
$ rpki-client -vvf r.magellan.ipxo.com/repo/ddd1818b-9fbf-440c-aaec-44a4d1590f87-0/0/38312e32322e3133352e302f32342d3234203d3e2037303239.roa
File: 38312e32322e3133352e302f32342d3234203d3e2037303239.roa (raw, json)
Hash identifier: 1wQpJOfruY9EWcA0XynC4YgQYSNtYmpB+25EXqxpfjU=
Subject key identifier: 8D:8A:4A:18:F8:69:8A:C5:F7:FD:97:05:A7:69:C8:8D:9D:2B:0A:A1
Certificate issuer: /CN=C972E8671DEDC43FE908B548531C969A051CD34C
Certificate serial: 60B9D112C73E0FE74D1E6ABF46F578C1572D005C
Authority key identifier: C9:72:E8:67:1D:ED:C4:3F:E9:08:B5:48:53:1C:96:9A:05:1C:D3:4C
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/2/C972E8671DEDC43FE908B548531C969A051CD34C.cer
Subject info access: rsync://r.magellan.ipxo.com/repo/ddd1818b-9fbf-440c-aaec-44a4d1590f87-0/0/38312e32322e3133352e302f32342d3234203d3e2037303239.roa
Signing time: Mon 23 Feb 2026 15:06:30 +0000
ROA not before: Mon 23 Feb 2026 15:01:30 +0000
ROA not after: Mon 22 Feb 2027 15:06:30 +0000
asID: 7029
IP address blocks: 81.22.135.0/24 maxlen: 24
Validation: OK
Signature path: rsync://r.magellan.ipxo.com/repo/ddd1818b-9fbf-440c-aaec-44a4d1590f87-0/0/C972E8671DEDC43FE908B548531C969A051CD34C.crl
rsync://r.magellan.ipxo.com/repo/ddd1818b-9fbf-440c-aaec-44a4d1590f87-0/0/C972E8671DEDC43FE908B548531C969A051CD34C.mft
rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/2/C972E8671DEDC43FE908B548531C969A051CD34C.cer
rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/2/CF0631D33A3C9DC5C45424D55C3E7663838657A3.crl
rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/2/CF0631D33A3C9DC5C45424D55C3E7663838657A3.mft
rsync://rpki.ripe.net/repository/DEFAULT/zwYx0zo8ncXEVCTVXD52Y4OGV6M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 08:56:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
60:b9:d1:12:c7:3e:0f:e7:4d:1e:6a:bf:46:f5:78:c1:57:2d:00:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C972E8671DEDC43FE908B548531C969A051CD34C
Validity
Not Before: Feb 23 15:01:30 2026 GMT
Not After : Feb 22 15:06:30 2027 GMT
Subject: CN=8D8A4A18F8698AC5F7FD9705A769C88D9D2B0AA1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:35:4c:fd:db:f9:a9:4e:02:13:11:6b:79:df:
a7:9c:51:76:f5:5f:d6:d4:e1:4b:46:a2:06:ec:eb:
5e:32:bf:9e:ed:5d:06:2b:15:49:b4:38:be:36:3d:
0a:07:d4:f0:18:b2:6a:b8:f2:a6:e8:b6:aa:d4:45:
d2:f9:08:af:57:22:7b:a8:d2:73:00:72:94:61:70:
5e:40:a7:5b:0a:92:35:bd:37:3d:a5:4a:eb:5c:56:
62:e0:09:e4:9e:f8:d9:57:13:b5:e6:b3:76:19:bd:
d5:9c:f3:4a:6c:75:d7:8e:10:7b:cd:68:95:00:e1:
b7:eb:cf:f3:5a:7a:16:88:0f:46:8f:1f:2d:99:ef:
b5:d0:cb:ef:12:4c:b9:4e:ac:89:63:cf:52:5c:59:
ce:1a:c8:de:9a:61:f5:4e:8f:80:8d:24:ad:67:0e:
66:32:e9:71:6c:e9:7b:0c:b9:fa:9d:83:c1:08:28:
85:4b:1e:9d:87:fd:21:72:53:02:7f:61:82:13:02:
c6:e1:9f:7f:2d:bb:2d:a1:44:7b:f7:7f:a4:31:bf:
b9:c6:43:f6:a7:f8:44:02:33:9b:d8:24:bf:50:00:
39:37:0e:46:d0:4f:e0:e0:7a:a0:0c:08:a6:80:63:
4c:de:0c:57:4a:a5:54:71:d6:30:84:1e:75:af:fe:
d2:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:8A:4A:18:F8:69:8A:C5:F7:FD:97:05:A7:69:C8:8D:9D:2B:0A:A1
X509v3 Authority Key Identifier:
keyid:C9:72:E8:67:1D:ED:C4:3F:E9:08:B5:48:53:1C:96:9A:05:1C:D3:4C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://r.magellan.ipxo.com/repo/ddd1818b-9fbf-440c-aaec-44a4d1590f87-0/0/C972E8671DEDC43FE908B548531C969A051CD34C.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/2/C972E8671DEDC43FE908B548531C969A051CD34C.cer
Subject Information Access:
Signed Object - URI:rsync://r.magellan.ipxo.com/repo/ddd1818b-9fbf-440c-aaec-44a4d1590f87-0/0/38312e32322e3133352e302f32342d3234203d3e2037303239.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.22.135.0/24
Signature Algorithm: sha256WithRSAEncryption
ab:e1:ba:a4:ea:3d:0f:fb:ac:e9:c2:51:a5:81:2c:19:0b:7d:
4c:dd:8e:80:12:0d:76:15:f4:f5:f1:31:78:02:96:91:1f:55:
b4:95:36:c4:9b:21:5b:78:05:53:86:52:96:8f:52:ba:fa:2e:
79:0e:14:d8:1d:8e:2b:45:c1:c4:ad:9e:86:cd:25:d9:e5:4d:
e3:c2:6c:22:63:57:fa:2b:e6:60:67:07:3b:51:ab:32:9e:40:
03:af:b3:3c:af:36:99:95:59:4c:da:d7:d5:73:a5:19:5a:82:
8d:06:d1:6e:bc:dd:5d:4a:53:72:68:e5:1a:7e:7f:f0:db:e3:
72:1b:a0:ae:20:e0:82:fb:b8:ef:d7:07:60:ab:86:40:27:92:
7c:38:9f:0b:b7:25:f1:e0:43:67:18:74:6d:c9:02:ae:10:de:
da:3f:b6:a8:42:d6:01:e9:01:6c:40:bc:6c:e9:c3:7f:69:b7:
cc:ad:1d:10:76:3c:fd:cf:6c:82:ac:ab:87:13:12:ca:12:b9:
05:39:27:ea:1f:d4:1b:4f:fe:94:ec:77:eb:d2:8c:ff:ab:24:
2c:c9:1c:31:58:55:7d:b5:3e:8e:e3:56:6d:d6:48:46:7c:ed:
e0:3b:27:75:0f:bb:b9:34:56:4c:b4:0f:00:3e:2f:81:04:c0:
72:43:f7:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 00:58:29 2026 by rpki-client