
$ rpki-client -vvf r.magellan.ipxo.com/repo/ddd1818b-9fbf-440c-aaec-44a4d1590f87-0/0/38312e32322e3133332e302f32342d3234203d3e20323030303137.roa
File: 38312e32322e3133332e302f32342d3234203d3e20323030303137.roa (raw, json)
Hash identifier: diD/yJ6l+NRcL6bHQl136l5XkszblkxGE2xXu4AostU=
Subject key identifier: 06:7E:C5:11:66:21:CF:B2:2D:06:67:C5:98:EF:F5:AF:BD:9D:18:07
Certificate issuer: /CN=C972E8671DEDC43FE908B548531C969A051CD34C
Certificate serial: 753810E63DB7361B856C743156D7743FE7964F42
Authority key identifier: C9:72:E8:67:1D:ED:C4:3F:E9:08:B5:48:53:1C:96:9A:05:1C:D3:4C
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/2/C972E8671DEDC43FE908B548531C969A051CD34C.cer
Subject info access: rsync://r.magellan.ipxo.com/repo/ddd1818b-9fbf-440c-aaec-44a4d1590f87-0/0/38312e32322e3133332e302f32342d3234203d3e20323030303137.roa
Signing time: Mon 23 Feb 2026 15:06:30 +0000
ROA not before: Mon 23 Feb 2026 15:01:30 +0000
ROA not after: Mon 22 Feb 2027 15:06:30 +0000
asID: 200017
IP address blocks: 81.22.133.0/24 maxlen: 24
Validation: OK
Signature path: rsync://r.magellan.ipxo.com/repo/ddd1818b-9fbf-440c-aaec-44a4d1590f87-0/0/C972E8671DEDC43FE908B548531C969A051CD34C.crl
rsync://r.magellan.ipxo.com/repo/ddd1818b-9fbf-440c-aaec-44a4d1590f87-0/0/C972E8671DEDC43FE908B548531C969A051CD34C.mft
rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/2/C972E8671DEDC43FE908B548531C969A051CD34C.cer
rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/2/CF0631D33A3C9DC5C45424D55C3E7663838657A3.crl
rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/2/CF0631D33A3C9DC5C45424D55C3E7663838657A3.mft
rsync://rpki.ripe.net/repository/DEFAULT/zwYx0zo8ncXEVCTVXD52Y4OGV6M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 08:56:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
75:38:10:e6:3d:b7:36:1b:85:6c:74:31:56:d7:74:3f:e7:96:4f:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C972E8671DEDC43FE908B548531C969A051CD34C
Validity
Not Before: Feb 23 15:01:30 2026 GMT
Not After : Feb 22 15:06:30 2027 GMT
Subject: CN=067EC5116621CFB22D0667C598EFF5AFBD9D1807
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:fc:af:e1:bf:b0:65:e5:1a:6d:fa:1a:00:27:
35:e7:84:0e:eb:67:a3:f7:8a:9e:45:69:1d:fb:84:
36:2a:e9:8e:72:d1:3f:d6:54:20:0c:4f:1c:c7:ca:
f6:55:7a:84:9c:03:d7:85:5e:dc:ec:71:dd:07:eb:
48:0e:4d:cc:02:33:a7:c7:57:38:bd:fd:de:18:63:
ea:dd:dd:29:4b:0e:a2:0d:18:fb:27:60:5c:26:c7:
b7:d8:bb:41:46:73:fe:a1:b2:f1:3e:98:16:3d:34:
f3:a4:ff:ae:3a:4c:01:95:46:df:c5:d9:47:36:fb:
a1:9a:b8:54:43:bb:5f:cd:8c:72:34:d6:e5:65:07:
c4:fa:b0:0e:f4:0b:a8:40:9a:3d:d5:ff:67:6e:61:
db:b8:27:00:16:7b:ec:ef:84:28:fe:49:29:fb:47:
4a:79:57:d8:9f:70:40:b6:b1:ba:01:d1:24:50:b0:
bc:a2:46:81:96:4a:b5:84:f0:9b:b4:6d:34:9e:2c:
af:17:03:f6:57:ef:c5:81:f7:31:c2:e7:80:18:f3:
db:6c:3e:2f:56:04:37:b7:1e:31:be:cf:ff:fc:7b:
9c:d2:b6:ea:1b:ac:a7:95:5d:15:a9:bf:7a:2d:5b:
3a:0b:9e:d9:e6:6c:50:5a:d2:2c:f3:f5:2d:2d:f7:
f9:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:7E:C5:11:66:21:CF:B2:2D:06:67:C5:98:EF:F5:AF:BD:9D:18:07
X509v3 Authority Key Identifier:
keyid:C9:72:E8:67:1D:ED:C4:3F:E9:08:B5:48:53:1C:96:9A:05:1C:D3:4C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://r.magellan.ipxo.com/repo/ddd1818b-9fbf-440c-aaec-44a4d1590f87-0/0/C972E8671DEDC43FE908B548531C969A051CD34C.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/2/C972E8671DEDC43FE908B548531C969A051CD34C.cer
Subject Information Access:
Signed Object - URI:rsync://r.magellan.ipxo.com/repo/ddd1818b-9fbf-440c-aaec-44a4d1590f87-0/0/38312e32322e3133332e302f32342d3234203d3e20323030303137.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.22.133.0/24
Signature Algorithm: sha256WithRSAEncryption
59:01:a3:19:65:4c:90:36:67:ca:77:a9:a2:21:da:8d:23:67:
ce:fe:cf:cc:17:33:42:7e:6b:9e:7b:cd:4d:a6:53:38:ac:1e:
1d:c0:2b:5f:1a:eb:7e:2d:40:40:18:e0:64:d0:d6:ab:bd:f1:
a5:22:1e:1d:5d:09:ed:d8:f0:7a:64:29:67:9a:bd:5d:19:7f:
2c:97:34:71:33:f3:bd:eb:d4:42:8f:c4:51:a7:c5:d5:5d:90:
f9:99:61:6d:1f:b8:2a:28:40:76:d3:14:8d:cf:5c:07:7c:71:
36:69:86:a9:c8:32:25:c9:b6:9e:9a:15:22:e4:e6:91:c3:73:
13:d2:ea:a1:d9:8c:4a:9c:6d:dd:a7:aa:2e:55:5d:5c:ac:03:
54:fc:c3:9f:83:55:da:40:2b:4a:bc:f3:f1:40:b3:65:71:12:
a4:03:60:0d:67:b6:0a:26:11:f1:bb:05:7a:93:70:9a:a2:c1:
a0:53:2d:bb:db:f1:64:c4:bf:13:02:24:61:7b:c2:67:17:ec:
db:d5:f6:55:f8:25:af:a2:e8:a1:85:fa:06:36:3d:40:3f:57:
c9:a4:7c:ce:d6:25:98:05:a4:0e:ab:43:b2:a9:4a:3a:ad:74:
10:d5:7d:25:ec:a5:41:34:2b:24:0a:65:47:4d:b8:57:3f:a5:
bf:cc:d1:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 03:17:05 2026 by rpki-client