
$ rpki-client -vvvf r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/AS142491.roa
File: AS142491.roa (raw, json)
Hash identifier: jnsIURVi0nJlVbJC4VENQlvGE71JIQXslZWgacl1LKQ=
Subject key identifier: 2F:FA:7A:1F:66:8F:3D:A1:F2:02:A5:08:2A:E4:03:D6:5D:F8:E7:F6
Certificate issuer: /CN=D34606949D385DB42714FE71274FAC9948EF279C
Certificate serial: 10B9D4330CA891EB77D6EE52FC19B756915F26A5
Authority key identifier: D3:46:06:94:9D:38:5D:B4:27:14:FE:71:27:4F:AC:99:48:EF:27:9C
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/D34606949D385DB42714FE71274FAC9948EF279C.cer
Subject info access: rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/AS142491.roa
Signing time: Mon 10 Aug 2026 12:10:00 +0000
ROA not before: Mon 10 Aug 2026 12:05:00 +0000
ROA not after: Mon 09 Aug 2027 12:10:00 +0000
asID: 142491
IP address blocks: 86.38.251.0/24 maxlen: 24
Validation: OK
Signature path: rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/D34606949D385DB42714FE71274FAC9948EF279C.crl
rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/D34606949D385DB42714FE71274FAC9948EF279C.mft
rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/D34606949D385DB42714FE71274FAC9948EF279C.cer
rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/9DF85997B1B9B358E1C43F36765AA0A4A02144AE.crl
rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/9DF85997B1B9B358E1C43F36765AA0A4A02144AE.mft
rsync://rpki.ripe.net/repository/DEFAULT/nfhZl7G5s1jhxD82dlqgpKAhRK4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 27 Aug 2026 14:08:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
10:b9:d4:33:0c:a8:91:eb:77:d6:ee:52:fc:19:b7:56:91:5f:26:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D34606949D385DB42714FE71274FAC9948EF279C
Validity
Not Before: Aug 10 12:05:00 2026 GMT
Not After : Aug 9 12:10:00 2027 GMT
Subject: CN=2FFA7A1F668F3DA1F202A5082AE403D65DF8E7F6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:03:5b:da:b4:15:de:8f:a9:65:84:d7:3d:2a:
5d:98:76:62:dd:65:e2:a3:96:3f:6a:31:8e:42:d2:
36:2c:2b:a6:af:09:21:a8:40:38:cf:4b:31:e6:01:
23:39:2f:51:c8:af:ec:7a:b0:c1:d9:47:17:39:50:
e1:8a:77:e5:d8:d9:db:0b:00:89:68:da:d4:2d:9f:
23:4b:80:91:21:41:9a:e6:e8:86:8c:ca:9e:ae:48:
87:9f:5b:89:fa:94:66:c9:a7:77:e4:b8:55:fb:9a:
28:0a:27:07:95:c9:d8:45:73:45:b6:9d:a8:2f:63:
60:15:93:95:a8:cd:4e:ec:41:4e:78:00:8d:df:65:
3c:12:60:67:da:28:7e:88:ea:63:d3:a1:97:90:6c:
53:52:67:b7:75:ef:80:80:14:72:34:74:9f:56:2c:
95:7d:22:6a:df:59:af:ba:ad:b6:85:c0:3c:df:96:
2f:60:b2:4b:b3:ae:2a:a2:92:4e:11:61:82:8b:e9:
f4:ec:9e:0e:d1:a5:27:b7:64:c2:0d:c8:9c:aa:e5:
ab:60:3e:71:e0:da:ca:9a:c3:d9:bf:f3:d7:fe:93:
9e:ca:ee:e8:d6:16:50:4a:28:26:42:4a:3a:33:5e:
65:f3:80:4b:b6:24:01:50:f7:bf:23:a2:d7:16:cc:
8e:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:FA:7A:1F:66:8F:3D:A1:F2:02:A5:08:2A:E4:03:D6:5D:F8:E7:F6
X509v3 Authority Key Identifier:
keyid:D3:46:06:94:9D:38:5D:B4:27:14:FE:71:27:4F:AC:99:48:EF:27:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/D34606949D385DB42714FE71274FAC9948EF279C.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/D34606949D385DB42714FE71274FAC9948EF279C.cer
Subject Information Access:
Signed Object - URI:rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/AS142491.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
86.38.251.0/24
Signature Algorithm: sha256WithRSAEncryption
54:41:c6:75:a7:01:2d:10:ac:07:2c:8e:e8:c4:e9:a0:ab:09:
54:8d:b5:b7:b6:cb:4c:0f:83:9d:6f:aa:93:31:ed:92:33:ef:
5f:b4:0a:f4:be:29:2f:cd:10:3f:fc:40:36:be:e9:49:66:fd:
f1:44:3d:72:8c:23:2a:0f:19:c7:7e:de:ad:9b:56:00:57:14:
99:4d:e5:0d:95:34:ec:c7:21:2a:45:11:c7:47:fb:c3:cd:71:
98:4a:32:6f:7a:a9:18:fd:86:40:60:48:52:72:63:d6:20:3a:
05:a0:cc:3c:e4:88:af:66:96:de:cc:d6:11:5e:50:ad:04:15:
39:af:72:34:96:6c:21:60:e9:98:f6:65:68:e1:5d:19:bc:37:
f1:70:0c:66:c9:7f:45:4a:92:8a:6a:49:4b:97:14:af:b7:bf:
b2:14:93:80:57:4b:81:bc:81:71:05:fb:90:81:40:f3:43:49:
05:18:3f:0d:18:40:e2:da:11:c4:81:cd:a5:7c:a7:b4:42:01:
ce:24:e9:86:7f:2b:aa:da:0a:90:27:8f:bb:be:22:28:65:ed:
d6:e2:9d:8e:14:6d:ec:62:e5:1d:48:1f:3e:ae:6a:24:d1:3f:
ae:80:42:0f:10:2c:06:fb:18:e5:b9:3e:50:3e:e6:8a:1a:f1:
59:94:ba:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 27 04:45:04 2026 by rpki-client