
$ rpki-client -vvf r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/AS14618.roa
File: AS14618.roa (raw, json)
Hash identifier: /30+hArOpHa8yT8ZXukt+aG+fJhil+Tm9R/TU/XKUSE=
Subject key identifier: 19:8C:1A:B5:08:22:9B:1A:46:83:45:1D:3B:80:0B:1A:2E:05:51:53
Certificate issuer: /CN=D34606949D385DB42714FE71274FAC9948EF279C
Certificate serial: 7EAF5C9AB4ED0A4333A70174BBF6A626158578F2
Authority key identifier: D3:46:06:94:9D:38:5D:B4:27:14:FE:71:27:4F:AC:99:48:EF:27:9C
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/D34606949D385DB42714FE71274FAC9948EF279C.cer
Subject info access: rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/AS14618.roa
Signing time: Thu 14 May 2026 10:59:16 +0000
ROA not before: Thu 14 May 2026 10:54:16 +0000
ROA not after: Thu 13 May 2027 10:59:16 +0000
asID: 14618
IP address blocks: 89.116.123.0/24 maxlen: 24
89.117.15.0/24 maxlen: 24
89.117.28.0/24 maxlen: 24
89.117.87.0/24 maxlen: 24
89.117.153.0/24 maxlen: 24
Validation: OK
Signature path: rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/D34606949D385DB42714FE71274FAC9948EF279C.crl
rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/D34606949D385DB42714FE71274FAC9948EF279C.mft
rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/D34606949D385DB42714FE71274FAC9948EF279C.cer
rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/9DF85997B1B9B358E1C43F36765AA0A4A02144AE.crl
rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/9DF85997B1B9B358E1C43F36765AA0A4A02144AE.mft
rsync://rpki.ripe.net/repository/DEFAULT/nfhZl7G5s1jhxD82dlqgpKAhRK4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 06 Jun 2026 17:49:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7e:af:5c:9a:b4:ed:0a:43:33:a7:01:74:bb:f6:a6:26:15:85:78:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D34606949D385DB42714FE71274FAC9948EF279C
Validity
Not Before: May 14 10:54:16 2026 GMT
Not After : May 13 10:59:16 2027 GMT
Subject: CN=198C1AB508229B1A4683451D3B800B1A2E055153
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:d8:c1:26:88:e8:45:24:e9:ad:11:3c:27:d3:
d7:83:c6:76:f4:6b:28:a9:40:78:62:81:0c:ce:ac:
94:4b:f7:13:77:d7:9d:ca:d8:19:2c:42:e5:12:da:
81:d0:a8:08:07:9d:ea:07:73:03:2d:1b:d4:60:4a:
99:32:f4:f5:d0:8d:88:c9:dd:5e:b4:de:4d:40:9c:
34:94:85:40:b3:a7:65:2b:ca:bc:23:3f:6f:e0:58:
5c:9e:f8:f0:1f:56:d4:14:5e:70:d5:0e:ba:46:f7:
48:05:85:f1:5d:02:a7:00:5e:80:e8:f5:69:e2:1b:
99:a3:2a:1d:52:2d:b4:bc:9b:88:ae:e2:66:2f:02:
bc:bd:60:5e:26:bb:03:da:82:42:96:1f:f7:a8:93:
81:69:cd:34:17:b2:15:ce:03:4c:21:8c:8a:9d:bc:
90:d1:88:69:f9:b8:7c:6f:9f:68:97:fd:b2:a6:d1:
23:a2:fe:ab:60:9a:1d:ad:4a:7f:c0:08:69:cf:ef:
88:80:3b:cc:ae:95:4c:6b:29:04:eb:bf:a1:e7:26:
d4:9b:ea:25:7a:d5:1f:6a:d6:42:39:6f:70:9e:2c:
04:f5:c3:b2:fa:fc:56:95:03:c0:45:f9:64:4a:c9:
f8:67:1d:f3:da:a4:eb:3a:c1:18:1e:47:68:28:a8:
ba:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:8C:1A:B5:08:22:9B:1A:46:83:45:1D:3B:80:0B:1A:2E:05:51:53
X509v3 Authority Key Identifier:
keyid:D3:46:06:94:9D:38:5D:B4:27:14:FE:71:27:4F:AC:99:48:EF:27:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/D34606949D385DB42714FE71274FAC9948EF279C.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/D34606949D385DB42714FE71274FAC9948EF279C.cer
Subject Information Access:
Signed Object - URI:rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/AS14618.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.116.123.0/24
89.117.15.0/24
89.117.28.0/24
89.117.87.0/24
89.117.153.0/24
Signature Algorithm: sha256WithRSAEncryption
53:50:5b:dd:b4:e5:68:3d:a7:9e:6b:94:8b:a6:02:5a:e8:d0:
a0:60:3c:5a:27:3c:69:d2:88:3b:23:f9:73:55:78:bc:c1:84:
34:22:2c:ae:fb:62:e2:4d:f3:70:c7:1e:12:a3:f6:81:74:ae:
29:b4:af:48:04:82:2d:2c:49:cf:ba:f7:b7:62:57:0f:c1:81:
70:56:c9:e5:28:9a:53:5b:da:f5:8d:91:3e:5b:e9:8e:f7:ef:
29:10:98:e1:80:95:55:61:6a:73:40:c8:64:26:56:c7:25:c4:
9e:1a:b0:b0:24:b9:15:da:88:37:14:97:8b:be:59:d3:06:60:
c9:2a:fa:75:d4:d8:90:96:8b:48:ad:9b:29:91:90:45:7d:92:
77:c7:a3:bb:0a:22:5e:75:1d:b9:0b:84:62:f2:e2:40:bc:78:
12:67:78:11:49:72:86:e8:d2:61:c2:13:a3:e2:48:c9:b0:3d:
c1:4a:c3:ee:37:cc:63:e7:1d:ef:b6:87:a5:33:50:ca:92:7b:
34:1b:c8:1e:0c:fc:28:5f:fa:a5:2c:e9:d3:5e:a4:a2:00:76:
14:72:41:05:82:6e:57:6b:76:83:4b:db:69:37:01:54:eb:39:
53:2b:53:db:9a:e0:89:38:73:5f:de:d2:26:a1:11:55:b9:e2:
11:3b:41:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 6 02:29:31 2026 by rpki-client