
$ rpki-client -vvf r.magellan.ipxo.com/repo/ddd1818b-9fbf-440c-aaec-44a4d1590f87-0/0/38392e3138352e33302e302f32342d3234203d3e20323032363632.roa
File: 38392e3138352e33302e302f32342d3234203d3e20323032363632.roa (raw, json)
Hash identifier: KIFLFOi9Ykg00zK/KBOSpQvLJMrvzs0Mbk60dXJbe8M=
Subject key identifier: EE:8A:C0:72:7B:A1:49:AF:12:04:5C:20:E6:79:25:61:FF:AB:E5:97
Certificate issuer: /CN=C972E8671DEDC43FE908B548531C969A051CD34C
Certificate serial: 2EB29BDAA90615FE66F25AE7C62E052D93BAF5F1
Authority key identifier: C9:72:E8:67:1D:ED:C4:3F:E9:08:B5:48:53:1C:96:9A:05:1C:D3:4C
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/2/C972E8671DEDC43FE908B548531C969A051CD34C.cer
Subject info access: rsync://r.magellan.ipxo.com/repo/ddd1818b-9fbf-440c-aaec-44a4d1590f87-0/0/38392e3138352e33302e302f32342d3234203d3e20323032363632.roa
Signing time: Mon 23 Feb 2026 15:06:36 +0000
ROA not before: Mon 23 Feb 2026 15:01:36 +0000
ROA not after: Mon 22 Feb 2027 15:06:36 +0000
asID: 202662
IP address blocks: 89.185.30.0/24 maxlen: 24
Validation: OK
Signature path: rsync://r.magellan.ipxo.com/repo/ddd1818b-9fbf-440c-aaec-44a4d1590f87-0/0/C972E8671DEDC43FE908B548531C969A051CD34C.crl
rsync://r.magellan.ipxo.com/repo/ddd1818b-9fbf-440c-aaec-44a4d1590f87-0/0/C972E8671DEDC43FE908B548531C969A051CD34C.mft
rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/2/C972E8671DEDC43FE908B548531C969A051CD34C.cer
rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/2/CF0631D33A3C9DC5C45424D55C3E7663838657A3.crl
rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/2/CF0631D33A3C9DC5C45424D55C3E7663838657A3.mft
rsync://rpki.ripe.net/repository/DEFAULT/zwYx0zo8ncXEVCTVXD52Y4OGV6M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 08:56:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2e:b2:9b:da:a9:06:15:fe:66:f2:5a:e7:c6:2e:05:2d:93:ba:f5:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C972E8671DEDC43FE908B548531C969A051CD34C
Validity
Not Before: Feb 23 15:01:36 2026 GMT
Not After : Feb 22 15:06:36 2027 GMT
Subject: CN=EE8AC0727BA149AF12045C20E6792561FFABE597
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:d1:1c:cb:7e:e3:c8:db:98:a3:2b:03:f0:13:
b8:3a:4c:3c:11:6f:58:da:55:d6:d9:da:4e:46:48:
e0:22:a9:12:01:16:6e:57:57:12:e1:36:b5:76:d4:
a9:5c:00:5b:a5:ac:86:76:04:54:80:e9:7c:45:63:
61:2a:cf:a4:b6:3f:96:6e:b7:64:90:32:69:50:2d:
b5:66:32:47:06:0d:c0:4d:dd:68:b9:ff:b0:c3:ed:
37:71:dc:7f:2e:d2:df:a8:64:f7:da:71:c2:96:02:
af:4f:1f:3d:93:35:ad:90:6f:4f:33:79:bc:d8:02:
f5:a1:02:e2:95:31:d3:a7:e2:98:20:07:de:ef:9b:
59:a6:4d:e2:6a:35:a2:56:b3:d3:6f:a7:49:57:c5:
72:b8:ba:5e:6f:bc:3f:3e:ef:4f:e0:6e:b6:44:9e:
94:18:f4:c5:3d:a2:de:3c:b7:3e:57:f3:6b:17:fb:
13:87:71:c8:d7:60:e2:8e:0d:2f:9e:d4:e1:1c:00:
62:34:3c:18:aa:c1:33:bf:be:25:5c:01:a2:66:38:
b4:a6:a2:ce:06:5a:f4:82:35:39:1d:9c:df:3c:71:
bf:af:3b:23:a1:8d:95:1d:3c:51:86:83:0f:eb:cf:
4a:9a:01:9a:c8:68:e0:90:ad:99:88:49:85:58:a9:
4d:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:8A:C0:72:7B:A1:49:AF:12:04:5C:20:E6:79:25:61:FF:AB:E5:97
X509v3 Authority Key Identifier:
keyid:C9:72:E8:67:1D:ED:C4:3F:E9:08:B5:48:53:1C:96:9A:05:1C:D3:4C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://r.magellan.ipxo.com/repo/ddd1818b-9fbf-440c-aaec-44a4d1590f87-0/0/C972E8671DEDC43FE908B548531C969A051CD34C.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/2/C972E8671DEDC43FE908B548531C969A051CD34C.cer
Subject Information Access:
Signed Object - URI:rsync://r.magellan.ipxo.com/repo/ddd1818b-9fbf-440c-aaec-44a4d1590f87-0/0/38392e3138352e33302e302f32342d3234203d3e20323032363632.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.185.30.0/24
Signature Algorithm: sha256WithRSAEncryption
78:c2:de:6e:49:e0:ea:86:9e:b1:6e:0d:18:12:76:19:91:9f:
5e:c0:7d:73:4a:0d:dd:ad:47:23:df:50:cc:55:54:4f:33:fd:
d5:3b:67:cd:34:05:64:3b:47:a0:c2:58:8f:4c:f5:a9:9b:4f:
c9:99:d5:25:f2:fb:a3:e4:83:8b:43:22:90:ec:19:2e:ea:8c:
15:96:93:d0:6f:ff:e2:f1:73:11:8d:6e:48:41:45:dc:0b:65:
a2:4c:19:58:9f:ec:b6:df:a9:6c:a3:a1:3d:32:f2:62:7c:eb:
e4:40:53:7d:1c:b5:5a:ad:3d:50:be:a2:ba:71:37:4d:ce:79:
8c:ba:00:1a:42:48:a6:13:75:21:5a:b5:29:b2:c4:6c:b8:11:
31:f7:03:1c:22:fa:ee:c5:e5:a3:c2:d8:e4:25:b8:9c:6a:32:
35:d3:00:9c:16:dd:06:f8:26:11:96:5b:fd:ba:55:0d:91:5f:
75:29:19:bb:65:b1:34:61:49:05:20:0f:8b:d2:9c:17:ec:fa:
45:77:8f:20:a4:5c:02:b7:ce:ef:fd:6d:1b:f2:05:05:e5:cc:
d0:68:52:62:61:08:cc:9d:35:de:f1:e9:07:91:40:29:a5:b0:
8e:12:03:4e:dc:d7:16:6f:16:64:0a:69:0e:9b:04:34:e7:14:
3b:b9:b7:3a
-----BEGIN CERTIFICATE-----
MIIFWDCCBECgAwIBAgIULrKb2qkGFf5m8lrnxi4FLZO69fEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQzk3MkU4NjcxREVEQzQzRkU5MDhCNTQ4NTMxQzk2OUEw
NTFDRDM0QzAeFw0yNjAyMjMxNTAxMzZaFw0yNzAyMjIxNTA2MzZaMDMxMTAvBgNV
BAMTKEVFOEFDMDcyN0JBMTQ5QUYxMjA0NUMyMEU2NzkyNTYxRkZBQkU1OTcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC50RzLfuPI25ijKwPwE7g6TDwR
b1jaVdbZ2k5GSOAiqRIBFm5XVxLhNrV21KlcAFulrIZ2BFSA6XxFY2Eqz6S2P5Zu
t2SQMmlQLbVmMkcGDcBN3Wi5/7DD7Tdx3H8u0t+oZPfaccKWAq9PHz2TNa2Qb08z
ebzYAvWhAuKVMdOn4pggB97vm1mmTeJqNaJWs9Nvp0lXxXK4ul5vvD8+70/gbrZE
npQY9MU9ot48tz5X82sX+xOHccjXYOKODS+e1OEcAGI0PBiqwTO/viVcAaJmOLSm
os4GWvSCNTkdnN88cb+vOyOhjZUdPFGGgw/rz0qaAZrIaOCQrZmISYVYqU3DAgMB
AAGjggJiMIICXjAdBgNVHQ4EFgQU7orAcnuhSa8SBFwg5nklYf+r5ZcwHwYDVR0j
BBgwFoAUyXLoZx3txD/pCLVIUxyWmgUc00wwDgYDVR0PAQH/BAQDAgeAMIGIBgNV
HR8EgYAwfjB8oHqgeIZ2cnN5bmM6Ly9yLm1hZ2VsbGFuLmlweG8uY29tL3JlcG8v
ZGRkMTgxOGItOWZiZi00NDBjLWFhZWMtNDRhNGQxNTkwZjg3LTAvMC9DOTcyRTg2
NzFERURDNDNGRTkwOEI1NDg1MzFDOTY5QTA1MUNEMzRDLmNybDCBngYIKwYBBQUH
AQEEgZEwgY4wgYsGCCsGAQUFBzAChn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5y
aXBlLm5ldC9yZXBvc2l0b3J5LzYxNzA4YTZiLTZjM2EtNDBhMC1hMzAyLTU5NWVj
YzE3ODQ4Yy8yL0M5NzJFODY3MURFREM0M0ZFOTA4QjU0ODUzMUM5NjlBMDUxQ0Qz
NEMuY2VyMIGkBggrBgEFBQcBCwSBlzCBlDCBkQYIKwYBBQUHMAuGgYRyc3luYzov
L3IubWFnZWxsYW4uaXB4by5jb20vcmVwby9kZGQxODE4Yi05ZmJmLTQ0MGMtYWFl
Yy00NGE0ZDE1OTBmODctMC8wLzM4MzkyZTMxMzgzNTJlMzMzMDJlMzAyZjMyMzQy
ZDMyMzQyMDNkM2UyMDMyMzAzMjM2MzYzMi5yb2EwGAYDVR0gAQH/BA4wDDAKBggr
BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAFm5HjANBgkqhkiG
9w0BAQsFAAOCAQEAeMLebkng6oaesW4NGBJ2GZGfXsB9c0oN3a1HI99QzFVUTzP9
1TtnzTQFZDtHoMJYj0z1qZtPyZnVJfL7o+SDi0MikOwZLuqMFZaT0G//4vFzEY1u
SEFF3AtlokwZWJ/stt+pbKOhPTLyYnzr5EBTfRy1Wq09UL6iunE3Tc55jLoAGkJI
phN1IVq1KbLEbLgRMfcDHCL67sXlo8LY5CW4nGoyNdMAnBbdBvgmEZZb/bpVDZFf
dSkZu2WxNGFJBSAPi9KcF+z6RXePIKRcArfO7/1tG/IFBeXM0GhSYmEIzJ013vHp
B5FAKaWwjhIDTtzXFm8WZAppDpsENOcUO7m3Og==
-----END CERTIFICATE-----
Generated at Mon Mar 2 01:30:24 2026 by rpki-client