
$ rpki-client -vvf r.magellan.ipxo.com/repo/ddd1818b-9fbf-440c-aaec-44a4d1590f87-0/0/38392e3138352e33312e302f32342d3234203d3e20323032363632.roa
File: 38392e3138352e33312e302f32342d3234203d3e20323032363632.roa (raw, json)
Hash identifier: pnbGquIwIZbxr5YDQJ5rWjS8eCdSA+4db9ml1rQtXUs=
Subject key identifier: DF:73:63:47:C6:45:08:91:9B:6F:B9:46:6E:4D:73:41:32:37:84:26
Certificate issuer: /CN=C972E8671DEDC43FE908B548531C969A051CD34C
Certificate serial: 71C77A8ABFEEC9B37D552A80EF73D3A54994B0E5
Authority key identifier: C9:72:E8:67:1D:ED:C4:3F:E9:08:B5:48:53:1C:96:9A:05:1C:D3:4C
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/2/C972E8671DEDC43FE908B548531C969A051CD34C.cer
Subject info access: rsync://r.magellan.ipxo.com/repo/ddd1818b-9fbf-440c-aaec-44a4d1590f87-0/0/38392e3138352e33312e302f32342d3234203d3e20323032363632.roa
Signing time: Mon 23 Feb 2026 15:06:36 +0000
ROA not before: Mon 23 Feb 2026 15:01:36 +0000
ROA not after: Mon 22 Feb 2027 15:06:36 +0000
asID: 202662
IP address blocks: 89.185.31.0/24 maxlen: 24
Validation: OK
Signature path: rsync://r.magellan.ipxo.com/repo/ddd1818b-9fbf-440c-aaec-44a4d1590f87-0/0/C972E8671DEDC43FE908B548531C969A051CD34C.crl
rsync://r.magellan.ipxo.com/repo/ddd1818b-9fbf-440c-aaec-44a4d1590f87-0/0/C972E8671DEDC43FE908B548531C969A051CD34C.mft
rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/2/C972E8671DEDC43FE908B548531C969A051CD34C.cer
rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/2/CF0631D33A3C9DC5C45424D55C3E7663838657A3.crl
rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/2/CF0631D33A3C9DC5C45424D55C3E7663838657A3.mft
rsync://rpki.ripe.net/repository/DEFAULT/zwYx0zo8ncXEVCTVXD52Y4OGV6M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 08:56:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
71:c7:7a:8a:bf:ee:c9:b3:7d:55:2a:80:ef:73:d3:a5:49:94:b0:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C972E8671DEDC43FE908B548531C969A051CD34C
Validity
Not Before: Feb 23 15:01:36 2026 GMT
Not After : Feb 22 15:06:36 2027 GMT
Subject: CN=DF736347C64508919B6FB9466E4D734132378426
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:d5:df:3b:33:e9:21:16:6a:6e:16:40:57:0e:
f8:a1:fb:35:95:47:ae:47:d5:ce:54:7f:66:e4:d1:
5f:a8:f2:53:88:f8:0b:9b:e2:83:0e:8f:55:38:fa:
83:81:07:94:3c:47:f9:f1:99:35:b7:bc:90:fd:e4:
cf:15:29:c2:d7:5d:f3:de:13:f9:13:1b:d3:0f:5c:
93:3a:fd:f9:11:e9:18:20:d6:4d:96:e8:77:49:cd:
24:f1:af:2e:66:6f:70:23:e6:76:fa:38:1b:e3:bb:
1e:aa:fa:13:fe:2e:db:ea:df:91:34:0d:6c:05:b4:
8b:ab:07:1a:fb:f1:85:df:fc:48:39:6f:34:d8:9d:
33:f5:3f:2f:f6:cd:33:b7:f3:8f:7b:c6:2a:19:bc:
e7:7c:cf:11:3e:f8:1b:37:94:a0:ab:fe:9e:8b:d1:
77:e2:34:74:fc:93:46:97:29:0e:b9:dc:63:65:21:
6e:93:9c:7a:ef:60:fc:11:43:20:e3:f1:d9:21:d9:
b8:49:7c:9d:a4:3e:70:c6:4d:9a:b2:14:88:86:83:
78:0f:de:6e:2e:0e:10:5e:78:8f:e3:fc:cb:e7:80:
b4:6a:01:62:72:50:b5:7e:ce:8e:30:eb:43:f6:db:
15:c8:c4:13:94:fd:63:8f:22:c8:ef:6f:0b:3a:42:
e4:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:73:63:47:C6:45:08:91:9B:6F:B9:46:6E:4D:73:41:32:37:84:26
X509v3 Authority Key Identifier:
keyid:C9:72:E8:67:1D:ED:C4:3F:E9:08:B5:48:53:1C:96:9A:05:1C:D3:4C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://r.magellan.ipxo.com/repo/ddd1818b-9fbf-440c-aaec-44a4d1590f87-0/0/C972E8671DEDC43FE908B548531C969A051CD34C.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/2/C972E8671DEDC43FE908B548531C969A051CD34C.cer
Subject Information Access:
Signed Object - URI:rsync://r.magellan.ipxo.com/repo/ddd1818b-9fbf-440c-aaec-44a4d1590f87-0/0/38392e3138352e33312e302f32342d3234203d3e20323032363632.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.185.31.0/24
Signature Algorithm: sha256WithRSAEncryption
79:7b:62:ba:f4:17:11:2b:39:07:87:8e:d8:9a:76:63:54:fb:
f8:f7:ed:90:9e:61:a1:7e:b8:91:cb:4a:8c:18:f8:0f:83:0c:
40:a6:ec:87:59:15:24:d3:b3:26:7f:ea:6a:4c:3a:25:99:52:
c7:4d:fc:9c:c1:73:46:fe:be:78:a4:58:10:88:25:fd:43:e6:
fa:3b:89:78:94:1e:19:10:be:ba:84:7a:a2:0a:12:23:00:37:
aa:d5:87:2b:94:6e:eb:22:fb:3f:1a:2a:92:db:ef:5e:d3:26:
61:28:37:4f:1a:f9:f6:25:73:8e:c4:4b:ed:a1:9d:9f:b5:27:
fc:18:42:9c:75:d2:f5:db:54:34:49:a5:c3:49:62:9e:4e:36:
d4:ad:34:e2:cd:c9:27:53:2f:15:dd:43:59:1c:97:98:72:e9:
c2:d4:73:6b:22:c0:38:18:bd:db:20:43:15:16:30:39:d2:e7:
cd:f8:90:96:15:eb:4e:a7:ba:d0:60:a0:44:62:19:c0:2c:e0:
4f:0c:1e:77:ba:05:49:22:14:2b:c8:58:79:22:39:0a:2b:97:
ee:9a:78:5c:5a:01:42:91:5e:17:e7:94:91:f6:66:72:de:4e:
a0:69:4e:bb:3e:04:a1:f3:05:b8:1b:da:01:66:22:af:11:ed:
14:5a:0d:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 01:29:48 2026 by rpki-client