
$ rpki-client -vvf r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/33372e3233302e36332e302f32342d3234203d3e20383334.roa
File: 33372e3233302e36332e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier: yZbur4qofT2WF6htJ+qgjJr52fYPSaQ6gON65a15nUk=
Subject key identifier: 31:06:6D:E4:CC:CF:F6:24:94:16:15:89:88:BB:46:F3:17:D1:BA:A2
Certificate issuer: /CN=2A2FB4DB0AA4D006958316872E467B554E0FD0BE
Certificate serial: 13F61B605118013B92838076C1853B8B1CA7983D
Authority key identifier: 2A:2F:B4:DB:0A:A4:D0:06:95:83:16:87:2E:46:7B:55:4E:0F:D0:BE
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.cer
Subject info access: rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/33372e3233302e36332e302f32342d3234203d3e20383334.roa
Signing time: Thu 19 Feb 2026 09:04:34 +0000
ROA not before: Thu 19 Feb 2026 08:59:34 +0000
ROA not after: Thu 18 Feb 2027 09:04:34 +0000
asID: 834
IP address blocks: 37.230.63.0/24 maxlen: 24
Validation: OK
Signature path: rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.crl
rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.mft
rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.cer
rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.crl
rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft
rsync://rpki.ripe.net/repository/DEFAULT/RQLmPOAcrSOaw5e8K7Xmw0fc7uo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 07:38:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
13:f6:1b:60:51:18:01:3b:92:83:80:76:c1:85:3b:8b:1c:a7:98:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2A2FB4DB0AA4D006958316872E467B554E0FD0BE
Validity
Not Before: Feb 19 08:59:34 2026 GMT
Not After : Feb 18 09:04:34 2027 GMT
Subject: CN=31066DE4CCCFF6249416158988BB46F317D1BAA2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:d7:a1:9d:04:94:d7:21:b8:e7:bf:b3:2d:bf:
0f:33:9a:fd:16:3e:f0:fc:77:d0:9a:15:5e:5f:dc:
1d:0c:44:0a:77:4c:3c:62:78:4b:b6:32:2d:9c:04:
bc:d4:7e:fb:9d:e2:e5:38:4c:f4:fc:67:1f:54:41:
4a:cb:f7:8d:f5:16:a0:12:9c:5d:18:cd:bb:63:61:
b8:a5:55:24:78:4f:4b:aa:3f:31:6b:4c:24:f6:99:
e5:e0:5c:18:b0:c3:fc:b7:c9:6f:28:3e:8b:ae:70:
3d:c4:b0:af:83:35:31:1d:cc:8e:8e:e2:52:3d:3e:
78:51:e6:b4:7a:9d:4c:9c:c9:e0:ef:17:a0:5a:0a:
db:83:fc:24:0a:83:d2:7d:46:59:19:bb:fe:f9:b5:
85:72:8f:7c:20:15:99:b0:be:30:5b:30:4a:5a:50:
38:20:df:09:7b:fa:be:cc:9e:5e:62:ea:6b:b5:65:
58:f4:18:3c:cd:db:d6:15:77:9a:8d:c6:ec:df:e3:
30:a6:fc:42:9f:b8:fb:df:97:01:0e:1f:cb:9c:77:
b3:24:47:9b:4e:42:f0:6e:36:d4:64:f8:75:c8:19:
f8:a5:37:01:e0:40:e2:ef:02:b7:ba:79:f8:d9:d9:
3b:8a:3a:f6:1a:ab:d5:8f:c7:65:b1:b6:2c:b9:43:
a5:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:06:6D:E4:CC:CF:F6:24:94:16:15:89:88:BB:46:F3:17:D1:BA:A2
X509v3 Authority Key Identifier:
keyid:2A:2F:B4:DB:0A:A4:D0:06:95:83:16:87:2E:46:7B:55:4E:0F:D0:BE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.cer
Subject Information Access:
Signed Object - URI:rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/33372e3233302e36332e302f32342d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.230.63.0/24
Signature Algorithm: sha256WithRSAEncryption
29:12:53:da:d9:66:f1:2d:22:ac:a4:24:43:14:48:f2:74:4c:
3a:87:d2:6b:d6:00:e5:a2:d6:a7:7d:ca:61:cf:37:c2:4a:34:
76:92:cd:7a:8a:66:c7:a5:9f:00:ea:2c:ed:85:3a:aa:76:cc:
40:b8:81:15:56:0e:9e:c2:3e:9a:13:9a:2c:dd:65:38:5d:bc:
88:41:3a:4a:76:93:be:c5:97:8d:dc:31:c0:23:a0:c7:a7:f2:
41:b2:30:5e:20:d3:26:50:f7:0d:be:ec:81:b7:fd:54:9a:1f:
12:29:fc:b1:d0:6d:5d:98:b6:be:be:ac:fd:7b:3f:9d:10:72:
80:a8:92:cc:e1:3a:4a:b6:36:6b:be:80:15:8a:b6:a5:2e:07:
e5:06:a7:4e:31:49:fe:1f:e4:75:d3:65:b5:a4:c9:f3:de:3e:
bb:ec:7b:b7:e7:cc:fb:ce:8c:2e:1b:83:c5:a2:c8:db:89:cb:
26:ae:c8:55:6a:0c:e1:e5:f3:48:4d:93:d9:08:2b:ca:c9:5a:
f5:a4:41:b1:22:c9:cb:db:33:9f:29:87:fc:a1:38:bc:b3:75:
ff:2a:5c:f4:a4:3d:75:a8:4e:7e:ed:7e:39:17:50:93:ff:19:
83:2c:b7:c2:2e:cb:30:05:2f:98:17:d8:05:75:3d:c3:d3:c1:
fb:04:11:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 23:22:38 2026 by rpki-client