
$ rpki-client -vvf r.magellan.ipxo.com/repo/ddd1818b-9fbf-440c-aaec-44a4d1590f87-0/0/38312e32322e3133322e302f32342d3234203d3e20313939303538.roa
File: 38312e32322e3133322e302f32342d3234203d3e20313939303538.roa (raw, json)
Hash identifier: hP0eOixXobAS0GAdj7JdUKzLCTNfvEtjGkEXMhfWlcs=
Subject key identifier: 38:41:32:45:9E:31:D4:52:A1:2E:61:96:68:72:E1:D6:FB:3E:B8:69
Certificate issuer: /CN=C972E8671DEDC43FE908B548531C969A051CD34C
Certificate serial: 60774BE4FE694D516FABB1442D6ABA6A8174BAB9
Authority key identifier: C9:72:E8:67:1D:ED:C4:3F:E9:08:B5:48:53:1C:96:9A:05:1C:D3:4C
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/2/C972E8671DEDC43FE908B548531C969A051CD34C.cer
Subject info access: rsync://r.magellan.ipxo.com/repo/ddd1818b-9fbf-440c-aaec-44a4d1590f87-0/0/38312e32322e3133322e302f32342d3234203d3e20313939303538.roa
Signing time: Mon 23 Feb 2026 15:06:30 +0000
ROA not before: Mon 23 Feb 2026 15:01:30 +0000
ROA not after: Mon 22 Feb 2027 15:06:30 +0000
asID: 199058
IP address blocks: 81.22.132.0/24 maxlen: 24
Validation: OK
Signature path: rsync://r.magellan.ipxo.com/repo/ddd1818b-9fbf-440c-aaec-44a4d1590f87-0/0/C972E8671DEDC43FE908B548531C969A051CD34C.crl
rsync://r.magellan.ipxo.com/repo/ddd1818b-9fbf-440c-aaec-44a4d1590f87-0/0/C972E8671DEDC43FE908B548531C969A051CD34C.mft
rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/2/C972E8671DEDC43FE908B548531C969A051CD34C.cer
rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/2/CF0631D33A3C9DC5C45424D55C3E7663838657A3.crl
rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/2/CF0631D33A3C9DC5C45424D55C3E7663838657A3.mft
rsync://rpki.ripe.net/repository/DEFAULT/zwYx0zo8ncXEVCTVXD52Y4OGV6M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
60:77:4b:e4:fe:69:4d:51:6f:ab:b1:44:2d:6a:ba:6a:81:74:ba:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C972E8671DEDC43FE908B548531C969A051CD34C
Validity
Not Before: Feb 23 15:01:30 2026 GMT
Not After : Feb 22 15:06:30 2027 GMT
Subject: CN=384132459E31D452A12E61966872E1D6FB3EB869
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:91:73:ff:3c:14:01:77:12:25:1f:1e:0f:4f:
b3:cb:71:fe:75:ec:1b:0d:83:71:26:79:a9:8f:c6:
75:31:b8:92:09:76:66:e7:b1:92:96:f2:00:01:24:
3f:39:73:cf:99:b9:d1:11:61:2e:92:51:5d:70:d6:
b9:d6:04:51:55:19:15:36:a5:de:c0:02:99:9e:71:
a0:94:f4:ef:5e:e9:1c:1d:65:3c:fa:c3:1e:1b:fe:
ab:bf:42:e8:65:76:6c:a5:e4:64:81:68:cf:97:95:
17:3b:e8:c4:7a:bb:e1:a1:af:49:24:c0:91:ee:9d:
71:bc:56:3b:e1:6f:2a:78:f0:c3:b0:ed:6f:a3:4e:
71:3e:93:9d:3e:36:05:d9:f2:7b:96:b7:be:02:dd:
17:a2:f2:69:3f:fc:fb:5d:ad:d2:3c:d5:27:31:7b:
20:c8:80:24:df:46:56:81:87:1c:79:81:20:a9:da:
5b:0a:a5:5c:31:e9:93:df:2b:a5:da:53:5e:d3:11:
b2:4e:a2:33:89:cf:a6:e4:e9:78:68:36:7e:e8:3f:
9b:5d:c5:1f:6e:1c:2b:7d:aa:bd:61:57:10:fd:3b:
46:b8:b1:45:55:c4:4c:0a:e1:48:b2:44:d8:71:16:
5d:9c:d4:fa:9c:1b:ae:e0:42:14:76:05:7b:bc:20:
34:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:41:32:45:9E:31:D4:52:A1:2E:61:96:68:72:E1:D6:FB:3E:B8:69
X509v3 Authority Key Identifier:
keyid:C9:72:E8:67:1D:ED:C4:3F:E9:08:B5:48:53:1C:96:9A:05:1C:D3:4C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://r.magellan.ipxo.com/repo/ddd1818b-9fbf-440c-aaec-44a4d1590f87-0/0/C972E8671DEDC43FE908B548531C969A051CD34C.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/2/C972E8671DEDC43FE908B548531C969A051CD34C.cer
Subject Information Access:
Signed Object - URI:rsync://r.magellan.ipxo.com/repo/ddd1818b-9fbf-440c-aaec-44a4d1590f87-0/0/38312e32322e3133322e302f32342d3234203d3e20313939303538.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.22.132.0/24
Signature Algorithm: sha256WithRSAEncryption
72:4b:90:bd:72:54:54:b7:10:29:23:0e:f8:05:3a:90:e7:a2:
81:53:42:d0:fa:6c:b4:3f:05:99:fa:44:3d:2b:80:c6:a2:17:
96:8a:46:59:51:97:eb:f0:a7:c5:fa:93:54:5c:62:f8:c7:0e:
5f:c1:9f:dd:5c:ce:a3:f1:8a:b4:7f:40:2d:72:dc:78:1c:3f:
8e:2b:7a:4c:85:cb:33:b8:9c:85:1b:b6:ed:56:b8:fe:f1:5c:
cc:33:03:3d:55:d4:27:28:2e:7d:c3:e9:7b:5c:11:eb:8d:f2:
42:53:f2:30:2a:89:24:36:35:95:75:0d:86:dd:e3:51:90:6c:
7a:46:85:65:f6:8b:61:a2:ac:90:dc:31:51:17:bf:34:7f:70:
43:f4:23:fc:7f:64:f9:1c:75:b6:df:ea:d4:57:6d:1a:3c:e4:
1c:54:f6:14:1e:91:26:24:7c:8b:c5:fb:5b:1f:c6:a2:51:ca:
63:47:9f:3b:a3:04:53:c4:6d:c7:90:1a:17:d5:01:e5:1f:07:
36:7e:34:3a:a7:d1:bb:91:db:ba:11:60:ae:4a:89:2f:90:d0:
69:0a:9b:49:35:db:56:1c:a0:3c:1d:f0:71:92:69:52:8b:09:
c4:80:0b:8b:0d:50:21:12:22:f7:8a:67:93:31:d5:16:92:cb:
2a:77:23:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 05:09:51 2026 by rpki-client