
$ rpki-client -vvf r.magellan.ipxo.com/repo/ddd1818b-9fbf-440c-aaec-44a4d1590f87-0/0/3130392e37322e3132332e302f32342d3234203d3e2036303739.roa
File: 3130392e37322e3132332e302f32342d3234203d3e2036303739.roa (raw, json)
Hash identifier: kY7BF41asgWJ4au9AgqvmkQ0YUaEMVncjbvRvCAxV5s=
Subject key identifier: F0:FE:E3:E2:2B:56:91:51:4D:C6:F1:47:9B:78:9A:67:65:03:AF:D5
Certificate issuer: /CN=C972E8671DEDC43FE908B548531C969A051CD34C
Certificate serial: 1CE0842D3E95DE4135E0FE2B36D537755826378F
Authority key identifier: C9:72:E8:67:1D:ED:C4:3F:E9:08:B5:48:53:1C:96:9A:05:1C:D3:4C
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/2/C972E8671DEDC43FE908B548531C969A051CD34C.cer
Subject info access: rsync://r.magellan.ipxo.com/repo/ddd1818b-9fbf-440c-aaec-44a4d1590f87-0/0/3130392e37322e3132332e302f32342d3234203d3e2036303739.roa
Signing time: Mon 23 Feb 2026 15:06:27 +0000
ROA not before: Mon 23 Feb 2026 15:01:27 +0000
ROA not after: Mon 22 Feb 2027 15:06:27 +0000
asID: 6079
IP address blocks: 109.72.123.0/24 maxlen: 24
Validation: OK
Signature path: rsync://r.magellan.ipxo.com/repo/ddd1818b-9fbf-440c-aaec-44a4d1590f87-0/0/C972E8671DEDC43FE908B548531C969A051CD34C.crl
rsync://r.magellan.ipxo.com/repo/ddd1818b-9fbf-440c-aaec-44a4d1590f87-0/0/C972E8671DEDC43FE908B548531C969A051CD34C.mft
rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/2/C972E8671DEDC43FE908B548531C969A051CD34C.cer
rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/2/CF0631D33A3C9DC5C45424D55C3E7663838657A3.crl
rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/2/CF0631D33A3C9DC5C45424D55C3E7663838657A3.mft
rsync://rpki.ripe.net/repository/DEFAULT/zwYx0zo8ncXEVCTVXD52Y4OGV6M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1c:e0:84:2d:3e:95:de:41:35:e0:fe:2b:36:d5:37:75:58:26:37:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C972E8671DEDC43FE908B548531C969A051CD34C
Validity
Not Before: Feb 23 15:01:27 2026 GMT
Not After : Feb 22 15:06:27 2027 GMT
Subject: CN=F0FEE3E22B5691514DC6F1479B789A676503AFD5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:91:8c:07:7f:f8:87:f1:39:f5:87:76:29:f8:
1b:94:ae:8e:78:1c:7a:b3:d1:3b:42:73:d2:7c:ab:
e0:dc:1c:e3:fd:a7:d5:5a:95:c8:9f:b7:0c:21:56:
7a:22:d3:8f:31:26:a6:bb:df:2c:92:5b:ea:d8:d7:
0d:24:bb:c9:58:46:a8:dd:be:c0:98:9d:2e:1d:14:
86:d8:5b:14:da:da:2c:fe:c4:41:0b:02:5c:49:e7:
0c:9b:fd:32:2a:22:73:0e:c2:ad:94:24:74:76:37:
ad:de:63:73:44:ce:1d:98:28:40:75:a2:3c:c2:80:
07:d0:56:88:05:af:5a:03:72:2b:2a:c1:37:7a:5d:
04:f5:44:33:1b:76:d1:a2:ad:bc:af:35:11:ff:04:
fa:2d:ce:a3:b8:89:97:82:ca:7e:80:db:17:f8:c0:
2e:32:37:35:48:ab:3e:72:2f:c7:56:6d:2f:fb:37:
4f:e3:51:df:a4:ec:b3:31:79:b0:55:5e:94:37:81:
97:6a:6b:bb:03:b8:64:7a:a2:4e:ed:be:6d:fb:f3:
10:62:61:a7:a8:2b:e3:6e:2b:4b:df:44:d7:44:6e:
c8:46:6b:53:69:2c:f2:f6:5d:af:17:57:cc:2e:25:
f3:cf:43:c8:b7:ea:df:ee:fc:55:64:75:dd:5f:45:
dd:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:FE:E3:E2:2B:56:91:51:4D:C6:F1:47:9B:78:9A:67:65:03:AF:D5
X509v3 Authority Key Identifier:
keyid:C9:72:E8:67:1D:ED:C4:3F:E9:08:B5:48:53:1C:96:9A:05:1C:D3:4C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://r.magellan.ipxo.com/repo/ddd1818b-9fbf-440c-aaec-44a4d1590f87-0/0/C972E8671DEDC43FE908B548531C969A051CD34C.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/2/C972E8671DEDC43FE908B548531C969A051CD34C.cer
Subject Information Access:
Signed Object - URI:rsync://r.magellan.ipxo.com/repo/ddd1818b-9fbf-440c-aaec-44a4d1590f87-0/0/3130392e37322e3132332e302f32342d3234203d3e2036303739.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.72.123.0/24
Signature Algorithm: sha256WithRSAEncryption
57:79:8f:e6:33:6a:09:6c:9b:bc:b5:6a:9a:e1:5e:58:b7:c7:
c3:fc:68:69:5f:ba:8c:51:a5:6e:ba:1b:ee:e6:10:ba:19:6b:
77:06:0a:54:35:79:d9:91:bb:d4:de:58:3f:69:c9:57:70:87:
07:b5:4d:da:63:19:50:8a:ca:1a:98:f6:33:ac:54:5f:3a:7b:
13:ed:81:4f:89:19:d0:05:0b:85:ef:a1:d4:0d:dc:c1:c3:fe:
e6:a8:23:6e:a2:6c:ec:d8:ef:04:bb:92:1f:3e:d7:37:80:11:
1d:22:f6:59:c5:b8:cc:fe:d7:83:6f:8e:31:d9:a5:54:60:96:
d1:96:b0:40:94:d2:f0:26:53:ea:68:93:74:a5:1b:9a:25:44:
ad:8a:7f:67:b1:8d:3c:d5:82:a1:f3:6a:ef:4b:e8:9c:45:49:
45:cc:81:0f:7b:6e:9b:a1:7a:a6:e6:9f:e5:61:f1:8b:e3:80:
06:9a:2b:c7:cd:7b:1c:0f:81:2a:fd:1b:fd:87:86:ab:ed:9e:
dc:4b:f2:ab:19:db:c2:7a:50:59:cf:46:9d:06:11:32:5e:86:
a0:06:88:cc:2a:15:09:1e:10:82:03:73:89:60:81:be:86:69:
c8:2d:bd:42:c3:5a:e0:46:ef:08:94:67:8b:16:ce:38:a9:08:
69:22:8a:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:22:58 2026 by rpki-client