
$ rpki-client -vvf r.magellan.ipxo.com/repo/ddd1818b-9fbf-440c-aaec-44a4d1590f87-0/0/38392e3138352e302e302f32342d3234203d3e2036303739.roa
File: 38392e3138352e302e302f32342d3234203d3e2036303739.roa (raw, json)
Hash identifier: BRAd3VCkuzxigVc0CqJ3VaXt1qVmgwRLKNUw02JzOos=
Subject key identifier: 02:AE:2A:8E:66:FF:77:A0:0F:A5:7F:76:98:38:DA:D9:9F:E3:42:15
Certificate issuer: /CN=C972E8671DEDC43FE908B548531C969A051CD34C
Certificate serial: 126197004F5DDAB0DB703D6915BA000748316BD3
Authority key identifier: C9:72:E8:67:1D:ED:C4:3F:E9:08:B5:48:53:1C:96:9A:05:1C:D3:4C
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/2/C972E8671DEDC43FE908B548531C969A051CD34C.cer
Subject info access: rsync://r.magellan.ipxo.com/repo/ddd1818b-9fbf-440c-aaec-44a4d1590f87-0/0/38392e3138352e302e302f32342d3234203d3e2036303739.roa
Signing time: Mon 23 Feb 2026 15:06:33 +0000
ROA not before: Mon 23 Feb 2026 15:01:33 +0000
ROA not after: Mon 22 Feb 2027 15:06:33 +0000
asID: 6079
IP address blocks: 89.185.0.0/24 maxlen: 24
Validation: OK
Signature path: rsync://r.magellan.ipxo.com/repo/ddd1818b-9fbf-440c-aaec-44a4d1590f87-0/0/C972E8671DEDC43FE908B548531C969A051CD34C.crl
rsync://r.magellan.ipxo.com/repo/ddd1818b-9fbf-440c-aaec-44a4d1590f87-0/0/C972E8671DEDC43FE908B548531C969A051CD34C.mft
rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/2/C972E8671DEDC43FE908B548531C969A051CD34C.cer
rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/2/CF0631D33A3C9DC5C45424D55C3E7663838657A3.crl
rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/2/CF0631D33A3C9DC5C45424D55C3E7663838657A3.mft
rsync://rpki.ripe.net/repository/DEFAULT/zwYx0zo8ncXEVCTVXD52Y4OGV6M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 08:56:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
12:61:97:00:4f:5d:da:b0:db:70:3d:69:15:ba:00:07:48:31:6b:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C972E8671DEDC43FE908B548531C969A051CD34C
Validity
Not Before: Feb 23 15:01:33 2026 GMT
Not After : Feb 22 15:06:33 2027 GMT
Subject: CN=02AE2A8E66FF77A00FA57F769838DAD99FE34215
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:4d:38:ca:08:14:91:28:c9:fe:a3:a2:8f:55:
a3:83:bc:8c:a2:ed:0b:54:40:0a:2a:80:e1:76:0f:
0e:a5:ad:32:66:35:26:45:a9:b9:78:01:b2:60:70:
82:20:bc:9b:ea:0c:0b:a5:ed:98:b8:1c:0a:11:32:
9b:9c:1a:09:24:b8:44:05:99:73:5c:91:ca:42:23:
4b:d8:40:bc:96:84:a2:c7:4a:0a:6e:e8:a6:b9:65:
72:34:8e:20:3d:4d:d0:34:3e:2b:32:43:01:3a:15:
ef:90:c7:01:b1:85:9a:da:4d:a2:b6:74:ff:11:46:
0e:d5:70:4f:c1:4c:14:12:4c:14:d5:d4:4d:d2:5b:
45:24:17:a9:50:f2:1d:9e:4c:3e:46:6d:1a:c0:d7:
84:ba:ae:a4:b1:b3:36:c3:dc:c7:79:66:a2:ec:59:
ce:56:4d:97:bc:a0:99:f0:d2:1e:7d:76:b2:05:86:
a1:4e:a6:d2:59:13:f1:43:fe:ac:8b:e5:07:36:30:
af:b1:29:86:37:8e:1a:fe:80:67:f6:42:64:b6:ce:
b9:61:80:ab:9e:7f:b6:69:ea:8c:f6:a6:2a:5c:a1:
e3:a2:e2:b7:f0:c0:fe:bc:9c:97:fa:3c:98:78:51:
7c:a9:95:36:2a:8a:11:d5:eb:dc:6a:13:03:ee:3e:
ac:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:AE:2A:8E:66:FF:77:A0:0F:A5:7F:76:98:38:DA:D9:9F:E3:42:15
X509v3 Authority Key Identifier:
keyid:C9:72:E8:67:1D:ED:C4:3F:E9:08:B5:48:53:1C:96:9A:05:1C:D3:4C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://r.magellan.ipxo.com/repo/ddd1818b-9fbf-440c-aaec-44a4d1590f87-0/0/C972E8671DEDC43FE908B548531C969A051CD34C.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/2/C972E8671DEDC43FE908B548531C969A051CD34C.cer
Subject Information Access:
Signed Object - URI:rsync://r.magellan.ipxo.com/repo/ddd1818b-9fbf-440c-aaec-44a4d1590f87-0/0/38392e3138352e302e302f32342d3234203d3e2036303739.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.185.0.0/24
Signature Algorithm: sha256WithRSAEncryption
56:f5:83:32:4a:d6:6e:70:b5:72:5f:6a:e3:1d:a2:fa:f3:be:
5d:36:bd:b9:fa:7a:9e:50:fd:b0:f7:53:b8:9d:d3:f9:56:1d:
10:c3:20:c4:de:26:27:47:49:a2:0b:e1:bf:85:f3:04:74:32:
9b:58:7c:d3:cc:88:5c:ec:90:d6:a3:2d:0e:44:ac:a7:ab:6f:
fd:28:02:79:8f:95:00:99:8f:1e:38:e9:10:1a:bd:b1:d4:1a:
8b:fa:a8:2e:19:0d:b6:9e:f1:ab:d4:5f:e2:1c:2a:f9:66:04:
9b:67:22:31:aa:46:1a:23:8b:ed:e8:b8:15:46:99:e3:6a:a6:
c2:0d:81:28:2f:1d:93:7c:63:98:fd:c2:64:0a:71:13:c1:88:
b6:81:3d:e1:e8:5b:ba:28:32:41:b8:d3:b0:bd:a5:30:f7:d7:
99:28:be:05:60:1a:cf:92:ac:fa:72:8e:be:f3:ce:22:5a:ab:
08:73:09:18:37:96:19:4b:3b:5c:2f:75:b9:c4:a2:8e:b2:56:
31:54:47:c3:dd:e8:ac:bc:32:59:78:1a:f3:ab:ae:15:49:fe:
51:fb:f8:73:da:3d:17:8d:8a:fb:61:3d:57:f5:8b:ce:84:88:
6e:f2:4d:c4:a7:2e:d3:84:1e:4c:bc:a2:49:a6:6d:aa:36:37:
ea:b2:1e:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 00:58:16 2026 by rpki-client