
$ rpki-client -vvf r.magellan.ipxo.com/repo/ddd1818b-9fbf-440c-aaec-44a4d1590f87-0/0/38312e32322e3134302e302f32342d3234203d3e20323132343030.roa
File: 38312e32322e3134302e302f32342d3234203d3e20323132343030.roa (raw, json)
Hash identifier: jxoKdE+Qxrlh+otaCyt/Cp+d1Ymx28D5IFWt4kyyC4U=
Subject key identifier: AC:51:18:9C:DE:96:DD:46:7F:7C:12:9F:46:BF:25:C8:E1:76:B5:3E
Certificate issuer: /CN=C972E8671DEDC43FE908B548531C969A051CD34C
Certificate serial: 6C74BCD47CBFADEA651E5F7EE2AD206E74EA90F3
Authority key identifier: C9:72:E8:67:1D:ED:C4:3F:E9:08:B5:48:53:1C:96:9A:05:1C:D3:4C
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/2/C972E8671DEDC43FE908B548531C969A051CD34C.cer
Subject info access: rsync://r.magellan.ipxo.com/repo/ddd1818b-9fbf-440c-aaec-44a4d1590f87-0/0/38312e32322e3134302e302f32342d3234203d3e20323132343030.roa
Signing time: Mon 23 Feb 2026 15:06:32 +0000
ROA not before: Mon 23 Feb 2026 15:01:32 +0000
ROA not after: Mon 22 Feb 2027 15:06:32 +0000
asID: 212400
IP address blocks: 81.22.140.0/24 maxlen: 24
Validation: OK
Signature path: rsync://r.magellan.ipxo.com/repo/ddd1818b-9fbf-440c-aaec-44a4d1590f87-0/0/C972E8671DEDC43FE908B548531C969A051CD34C.crl
rsync://r.magellan.ipxo.com/repo/ddd1818b-9fbf-440c-aaec-44a4d1590f87-0/0/C972E8671DEDC43FE908B548531C969A051CD34C.mft
rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/2/C972E8671DEDC43FE908B548531C969A051CD34C.cer
rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/2/CF0631D33A3C9DC5C45424D55C3E7663838657A3.crl
rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/2/CF0631D33A3C9DC5C45424D55C3E7663838657A3.mft
rsync://rpki.ripe.net/repository/DEFAULT/zwYx0zo8ncXEVCTVXD52Y4OGV6M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6c:74:bc:d4:7c:bf:ad:ea:65:1e:5f:7e:e2:ad:20:6e:74:ea:90:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C972E8671DEDC43FE908B548531C969A051CD34C
Validity
Not Before: Feb 23 15:01:32 2026 GMT
Not After : Feb 22 15:06:32 2027 GMT
Subject: CN=AC51189CDE96DD467F7C129F46BF25C8E176B53E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:d8:c2:b9:38:23:9d:1b:9e:d5:82:f1:1b:dd:
ac:2c:43:d1:90:33:17:cb:cc:f0:92:36:b8:b1:00:
e5:9d:be:91:7f:7e:63:fe:9b:71:4a:da:23:fc:77:
48:91:b7:42:5c:de:7d:68:79:a1:02:c3:ab:40:5f:
f9:7e:ec:a5:8a:bf:39:9d:a6:47:fc:6d:ac:ef:5e:
38:82:12:5e:89:34:f9:78:36:fc:af:31:29:eb:4c:
e1:2d:b1:1b:f1:cb:79:74:d0:f4:17:b3:9a:98:79:
ca:c6:ca:92:6e:35:c2:83:be:17:ad:39:9c:eb:d6:
35:91:c3:da:f7:8f:67:79:43:be:f1:53:e5:b4:0d:
e5:62:19:a1:bf:28:5f:21:05:3a:b4:48:d8:cd:99:
10:f6:df:b3:0e:7f:71:ae:99:56:d8:bc:b9:65:24:
79:5f:99:2c:e3:2e:df:28:5d:83:72:ea:55:8a:3e:
32:5e:19:02:97:a1:0e:7a:5d:06:14:00:51:79:de:
1a:93:9e:d9:7e:d4:ba:b7:55:13:1e:86:ba:36:d9:
17:a4:92:83:98:e7:83:85:c0:3e:d2:b0:8f:bb:df:
e5:35:8a:35:5c:0f:19:3a:44:a1:bb:03:2d:b2:05:
45:bc:33:e5:1e:9c:47:3c:84:db:bf:d6:34:c7:0c:
b2:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:51:18:9C:DE:96:DD:46:7F:7C:12:9F:46:BF:25:C8:E1:76:B5:3E
X509v3 Authority Key Identifier:
keyid:C9:72:E8:67:1D:ED:C4:3F:E9:08:B5:48:53:1C:96:9A:05:1C:D3:4C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://r.magellan.ipxo.com/repo/ddd1818b-9fbf-440c-aaec-44a4d1590f87-0/0/C972E8671DEDC43FE908B548531C969A051CD34C.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/2/C972E8671DEDC43FE908B548531C969A051CD34C.cer
Subject Information Access:
Signed Object - URI:rsync://r.magellan.ipxo.com/repo/ddd1818b-9fbf-440c-aaec-44a4d1590f87-0/0/38312e32322e3134302e302f32342d3234203d3e20323132343030.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.22.140.0/24
Signature Algorithm: sha256WithRSAEncryption
b5:79:e9:c4:2e:e5:53:e4:9e:34:4d:e1:e7:55:86:08:52:17:
e7:6e:ef:e6:d6:d2:ac:cd:2e:08:53:cf:a1:35:98:f2:12:37:
d3:5b:60:13:18:38:e6:49:c4:e3:91:64:0f:ef:b0:be:bb:5d:
2a:49:52:70:10:36:f8:5d:c6:b2:bc:c6:df:1b:24:55:ae:e9:
de:9e:af:1f:56:d6:92:1d:a7:24:8e:b1:16:ea:68:0d:30:e3:
f4:7c:e4:7f:12:01:a4:08:08:b1:14:8b:12:79:e6:88:d5:f4:
e8:ea:0d:41:a2:e4:60:7e:56:91:cb:25:c9:5e:3b:f7:82:2d:
f6:78:3a:d9:b3:46:ae:bc:48:0c:6f:d0:1a:46:a6:d8:63:07:
ff:49:77:97:57:8f:3c:b8:11:69:63:0c:98:f3:b5:97:b6:12:
20:e3:bf:b2:23:94:1f:2a:0a:9e:65:f3:5f:dc:0a:0a:77:d7:
81:41:e0:64:8a:33:93:7c:9d:da:b0:72:24:bc:5d:5d:1e:3f:
cb:83:19:c3:00:c3:98:f8:3a:6c:4c:a8:53:4b:b4:5f:04:45:
c5:c6:06:0c:d2:88:a5:ca:32:c0:a4:8a:c1:ec:10:22:c1:2a:
e7:d8:fb:f1:9d:19:59:77:27:ee:dc:e1:64:1e:da:b4:85:9b:
59:6c:74:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:25:30 2026 by rpki-client