
$ rpki-client -vvf r.magellan.ipxo.com/repo/ddd1818b-9fbf-440c-aaec-44a4d1590f87-0/0/38392e3138352e302e302f32342d3234203d3e2037303239.roa
File: 38392e3138352e302e302f32342d3234203d3e2037303239.roa (raw, json)
Hash identifier: /+LtYy/21QbwRy0Wogp5fz3p0lbVMkMiREk9s29ADWE=
Subject key identifier: 0D:AF:62:95:5D:C2:FC:65:2F:C4:9F:01:94:C1:FC:8D:96:A9:BD:03
Certificate issuer: /CN=C972E8671DEDC43FE908B548531C969A051CD34C
Certificate serial: 0CA6201A5136B26FAB3A00D2E33F46C5EE0BD292
Authority key identifier: C9:72:E8:67:1D:ED:C4:3F:E9:08:B5:48:53:1C:96:9A:05:1C:D3:4C
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/2/C972E8671DEDC43FE908B548531C969A051CD34C.cer
Subject info access: rsync://r.magellan.ipxo.com/repo/ddd1818b-9fbf-440c-aaec-44a4d1590f87-0/0/38392e3138352e302e302f32342d3234203d3e2037303239.roa
Signing time: Mon 23 Feb 2026 15:06:33 +0000
ROA not before: Mon 23 Feb 2026 15:01:33 +0000
ROA not after: Mon 22 Feb 2027 15:06:33 +0000
asID: 7029
IP address blocks: 89.185.0.0/24 maxlen: 24
Validation: OK
Signature path: rsync://r.magellan.ipxo.com/repo/ddd1818b-9fbf-440c-aaec-44a4d1590f87-0/0/C972E8671DEDC43FE908B548531C969A051CD34C.crl
rsync://r.magellan.ipxo.com/repo/ddd1818b-9fbf-440c-aaec-44a4d1590f87-0/0/C972E8671DEDC43FE908B548531C969A051CD34C.mft
rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/2/C972E8671DEDC43FE908B548531C969A051CD34C.cer
rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/2/CF0631D33A3C9DC5C45424D55C3E7663838657A3.crl
rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/2/CF0631D33A3C9DC5C45424D55C3E7663838657A3.mft
rsync://rpki.ripe.net/repository/DEFAULT/zwYx0zo8ncXEVCTVXD52Y4OGV6M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 08:56:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0c:a6:20:1a:51:36:b2:6f:ab:3a:00:d2:e3:3f:46:c5:ee:0b:d2:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C972E8671DEDC43FE908B548531C969A051CD34C
Validity
Not Before: Feb 23 15:01:33 2026 GMT
Not After : Feb 22 15:06:33 2027 GMT
Subject: CN=0DAF62955DC2FC652FC49F0194C1FC8D96A9BD03
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:b8:a3:2c:4f:47:ac:b9:99:51:f5:17:bb:71:
ee:cc:e9:a2:e6:f7:4f:14:58:0d:fc:af:13:a9:9e:
30:ec:60:8f:a2:8b:45:27:5f:a1:1a:ed:ff:ee:ab:
89:c6:bd:88:28:a6:44:8e:3b:a5:61:7d:22:22:6c:
21:2b:0f:60:7a:06:92:6b:78:71:e5:d1:cd:31:26:
00:8b:4e:88:91:d7:78:59:85:c3:b3:e9:96:10:b1:
3a:09:f3:95:69:4e:bc:d9:3e:21:10:08:77:2f:07:
3a:ab:ce:94:a0:ba:48:59:e8:52:ed:98:f2:d3:ca:
a8:05:fc:bb:d9:ca:d7:23:88:a4:96:c8:73:79:0c:
6e:db:c6:d4:db:45:18:e9:00:94:ef:7f:01:40:51:
00:75:23:77:30:6a:09:bf:7f:5b:8b:83:ea:f5:b6:
bc:35:03:42:8d:25:03:46:88:21:44:59:dc:33:11:
0e:7e:80:9d:ec:b6:cf:d4:c3:6b:01:8d:5c:39:33:
50:c8:4f:a2:ac:45:3c:80:dd:35:13:1a:7d:18:ea:
13:ae:fa:d9:d4:e9:2e:98:0b:e9:cd:91:a2:df:4b:
75:40:84:93:5b:a1:f6:d1:b4:ff:a8:30:01:cf:f3:
3d:03:99:18:b5:e4:9c:03:d3:fe:24:7e:62:46:79:
4e:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:AF:62:95:5D:C2:FC:65:2F:C4:9F:01:94:C1:FC:8D:96:A9:BD:03
X509v3 Authority Key Identifier:
keyid:C9:72:E8:67:1D:ED:C4:3F:E9:08:B5:48:53:1C:96:9A:05:1C:D3:4C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://r.magellan.ipxo.com/repo/ddd1818b-9fbf-440c-aaec-44a4d1590f87-0/0/C972E8671DEDC43FE908B548531C969A051CD34C.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/2/C972E8671DEDC43FE908B548531C969A051CD34C.cer
Subject Information Access:
Signed Object - URI:rsync://r.magellan.ipxo.com/repo/ddd1818b-9fbf-440c-aaec-44a4d1590f87-0/0/38392e3138352e302e302f32342d3234203d3e2037303239.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.185.0.0/24
Signature Algorithm: sha256WithRSAEncryption
22:68:63:a7:29:72:e1:19:1e:57:18:08:18:75:ea:e6:89:58:
d8:b2:cb:23:66:74:44:c2:f1:24:c9:26:0b:34:82:09:d3:50:
f2:15:66:a7:08:45:9d:b2:d3:fd:d6:69:8e:c8:7a:56:f8:1e:
3e:96:40:aa:75:8e:97:a1:a5:bb:eb:4a:34:9a:b2:67:bd:b1:
bc:82:c6:63:09:7a:44:fc:76:f7:3e:9e:34:c1:64:9d:7d:58:
00:b4:b4:2b:eb:e1:f0:6a:c9:4e:2b:aa:2e:d7:f4:b5:74:80:
03:53:b8:f6:c4:28:bb:05:29:c2:88:7e:23:82:99:fa:53:4a:
14:5e:2b:06:8d:6e:10:75:4e:06:da:fc:eb:9f:96:23:17:d2:
f5:d7:e5:3b:19:bd:fe:0b:d1:71:23:6b:40:59:47:14:96:48:
a9:63:c7:18:a3:9c:32:b9:86:07:fd:70:f0:2e:bc:86:16:b7:
70:a8:61:c9:f7:58:33:67:9e:64:62:35:2f:a2:0d:8d:e9:68:
5c:5e:33:78:3d:fe:fb:d1:9a:ea:11:80:1c:3f:bc:80:a6:7b:
03:f1:04:9d:e5:a2:1b:c5:e8:fa:7a:c7:2d:8a:86:e4:5b:c6:
ce:57:4d:7f:59:d4:cd:1e:47:66:5a:32:cc:e6:c5:a1:f5:37:
b8:e4:c1:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 00:58:48 2026 by rpki-client