
$ rpki-client -vvf r.magellan.ipxo.com/repo/ddd1818b-9fbf-440c-aaec-44a4d1590f87-0/0/38312e32322e3133382e302f32342d3234203d3e2037303239.roa
File: 38312e32322e3133382e302f32342d3234203d3e2037303239.roa (raw, json)
Hash identifier: guVQFWW+KuPa5XIuVp0day5fYuCZ6AeBaBz4iUrtduM=
Subject key identifier: CF:C0:AC:22:7A:DE:39:43:93:DB:7F:D3:76:4B:DE:65:BD:DD:A3:FF
Certificate issuer: /CN=C972E8671DEDC43FE908B548531C969A051CD34C
Certificate serial: 0FAE945FF30186E228E3D880FA4F2BD956D140C1
Authority key identifier: C9:72:E8:67:1D:ED:C4:3F:E9:08:B5:48:53:1C:96:9A:05:1C:D3:4C
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/2/C972E8671DEDC43FE908B548531C969A051CD34C.cer
Subject info access: rsync://r.magellan.ipxo.com/repo/ddd1818b-9fbf-440c-aaec-44a4d1590f87-0/0/38312e32322e3133382e302f32342d3234203d3e2037303239.roa
Signing time: Mon 23 Feb 2026 15:06:31 +0000
ROA not before: Mon 23 Feb 2026 15:01:31 +0000
ROA not after: Mon 22 Feb 2027 15:06:31 +0000
asID: 7029
IP address blocks: 81.22.138.0/24 maxlen: 24
Validation: OK
Signature path: rsync://r.magellan.ipxo.com/repo/ddd1818b-9fbf-440c-aaec-44a4d1590f87-0/0/C972E8671DEDC43FE908B548531C969A051CD34C.crl
rsync://r.magellan.ipxo.com/repo/ddd1818b-9fbf-440c-aaec-44a4d1590f87-0/0/C972E8671DEDC43FE908B548531C969A051CD34C.mft
rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/2/C972E8671DEDC43FE908B548531C969A051CD34C.cer
rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/2/CF0631D33A3C9DC5C45424D55C3E7663838657A3.crl
rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/2/CF0631D33A3C9DC5C45424D55C3E7663838657A3.mft
rsync://rpki.ripe.net/repository/DEFAULT/zwYx0zo8ncXEVCTVXD52Y4OGV6M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 08:56:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0f:ae:94:5f:f3:01:86:e2:28:e3:d8:80:fa:4f:2b:d9:56:d1:40:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C972E8671DEDC43FE908B548531C969A051CD34C
Validity
Not Before: Feb 23 15:01:31 2026 GMT
Not After : Feb 22 15:06:31 2027 GMT
Subject: CN=CFC0AC227ADE394393DB7FD3764BDE65BDDDA3FF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:46:b4:d4:5b:05:57:4e:ec:f8:f8:df:19:5a:
4f:0c:03:1c:66:e2:96:1d:67:1e:8a:70:34:a9:93:
b7:ac:11:8b:20:ba:b4:2b:e8:f7:da:c2:53:ca:3e:
e1:51:5b:7d:da:21:a3:bc:0b:bc:42:2e:4e:c3:23:
f8:67:2e:1e:b8:81:30:42:a9:58:c7:c9:3a:7e:c0:
3b:51:d9:6d:93:61:63:92:ac:41:c1:c4:ce:bd:28:
a7:10:4e:7f:29:e1:37:cd:1c:0e:a0:0a:d5:be:d5:
37:1e:91:4c:9b:5f:6b:40:2b:f3:42:e3:cb:a9:ba:
25:63:37:c4:d6:07:74:5a:f3:d4:cf:d8:16:1c:d1:
de:3c:86:ee:8a:c8:f3:59:d8:23:a1:84:82:dc:7c:
95:be:dd:55:9f:f2:c7:ba:64:d6:11:dd:08:a5:a8:
b5:3c:f8:6f:d8:41:a9:2c:d6:ed:e8:a6:8e:42:5c:
5b:27:26:6e:ad:20:a8:4c:a2:1a:ae:0e:e5:b5:f4:
9f:8d:0f:10:2f:54:df:21:02:37:a9:8b:9e:4d:a1:
35:48:b9:ed:2f:d2:97:a6:ca:ef:4d:ca:3e:be:f1:
9c:9f:88:9f:c0:63:e2:43:b2:1e:04:63:53:9f:46:
c9:a7:49:d1:1d:b2:da:8f:b4:54:55:0d:6e:0d:f9:
ee:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:C0:AC:22:7A:DE:39:43:93:DB:7F:D3:76:4B:DE:65:BD:DD:A3:FF
X509v3 Authority Key Identifier:
keyid:C9:72:E8:67:1D:ED:C4:3F:E9:08:B5:48:53:1C:96:9A:05:1C:D3:4C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://r.magellan.ipxo.com/repo/ddd1818b-9fbf-440c-aaec-44a4d1590f87-0/0/C972E8671DEDC43FE908B548531C969A051CD34C.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/2/C972E8671DEDC43FE908B548531C969A051CD34C.cer
Subject Information Access:
Signed Object - URI:rsync://r.magellan.ipxo.com/repo/ddd1818b-9fbf-440c-aaec-44a4d1590f87-0/0/38312e32322e3133382e302f32342d3234203d3e2037303239.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.22.138.0/24
Signature Algorithm: sha256WithRSAEncryption
8e:74:57:ec:22:6b:a9:f2:02:2b:3c:4b:4d:cf:23:99:52:c9:
af:8c:b4:0d:57:5d:f1:e7:90:6e:76:64:0c:37:24:3f:c8:50:
e2:b7:f1:16:93:ac:b4:20:fb:73:0a:87:33:52:ab:ff:85:28:
11:bd:ea:dc:d1:dd:a0:a8:36:2f:25:dd:a3:ef:14:64:83:fc:
cc:5b:1a:79:b8:95:4c:3c:bd:e4:13:1d:b4:7a:bc:a4:78:2f:
41:59:56:b5:41:fe:ba:3d:36:73:e0:47:50:e3:f5:36:26:6d:
e2:80:03:1f:0c:d2:fd:a8:ac:51:93:cb:16:21:0c:9a:67:ba:
3c:6a:2d:61:5c:b8:65:0c:a7:b0:2a:14:89:11:21:80:c6:83:
6d:0f:bc:e3:17:a2:d0:83:bd:16:fe:71:e5:80:8f:d1:92:f0:
1d:b9:ea:0f:ed:44:1f:b6:93:45:5d:5a:71:a7:2a:f6:cd:78:
a7:39:71:32:22:07:08:e6:10:4e:01:05:13:2d:55:27:33:5a:
0a:16:9e:1c:33:80:24:f4:32:f1:6d:06:8d:e8:ae:26:4f:fd:
9d:70:a8:77:cb:18:e3:0f:13:82:4a:1d:38:9b:ff:b4:d1:92:
f3:49:e5:ef:74:f1:83:d8:21:dd:8f:4c:0e:b1:ce:83:a4:a5:
26:c1:68:1d
-----BEGIN CERTIFICATE-----
MIIFVDCCBDygAwIBAgIUD66UX/MBhuIo49iA+k8r2VbRQMEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQzk3MkU4NjcxREVEQzQzRkU5MDhCNTQ4NTMxQzk2OUEw
NTFDRDM0QzAeFw0yNjAyMjMxNTAxMzFaFw0yNzAyMjIxNTA2MzFaMDMxMTAvBgNV
BAMTKENGQzBBQzIyN0FERTM5NDM5M0RCN0ZEMzc2NEJERTY1QkREREEzRkYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQChRrTUWwVXTuz4+N8ZWk8MAxxm
4pYdZx6KcDSpk7esEYsgurQr6PfawlPKPuFRW33aIaO8C7xCLk7DI/hnLh64gTBC
qVjHyTp+wDtR2W2TYWOSrEHBxM69KKcQTn8p4TfNHA6gCtW+1TcekUybX2tAK/NC
48upuiVjN8TWB3Ra89TP2BYc0d48hu6KyPNZ2COhhILcfJW+3VWf8se6ZNYR3Qil
qLU8+G/YQaks1u3opo5CXFsnJm6tIKhMohquDuW19J+NDxAvVN8hAjepi55NoTVI
ue0v0pemyu9Nyj6+8ZyfiJ/AY+JDsh4EY1OfRsmnSdEdstqPtFRVDW4N+e4xAgMB
AAGjggJeMIICWjAdBgNVHQ4EFgQUz8CsInreOUOT23/TdkveZb3do/8wHwYDVR0j
BBgwFoAUyXLoZx3txD/pCLVIUxyWmgUc00wwDgYDVR0PAQH/BAQDAgeAMIGIBgNV
HR8EgYAwfjB8oHqgeIZ2cnN5bmM6Ly9yLm1hZ2VsbGFuLmlweG8uY29tL3JlcG8v
ZGRkMTgxOGItOWZiZi00NDBjLWFhZWMtNDRhNGQxNTkwZjg3LTAvMC9DOTcyRTg2
NzFERURDNDNGRTkwOEI1NDg1MzFDOTY5QTA1MUNEMzRDLmNybDCBngYIKwYBBQUH
AQEEgZEwgY4wgYsGCCsGAQUFBzAChn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5y
aXBlLm5ldC9yZXBvc2l0b3J5LzYxNzA4YTZiLTZjM2EtNDBhMC1hMzAyLTU5NWVj
YzE3ODQ4Yy8yL0M5NzJFODY3MURFREM0M0ZFOTA4QjU0ODUzMUM5NjlBMDUxQ0Qz
NEMuY2VyMIGgBggrBgEFBQcBCwSBkzCBkDCBjQYIKwYBBQUHMAuGgYByc3luYzov
L3IubWFnZWxsYW4uaXB4by5jb20vcmVwby9kZGQxODE4Yi05ZmJmLTQ0MGMtYWFl
Yy00NGE0ZDE1OTBmODctMC8wLzM4MzEyZTMyMzIyZTMxMzMzODJlMzAyZjMyMzQy
ZDMyMzQyMDNkM2UyMDM3MzAzMjM5LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUF
Bw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAURaKMA0GCSqGSIb3DQEB
CwUAA4IBAQCOdFfsImup8gIrPEtNzyOZUsmvjLQNV13x55BudmQMNyQ/yFDit/EW
k6y0IPtzCoczUqv/hSgRverc0d2gqDYvJd2j7xRkg/zMWxp5uJVMPL3kEx20eryk
eC9BWVa1Qf66PTZz4EdQ4/U2Jm3igAMfDNL9qKxRk8sWIQyaZ7o8ai1hXLhlDKew
KhSJESGAxoNtD7zjF6LQg70W/nHlgI/RkvAdueoP7UQftpNFXVpxpyr2zXinOXEy
IgcI5hBOAQUTLVUnM1oKFp4cM4Ak9DLxbQaN6K4mT/2dcKh3yxjjDxOCSh04m/+0
0ZLzSeXvdPGD2CHdj0wOsc6DpKUmwWgd
-----END CERTIFICATE-----
Generated at Mon Mar 2 00:58:36 2026 by rpki-client