
$ rpki-client -vvvf r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/AS218539.roa
File: AS218539.roa (raw, json)
Hash identifier: 9eLpDka+PD6q66nh/aOUQ5JGCV/mp6Q5hFVKL8TLbAY=
Subject key identifier: 96:EE:4F:F7:76:67:DA:4A:51:64:BD:7D:99:64:E9:EF:7F:69:58:59
Certificate issuer: /CN=B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5
Certificate serial: 0FCE9D8211D82B51DF7DACDD824B7D1D96D133C2
Authority key identifier: B3:54:D3:28:CB:BF:D1:EF:3C:D2:92:68:A2:3B:0F:CC:60:E3:A2:C5
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.cer
Subject info access: rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/AS218539.roa
Signing time: Sat 03 Oct 2026 06:33:01 +0000
ROA not before: Sat 03 Oct 2026 06:28:01 +0000
ROA not after: Sat 02 Oct 2027 06:33:01 +0000
asID: 218539
IP address blocks: 164.37.204.0/24 maxlen: 24
Validation: OK
Signature path: rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.crl
rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.mft
rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.cer
rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/D0A516B50426202A424F0EBFCB7D2BD4F744F964.crl
rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/D0A516B50426202A424F0EBFCB7D2BD4F744F964.mft
rsync://rpki.ripe.net/repository/DEFAULT/0KUWtQQmICpCTw6_y30r1PdE-WQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 Oct 2026 05:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0f:ce:9d:82:11:d8:2b:51:df:7d:ac:dd:82:4b:7d:1d:96:d1:33:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5
Validity
Not Before: Oct 3 06:28:01 2026 GMT
Not After : Oct 2 06:33:01 2027 GMT
Subject: CN=96EE4FF77667DA4A5164BD7D9964E9EF7F695859
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:0a:06:a6:f0:a5:4d:03:df:9a:dd:ff:53:03:
43:17:ba:26:bc:5e:20:3d:78:d3:6c:7d:cc:03:d4:
48:20:e6:86:3d:f9:cc:a5:e6:11:85:d1:ff:ea:aa:
a6:80:94:bd:48:f5:73:2d:ba:46:ba:be:35:73:0f:
8d:78:97:93:c9:0a:b2:af:9a:88:4e:29:31:8f:5e:
44:9d:06:c2:d4:68:e2:29:d8:6f:bd:4c:33:ee:0e:
02:af:f9:cb:9d:bf:ad:1d:53:b5:db:1b:53:d2:f0:
3f:92:e7:41:b3:d4:14:04:dd:e2:fb:c9:d3:3d:2f:
d0:07:2f:5c:21:4d:cd:cf:4b:72:89:3a:79:bc:ea:
95:47:41:f2:44:01:7d:b1:9f:a4:07:05:91:7d:78:
70:23:51:74:76:f2:1d:23:11:9e:67:5f:98:22:4e:
a6:e9:69:ad:ea:06:92:46:8e:37:64:88:6a:7c:26:
e1:c8:d0:3a:23:97:9c:62:3f:4b:0c:e5:df:8d:f4:
f7:b4:aa:70:29:62:d4:f4:39:4a:9b:29:78:35:9d:
78:bc:d8:8f:b1:f5:39:3d:89:6c:4d:72:a3:69:fe:
e8:3e:db:86:24:62:fc:b0:16:3b:1e:fa:63:bb:9a:
55:a3:8f:b8:1a:a5:68:3b:43:61:47:df:bc:8c:d5:
d6:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:EE:4F:F7:76:67:DA:4A:51:64:BD:7D:99:64:E9:EF:7F:69:58:59
X509v3 Authority Key Identifier:
keyid:B3:54:D3:28:CB:BF:D1:EF:3C:D2:92:68:A2:3B:0F:CC:60:E3:A2:C5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.cer
Subject Information Access:
Signed Object - URI:rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/AS218539.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
164.37.204.0/24
Signature Algorithm: sha256WithRSAEncryption
05:1a:a0:39:92:cd:2a:ba:c5:89:22:c8:6e:cf:e4:fd:c7:25:
b5:4c:2e:01:52:34:90:36:9d:db:11:55:55:2a:1b:9f:7e:d4:
01:d9:24:0a:a6:b6:a5:35:04:aa:7d:6e:ad:39:59:9d:b8:b1:
7d:88:39:85:90:af:68:19:d1:39:23:5c:f2:35:25:3b:53:0c:
ca:79:00:47:aa:89:9f:6e:3f:cb:5a:c7:47:23:e1:1e:d3:a7:
be:b1:a6:a3:cf:7c:78:ce:c4:ad:54:e3:bd:15:fe:9b:26:f8:
a6:cf:50:5d:94:85:1a:7b:3a:c4:29:eb:f9:36:9a:2b:20:04:
aa:b6:b2:31:1e:0a:36:32:80:bb:3d:89:60:15:e7:e9:0f:ce:
a6:c6:81:f1:16:03:49:c3:64:f4:e7:aa:40:2a:24:58:c5:7c:
4f:92:3d:60:2f:02:82:27:a6:09:90:84:99:5d:cc:be:02:df:
2c:6c:73:a7:f3:1b:9e:5b:9d:9c:b8:09:2c:35:05:46:c7:e2:
d1:23:a9:04:d4:4c:f0:26:8c:dc:94:98:e0:f0:8e:51:10:12:
88:47:c3:a4:af:87:08:b7:45:71:d8:6a:3d:3b:02:8e:8e:52:
fd:40:89:29:d5:55:fd:98:14:ff:9a:51:04:68:cc:09:57:fa:
34:54:18:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 14:21:12 2026 by rpki-client