
$ rpki-client -vvvf r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/AS396073.roa
File: AS396073.roa (raw, json)
Hash identifier: dglBr+DgPxkMl/hepx4FOH3gf/UOxHhS47Xn6jtKIkM=
Subject key identifier: F7:BF:6D:71:8B:71:37:76:35:B5:E9:98:3B:25:50:7A:C3:17:6D:C2
Certificate issuer: /CN=D34606949D385DB42714FE71274FAC9948EF279C
Certificate serial: 0ACE647C231FABA1D0D5229FB39087654F24AFDC
Authority key identifier: D3:46:06:94:9D:38:5D:B4:27:14:FE:71:27:4F:AC:99:48:EF:27:9C
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/D34606949D385DB42714FE71274FAC9948EF279C.cer
Subject info access: rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/AS396073.roa
Signing time: Fri 16 Oct 2026 16:49:37 +0000
ROA not before: Fri 16 Oct 2026 16:44:37 +0000
ROA not after: Fri 15 Oct 2027 16:49:37 +0000
asID: 396073
IP address blocks: 86.38.225.0/24 maxlen: 24
Validation: OK
Signature path: rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/D34606949D385DB42714FE71274FAC9948EF279C.crl
rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/D34606949D385DB42714FE71274FAC9948EF279C.mft
rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/D34606949D385DB42714FE71274FAC9948EF279C.cer
rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/9DF85997B1B9B358E1C43F36765AA0A4A02144AE.crl
rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/9DF85997B1B9B358E1C43F36765AA0A4A02144AE.mft
rsync://rpki.ripe.net/repository/DEFAULT/nfhZl7G5s1jhxD82dlqgpKAhRK4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 21 Oct 2026 01:16:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0a:ce:64:7c:23:1f:ab:a1:d0:d5:22:9f:b3:90:87:65:4f:24:af:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D34606949D385DB42714FE71274FAC9948EF279C
Validity
Not Before: Oct 16 16:44:37 2026 GMT
Not After : Oct 15 16:49:37 2027 GMT
Subject: CN=F7BF6D718B71377635B5E9983B25507AC3176DC2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:55:68:25:74:55:70:46:de:d0:96:c2:f6:cc:
db:63:37:cf:63:ae:c9:2f:c9:47:85:02:ed:57:75:
5b:a9:0d:83:ab:d6:ba:06:6b:94:e0:72:32:b1:c4:
a9:6d:ff:44:ba:04:db:9b:47:67:7d:e9:62:f8:6a:
ef:a0:8a:3a:56:99:8c:91:f0:6c:68:fc:c0:bf:16:
02:07:11:53:13:0d:71:d5:1d:43:a8:32:0e:bf:ce:
c3:a9:e9:8b:37:2a:9d:aa:46:e7:78:96:71:dd:7e:
2e:3e:a2:d6:c4:32:92:5f:1b:63:d5:63:38:57:00:
20:9d:6a:c7:b3:c9:c4:10:b9:0d:12:59:be:2f:cb:
8f:c9:77:58:0b:43:9b:aa:a5:2c:56:a3:2b:97:14:
b7:4b:33:0b:3e:68:40:f5:66:82:55:99:62:c6:8d:
9b:9a:87:84:f8:ea:b5:bf:c1:67:f5:93:3a:47:e0:
ac:49:f4:cc:89:66:3d:cf:20:23:8f:1d:ef:80:ce:
05:0e:91:b5:a7:8b:27:1d:ae:9b:c5:1f:42:a1:ee:
e8:a9:9d:26:1a:ce:fe:f4:2b:9f:84:11:5b:32:bc:
8f:a0:b6:c1:61:79:a6:8b:3b:de:59:7d:6b:c1:b2:
2e:9d:fd:b7:8a:32:32:24:37:0c:d7:70:98:e3:d2:
7d:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:BF:6D:71:8B:71:37:76:35:B5:E9:98:3B:25:50:7A:C3:17:6D:C2
X509v3 Authority Key Identifier:
keyid:D3:46:06:94:9D:38:5D:B4:27:14:FE:71:27:4F:AC:99:48:EF:27:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/D34606949D385DB42714FE71274FAC9948EF279C.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/D34606949D385DB42714FE71274FAC9948EF279C.cer
Subject Information Access:
Signed Object - URI:rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/AS396073.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
86.38.225.0/24
Signature Algorithm: sha256WithRSAEncryption
22:5f:79:a7:5f:26:ce:09:05:9d:cc:cc:9b:2c:d5:a7:74:a4:
49:a6:be:f3:ec:79:fe:80:7f:58:1d:c8:c2:c1:f3:cb:18:c4:
98:c8:a0:6e:cc:93:38:8f:41:9a:5f:c6:a1:cc:6c:b5:d7:b6:
eb:da:71:bb:c0:75:71:0c:97:1c:5c:f9:3c:59:30:57:7f:d2:
ad:ab:27:32:e4:42:51:7e:1d:3d:3b:28:2a:e3:cf:11:12:c6:
c1:b6:fc:7f:66:e5:d7:41:6b:81:d7:62:5d:d7:a9:a7:50:d7:
7e:cd:73:41:92:af:b4:61:1e:cc:5d:c2:47:c4:92:45:74:30:
85:e8:57:67:8e:10:f6:8d:db:90:24:00:96:cd:9f:05:90:e3:
65:be:46:29:00:67:b8:6e:4d:f8:ad:0d:45:6e:81:e5:c9:30:
ea:3c:8d:0c:38:29:6e:24:b5:2d:b1:44:4f:02:76:17:30:64:
6c:14:05:c2:12:e9:11:45:95:f3:b0:12:5d:f1:25:fe:d5:e4:
3e:65:0e:59:bb:db:e2:52:b9:eb:16:f8:21:fa:8b:19:14:7c:
2b:fe:8e:e7:8d:d1:6e:e8:6c:e7:b4:9d:23:41:fa:f0:c9:67:
74:c2:f7:c3:d6:dd:86:57:42:d3:68:a4:32:35:24:94:35:0a:
70:c4:88:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 20 14:32:20 2026 by rpki-client