Route Origin Authorization
$ rpki-client -vvvf r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/AS834.roa
File: AS834.roa (raw, json)
Hash identifier: d5BSO8ai7w+pSwdhH5+pmCLLZwr95G4zFSQVjeWAxNc=
Subject key identifier: FE:9C:DC:93:EA:60:30:B0:0A:17:94:25:7B:D1:9E:AC:9D:6D:D0:63
Certificate issuer: /CN=D34606949D385DB42714FE71274FAC9948EF279C
Certificate serial: 18D80DA686319373BAF32A4412054B91F80BE5B5
Authority key identifier: D3:46:06:94:9D:38:5D:B4:27:14:FE:71:27:4F:AC:99:48:EF:27:9C
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/D34606949D385DB42714FE71274FAC9948EF279C.cer
Subject info access: rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/AS834.roa
Signing time: Tue 03 Nov 2026 11:20:53 +0000
ROA not before: Tue 03 Nov 2026 11:15:53 +0000
ROA not after: Tue 02 Nov 2027 11:20:53 +0000
asID: 834
IP address blocks: 84.46.236.0/22 maxlen: 24
86.38.180.0/23 maxlen: 24
86.38.183.0/24 maxlen: 24
86.38.246.0/24 maxlen: 24
86.38.251.0/24 maxlen: 24
89.116.64.0/22 maxlen: 24
89.116.72.0/23 maxlen: 24
89.116.127.0/24 maxlen: 24
89.116.164.0/23 maxlen: 24
89.116.172.0/24 maxlen: 24
89.116.210.0/23 maxlen: 23
89.117.0.0/22 maxlen: 24
89.117.12.0/23 maxlen: 24
89.117.65.0/24 maxlen: 24
89.117.70.0/24 maxlen: 24
89.117.81.0/24 maxlen: 24
89.117.94.0/23 maxlen: 24
89.117.96.0/22 maxlen: 24
89.117.112.0/22 maxlen: 22
89.117.120.0/22 maxlen: 24
89.117.132.0/23 maxlen: 24
89.117.142.0/23 maxlen: 24
89.117.153.0/24 maxlen: 24
89.117.158.0/23 maxlen: 24
89.117.172.0/22 maxlen: 24
89.117.216.0/23 maxlen: 23
Validation: OK
Signature path: rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/D34606949D385DB42714FE71274FAC9948EF279C.crl
rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/D34606949D385DB42714FE71274FAC9948EF279C.mft
rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/D34606949D385DB42714FE71274FAC9948EF279C.cer
rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/9DF85997B1B9B358E1C43F36765AA0A4A02144AE.crl
rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/9DF85997B1B9B358E1C43F36765AA0A4A02144AE.mft
rsync://rpki.ripe.net/repository/DEFAULT/nfhZl7G5s1jhxD82dlqgpKAhRK4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 05 Nov 2026 22:58:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
18:d8:0d:a6:86:31:93:73:ba:f3:2a:44:12:05:4b:91:f8:0b:e5:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D34606949D385DB42714FE71274FAC9948EF279C
Validity
Not Before: Nov 3 11:15:53 2026 GMT
Not After : Nov 2 11:20:53 2027 GMT
Subject: CN=FE9CDC93EA6030B00A1794257BD19EAC9D6DD063
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:7d:fc:9d:24:80:a7:63:87:c5:30:39:79:65:
5a:4c:51:f4:5d:df:cb:06:04:c9:1f:71:01:fb:8b:
0b:5a:d8:59:d4:95:85:a6:6d:1b:ec:a9:cb:d4:61:
29:15:e7:58:dc:1e:fe:79:4f:47:14:2e:2c:bf:b0:
c8:ec:72:db:74:d0:cc:62:70:51:57:3c:4f:48:bb:
66:d9:6a:1e:1b:df:d0:98:c4:f7:07:04:ad:c8:2f:
1d:73:f6:c7:79:65:23:c7:44:81:bc:9a:b7:07:d2:
a0:4e:5b:1b:b7:ee:34:c7:64:ef:0e:e5:eb:e2:60:
ca:d8:e3:47:49:8a:80:67:c7:59:d5:d5:1b:d0:26:
cd:e3:89:0b:60:5f:03:0f:ff:6b:5e:12:c1:48:ed:
b2:50:7d:27:99:73:d2:06:20:ed:72:a6:88:6e:3d:
b5:c6:2f:dd:12:3b:44:d3:df:13:0b:26:d2:3e:61:
c2:02:2f:fb:62:92:6f:ca:01:77:f0:26:56:4e:0f:
61:87:88:60:62:67:c2:7e:10:b6:91:4e:2c:e5:c0:
8a:2d:63:8a:0e:6f:42:3b:e1:ad:c0:15:48:12:7e:
ae:f3:a4:c0:10:b1:af:71:43:bd:36:1d:31:51:26:
76:52:cf:7d:3b:99:44:4d:23:f5:22:9b:d0:48:2e:
44:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:9C:DC:93:EA:60:30:B0:0A:17:94:25:7B:D1:9E:AC:9D:6D:D0:63
X509v3 Authority Key Identifier:
keyid:D3:46:06:94:9D:38:5D:B4:27:14:FE:71:27:4F:AC:99:48:EF:27:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/D34606949D385DB42714FE71274FAC9948EF279C.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/D34606949D385DB42714FE71274FAC9948EF279C.cer
Subject Information Access:
Signed Object - URI:rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/AS834.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.46.236.0/22
86.38.180.0/23
86.38.183.0/24
86.38.246.0/24
86.38.251.0/24
89.116.64.0/22
89.116.72.0/23
89.116.127.0/24
89.116.164.0/23
89.116.172.0/24
89.116.210.0/23
89.117.0.0/22
89.117.12.0/23
89.117.65.0/24
89.117.70.0/24
89.117.81.0/24
89.117.94.0-89.117.99.255
89.117.112.0/22
89.117.120.0/22
89.117.132.0/23
89.117.142.0/23
89.117.153.0/24
89.117.158.0/23
89.117.172.0/22
89.117.216.0/23
Signature Algorithm: sha256WithRSAEncryption
5e:71:36:aa:b1:3c:62:55:20:44:57:6e:bb:55:63:c1:71:6e:
a7:68:6c:61:f1:75:98:40:a2:ba:14:24:c7:b1:6f:36:b0:97:
2b:2c:3b:15:2a:e1:1b:11:7c:13:81:4a:43:93:a0:db:14:f8:
d3:f1:53:7a:9a:95:5c:ee:5b:92:d4:a6:67:3f:bb:9f:f8:49:
86:c0:f8:bb:e0:c8:d2:35:75:37:af:c7:2f:2a:c5:b1:0a:d5:
2b:b4:b5:56:18:35:6a:f7:6a:82:32:f5:83:29:cf:46:37:75:
f5:08:b3:9e:20:ad:35:01:c1:eb:08:48:cc:f8:b8:e2:29:ef:
f5:d2:42:cc:51:4b:f5:30:cc:92:5b:23:ea:52:aa:5e:37:15:
5f:f0:9a:90:80:9d:bd:43:2a:5d:26:09:c6:e7:ab:ef:56:9d:
69:3b:42:c8:ea:be:37:35:e4:c5:ae:65:37:32:bb:a6:23:fb:
8a:94:f9:51:87:1c:65:db:9a:6a:b9:f1:bf:37:e1:fa:66:a1:
65:5d:f9:dc:7b:be:d6:3c:53:e4:02:5d:ec:e7:36:6e:c1:c5:
1a:74:4f:ff:10:64:33:1f:8a:e0:ec:45:e7:d9:b9:b1:1f:14:
1e:7b:fd:d6:8b:67:16:ba:d1:d8:4f:3b:59:54:00:ae:cf:47:
1d:fd:5c:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 5 15:10:10 2026 by rpki-client