
$ rpki-client -vvf r.magellan.ipxo.com/repo/ddd1818b-9fbf-440c-aaec-44a4d1590f87-0/0/38312e32322e3134322e302f32342d3234203d3e2035353131.roa
File: 38312e32322e3134322e302f32342d3234203d3e2035353131.roa (raw, json)
Hash identifier: WFTH4gcE6qgi3J4fgier0H2wang2+xquFGVgjAGiy78=
Subject key identifier: 1C:00:EB:2B:9F:C5:3C:91:3D:C8:E2:96:64:EC:75:D8:54:AD:90:25
Certificate issuer: /CN=C972E8671DEDC43FE908B548531C969A051CD34C
Certificate serial: 1DDA0DE6931F445ACFD139EA098ECBB106DB824A
Authority key identifier: C9:72:E8:67:1D:ED:C4:3F:E9:08:B5:48:53:1C:96:9A:05:1C:D3:4C
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/2/C972E8671DEDC43FE908B548531C969A051CD34C.cer
Subject info access: rsync://r.magellan.ipxo.com/repo/ddd1818b-9fbf-440c-aaec-44a4d1590f87-0/0/38312e32322e3134322e302f32342d3234203d3e2035353131.roa
Signing time: Mon 23 Feb 2026 15:06:32 +0000
ROA not before: Mon 23 Feb 2026 15:01:32 +0000
ROA not after: Mon 22 Feb 2027 15:06:32 +0000
asID: 5511
IP address blocks: 81.22.142.0/24 maxlen: 24
Validation: OK
Signature path: rsync://r.magellan.ipxo.com/repo/ddd1818b-9fbf-440c-aaec-44a4d1590f87-0/0/C972E8671DEDC43FE908B548531C969A051CD34C.crl
rsync://r.magellan.ipxo.com/repo/ddd1818b-9fbf-440c-aaec-44a4d1590f87-0/0/C972E8671DEDC43FE908B548531C969A051CD34C.mft
rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/2/C972E8671DEDC43FE908B548531C969A051CD34C.cer
rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/2/CF0631D33A3C9DC5C45424D55C3E7663838657A3.crl
rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/2/CF0631D33A3C9DC5C45424D55C3E7663838657A3.mft
rsync://rpki.ripe.net/repository/DEFAULT/zwYx0zo8ncXEVCTVXD52Y4OGV6M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 04:25:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1d:da:0d:e6:93:1f:44:5a:cf:d1:39:ea:09:8e:cb:b1:06:db:82:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C972E8671DEDC43FE908B548531C969A051CD34C
Validity
Not Before: Feb 23 15:01:32 2026 GMT
Not After : Feb 22 15:06:32 2027 GMT
Subject: CN=1C00EB2B9FC53C913DC8E29664EC75D854AD9025
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:53:a0:04:b6:3b:f9:b1:11:57:94:e5:ab:ec:
15:26:e2:10:4d:c7:cd:f3:9d:a9:5c:d0:0c:95:f2:
cf:21:40:2b:8d:54:84:62:18:df:e5:95:82:cf:89:
65:1b:71:f6:14:a2:7f:e3:ad:85:7c:06:dc:16:b4:
9b:94:f0:38:31:eb:ad:2c:2f:ab:3c:f1:f4:25:ac:
c4:8c:ae:27:89:c2:14:b3:2b:4c:cc:e5:8a:6b:56:
f7:0d:f0:f2:94:af:9d:03:ee:bd:8b:a1:40:12:24:
5a:b9:c7:72:d5:42:21:53:24:09:8f:fb:1f:ac:6b:
2e:53:99:87:01:e8:39:12:5f:17:97:85:82:32:3b:
62:2d:d5:70:c7:56:e8:62:83:6e:b1:1a:3a:cb:df:
67:c4:e5:78:0f:d5:6e:cb:0e:09:01:3d:cb:9a:bf:
35:64:1f:d5:ff:6a:20:aa:38:e2:cd:e1:f8:a7:a1:
16:db:10:ed:30:0b:bc:40:82:4e:bd:04:0b:06:69:
62:3d:e7:26:5a:51:d5:d2:b4:3d:98:d7:e0:0b:e4:
da:71:17:7e:38:65:fa:fb:47:c7:ad:ad:50:4c:50:
86:de:77:8e:8a:7f:a4:f4:97:d8:42:67:69:85:52:
c2:f5:fe:c6:b9:6b:a6:e4:6e:e6:a9:c1:4d:22:6f:
47:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:00:EB:2B:9F:C5:3C:91:3D:C8:E2:96:64:EC:75:D8:54:AD:90:25
X509v3 Authority Key Identifier:
keyid:C9:72:E8:67:1D:ED:C4:3F:E9:08:B5:48:53:1C:96:9A:05:1C:D3:4C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://r.magellan.ipxo.com/repo/ddd1818b-9fbf-440c-aaec-44a4d1590f87-0/0/C972E8671DEDC43FE908B548531C969A051CD34C.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/2/C972E8671DEDC43FE908B548531C969A051CD34C.cer
Subject Information Access:
Signed Object - URI:rsync://r.magellan.ipxo.com/repo/ddd1818b-9fbf-440c-aaec-44a4d1590f87-0/0/38312e32322e3134322e302f32342d3234203d3e2035353131.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.22.142.0/24
Signature Algorithm: sha256WithRSAEncryption
16:26:04:0d:54:c0:e5:77:05:87:16:d5:b9:9f:e3:fb:a5:57:
69:1a:10:f9:2a:86:1e:36:09:0e:94:ba:6a:cd:c6:91:49:e8:
f4:64:2b:4f:34:c9:b6:0f:87:bc:30:65:0e:de:b3:74:16:c0:
01:01:a8:7c:5e:76:56:aa:65:0f:da:1e:f9:66:a4:f9:38:57:
6a:30:15:04:7b:ce:aa:2c:aa:e1:42:6f:1b:0e:ae:38:a2:bd:
0c:40:f0:ab:27:71:f7:80:85:9c:70:94:e3:f5:24:88:29:24:
bd:32:bc:de:37:4c:bf:17:ba:14:9f:52:0b:34:d1:65:7e:ef:
4b:9d:3a:22:06:f2:d7:d2:73:9a:07:df:0a:a9:3e:13:52:fc:
8e:69:9e:90:90:aa:d7:36:2f:fe:21:48:80:a4:93:91:3f:d6:
b6:4b:65:62:7f:02:7b:81:b2:60:f3:74:72:89:90:1e:ab:48:
d5:ff:10:d8:86:76:da:02:73:80:bc:56:e1:b1:2c:42:64:67:
08:bc:6c:76:85:f7:6e:b6:ee:b3:bd:50:40:69:d8:29:84:5a:
00:dd:47:df:2d:6e:e9:ef:93:b4:8d:a1:73:39:f1:8c:2f:c5:
14:24:ff:d7:58:d9:0e:c6:78:0b:83:2d:88:9b:d4:3a:7a:c1:
21:15:02:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 22:06:35 2026 by rpki-client