
$ rpki-client -vvf r.magellan.ipxo.com/repo/ddd1818b-9fbf-440c-aaec-44a4d1590f87-0/0/38312e32322e3133382e302f32342d3234203d3e2036303739.roa
File: 38312e32322e3133382e302f32342d3234203d3e2036303739.roa (raw, json)
Hash identifier: /N0GZguxMjvzTsqPk49M4sZRPG18o5Bs+5jBxXZxr2I=
Subject key identifier: A9:F9:A0:D5:5E:2A:0C:34:E1:97:B8:E4:6D:58:C8:BA:46:1C:F9:43
Certificate issuer: /CN=C972E8671DEDC43FE908B548531C969A051CD34C
Certificate serial: 541C989DBC2B9B3A1C7B1EFCC8910613FBCAEF17
Authority key identifier: C9:72:E8:67:1D:ED:C4:3F:E9:08:B5:48:53:1C:96:9A:05:1C:D3:4C
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/2/C972E8671DEDC43FE908B548531C969A051CD34C.cer
Subject info access: rsync://r.magellan.ipxo.com/repo/ddd1818b-9fbf-440c-aaec-44a4d1590f87-0/0/38312e32322e3133382e302f32342d3234203d3e2036303739.roa
Signing time: Mon 23 Feb 2026 15:06:31 +0000
ROA not before: Mon 23 Feb 2026 15:01:31 +0000
ROA not after: Mon 22 Feb 2027 15:06:31 +0000
asID: 6079
IP address blocks: 81.22.138.0/24 maxlen: 24
Validation: OK
Signature path: rsync://r.magellan.ipxo.com/repo/ddd1818b-9fbf-440c-aaec-44a4d1590f87-0/0/C972E8671DEDC43FE908B548531C969A051CD34C.crl
rsync://r.magellan.ipxo.com/repo/ddd1818b-9fbf-440c-aaec-44a4d1590f87-0/0/C972E8671DEDC43FE908B548531C969A051CD34C.mft
rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/2/C972E8671DEDC43FE908B548531C969A051CD34C.cer
rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/2/CF0631D33A3C9DC5C45424D55C3E7663838657A3.crl
rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/2/CF0631D33A3C9DC5C45424D55C3E7663838657A3.mft
rsync://rpki.ripe.net/repository/DEFAULT/zwYx0zo8ncXEVCTVXD52Y4OGV6M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 08:56:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
54:1c:98:9d:bc:2b:9b:3a:1c:7b:1e:fc:c8:91:06:13:fb:ca:ef:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C972E8671DEDC43FE908B548531C969A051CD34C
Validity
Not Before: Feb 23 15:01:31 2026 GMT
Not After : Feb 22 15:06:31 2027 GMT
Subject: CN=A9F9A0D55E2A0C34E197B8E46D58C8BA461CF943
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:45:8f:9d:a1:4a:e0:93:40:c6:ef:67:9e:20:
53:3f:2b:fb:78:d6:99:ac:3f:00:1e:e1:17:ad:40:
0c:4c:7c:a8:fe:15:c0:61:f7:d1:e9:40:9e:2a:df:
67:c2:33:1e:7f:82:29:d4:77:56:4d:dc:b5:0b:33:
72:91:d9:a8:a0:33:bf:15:1b:83:66:8b:b9:42:f7:
a0:cc:f6:e7:f8:52:98:49:65:b3:22:f3:60:d6:b1:
34:1f:32:d8:da:b2:2a:46:51:d5:44:18:c9:76:09:
11:a9:3f:28:60:7d:ea:aa:86:79:0d:66:82:8a:d1:
22:77:cd:f0:65:f7:3a:5e:dd:70:76:37:e8:68:e7:
9e:23:88:47:1f:d4:da:35:b9:0a:88:4c:91:3a:dc:
28:11:b1:43:7d:0d:01:f1:89:b3:0d:b0:a3:08:86:
18:75:82:0e:65:b6:60:5c:f8:89:8e:5f:f9:64:32:
e8:c7:1b:37:f1:36:df:5f:19:78:7f:4e:b6:2c:6f:
d2:40:5b:66:e3:c2:5d:09:45:ea:cf:00:2e:71:55:
40:d0:2b:82:ef:fd:50:1f:a7:c0:cc:43:29:60:b2:
a0:b8:3b:15:a5:d7:5e:33:68:e8:81:b7:46:09:d7:
ca:24:9e:69:59:41:11:42:f1:5e:10:cc:1c:f8:a2:
5b:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:F9:A0:D5:5E:2A:0C:34:E1:97:B8:E4:6D:58:C8:BA:46:1C:F9:43
X509v3 Authority Key Identifier:
keyid:C9:72:E8:67:1D:ED:C4:3F:E9:08:B5:48:53:1C:96:9A:05:1C:D3:4C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://r.magellan.ipxo.com/repo/ddd1818b-9fbf-440c-aaec-44a4d1590f87-0/0/C972E8671DEDC43FE908B548531C969A051CD34C.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/2/C972E8671DEDC43FE908B548531C969A051CD34C.cer
Subject Information Access:
Signed Object - URI:rsync://r.magellan.ipxo.com/repo/ddd1818b-9fbf-440c-aaec-44a4d1590f87-0/0/38312e32322e3133382e302f32342d3234203d3e2036303739.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.22.138.0/24
Signature Algorithm: sha256WithRSAEncryption
45:05:9f:4f:f3:dd:a6:2d:90:76:bb:07:9e:d2:ae:26:54:8c:
51:cd:9d:d6:0d:e7:ec:eb:f8:a4:6b:b5:03:e0:53:68:2b:28:
a9:59:7e:30:45:24:fb:ff:c2:0a:4e:c5:b7:48:e7:75:43:4c:
5e:41:f3:53:63:ed:4d:05:29:b3:63:b8:22:f6:97:98:db:4b:
fe:d1:5f:cb:63:54:cc:56:aa:50:a8:b5:22:cf:07:55:a6:db:
d5:c1:61:6a:9c:26:5c:99:72:fc:92:66:9f:c8:ea:71:7e:0a:
67:68:d8:8a:01:f1:04:60:6d:ed:a6:a5:67:88:84:af:c4:19:
1e:8f:1b:e4:ee:e3:13:1d:60:82:d0:e0:84:b9:f9:a9:c0:bf:
e2:96:60:ad:75:56:7d:67:3d:f5:7c:12:f9:28:59:c3:03:da:
ee:f8:8e:41:f6:dc:bc:c7:fa:db:29:be:76:ee:c2:41:b8:2e:
6e:53:61:fd:5d:c2:45:63:fd:24:2b:cc:b1:e1:0f:f4:c1:40:
f8:28:08:0c:0e:fd:dd:e8:70:23:86:02:23:a3:88:9b:04:a9:
7a:7b:81:58:d2:b4:1c:a8:01:d1:5e:c9:6b:36:b5:69:34:e3:
fa:b5:87:e5:94:ef:cf:fb:ad:3c:56:6f:8f:8b:ce:37:2f:82:
dd:78:0f:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:42:30 2026 by rpki-client