
$ rpki-client -vvf r.magellan.ipxo.com/repo/ddd1818b-9fbf-440c-aaec-44a4d1590f87-0/0/38392e3138352e302e302f32342d3234203d3e2037303138.roa
File: 38392e3138352e302e302f32342d3234203d3e2037303138.roa (raw, json)
Hash identifier: OcYanfMHJfk6VbBCeP8AsUpoI0X71fTMzKEqqoWQVqo=
Subject key identifier: AF:98:29:82:48:CE:F4:7E:19:06:A5:DB:CA:7A:0A:1F:7A:93:BC:0F
Certificate issuer: /CN=C972E8671DEDC43FE908B548531C969A051CD34C
Certificate serial: 455C6645972C1C351A797DF1474589635FFF31E4
Authority key identifier: C9:72:E8:67:1D:ED:C4:3F:E9:08:B5:48:53:1C:96:9A:05:1C:D3:4C
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/2/C972E8671DEDC43FE908B548531C969A051CD34C.cer
Subject info access: rsync://r.magellan.ipxo.com/repo/ddd1818b-9fbf-440c-aaec-44a4d1590f87-0/0/38392e3138352e302e302f32342d3234203d3e2037303138.roa
Signing time: Mon 23 Feb 2026 15:06:33 +0000
ROA not before: Mon 23 Feb 2026 15:01:33 +0000
ROA not after: Mon 22 Feb 2027 15:06:33 +0000
asID: 7018
IP address blocks: 89.185.0.0/24 maxlen: 24
Validation: OK
Signature path: rsync://r.magellan.ipxo.com/repo/ddd1818b-9fbf-440c-aaec-44a4d1590f87-0/0/C972E8671DEDC43FE908B548531C969A051CD34C.crl
rsync://r.magellan.ipxo.com/repo/ddd1818b-9fbf-440c-aaec-44a4d1590f87-0/0/C972E8671DEDC43FE908B548531C969A051CD34C.mft
rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/2/C972E8671DEDC43FE908B548531C969A051CD34C.cer
rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/2/CF0631D33A3C9DC5C45424D55C3E7663838657A3.crl
rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/2/CF0631D33A3C9DC5C45424D55C3E7663838657A3.mft
rsync://rpki.ripe.net/repository/DEFAULT/zwYx0zo8ncXEVCTVXD52Y4OGV6M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 08:56:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
45:5c:66:45:97:2c:1c:35:1a:79:7d:f1:47:45:89:63:5f:ff:31:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C972E8671DEDC43FE908B548531C969A051CD34C
Validity
Not Before: Feb 23 15:01:33 2026 GMT
Not After : Feb 22 15:06:33 2027 GMT
Subject: CN=AF98298248CEF47E1906A5DBCA7A0A1F7A93BC0F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:5f:23:f2:36:49:ef:ca:ec:d9:c5:a5:60:d6:
e9:5a:c8:13:fa:7e:15:fa:ca:50:61:13:f0:14:e4:
ce:a7:40:72:45:db:ea:44:45:0b:aa:69:c7:ac:37:
7f:42:46:99:66:3b:66:6d:a0:19:d8:8d:5d:ad:2c:
4c:83:92:ab:9d:c5:51:20:80:10:1e:e7:31:23:6c:
09:05:df:b0:09:5f:61:93:e3:0d:14:a4:9a:c3:f3:
35:19:9d:cb:cd:d1:b6:66:f2:60:b8:a2:b4:57:47:
06:73:7d:af:e0:c4:75:5e:60:2e:7d:f9:0f:1b:86:
ec:b5:07:69:4b:4d:69:68:cf:2f:28:0f:2f:3d:3c:
30:ea:5b:52:ea:d1:de:ca:b8:d9:16:b9:a7:09:2f:
fe:f6:6a:d2:97:8d:8e:a3:b4:31:2c:e4:33:29:ab:
1f:4e:a7:47:1b:76:ba:e2:ce:ae:ce:b3:7d:05:65:
38:ee:da:a0:ed:25:a8:4c:9d:a1:32:84:b2:d6:b7:
bf:14:52:b1:16:ff:61:4c:67:94:83:c6:dc:53:72:
d7:c4:19:96:c9:57:3f:ec:48:48:01:2a:80:db:96:
34:45:2c:55:4a:29:13:68:a8:d3:18:7b:c0:32:be:
92:1c:4c:32:ff:8d:99:0d:d8:5f:de:9b:9a:e0:6d:
00:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:98:29:82:48:CE:F4:7E:19:06:A5:DB:CA:7A:0A:1F:7A:93:BC:0F
X509v3 Authority Key Identifier:
keyid:C9:72:E8:67:1D:ED:C4:3F:E9:08:B5:48:53:1C:96:9A:05:1C:D3:4C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://r.magellan.ipxo.com/repo/ddd1818b-9fbf-440c-aaec-44a4d1590f87-0/0/C972E8671DEDC43FE908B548531C969A051CD34C.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/2/C972E8671DEDC43FE908B548531C969A051CD34C.cer
Subject Information Access:
Signed Object - URI:rsync://r.magellan.ipxo.com/repo/ddd1818b-9fbf-440c-aaec-44a4d1590f87-0/0/38392e3138352e302e302f32342d3234203d3e2037303138.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.185.0.0/24
Signature Algorithm: sha256WithRSAEncryption
2e:13:e2:4c:37:ef:a2:33:69:74:f7:40:f9:a0:37:31:c4:c5:
96:17:ba:1a:b1:ea:ca:6d:12:0b:ca:e4:d4:81:eb:16:c0:6d:
5d:9e:88:07:69:aa:38:f6:c1:50:fd:df:64:7b:72:f5:e4:86:
b0:8a:9c:6b:2d:37:8d:48:30:6d:e8:01:11:8e:37:f1:99:8e:
af:05:0c:cb:73:9c:b7:30:92:24:0c:4f:98:9d:e8:c3:e3:6d:
8b:92:a2:9c:5c:f1:3a:0b:6a:96:15:c5:c4:47:d7:e5:0d:da:
9c:92:5a:22:8b:d0:c9:1d:a5:f5:58:49:99:42:48:d9:5b:fa:
74:bb:ea:26:f2:bf:f6:f6:f2:1e:58:e6:b3:0a:17:09:d5:05:
fa:49:6a:52:94:06:41:be:ab:2f:86:d4:60:51:7f:de:78:20:
59:e3:09:bc:88:71:5f:30:dd:06:28:8f:2f:2f:9d:be:2c:7f:
ee:e1:ba:39:bb:7e:45:44:e3:8e:a0:12:8d:0d:cf:ee:43:af:
a7:3b:23:59:d1:99:eb:6d:7f:68:07:12:06:2e:5a:4e:db:c9:
d3:78:4e:20:25:6c:2f:39:47:7c:bf:1f:fa:3b:76:4c:05:6a:
8d:8d:4b:b2:cd:49:7c:47:40:1a:be:58:8b:23:f5:b8:14:4f:
e4:94:90:a2
-----BEGIN CERTIFICATE-----
MIIFUTCCBDmgAwIBAgIURVxmRZcsHDUaeX3xR0WJY1//MeQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQzk3MkU4NjcxREVEQzQzRkU5MDhCNTQ4NTMxQzk2OUEw
NTFDRDM0QzAeFw0yNjAyMjMxNTAxMzNaFw0yNzAyMjIxNTA2MzNaMDMxMTAvBgNV
BAMTKEFGOTgyOTgyNDhDRUY0N0UxOTA2QTVEQkNBN0EwQTFGN0E5M0JDMEYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDSXyPyNknvyuzZxaVg1ulayBP6
fhX6ylBhE/AU5M6nQHJF2+pERQuqacesN39CRplmO2ZtoBnYjV2tLEyDkqudxVEg
gBAe5zEjbAkF37AJX2GT4w0UpJrD8zUZncvN0bZm8mC4orRXRwZzfa/gxHVeYC59
+Q8bhuy1B2lLTWlozy8oDy89PDDqW1Lq0d7KuNkWuacJL/72atKXjY6jtDEs5DMp
qx9Op0cbdrrizq7Os30FZTju2qDtJahMnaEyhLLWt78UUrEW/2FMZ5SDxtxTctfE
GZbJVz/sSEgBKoDbljRFLFVKKRNoqNMYe8AyvpIcTDL/jZkN2F/em5rgbQAxAgMB
AAGjggJbMIICVzAdBgNVHQ4EFgQUr5gpgkjO9H4ZBqXbynoKH3qTvA8wHwYDVR0j
BBgwFoAUyXLoZx3txD/pCLVIUxyWmgUc00wwDgYDVR0PAQH/BAQDAgeAMIGIBgNV
HR8EgYAwfjB8oHqgeIZ2cnN5bmM6Ly9yLm1hZ2VsbGFuLmlweG8uY29tL3JlcG8v
ZGRkMTgxOGItOWZiZi00NDBjLWFhZWMtNDRhNGQxNTkwZjg3LTAvMC9DOTcyRTg2
NzFERURDNDNGRTkwOEI1NDg1MzFDOTY5QTA1MUNEMzRDLmNybDCBngYIKwYBBQUH
AQEEgZEwgY4wgYsGCCsGAQUFBzAChn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5y
aXBlLm5ldC9yZXBvc2l0b3J5LzYxNzA4YTZiLTZjM2EtNDBhMC1hMzAyLTU5NWVj
YzE3ODQ4Yy8yL0M5NzJFODY3MURFREM0M0ZFOTA4QjU0ODUzMUM5NjlBMDUxQ0Qz
NEMuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCBigYIKwYBBQUHMAuGfnJzeW5jOi8v
ci5tYWdlbGxhbi5pcHhvLmNvbS9yZXBvL2RkZDE4MThiLTlmYmYtNDQwYy1hYWVj
LTQ0YTRkMTU5MGY4Ny0wLzAvMzgzOTJlMzEzODM1MmUzMDJlMzAyZjMyMzQyZDMy
MzQyMDNkM2UyMDM3MzAzMTM4LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4C
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAWbkAMA0GCSqGSIb3DQEBCwUA
A4IBAQAuE+JMN++iM2l090D5oDcxxMWWF7oaserKbRILyuTUgesWwG1dnogHaao4
9sFQ/d9ke3L15IawipxrLTeNSDBt6AERjjfxmY6vBQzLc5y3MJIkDE+YnejD422L
kqKcXPE6C2qWFcXER9flDdqckloii9DJHaX1WEmZQkjZW/p0u+om8r/29vIeWOaz
ChcJ1QX6SWpSlAZBvqsvhtRgUX/eeCBZ4wm8iHFfMN0GKI8vL52+LH/u4bo5u35F
ROOOoBKNDc/uQ6+nOyNZ0ZnrbX9oBxIGLlpO28nTeE4gJWwvOUd8vx/6O3ZMBWqN
jUuyzUl8R0AavliLI/W4FE/klJCi
-----END CERTIFICATE-----
Generated at Mon Mar 2 00:58:31 2026 by rpki-client