
$ rpki-client -vvvf r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AS218221.roa
File: AS218221.roa (raw, json)
Hash identifier: UYfjdYeEvSNYqGopT/c63rXncg6RbbUrrde9TvCs+wk=
Subject key identifier: A1:88:ED:78:7C:B5:28:31:81:75:74:D9:DB:39:E0:4C:A3:F6:82:A1
Certificate issuer: /CN=AEF766F103B2EF99DF8C71978A7FE519D730B155
Certificate serial: 24246C0B5EB5A83650B7F46946E5FE2B117CF3B7
Authority key identifier: AE:F7:66:F1:03:B2:EF:99:DF:8C:71:97:8A:7F:E5:19:D7:30:B1:55
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AEF766F103B2EF99DF8C71978A7FE519D730B155.cer
Subject info access: rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AS218221.roa
Signing time: Thu 05 Nov 2026 04:02:21 +0000
ROA not before: Thu 05 Nov 2026 03:57:21 +0000
ROA not after: Thu 04 Nov 2027 04:02:21 +0000
asID: 218221
IP address blocks: 169.40.48.0/24 maxlen: 24
Validation: OK
Signature path: rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AEF766F103B2EF99DF8C71978A7FE519D730B155.crl
rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AEF766F103B2EF99DF8C71978A7FE519D730B155.mft
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AEF766F103B2EF99DF8C71978A7FE519D730B155.cer
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Nov 2026 15:33:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
24:24:6c:0b:5e:b5:a8:36:50:b7:f4:69:46:e5:fe:2b:11:7c:f3:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=AEF766F103B2EF99DF8C71978A7FE519D730B155
Validity
Not Before: Nov 5 03:57:21 2026 GMT
Not After : Nov 4 04:02:21 2027 GMT
Subject: CN=A188ED787CB52831817574D9DB39E04CA3F682A1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:2e:0e:e6:a9:95:23:76:81:20:04:11:77:33:
d9:2b:cf:36:21:e7:3a:2f:49:48:f5:bc:1f:02:7d:
77:fb:bb:18:df:c7:4e:6f:c5:a0:7c:93:06:98:72:
03:78:0e:14:5f:24:17:0b:5c:b8:f1:49:4e:bc:5d:
27:11:d4:99:29:a1:a7:22:4d:10:c4:0d:70:40:83:
72:bf:0d:86:f1:a6:6b:b9:1c:9b:36:7a:fa:52:cf:
a7:d5:1d:92:cb:8e:2b:e1:25:c9:5b:eb:57:ac:78:
f3:82:45:2d:a4:55:88:17:ed:f4:92:50:53:ae:f0:
f2:bd:0e:93:51:81:69:b5:59:32:43:a8:cf:3d:ef:
98:54:8d:62:67:55:da:41:99:84:17:ab:3e:f9:fd:
b6:2a:40:c1:4e:cd:46:f9:87:a2:b7:6c:00:22:a8:
db:f4:73:34:0b:d2:6b:da:39:00:86:51:f7:ba:1b:
86:b1:95:11:fb:8a:26:ea:90:6c:c3:73:6b:aa:2b:
9c:69:58:e6:d6:e8:24:70:ce:6e:dd:60:7e:66:bf:
cd:71:5e:06:16:38:33:5c:b6:f7:d9:73:cf:43:8e:
a0:09:59:ab:ac:16:c5:45:3b:b2:48:ab:81:a2:81:
da:d9:8d:fb:cd:b5:3d:59:8f:2d:e4:ac:ae:fd:e3:
dd:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:88:ED:78:7C:B5:28:31:81:75:74:D9:DB:39:E0:4C:A3:F6:82:A1
X509v3 Authority Key Identifier:
keyid:AE:F7:66:F1:03:B2:EF:99:DF:8C:71:97:8A:7F:E5:19:D7:30:B1:55
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AEF766F103B2EF99DF8C71978A7FE519D730B155.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AEF766F103B2EF99DF8C71978A7FE519D730B155.cer
Subject Information Access:
Signed Object - URI:rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AS218221.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
169.40.48.0/24
Signature Algorithm: sha256WithRSAEncryption
30:ee:6a:17:c8:a1:e9:bd:04:85:1f:b2:82:bc:b3:6e:0c:69:
53:65:33:f0:53:23:14:d3:e0:7b:4c:fd:cf:1b:85:ed:80:38:
50:d3:e4:b6:21:e5:18:be:52:0a:98:3e:44:8a:04:ed:70:cc:
61:37:04:84:11:1f:fe:ea:66:07:41:77:32:02:27:ac:68:d8:
7d:d6:62:76:ed:08:cf:12:a4:9f:2f:f2:0d:6f:d1:cf:17:42:
d3:20:bb:85:ab:8b:36:11:1d:56:ea:f3:cc:aa:bd:eb:1e:a9:
a8:6d:c8:7f:ed:85:30:65:e2:69:02:39:83:6a:bc:0d:ea:c4:
89:23:12:b6:03:d8:54:91:e0:e8:bd:8b:43:a8:ac:25:16:9c:
02:14:88:bc:5b:54:f3:21:07:31:76:37:89:30:f2:11:7d:82:
82:19:c0:8f:6a:ec:1c:b7:12:4b:8a:17:cc:8d:b6:6e:af:ae:
68:58:97:c9:89:4a:54:7e:8e:bb:55:da:5c:ba:d9:8f:61:7c:
24:7c:f1:83:7a:85:05:48:65:bc:2b:8d:e0:67:12:b1:e5:c4:
d1:26:55:02:d2:c6:27:37:e4:43:32:23:72:13:e4:76:a4:79:
1c:82:8c:0a:48:7d:e2:ad:6b:15:58:5d:ed:f6:bb:2d:b1:ce:
5f:0a:c3:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 10 08:30:48 2026 by rpki-client