
IP address blocks: 84.46.236.0/22 maxlen: 24
86.38.180.0/23 maxlen: 24
86.38.183.0/24 maxlen: 24
86.38.184.0/24 maxlen: 24
86.38.246.0/24 maxlen: 24
86.38.251.0/24 maxlen: 24
89.116.8.0/23 maxlen: 24
89.116.10.0/24 maxlen: 24
89.116.64.0/22 maxlen: 24
89.116.72.0/23 maxlen: 24
89.116.127.0/24 maxlen: 24
89.116.164.0/23 maxlen: 24
89.116.210.0/23 maxlen: 23
89.117.0.0/22 maxlen: 24
89.117.12.0/23 maxlen: 24
89.117.28.0/24 maxlen: 24
89.117.81.0/24 maxlen: 24
89.117.94.0/23 maxlen: 24
89.117.96.0/22 maxlen: 24
89.117.112.0/22 maxlen: 22
89.117.120.0/22 maxlen: 24
89.117.132.0/23 maxlen: 24
89.117.142.0/23 maxlen: 24
89.117.153.0/24 maxlen: 24
89.117.158.0/23 maxlen: 24
89.117.172.0/22 maxlen: 24
89.117.216.0/23 maxlen: 23
Validation: OK
Signature path: rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/D34606949D385DB42714FE71274FAC9948EF279C.crl
rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/D34606949D385DB42714FE71274FAC9948EF279C.mft
rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/D34606949D385DB42714FE71274FAC9948EF279C.cer
rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/9DF85997B1B9B358E1C43F36765AA0A4A02144AE.crl
rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/9DF85997B1B9B358E1C43F36765AA0A4A02144AE.mft
rsync://rpki.ripe.net/repository/DEFAULT/nfhZl7G5s1jhxD82dlqgpKAhRK4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 11:16:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4a:c3:e8:f8:b2:4d:80:22:31:f8:b1:e7:94:3b:fc:38:79:f6:ab:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D34606949D385DB42714FE71274FAC9948EF279C
Validity
Not Before: Sep 19 21:10:45 2026 GMT
Not After : Sep 18 21:15:45 2027 GMT
Subject: CN=36EAE69BC902DD0F217A996BA176C9A8178FCBFA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:76:71:94:38:01:d4:84:d2:cf:01:1c:17:e7:
22:64:c5:c0:87:de:74:6a:b3:fb:42:c4:ac:21:74:
03:4c:2d:57:f7:7f:a3:d2:a3:30:e8:53:3d:bb:7c:
bb:7a:2e:8d:bf:b8:a8:f7:4e:e9:b9:ba:4f:d1:0e:
d1:09:f6:a5:89:81:cb:cb:d7:4d:f2:d2:40:34:41:
9b:3f:84:a8:aa:f9:e5:1d:a0:9d:01:af:ab:0e:fd:
c7:34:9e:2a:7b:6b:36:fd:54:56:a0:cb:e3:7e:18:
f6:25:b6:e5:c2:93:cf:3d:14:9d:a2:37:f9:f4:ec:
32:47:02:88:2c:d5:ef:fa:ad:81:da:30:ac:c2:b6:
63:d1:0a:be:2c:22:89:6c:ab:a5:8a:b4:32:f7:61:
70:19:34:b4:34:1c:5a:6a:c0:39:79:c4:f5:07:66:
93:c6:62:07:9d:09:4e:b4:04:8d:26:15:62:8b:70:
f6:59:bd:d6:c9:da:44:f0:67:1e:0f:92:e6:80:28:
44:13:e0:24:08:f7:a1:06:10:9d:43:65:23:4b:f6:
20:96:f4:e2:a8:56:77:09:25:63:f1:7d:d0:bc:7f:
aa:65:27:54:6a:b7:f4:98:fc:43:a3:c9:2c:54:ea:
34:a6:e6:1c:ae:07:36:4e:61:f2:82:06:c8:07:14:
55:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:EA:E6:9B:C9:02:DD:0F:21:7A:99:6B:A1:76:C9:A8:17:8F:CB:FA
X509v3 Authority Key Identifier:
keyid:D3:46:06:94:9D:38:5D:B4:27:14:FE:71:27:4F:AC:99:48:EF:27:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/D34606949D385DB42714FE71274FAC9948EF279C.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/D34606949D385DB42714FE71274FAC9948EF279C.cer
Subject Information Access:
Signed Object - URI:rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/AS834.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.46.236.0/22
86.38.180.0/23
86.38.183.0-86.38.184.255
86.38.246.0/24
86.38.251.0/24
89.116.8.0-89.116.10.255
89.116.64.0/22
89.116.72.0/23
89.116.127.0/24
89.116.164.0/23
89.116.210.0/23
89.117.0.0/22
89.117.12.0/23
89.117.28.0/24
89.117.81.0/24
89.117.94.0-89.117.99.255
89.117.112.0/22
89.117.120.0/22
89.117.132.0/23
89.117.142.0/23
89.117.153.0/24
89.117.158.0/23
89.117.172.0/22
89.117.216.0/23
Signature Algorithm: sha256WithRSAEncryption
08:67:e0:fa:35:7d:70:4c:09:29:2f:e9:8c:2c:1d:35:43:6a:
b1:f8:23:b2:82:ed:20:10:e5:52:2b:68:91:41:45:b4:45:e8:
54:59:b2:34:de:b9:30:65:88:e3:e8:9d:b9:b9:41:39:88:92:
dc:b4:ec:b7:29:6e:33:70:38:e6:61:4a:47:6a:b8:e2:e7:3d:
94:ad:e2:13:35:76:1a:40:3a:13:6a:42:d9:d1:82:1f:55:cb:
69:6c:f0:32:84:5a:f2:fe:55:7d:e0:d8:4d:0b:a9:98:9a:2d:
bf:74:cb:33:6f:4f:3b:a0:a1:d6:e7:ca:bd:11:c9:21:f0:e3:
ac:57:db:40:bf:fa:ff:5e:95:0b:2e:1e:91:74:40:9c:d9:57:
ad:85:f3:15:ed:59:d9:3c:2c:88:8c:5a:c8:d6:39:de:1d:7f:
fe:62:21:11:8f:b2:47:c9:95:af:67:79:0a:3c:7a:06:27:85:
80:f9:6a:33:74:33:0b:22:36:be:b9:7c:2a:6d:dc:f3:57:7a:
3e:c3:bf:14:69:e1:24:34:00:b2:27:e2:b9:27:0f:f1:ac:5a:
0a:26:2b:c4:5a:a9:70:35:77:bd:f3:28:4a:be:e5:db:23:f7:
00:2c:4e:af:52:87:96:be:0d:fa:65:a3:cd:bd:2d:5e:ed:98:
7b:cf:f1:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 01:27:27 2026 by rpki-client