
$ rpki-client -vvvf r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/3136342e33372e3230302e302f32342d3234203d3e20323139343237.roa
File: 3136342e33372e3230302e302f32342d3234203d3e20323139343237.roa (raw, json)
Hash identifier: SpN5hn2Qg1THMZipXYjsUEdA4B5HsAHuYJzpqEJyeh0=
Subject key identifier: F1:1A:F4:83:C1:D0:CC:90:39:99:D6:1E:A1:41:03:4B:BD:EC:51:EA
Certificate issuer: /CN=B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5
Certificate serial: 32D9F06F721F12B6B42BAE66AC84F693325D2A61
Authority key identifier: B3:54:D3:28:CB:BF:D1:EF:3C:D2:92:68:A2:3B:0F:CC:60:E3:A2:C5
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.cer
Subject info access: rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/3136342e33372e3230302e302f32342d3234203d3e20323139343237.roa
Signing time: Mon 12 Oct 2026 00:02:10 +0000
ROA not before: Sun 11 Oct 2026 23:57:10 +0000
ROA not after: Mon 11 Oct 2027 00:02:10 +0000
asID: 219427
IP address blocks: 164.37.200.0/24 maxlen: 24
Validation: OK
Signature path: rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.crl
rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.mft
rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.cer
rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/D0A516B50426202A424F0EBFCB7D2BD4F744F964.crl
rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/D0A516B50426202A424F0EBFCB7D2BD4F744F964.mft
rsync://rpki.ripe.net/repository/DEFAULT/0KUWtQQmICpCTw6_y30r1PdE-WQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 20 Oct 2026 16:36:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
32:d9:f0:6f:72:1f:12:b6:b4:2b:ae:66:ac:84:f6:93:32:5d:2a:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5
Validity
Not Before: Oct 11 23:57:10 2026 GMT
Not After : Oct 11 00:02:10 2027 GMT
Subject: CN=F11AF483C1D0CC903999D61EA141034BBDEC51EA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:e8:04:e6:6c:7b:16:47:04:74:d2:45:8c:a9:
3c:62:0b:87:8e:82:53:d3:cf:1e:77:42:e6:a8:c7:
47:74:25:d9:84:80:a5:83:b8:1b:11:e3:8b:3d:fe:
f9:87:5b:a9:13:dc:6d:10:88:5d:58:f5:56:bc:cd:
eb:26:71:0e:2f:1c:aa:94:17:0a:23:15:e5:65:c0:
aa:9d:d2:7f:61:a3:1d:0d:29:dc:63:0c:99:09:b9:
39:81:72:bc:68:e6:08:e5:f2:98:24:29:07:91:d9:
2b:2e:a7:a1:c7:73:bc:d9:8a:75:88:75:11:fa:60:
ed:ba:79:81:66:46:b8:51:50:f8:64:ff:0d:3e:da:
45:a0:5b:bf:2b:e9:5c:17:69:9e:8e:e9:d0:58:32:
2c:4b:12:13:7c:86:0d:63:3a:8e:36:52:66:05:d2:
c6:53:d8:9e:f0:79:52:b0:7b:8c:da:6b:6e:60:57:
82:5e:45:02:17:e0:27:66:96:4e:be:6f:10:a8:11:
38:fa:d8:0b:b0:4f:b8:0f:26:e8:5a:0a:59:c8:99:
e2:bc:43:a6:f8:22:f6:48:8e:ae:6b:8b:81:3d:b4:
56:8f:27:aa:d9:19:ff:3e:d1:29:ae:88:2c:22:29:
cf:ba:38:c6:8d:c1:98:0b:d5:36:97:b0:d3:19:56:
c5:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:1A:F4:83:C1:D0:CC:90:39:99:D6:1E:A1:41:03:4B:BD:EC:51:EA
X509v3 Authority Key Identifier:
keyid:B3:54:D3:28:CB:BF:D1:EF:3C:D2:92:68:A2:3B:0F:CC:60:E3:A2:C5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.cer
Subject Information Access:
Signed Object - URI:rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/3136342e33372e3230302e302f32342d3234203d3e20323139343237.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
164.37.200.0/24
Signature Algorithm: sha256WithRSAEncryption
55:65:2a:50:e9:8d:37:39:df:b7:3a:0f:ab:da:47:ea:73:cc:
b2:ce:18:e1:95:fa:04:eb:c7:dd:b9:a7:2c:02:de:8b:5a:1e:
9a:22:9d:3b:a6:41:69:49:96:16:bd:36:8d:a9:a4:a2:6d:37:
3d:78:19:5e:c6:29:79:6b:fb:92:4b:83:b0:6a:3d:05:bc:1c:
11:c5:b6:6a:f2:80:dd:eb:c9:a4:1c:fd:51:e5:c7:8f:bd:6b:
ec:4f:84:95:41:f9:21:d4:9d:f5:06:fe:d6:60:2f:4f:a2:c7:
af:8d:8f:c3:f9:b5:29:57:82:23:09:84:f4:d0:31:4c:4d:d1:
ed:27:9d:74:09:dd:d7:65:47:32:5d:44:0f:90:9c:e4:c0:e7:
5d:08:f8:af:dc:ea:6f:4f:38:9f:d7:8a:76:01:71:2d:4d:0a:
ea:fc:b4:b4:25:a6:d7:df:2d:d9:9f:12:a1:81:9f:3d:eb:6e:
4c:62:89:79:c6:1c:2e:86:c5:93:28:de:91:d3:2a:48:1a:63:
e5:b9:bf:7a:9b:fe:84:5d:46:f9:9c:b7:0e:af:aa:e5:30:ed:
02:c0:15:67:2d:d1:6a:3d:25:35:fd:6b:82:4d:86:24:be:62:
6a:c7:ec:0d:8f:4d:7c:73:69:7e:c6:3b:28:93:89:55:d6:1a:
35:0e:af:39
-----BEGIN CERTIFICATE-----
MIIFWjCCBEKgAwIBAgIUMtnwb3IfEra0K65mrIT2kzJdKmEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQjM1NEQzMjhDQkJGRDFFRjNDRDI5MjY4QTIzQjBGQ0M2
MEUzQTJDNTAeFw0yNjEwMTEyMzU3MTBaFw0yNzEwMTEwMDAyMTBaMDMxMTAvBgNV
BAMTKEYxMUFGNDgzQzFEMENDOTAzOTk5RDYxRUExNDEwMzRCQkRFQzUxRUEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC36ATmbHsWRwR00kWMqTxiC4eO
glPTzx53Quaox0d0JdmEgKWDuBsR44s9/vmHW6kT3G0QiF1Y9Va8zesmcQ4vHKqU
FwojFeVlwKqd0n9hox0NKdxjDJkJuTmBcrxo5gjl8pgkKQeR2Ssup6HHc7zZinWI
dRH6YO26eYFmRrhRUPhk/w0+2kWgW78r6VwXaZ6O6dBYMixLEhN8hg1jOo42UmYF
0sZT2J7weVKwe4zaa25gV4JeRQIX4Cdmlk6+bxCoETj62AuwT7gPJuhaClnImeK8
Q6b4IvZIjq5ri4E9tFaPJ6rZGf8+0SmuiCwiKc+6OMaNwZgL1TaXsNMZVsVjAgMB
AAGjggJkMIICYDAdBgNVHQ4EFgQU8Rr0g8HQzJA5mdYeoUEDS73sUeowHwYDVR0j
BBgwFoAUs1TTKMu/0e880pJoojsPzGDjosUwDgYDVR0PAQH/BAQDAgeAMIGIBgNV
HR8EgYAwfjB8oHqgeIZ2cnN5bmM6Ly9yLm1hZ2VsbGFuLmlweG8uY29tL3JlcG8v
YTAzNzViMzktZjk0OS00Y2I1LWI1MTktZjk0MDA4YjE2NTRjLTAvMC9CMzU0RDMy
OENCQkZEMUVGM0NEMjkyNjhBMjNCMEZDQzYwRTNBMkM1LmNybDCBngYIKwYBBQUH
AQEEgZEwgY4wgYsGCCsGAQUFBzAChn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5y
aXBlLm5ldC9yZXBvc2l0b3J5LzYxNzA4YTZiLTZjM2EtNDBhMC1hMzAyLTU5NWVj
YzE3ODQ4Yy8wL0IzNTREMzI4Q0JCRkQxRUYzQ0QyOTI2OEEyM0IwRkNDNjBFM0Ey
QzUuY2VyMIGmBggrBgEFBQcBCwSBmTCBljCBkwYIKwYBBQUHMAuGgYZyc3luYzov
L3IubWFnZWxsYW4uaXB4by5jb20vcmVwby9hMDM3NWIzOS1mOTQ5LTRjYjUtYjUx
OS1mOTQwMDhiMTY1NGMtMC8wLzMxMzYzNDJlMzMzNzJlMzIzMDMwMmUzMDJmMzIz
NDJkMzIzNDIwM2QzZTIwMzIzMTM5MzQzMjM3LnJvYTAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQApCXIMA0GCSqG
SIb3DQEBCwUAA4IBAQBVZSpQ6Y03Od+3Og+r2kfqc8yyzhjhlfoE68fduacsAt6L
Wh6aIp07pkFpSZYWvTaNqaSibTc9eBlexil5a/uSS4Owaj0FvBwRxbZq8oDd68mk
HP1R5cePvWvsT4SVQfkh1J31Bv7WYC9PosevjY/D+bUpV4IjCYT00DFMTdHtJ510
Cd3XZUcyXUQPkJzkwOddCPiv3OpvTzif14p2AXEtTQrq/LS0JabX3y3ZnxKhgZ89
625MYol5xhwuhsWTKN6R0ypIGmPlub96m/6EXUb5nLcOr6rlMO0CwBVnLdFqPSU1
/WuCTYYkvmJqx+wNj018c2l+xjsok4lV1ho1Dq85
-----END CERTIFICATE-----
Generated at Tue Oct 20 05:01:31 2026 by rpki-client