
$ rpki-client -vvf r.magellan.ipxo.com/repo/ddd1818b-9fbf-440c-aaec-44a4d1590f87-0/0/3130392e37322e3131332e302f32342d3234203d3e2038383831.roa
File: 3130392e37322e3131332e302f32342d3234203d3e2038383831.roa (raw, json)
Hash identifier: +VwGwEiYXEKmVeISMRtPdNNnqMEfvOhKd3A5PuwFShw=
Subject key identifier: 3F:B3:2B:15:36:C1:45:4C:B5:0E:9C:18:FC:F9:EE:79:9B:C3:61:D3
Certificate issuer: /CN=C972E8671DEDC43FE908B548531C969A051CD34C
Certificate serial: 4CBBE39E0D68325D3A2B477846BF5EDC01F9BFF9
Authority key identifier: C9:72:E8:67:1D:ED:C4:3F:E9:08:B5:48:53:1C:96:9A:05:1C:D3:4C
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/2/C972E8671DEDC43FE908B548531C969A051CD34C.cer
Subject info access: rsync://r.magellan.ipxo.com/repo/ddd1818b-9fbf-440c-aaec-44a4d1590f87-0/0/3130392e37322e3131332e302f32342d3234203d3e2038383831.roa
Signing time: Mon 23 Feb 2026 15:06:25 +0000
ROA not before: Mon 23 Feb 2026 15:01:25 +0000
ROA not after: Mon 22 Feb 2027 15:06:25 +0000
asID: 8881
IP address blocks: 109.72.113.0/24 maxlen: 24
Validation: OK
Signature path: rsync://r.magellan.ipxo.com/repo/ddd1818b-9fbf-440c-aaec-44a4d1590f87-0/0/C972E8671DEDC43FE908B548531C969A051CD34C.crl
rsync://r.magellan.ipxo.com/repo/ddd1818b-9fbf-440c-aaec-44a4d1590f87-0/0/C972E8671DEDC43FE908B548531C969A051CD34C.mft
rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/2/C972E8671DEDC43FE908B548531C969A051CD34C.cer
rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/2/CF0631D33A3C9DC5C45424D55C3E7663838657A3.crl
rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/2/CF0631D33A3C9DC5C45424D55C3E7663838657A3.mft
rsync://rpki.ripe.net/repository/DEFAULT/zwYx0zo8ncXEVCTVXD52Y4OGV6M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 08:56:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4c:bb:e3:9e:0d:68:32:5d:3a:2b:47:78:46:bf:5e:dc:01:f9:bf:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C972E8671DEDC43FE908B548531C969A051CD34C
Validity
Not Before: Feb 23 15:01:25 2026 GMT
Not After : Feb 22 15:06:25 2027 GMT
Subject: CN=3FB32B1536C1454CB50E9C18FCF9EE799BC361D3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:03:96:4d:10:1f:c8:8b:46:cf:f7:b7:30:8d:
1c:de:ac:b8:74:12:3f:14:e3:98:d7:b4:1f:76:14:
ab:28:0e:f4:0e:d3:a5:12:30:92:af:a9:7d:74:de:
2c:9e:f8:3a:14:68:52:bf:52:22:c6:72:dd:ce:1f:
e2:6f:44:24:4e:a3:13:2c:20:12:13:6f:ff:8d:f9:
c4:ac:2e:2b:c9:c2:35:52:05:66:c5:e8:63:ca:f7:
a6:76:07:9f:5b:72:fe:aa:99:a1:cd:2e:37:7b:2b:
83:b1:cf:6e:ed:06:1b:7b:d2:f9:84:56:47:ee:18:
f7:ae:40:24:db:38:ac:21:57:43:8a:8f:ce:1b:0a:
bb:a9:cd:b9:cd:46:18:51:a1:6e:3a:02:53:1a:1e:
ca:ef:ff:03:22:74:b6:3e:52:06:0b:77:9c:2a:22:
ac:99:bf:2f:f7:96:84:4a:ea:a6:97:d7:15:72:14:
02:2e:d3:73:f3:e9:f3:f0:d3:eb:86:36:e0:6b:ba:
18:0c:11:00:31:f7:28:d4:7d:af:10:46:5c:98:15:
bf:d9:3d:89:56:e2:a3:87:60:75:da:22:51:11:75:
ab:2e:f5:f2:f8:5e:99:c4:70:5b:f1:d0:5f:40:95:
a9:df:72:f7:95:f5:8d:57:a5:25:f0:29:b1:0f:2c:
65:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:B3:2B:15:36:C1:45:4C:B5:0E:9C:18:FC:F9:EE:79:9B:C3:61:D3
X509v3 Authority Key Identifier:
keyid:C9:72:E8:67:1D:ED:C4:3F:E9:08:B5:48:53:1C:96:9A:05:1C:D3:4C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://r.magellan.ipxo.com/repo/ddd1818b-9fbf-440c-aaec-44a4d1590f87-0/0/C972E8671DEDC43FE908B548531C969A051CD34C.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/2/C972E8671DEDC43FE908B548531C969A051CD34C.cer
Subject Information Access:
Signed Object - URI:rsync://r.magellan.ipxo.com/repo/ddd1818b-9fbf-440c-aaec-44a4d1590f87-0/0/3130392e37322e3131332e302f32342d3234203d3e2038383831.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.72.113.0/24
Signature Algorithm: sha256WithRSAEncryption
7c:1b:26:79:1e:5c:69:f5:fc:1a:d5:7e:0c:14:ed:c9:b1:27:
87:78:80:7c:32:d0:32:ab:d3:e7:5d:1d:eb:13:47:aa:17:ba:
54:f9:8d:27:e2:ce:4b:c0:2f:4d:3a:71:9f:7c:98:05:40:74:
e3:ba:0a:00:66:68:39:f1:fd:d4:11:76:56:ea:c8:b6:63:cb:
49:9a:68:43:31:c4:aa:a5:2e:05:d2:4e:cc:7c:03:d0:87:9c:
2b:6e:36:63:83:13:d8:f5:f2:e9:13:0f:52:1c:fa:63:24:bd:
c5:6b:b2:e4:39:11:86:76:2f:0c:9c:1d:7b:af:4d:fc:8a:62:
49:12:09:21:91:8d:01:3a:17:fa:72:3e:12:43:4e:1f:99:21:
65:45:d8:0a:5d:50:28:37:9b:c2:bd:dc:50:1b:f4:ba:53:83:
1e:9b:75:bd:e5:01:c4:78:2c:84:ec:03:1b:d0:ae:f1:6a:6e:
72:29:ec:ec:4f:71:61:7d:83:96:b8:10:7a:d4:20:f0:11:11:
41:a2:8c:ef:b0:88:44:23:de:6a:2c:89:dc:8f:8f:b5:c9:d6:
62:60:66:d2:38:66:b2:80:79:da:47:20:e0:3c:89:6a:48:ae:
35:50:14:55:5e:fa:ae:20:df:1d:1e:1d:65:5d:18:44:cd:8f:
d0:1e:98:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 01:30:04 2026 by rpki-client