
$ rpki-client -vvvf r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AS210538.roa
File: AS210538.roa (raw, json)
Hash identifier: tYQ4w9rmK7aQ7/JVkuksKMCvEi3KFyu+/fLmR/DUq/0=
Subject key identifier: 03:F2:07:C0:04:13:60:CD:55:2A:63:6C:2C:F9:62:65:F1:29:D8:1F
Certificate issuer: /CN=AEF766F103B2EF99DF8C71978A7FE519D730B155
Certificate serial: 0E03E626173FA122A9E426193BB0CC6FBA450E79
Authority key identifier: AE:F7:66:F1:03:B2:EF:99:DF:8C:71:97:8A:7F:E5:19:D7:30:B1:55
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AEF766F103B2EF99DF8C71978A7FE519D730B155.cer
Subject info access: rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AS210538.roa
Signing time: Thu 01 Oct 2026 17:17:27 +0000
ROA not before: Thu 01 Oct 2026 17:12:27 +0000
ROA not after: Thu 30 Sep 2027 17:17:27 +0000
asID: 210538
IP address blocks: 169.40.43.0/24 maxlen: 24
Validation: OK
Signature path: rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AEF766F103B2EF99DF8C71978A7FE519D730B155.crl
rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AEF766F103B2EF99DF8C71978A7FE519D730B155.mft
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AEF766F103B2EF99DF8C71978A7FE519D730B155.cer
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 20 Oct 2026 23:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0e:03:e6:26:17:3f:a1:22:a9:e4:26:19:3b:b0:cc:6f:ba:45:0e:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=AEF766F103B2EF99DF8C71978A7FE519D730B155
Validity
Not Before: Oct 1 17:12:27 2026 GMT
Not After : Sep 30 17:17:27 2027 GMT
Subject: CN=03F207C0041360CD552A636C2CF96265F129D81F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:3f:eb:4f:63:50:bb:ad:ff:d6:7b:54:c2:fd:
df:f2:46:d6:f3:34:69:f6:9b:5d:01:ce:0a:bc:47:
3f:41:b1:e1:c6:ac:11:6b:b9:a0:26:85:4f:25:04:
da:0d:a3:6e:10:71:c8:ba:2e:06:c4:50:7a:3a:b9:
64:08:10:93:bb:d7:90:de:1c:79:76:fd:37:90:1c:
4f:32:e5:0e:ad:7b:5e:d6:32:79:f0:6a:30:ab:b1:
ff:74:f6:bc:a8:e7:f0:c4:ff:53:77:6f:47:55:15:
d3:a3:f0:99:56:8d:4e:fc:cd:56:6e:88:0b:4b:f5:
26:fd:2e:eb:b0:b6:ae:ac:2b:40:07:16:04:c2:53:
7f:99:25:4c:8e:d2:09:ee:73:17:76:f7:b5:11:20:
1e:89:5b:2b:d1:a8:22:e5:9c:f8:88:ef:4e:1b:6f:
7a:1f:b2:b9:f5:60:00:69:51:f0:d7:0a:a9:b4:40:
5a:d0:f5:0c:2e:0e:d1:a8:38:b7:16:05:f1:22:5e:
52:ef:d8:28:c4:0e:13:7d:5b:ba:aa:fe:5e:0c:ab:
07:a1:10:84:eb:0d:f9:6a:dd:a3:53:09:15:f3:60:
9a:34:bc:75:a1:e7:ec:9c:06:8d:c8:e3:72:27:60:
19:3f:f0:e2:ca:c3:a9:65:78:b6:dc:b4:a5:be:58:
fa:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:F2:07:C0:04:13:60:CD:55:2A:63:6C:2C:F9:62:65:F1:29:D8:1F
X509v3 Authority Key Identifier:
keyid:AE:F7:66:F1:03:B2:EF:99:DF:8C:71:97:8A:7F:E5:19:D7:30:B1:55
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AEF766F103B2EF99DF8C71978A7FE519D730B155.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AEF766F103B2EF99DF8C71978A7FE519D730B155.cer
Subject Information Access:
Signed Object - URI:rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AS210538.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
169.40.43.0/24
Signature Algorithm: sha256WithRSAEncryption
a3:24:1a:fe:20:3d:08:b9:a6:ca:12:e2:e6:5e:70:24:07:01:
54:bf:db:8f:6d:32:b2:6f:94:ff:0c:4c:7e:f4:20:90:d3:22:
59:23:62:21:60:9e:d1:e1:ff:39:4b:d2:51:7e:6d:71:12:56:
62:88:d7:31:ec:bf:54:e5:5b:ba:f1:0f:8c:06:55:33:b1:0b:
77:d7:3f:d2:78:cf:26:44:e0:e3:90:8b:93:63:94:de:39:20:
30:52:0d:90:00:10:44:4c:22:d4:d5:57:9b:9e:64:8d:f8:4a:
a7:16:40:c1:1e:3a:cc:fe:66:30:d3:a6:da:83:10:01:f0:86:
e3:5a:0d:cd:03:8c:52:65:dd:59:83:91:59:cf:0b:50:66:05:
ae:61:6a:5e:ca:5e:60:b9:ad:4e:92:16:22:54:44:8f:cf:d8:
7c:bb:c0:24:07:c4:55:5f:7a:aa:7b:48:51:f8:a0:79:f4:10:
42:b2:37:65:84:a1:2c:85:19:af:f1:a4:c7:fb:59:91:fc:30:
55:52:57:8f:b0:c1:11:b6:05:6e:0c:a4:1f:cf:59:ee:e9:5e:
6c:a3:05:4f:60:36:59:01:5c:24:5d:a4:11:50:26:0e:ee:18:
4d:77:3d:8a:96:d8:14:1d:9d:a6:ed:f7:94:e2:01:a5:a6:62:
ef:41:85:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 20 09:02:41 2026 by rpki-client