
$ rpki-client -vvf r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/3136392e34302e3131332e302f32342d3234203d3e20313734.roa
File: 3136392e34302e3131332e302f32342d3234203d3e20313734.roa (raw, json)
Hash identifier: 2Knl1ivnLGEaV78am4POLEWl3KZTYGadTPrKc4NLb/Y=
Subject key identifier: E1:4A:EA:95:14:17:A7:32:0E:DD:1F:DA:1B:BF:A5:A5:33:A6:D8:5D
Certificate issuer: /CN=AEF766F103B2EF99DF8C71978A7FE519D730B155
Certificate serial: 6C273AFE42E529338A27E36B71CAC36838315937
Authority key identifier: AE:F7:66:F1:03:B2:EF:99:DF:8C:71:97:8A:7F:E5:19:D7:30:B1:55
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AEF766F103B2EF99DF8C71978A7FE519D730B155.cer
Subject info access: rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/3136392e34302e3131332e302f32342d3234203d3e20313734.roa
Signing time: Thu 12 Feb 2026 01:05:06 +0000
ROA not before: Thu 12 Feb 2026 01:00:06 +0000
ROA not after: Thu 11 Feb 2027 01:05:06 +0000
asID: 174
IP address blocks: 169.40.113.0/24 maxlen: 24
Validation: OK
Signature path: rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AEF766F103B2EF99DF8C71978A7FE519D730B155.crl
rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AEF766F103B2EF99DF8C71978A7FE519D730B155.mft
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AEF766F103B2EF99DF8C71978A7FE519D730B155.cer
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Feb 2026 22:54:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6c:27:3a:fe:42:e5:29:33:8a:27:e3:6b:71:ca:c3:68:38:31:59:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=AEF766F103B2EF99DF8C71978A7FE519D730B155
Validity
Not Before: Feb 12 01:00:06 2026 GMT
Not After : Feb 11 01:05:06 2027 GMT
Subject: CN=E14AEA951417A7320EDD1FDA1BBFA5A533A6D85D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:2a:70:8f:1e:13:38:7d:a8:65:04:17:05:23:
ee:ba:52:a8:17:b9:57:b4:e0:f3:8a:9b:b7:ed:75:
9c:38:92:b2:01:93:56:d6:62:cf:8f:5c:e1:90:67:
80:ea:ee:4c:f7:3a:54:3e:93:ba:fc:75:67:09:c2:
c3:da:88:be:17:be:32:70:ee:59:2e:47:bb:5f:4a:
41:d9:93:a5:e1:72:95:ba:58:86:87:e8:6f:b6:02:
70:be:1b:58:45:82:b5:f1:1e:cb:28:3d:a9:dd:70:
9b:35:87:7c:41:e4:c1:e3:c8:85:91:ad:41:76:8c:
37:2d:a0:4d:d9:e7:a0:b2:b2:7c:77:29:8d:22:19:
72:04:ef:0a:05:80:5e:6d:ee:dd:7d:0c:14:b0:86:
0f:9b:fc:b9:eb:54:89:33:f6:f2:10:60:48:4d:69:
aa:df:1e:cc:d4:c6:39:c5:2c:b0:79:07:38:71:1b:
e7:16:82:c4:d3:41:0e:61:9b:f9:63:5f:88:97:9a:
dd:fa:ed:2f:89:ca:98:28:60:e6:3c:21:3e:90:d5:
f6:5e:bc:e0:53:ae:6b:37:81:02:32:73:1e:21:0d:
26:5f:22:ec:77:50:1e:ff:a3:99:1f:61:2a:e0:df:
1d:d4:62:17:ad:6f:ee:9d:a4:41:39:f3:31:e9:12:
cd:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:4A:EA:95:14:17:A7:32:0E:DD:1F:DA:1B:BF:A5:A5:33:A6:D8:5D
X509v3 Authority Key Identifier:
keyid:AE:F7:66:F1:03:B2:EF:99:DF:8C:71:97:8A:7F:E5:19:D7:30:B1:55
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AEF766F103B2EF99DF8C71978A7FE519D730B155.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AEF766F103B2EF99DF8C71978A7FE519D730B155.cer
Subject Information Access:
Signed Object - URI:rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/3136392e34302e3131332e302f32342d3234203d3e20313734.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
169.40.113.0/24
Signature Algorithm: sha256WithRSAEncryption
a3:22:d7:d5:bb:14:66:1d:4e:17:da:5a:92:e0:1f:fd:72:8f:
d5:a4:41:fd:38:1f:b5:41:ef:cc:60:4b:c4:02:57:05:fa:e6:
ed:ad:7c:40:cd:ab:13:23:49:14:63:4d:b5:76:5f:9f:9b:e4:
4a:e6:e7:da:50:e1:77:27:54:e5:c5:3a:b3:f5:eb:83:c4:1f:
41:67:5a:20:c1:d2:e6:09:03:e9:b2:8a:e3:a5:12:9f:0f:0f:
4a:a9:21:07:6d:43:97:55:3e:c5:21:19:57:1a:ff:b2:98:f4:
08:a6:24:59:49:17:5a:80:49:f8:4d:e7:54:3e:18:48:40:25:
70:95:a4:50:da:0e:31:f8:76:b1:7a:bc:a2:5c:77:f4:88:bc:
74:76:c7:03:13:c6:9c:b1:5c:44:b9:35:27:ae:4a:d5:96:59:
33:2e:78:d4:0a:e8:8a:75:f2:36:3a:11:1b:dc:d2:ed:09:34:
11:5a:03:b1:14:0c:df:12:d0:7d:58:82:2c:bb:d9:69:3c:a2:
e7:65:7f:47:79:1d:2a:c2:d2:e4:36:e5:53:8e:68:82:11:0b:
ef:f6:f9:d4:20:42:c4:55:3e:3c:12:ae:de:15:48:fd:42:10:
00:84:c2:7d:82:94:02:32:98:79:4d:26:75:30:9d:f6:7c:c9:
c9:af:aa:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 26 10:33:04 2026 by rpki-client