
$ rpki-client -vvf r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/33372e312e3233302e302f32342d3234203d3e20313938323530.roa
File: 33372e312e3233302e302f32342d3234203d3e20313938323530.roa (raw, json)
Hash identifier: Ch/Uv6u6jzcC5qenYvWcmRH+dYQq2hVQX9/VYPVLyt8=
Subject key identifier: AB:08:18:92:A6:9C:06:C7:91:EF:04:73:4B:E9:09:D3:16:D0:46:D4
Certificate issuer: /CN=2A2FB4DB0AA4D006958316872E467B554E0FD0BE
Certificate serial: 3BCAF2080FE24E3202041B2BA1BBD3210641EEA9
Authority key identifier: 2A:2F:B4:DB:0A:A4:D0:06:95:83:16:87:2E:46:7B:55:4E:0F:D0:BE
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.cer
Subject info access: rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/33372e312e3233302e302f32342d3234203d3e20313938323530.roa
Signing time: Fri 10 Apr 2026 03:18:33 +0000
ROA not before: Fri 10 Apr 2026 03:13:33 +0000
ROA not after: Fri 09 Apr 2027 03:18:33 +0000
asID: 198250
IP address blocks: 37.1.230.0/24 maxlen: 24
Validation: OK
Signature path: rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.crl
rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.mft
rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.cer
rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.crl
rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft
rsync://rpki.ripe.net/repository/DEFAULT/RQLmPOAcrSOaw5e8K7Xmw0fc7uo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 19 Apr 2026 23:31:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3b:ca:f2:08:0f:e2:4e:32:02:04:1b:2b:a1:bb:d3:21:06:41:ee:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2A2FB4DB0AA4D006958316872E467B554E0FD0BE
Validity
Not Before: Apr 10 03:13:33 2026 GMT
Not After : Apr 9 03:18:33 2027 GMT
Subject: CN=AB081892A69C06C791EF04734BE909D316D046D4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:7d:c4:6d:fd:a8:96:e9:7b:cb:88:65:29:01:
c5:30:ba:f4:0b:72:1e:b1:7f:96:52:c3:ae:9a:00:
92:d5:a3:ab:f1:2b:be:0d:e4:21:43:67:1f:66:82:
41:54:4b:6b:f3:fd:63:af:65:51:df:28:68:03:83:
51:24:51:12:64:e7:03:e5:a3:2d:0b:76:68:1f:fb:
d0:62:6a:3c:fc:37:fb:fd:71:d7:5e:95:2c:13:20:
d3:57:e2:91:02:05:49:66:b0:bf:e0:46:f9:e3:f9:
0a:63:14:a8:3a:91:d8:56:e2:41:35:64:99:42:12:
95:64:1d:a0:4c:45:79:3d:06:4a:30:60:2a:d2:69:
e5:ab:13:e9:b7:8e:4b:5a:76:7e:49:f4:c2:16:47:
dd:2e:1a:91:fa:38:9b:bc:ce:17:f3:84:b0:ec:df:
7b:6e:11:79:2a:bb:b0:28:8a:b7:bb:51:8b:c3:aa:
79:45:91:77:ef:09:ff:5d:e9:0d:5e:d2:12:51:cf:
78:c3:f4:05:d3:64:40:5c:90:d1:c8:8d:71:89:17:
c8:51:d9:eb:05:26:50:2c:04:90:80:27:8b:7f:ec:
2b:79:81:18:5a:da:05:1a:40:7d:50:be:84:1e:52:
7a:f7:49:dd:7f:24:dc:d1:f4:50:ab:d4:4b:8e:97:
a8:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:08:18:92:A6:9C:06:C7:91:EF:04:73:4B:E9:09:D3:16:D0:46:D4
X509v3 Authority Key Identifier:
keyid:2A:2F:B4:DB:0A:A4:D0:06:95:83:16:87:2E:46:7B:55:4E:0F:D0:BE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.cer
Subject Information Access:
Signed Object - URI:rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/33372e312e3233302e302f32342d3234203d3e20313938323530.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.1.230.0/24
Signature Algorithm: sha256WithRSAEncryption
8b:4b:77:31:79:7a:d9:d0:ff:2b:87:7d:c2:2e:57:0c:47:13:
79:f0:be:54:e7:b7:5b:77:4f:e1:e0:83:22:a8:7b:ea:0b:34:
ac:4f:e0:03:f8:fa:64:c7:b2:15:8b:bc:f9:02:ea:f9:8c:f3:
f3:27:46:46:1c:65:a8:99:81:31:80:98:ca:e4:0a:25:e6:b2:
a3:ac:18:ac:72:3e:c7:0a:57:fa:b6:cb:93:d5:e3:18:f7:0f:
7f:ce:c8:bf:7b:16:a8:14:7d:56:d2:92:29:ef:4b:2a:c1:d4:
01:32:8f:c8:ff:8e:6d:b9:56:b8:20:01:4f:18:8d:99:bd:63:
f9:4e:82:31:33:9e:9f:97:24:79:94:b2:59:f6:75:8d:38:f9:
88:b4:ff:45:be:b7:76:0e:60:05:3e:4e:e4:ae:d1:2f:72:b1:
8d:28:6e:b4:06:3e:d0:27:91:17:b2:8f:e4:1d:b4:ea:c6:ae:
bd:55:d5:96:9d:a1:69:c9:d9:f8:44:3b:07:e8:18:73:cc:cd:
01:bf:06:a0:e3:b4:2a:7a:70:09:b1:53:bc:93:db:b4:b5:ee:
86:f4:56:d7:0d:00:f2:ff:d3:11:54:22:1b:95:68:db:3f:d2:
b3:07:16:64:e2:76:01:80:dc:a9:aa:f4:88:d6:de:ec:1d:a7:
46:b4:b6:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 10:24:59 2026 by rpki-client