
$ rpki-client -vvf r.magellan.ipxo.com/repo/ddd1818b-9fbf-440c-aaec-44a4d1590f87-0/0/38312e32322e3134332e302f32342d3234203d3e2035353131.roa
File: 38312e32322e3134332e302f32342d3234203d3e2035353131.roa (raw, json)
Hash identifier: 1J6i5Elvk1ZgS+Di6p8bYtj7A6AtdEQc6Y/A2KPMr2g=
Subject key identifier: C6:E5:A8:E3:58:DA:CE:40:27:10:A2:5C:64:03:0E:20:11:3E:3A:69
Certificate issuer: /CN=C972E8671DEDC43FE908B548531C969A051CD34C
Certificate serial: 6FA545B07453B75F0FE1C7D598C96DEA2BE4CA1C
Authority key identifier: C9:72:E8:67:1D:ED:C4:3F:E9:08:B5:48:53:1C:96:9A:05:1C:D3:4C
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/2/C972E8671DEDC43FE908B548531C969A051CD34C.cer
Subject info access: rsync://r.magellan.ipxo.com/repo/ddd1818b-9fbf-440c-aaec-44a4d1590f87-0/0/38312e32322e3134332e302f32342d3234203d3e2035353131.roa
Signing time: Mon 23 Feb 2026 15:06:32 +0000
ROA not before: Mon 23 Feb 2026 15:01:32 +0000
ROA not after: Mon 22 Feb 2027 15:06:32 +0000
asID: 5511
IP address blocks: 81.22.143.0/24 maxlen: 24
Validation: OK
Signature path: rsync://r.magellan.ipxo.com/repo/ddd1818b-9fbf-440c-aaec-44a4d1590f87-0/0/C972E8671DEDC43FE908B548531C969A051CD34C.crl
rsync://r.magellan.ipxo.com/repo/ddd1818b-9fbf-440c-aaec-44a4d1590f87-0/0/C972E8671DEDC43FE908B548531C969A051CD34C.mft
rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/2/C972E8671DEDC43FE908B548531C969A051CD34C.cer
rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/2/CF0631D33A3C9DC5C45424D55C3E7663838657A3.crl
rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/2/CF0631D33A3C9DC5C45424D55C3E7663838657A3.mft
rsync://rpki.ripe.net/repository/DEFAULT/zwYx0zo8ncXEVCTVXD52Y4OGV6M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 04:25:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6f:a5:45:b0:74:53:b7:5f:0f:e1:c7:d5:98:c9:6d:ea:2b:e4:ca:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C972E8671DEDC43FE908B548531C969A051CD34C
Validity
Not Before: Feb 23 15:01:32 2026 GMT
Not After : Feb 22 15:06:32 2027 GMT
Subject: CN=C6E5A8E358DACE402710A25C64030E20113E3A69
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:48:63:b5:e2:be:a9:ea:43:6a:32:2d:29:15:
f0:c0:fa:38:1f:90:c7:95:3f:f9:77:13:36:cb:89:
c7:e2:1b:36:80:53:99:ef:0a:fb:6a:7b:c9:58:03:
a8:5f:0c:e0:f4:91:80:e9:ec:38:34:cc:32:3b:46:
fb:4d:3c:73:51:1c:15:fd:b3:3b:ab:d2:bb:bf:7d:
e0:a9:2b:93:7e:26:c2:86:81:a2:df:e0:53:9c:ee:
1f:4d:73:9f:e9:0a:93:7b:46:13:89:93:b7:b8:0c:
47:01:b9:98:a7:1d:79:d1:14:ee:d1:c6:8e:f0:0f:
7e:dd:44:f9:ff:7a:5c:f5:1f:a7:f4:1a:84:e5:52:
39:97:9f:eb:5c:6d:2e:77:d6:d3:cf:76:19:99:97:
50:a7:35:5b:60:e8:43:da:1b:03:18:24:ff:bb:48:
6f:0c:65:52:b1:29:f7:fd:1e:d5:48:7b:f9:52:f8:
1b:5f:56:54:00:ac:2e:d6:56:8f:3e:fd:38:3c:6c:
1f:ac:cb:be:e5:2a:a3:0d:d9:b4:63:09:5a:b9:68:
8f:03:52:f2:da:6d:e0:47:16:a5:85:db:9d:c8:d8:
52:49:ce:af:e1:f0:c1:86:66:38:71:09:fa:49:9f:
66:64:c8:96:d6:a7:c5:7f:a2:13:ae:2a:04:17:0f:
15:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:E5:A8:E3:58:DA:CE:40:27:10:A2:5C:64:03:0E:20:11:3E:3A:69
X509v3 Authority Key Identifier:
keyid:C9:72:E8:67:1D:ED:C4:3F:E9:08:B5:48:53:1C:96:9A:05:1C:D3:4C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://r.magellan.ipxo.com/repo/ddd1818b-9fbf-440c-aaec-44a4d1590f87-0/0/C972E8671DEDC43FE908B548531C969A051CD34C.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/2/C972E8671DEDC43FE908B548531C969A051CD34C.cer
Subject Information Access:
Signed Object - URI:rsync://r.magellan.ipxo.com/repo/ddd1818b-9fbf-440c-aaec-44a4d1590f87-0/0/38312e32322e3134332e302f32342d3234203d3e2035353131.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.22.143.0/24
Signature Algorithm: sha256WithRSAEncryption
1f:2c:25:1a:67:d9:35:ca:fa:90:12:f1:20:c9:ee:96:57:1c:
48:ce:0f:32:55:f7:46:89:7a:13:30:cb:42:d0:89:41:c6:72:
18:f0:df:1b:7f:d4:73:be:5c:97:e5:57:3e:52:92:98:44:04:
ee:87:23:82:77:89:73:ef:51:6d:1d:aa:79:f5:57:87:ec:e5:
6c:7f:ae:53:0a:26:4d:f7:d0:47:d0:62:77:8f:7e:63:bd:9f:
04:24:a5:86:cd:d2:19:1d:c9:71:81:83:e5:62:4c:15:e5:59:
db:3a:dd:85:2c:5e:85:c7:17:89:05:82:ed:83:bf:15:cd:be:
48:b1:e2:8a:00:75:51:99:22:04:d6:ce:e8:5d:35:0f:04:66:
5e:4c:16:af:ee:ba:62:18:0c:2b:f4:f3:0c:77:b2:eb:8c:c6:
fb:52:e9:f1:d7:d6:85:5d:4c:42:ea:05:b2:44:f3:67:a8:3d:
81:13:53:2f:15:ca:c7:73:d5:ef:e4:d3:5f:81:d3:ed:c8:d3:
19:2a:8c:f2:4d:0c:18:6c:84:89:5c:d6:1a:91:4c:da:e4:51:
e4:94:b7:13:09:da:51:8c:7f:12:9c:d0:24:8a:84:eb:10:8d:
88:d1:07:a7:e4:9a:f3:91:23:88:22:69:39:e5:77:11:e5:6d:
a2:a7:00:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 22:05:50 2026 by rpki-client