
$ rpki-client -vvf r.magellan.ipxo.com/repo/ddd1818b-9fbf-440c-aaec-44a4d1590f87-0/0/3130392e37322e3132312e302f32342d3234203d3e2037303138.roa
File: 3130392e37322e3132312e302f32342d3234203d3e2037303138.roa (raw, json)
Hash identifier: Zq8vGqDTWT2X6Lp+HATNwXixNmsmoTpyXDvl80KySMo=
Subject key identifier: 48:96:CD:DA:C1:FB:DE:1C:92:FE:67:D4:24:45:7D:BE:AE:00:07:56
Certificate issuer: /CN=C972E8671DEDC43FE908B548531C969A051CD34C
Certificate serial: 1237DB43BE1129CE6BB941CFFCFCB27FE2898579
Authority key identifier: C9:72:E8:67:1D:ED:C4:3F:E9:08:B5:48:53:1C:96:9A:05:1C:D3:4C
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/2/C972E8671DEDC43FE908B548531C969A051CD34C.cer
Subject info access: rsync://r.magellan.ipxo.com/repo/ddd1818b-9fbf-440c-aaec-44a4d1590f87-0/0/3130392e37322e3132312e302f32342d3234203d3e2037303138.roa
Signing time: Mon 23 Feb 2026 15:06:27 +0000
ROA not before: Mon 23 Feb 2026 15:01:27 +0000
ROA not after: Mon 22 Feb 2027 15:06:27 +0000
asID: 7018
IP address blocks: 109.72.121.0/24 maxlen: 24
Validation: OK
Signature path: rsync://r.magellan.ipxo.com/repo/ddd1818b-9fbf-440c-aaec-44a4d1590f87-0/0/C972E8671DEDC43FE908B548531C969A051CD34C.crl
rsync://r.magellan.ipxo.com/repo/ddd1818b-9fbf-440c-aaec-44a4d1590f87-0/0/C972E8671DEDC43FE908B548531C969A051CD34C.mft
rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/2/C972E8671DEDC43FE908B548531C969A051CD34C.cer
rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/2/CF0631D33A3C9DC5C45424D55C3E7663838657A3.crl
rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/2/CF0631D33A3C9DC5C45424D55C3E7663838657A3.mft
rsync://rpki.ripe.net/repository/DEFAULT/zwYx0zo8ncXEVCTVXD52Y4OGV6M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 21:40:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
12:37:db:43:be:11:29:ce:6b:b9:41:cf:fc:fc:b2:7f:e2:89:85:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C972E8671DEDC43FE908B548531C969A051CD34C
Validity
Not Before: Feb 23 15:01:27 2026 GMT
Not After : Feb 22 15:06:27 2027 GMT
Subject: CN=4896CDDAC1FBDE1C92FE67D424457DBEAE000756
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:5d:0e:35:55:90:50:df:7d:0d:a6:85:17:45:
1f:18:90:06:e8:5a:6e:b0:57:c2:98:3f:e2:a0:45:
9a:6f:88:2f:68:73:9d:04:bc:e3:a7:69:f4:80:94:
29:1e:ab:1b:28:e7:4c:40:9c:a0:fe:7a:1f:cb:10:
ec:c6:c7:db:8f:13:3b:33:db:40:b8:14:dd:0d:85:
b6:ad:8f:84:3b:be:e0:d2:68:41:4f:77:40:af:97:
e9:f4:c7:cb:27:86:1c:da:81:34:f9:2e:ef:cf:8c:
4b:01:5d:02:97:05:2e:dd:5e:b9:25:aa:96:19:73:
ec:e8:9a:29:42:e3:ca:82:77:26:71:bf:f5:9a:fd:
32:94:c9:94:e4:62:90:0d:69:61:53:39:82:86:ca:
11:18:23:33:5d:4d:12:5f:3d:15:39:18:39:ad:7f:
91:54:34:2a:07:01:e0:13:d9:ea:27:20:e6:37:86:
98:93:80:6d:04:b6:be:f1:2f:55:9e:ba:22:97:5e:
8a:d5:6e:14:f6:41:12:0e:b4:76:2b:92:f5:65:56:
85:e4:bb:4a:a0:bb:d3:1b:76:de:ed:71:af:48:06:
47:fd:d4:8a:71:e5:51:96:1a:e3:ba:38:e8:86:e1:
4d:94:a8:05:91:a4:7b:78:7f:43:a4:70:94:9c:5c:
8c:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:96:CD:DA:C1:FB:DE:1C:92:FE:67:D4:24:45:7D:BE:AE:00:07:56
X509v3 Authority Key Identifier:
keyid:C9:72:E8:67:1D:ED:C4:3F:E9:08:B5:48:53:1C:96:9A:05:1C:D3:4C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://r.magellan.ipxo.com/repo/ddd1818b-9fbf-440c-aaec-44a4d1590f87-0/0/C972E8671DEDC43FE908B548531C969A051CD34C.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/2/C972E8671DEDC43FE908B548531C969A051CD34C.cer
Subject Information Access:
Signed Object - URI:rsync://r.magellan.ipxo.com/repo/ddd1818b-9fbf-440c-aaec-44a4d1590f87-0/0/3130392e37322e3132312e302f32342d3234203d3e2037303138.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.72.121.0/24
Signature Algorithm: sha256WithRSAEncryption
29:4a:4d:e2:8e:3f:c9:a6:25:15:e7:35:72:8e:64:2e:f6:3b:
0b:fa:5f:2d:eb:f6:95:22:ae:aa:12:9c:16:b4:48:2b:85:a9:
18:10:ec:e5:c5:4f:b7:cc:7c:eb:0a:70:74:f5:92:7b:a5:25:
e1:2d:de:7e:99:23:96:07:58:27:fc:08:ef:1c:7b:c1:23:3e:
7d:e7:40:c4:68:4c:5c:70:2e:4d:f4:a6:8c:4a:c0:74:a6:56:
db:10:c7:3a:d9:45:e8:f0:d0:b5:1f:c7:d5:fa:29:31:07:d9:
8a:10:17:c2:0d:b3:15:f2:41:b0:d3:55:6e:30:de:62:cc:e1:
e1:b9:92:24:8f:4d:4b:3e:d2:78:b8:9a:58:a9:17:20:0a:eb:
4d:36:03:77:c6:b9:3c:be:7f:53:0f:cd:35:f9:0c:04:e3:f4:
8a:f3:e5:89:31:18:43:8a:5b:8b:a8:90:83:3c:aa:20:89:f0:
00:a8:d3:aa:d8:20:84:f2:29:6c:5e:44:4c:ed:88:59:b8:ee:
81:af:3f:a0:86:7f:2b:ef:68:31:47:1a:aa:5b:d7:99:5e:ac:
a4:8a:3d:f2:b7:19:d2:30:3c:37:4f:62:0d:a9:ac:05:47:55:
9e:34:27:12:8b:7d:12:45:fb:eb:a2:a0:35:75:ec:80:65:9a:
fd:f8:1d:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 06:08:19 2026 by rpki-client