
$ rpki-client -vvvf r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/3136342e33372e3232332e302f32342d3234203d3e20323132323338.roa
File: 3136342e33372e3232332e302f32342d3234203d3e20323132323338.roa (raw, json)
Hash identifier: 9vyspsGWFap21buNa3h43k+tUO1WPNv19fQgorM1960=
Subject key identifier: C6:37:9F:BE:E4:95:77:7F:5F:2C:44:E8:C6:97:B0:8A:F3:E9:A7:85
Certificate issuer: /CN=B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5
Certificate serial: 4461DA27B22B632B76E84C1CBC722A510C61A8D1
Authority key identifier: B3:54:D3:28:CB:BF:D1:EF:3C:D2:92:68:A2:3B:0F:CC:60:E3:A2:C5
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.cer
Subject info access: rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/3136342e33372e3232332e302f32342d3234203d3e20323132323338.roa
Signing time: Mon 12 Oct 2026 00:02:10 +0000
ROA not before: Sun 11 Oct 2026 23:57:10 +0000
ROA not after: Mon 11 Oct 2027 00:02:10 +0000
asID: 212238
IP address blocks: 164.37.223.0/24 maxlen: 24
Validation: OK
Signature path: rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.crl
rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.mft
rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.cer
rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/D0A516B50426202A424F0EBFCB7D2BD4F744F964.crl
rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/D0A516B50426202A424F0EBFCB7D2BD4F744F964.mft
rsync://rpki.ripe.net/repository/DEFAULT/0KUWtQQmICpCTw6_y30r1PdE-WQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 19 Oct 2026 17:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
44:61:da:27:b2:2b:63:2b:76:e8:4c:1c:bc:72:2a:51:0c:61:a8:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5
Validity
Not Before: Oct 11 23:57:10 2026 GMT
Not After : Oct 11 00:02:10 2027 GMT
Subject: CN=C6379FBEE495777F5F2C44E8C697B08AF3E9A785
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:12:65:04:12:c3:c1:ac:60:fd:79:7d:e1:be:
b0:89:6d:ea:69:4e:3a:86:30:4f:dc:3a:20:48:df:
0a:2d:fd:99:39:0e:14:f9:e8:36:f0:b6:e8:c0:79:
02:f1:2a:52:43:bd:44:a5:5f:6f:f7:39:19:e6:7e:
6f:60:8b:fb:ba:bb:e4:f5:8c:b9:d9:fe:51:2d:97:
9f:28:70:06:88:48:af:85:38:d3:e9:36:a8:98:d7:
15:18:36:45:78:b2:79:2b:25:6e:76:7a:54:55:8e:
37:ab:a4:79:fd:c4:72:1c:7a:cc:27:a0:07:e0:9e:
bb:fe:a7:16:5c:cb:82:c8:31:ea:ac:4e:b0:2f:34:
18:2b:1b:5b:ca:9a:6a:4e:85:ad:f1:c2:bd:4b:c9:
a9:fd:8f:16:89:50:09:88:98:3f:5a:ec:85:80:f2:
68:85:20:dc:74:56:44:1e:a7:e5:fd:68:fe:6e:8e:
4d:82:46:77:fc:79:59:0b:a2:52:2c:da:46:ea:a7:
b3:f6:67:2e:a4:8b:e6:db:47:f0:dc:10:26:ca:af:
f8:9c:fd:1a:52:ea:b9:c9:25:ac:10:1a:21:8d:52:
cc:4e:6f:c2:2d:46:35:c9:39:35:87:7f:f2:a1:f5:
8f:3d:b0:6e:7f:40:b0:86:c6:df:dd:6b:bf:42:3a:
12:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:37:9F:BE:E4:95:77:7F:5F:2C:44:E8:C6:97:B0:8A:F3:E9:A7:85
X509v3 Authority Key Identifier:
keyid:B3:54:D3:28:CB:BF:D1:EF:3C:D2:92:68:A2:3B:0F:CC:60:E3:A2:C5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.cer
Subject Information Access:
Signed Object - URI:rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/3136342e33372e3232332e302f32342d3234203d3e20323132323338.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
164.37.223.0/24
Signature Algorithm: sha256WithRSAEncryption
2a:68:b5:dc:7f:c6:f7:2b:a3:07:07:af:35:37:82:55:80:0a:
5c:24:8a:d8:1c:c8:73:66:9e:f3:ab:50:c4:04:6a:81:7c:61:
20:f4:47:30:6c:99:01:6b:80:2e:7c:b2:fc:7c:c3:09:95:61:
00:7a:af:6e:f0:31:c0:5d:ef:5d:3f:3f:42:00:fe:99:24:51:
fc:58:28:52:2c:a9:e2:5d:06:42:ec:45:cb:bb:76:ee:a9:7f:
94:9d:6e:0d:ed:38:c0:ab:47:85:bf:fa:63:05:56:9e:50:65:
19:f5:4f:4e:cd:7f:45:6b:5d:9a:ab:f1:87:50:1d:64:8e:26:
79:ea:8e:a8:82:50:91:1f:86:d8:3e:01:df:3c:a4:d8:72:d0:
9b:f7:65:bb:78:ac:71:61:ae:1f:04:9e:da:08:c3:a1:c1:70:
ee:a0:29:e2:03:e6:eb:9f:f9:8d:3d:80:b4:17:54:b4:42:89:
a1:c6:93:14:47:cf:0e:48:64:d9:b5:39:26:70:d9:34:11:a9:
31:60:1b:48:8e:65:d4:85:c6:99:ef:0a:8b:cc:18:8f:d7:e3:
c9:37:86:c3:6b:0a:b5:23:f2:0c:08:a5:cd:5e:48:30:eb:0c:
17:b9:5e:a9:ad:3b:57:1a:72:0c:64:41:3d:76:9c:2e:49:8d:
27:dc:8b:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 19 04:56:59 2026 by rpki-client