
$ rpki-client -vvf r.magellan.ipxo.com/repo/ddd1818b-9fbf-440c-aaec-44a4d1590f87-0/0/38312e32322e3132392e302f32342d3234203d3e2036303739.roa
File: 38312e32322e3132392e302f32342d3234203d3e2036303739.roa (raw, json)
Hash identifier: A2H4JIkh3tnZrf72QWFXIA16GpXF8Yg3S+yPxvCFHYk=
Subject key identifier: 64:9C:B2:2E:75:CE:3A:21:6D:DF:21:5E:14:16:51:F5:D4:84:BB:1A
Certificate issuer: /CN=C972E8671DEDC43FE908B548531C969A051CD34C
Certificate serial: 41F930B3C9B0A38B6EFF83427D570B44B506EDB5
Authority key identifier: C9:72:E8:67:1D:ED:C4:3F:E9:08:B5:48:53:1C:96:9A:05:1C:D3:4C
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/2/C972E8671DEDC43FE908B548531C969A051CD34C.cer
Subject info access: rsync://r.magellan.ipxo.com/repo/ddd1818b-9fbf-440c-aaec-44a4d1590f87-0/0/38312e32322e3132392e302f32342d3234203d3e2036303739.roa
Signing time: Mon 23 Feb 2026 15:06:29 +0000
ROA not before: Mon 23 Feb 2026 15:01:29 +0000
ROA not after: Mon 22 Feb 2027 15:06:29 +0000
asID: 6079
IP address blocks: 81.22.129.0/24 maxlen: 24
Validation: OK
Signature path: rsync://r.magellan.ipxo.com/repo/ddd1818b-9fbf-440c-aaec-44a4d1590f87-0/0/C972E8671DEDC43FE908B548531C969A051CD34C.crl
rsync://r.magellan.ipxo.com/repo/ddd1818b-9fbf-440c-aaec-44a4d1590f87-0/0/C972E8671DEDC43FE908B548531C969A051CD34C.mft
rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/2/C972E8671DEDC43FE908B548531C969A051CD34C.cer
rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/2/CF0631D33A3C9DC5C45424D55C3E7663838657A3.crl
rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/2/CF0631D33A3C9DC5C45424D55C3E7663838657A3.mft
rsync://rpki.ripe.net/repository/DEFAULT/zwYx0zo8ncXEVCTVXD52Y4OGV6M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 21:40:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
41:f9:30:b3:c9:b0:a3:8b:6e:ff:83:42:7d:57:0b:44:b5:06:ed:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C972E8671DEDC43FE908B548531C969A051CD34C
Validity
Not Before: Feb 23 15:01:29 2026 GMT
Not After : Feb 22 15:06:29 2027 GMT
Subject: CN=649CB22E75CE3A216DDF215E141651F5D484BB1A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:f7:58:6c:6b:90:c4:2d:21:e0:bf:5e:5d:da:
37:fc:3a:1e:d1:d1:fb:00:10:c5:63:5b:b4:66:90:
68:37:41:53:fb:8b:ae:55:dc:30:d6:cb:25:b8:eb:
12:7d:f8:df:5e:bc:33:fa:52:d8:2f:60:d4:13:00:
20:db:ca:de:f4:53:82:f5:77:79:c0:32:89:ab:19:
3e:a8:08:ee:3f:ee:f2:f2:32:fb:e2:a7:09:11:c2:
62:97:04:28:91:8a:6e:90:da:4b:1a:c1:e5:a6:60:
09:74:94:ab:a7:11:73:35:73:d9:ae:bb:f1:6b:38:
83:9d:7a:8c:6a:4d:14:c9:a1:b7:2a:55:4b:db:1a:
4b:42:2f:87:79:13:3d:dd:bc:16:0c:07:f7:87:ee:
21:53:e1:6c:58:b6:90:f0:14:7a:7d:5c:7f:8c:ef:
a3:6a:07:89:91:99:15:b2:82:c3:7c:51:c8:19:97:
7e:44:f6:28:ae:7a:04:19:3c:48:7c:a0:88:1a:0d:
28:2d:04:04:1e:67:17:34:47:ea:95:51:90:07:e3:
62:cb:c3:df:ee:d5:43:2b:af:07:0a:20:e1:f2:40:
f1:e0:1f:86:f1:d8:e0:d5:af:6e:8d:18:cc:0a:0f:
97:12:37:ed:49:48:9b:54:81:52:9e:1a:76:89:99:
38:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:9C:B2:2E:75:CE:3A:21:6D:DF:21:5E:14:16:51:F5:D4:84:BB:1A
X509v3 Authority Key Identifier:
keyid:C9:72:E8:67:1D:ED:C4:3F:E9:08:B5:48:53:1C:96:9A:05:1C:D3:4C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://r.magellan.ipxo.com/repo/ddd1818b-9fbf-440c-aaec-44a4d1590f87-0/0/C972E8671DEDC43FE908B548531C969A051CD34C.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/2/C972E8671DEDC43FE908B548531C969A051CD34C.cer
Subject Information Access:
Signed Object - URI:rsync://r.magellan.ipxo.com/repo/ddd1818b-9fbf-440c-aaec-44a4d1590f87-0/0/38312e32322e3132392e302f32342d3234203d3e2036303739.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.22.129.0/24
Signature Algorithm: sha256WithRSAEncryption
78:34:00:47:83:e7:b2:53:09:e3:7d:a6:80:dd:7f:bc:98:66:
5f:22:8e:f7:51:5a:37:49:a0:1f:0d:f0:c8:8f:f5:50:19:03:
0d:c8:fb:ea:c3:19:04:ce:ce:71:57:b5:7a:0f:fb:8c:a5:e4:
0a:69:5a:ff:7a:9b:ec:5e:53:17:1d:e1:a2:a6:7e:26:01:f2:
60:8d:2d:3b:76:1a:3c:20:9f:9a:83:1b:4d:ea:d3:c2:95:a0:
ab:33:f9:98:a2:fe:31:54:e4:6b:d9:ac:4c:5f:5f:43:2f:96:
3d:95:c1:fa:88:1f:35:25:f4:87:02:cf:8d:8a:5b:53:fe:4d:
9c:a2:7c:5a:d2:59:b9:6a:95:11:bf:90:bf:3d:b3:fe:d3:27:
08:ed:0d:f2:3d:06:5b:7c:b7:6c:da:65:4f:db:46:af:b5:f9:
85:bd:ae:e7:51:63:7e:cc:5f:2e:40:53:c4:15:50:f2:1b:02:
f4:a5:7a:6c:f8:f5:2b:5f:67:66:c4:89:4f:6e:d3:ab:41:24:
9b:43:05:2f:72:6f:7b:fd:a1:55:2a:e9:4d:cf:65:81:34:ce:
cc:40:8b:8c:35:0b:5f:95:31:5d:fb:93:6c:b5:cb:6c:9b:8e:
63:f1:33:02:56:15:ee:10:b3:e8:df:be:e3:8c:50:fb:4f:30:
7f:85:63:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 14:32:17 2026 by rpki-client