
$ rpki-client -vvvf r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/AS147281.roa
File: AS147281.roa (raw, json)
Hash identifier: lZHeDTSwtn3zIpRVogq5upmZuyohyssqVSMeacyAXOc=
Subject key identifier: BA:4A:D2:47:59:A1:3D:ED:BD:2C:E7:F5:F3:E1:D2:27:37:F4:E1:CD
Certificate issuer: /CN=D34606949D385DB42714FE71274FAC9948EF279C
Certificate serial: 287E038188500A97454B31212AAAEACB1D5FEFBB
Authority key identifier: D3:46:06:94:9D:38:5D:B4:27:14:FE:71:27:4F:AC:99:48:EF:27:9C
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/D34606949D385DB42714FE71274FAC9948EF279C.cer
Subject info access: rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/AS147281.roa
Signing time: Fri 04 Sep 2026 03:10:24 +0000
ROA not before: Fri 04 Sep 2026 03:05:24 +0000
ROA not after: Fri 03 Sep 2027 03:10:24 +0000
asID: 147281
IP address blocks: 89.117.71.0/24 maxlen: 24
Validation: OK
Signature path: rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/D34606949D385DB42714FE71274FAC9948EF279C.crl
rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/D34606949D385DB42714FE71274FAC9948EF279C.mft
rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/D34606949D385DB42714FE71274FAC9948EF279C.cer
rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/9DF85997B1B9B358E1C43F36765AA0A4A02144AE.crl
rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/9DF85997B1B9B358E1C43F36765AA0A4A02144AE.mft
rsync://rpki.ripe.net/repository/DEFAULT/nfhZl7G5s1jhxD82dlqgpKAhRK4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 10:43:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
28:7e:03:81:88:50:0a:97:45:4b:31:21:2a:aa:ea:cb:1d:5f:ef:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D34606949D385DB42714FE71274FAC9948EF279C
Validity
Not Before: Sep 4 03:05:24 2026 GMT
Not After : Sep 3 03:10:24 2027 GMT
Subject: CN=BA4AD24759A13DEDBD2CE7F5F3E1D22737F4E1CD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:0e:11:29:74:5c:f2:2e:b8:df:23:cc:0d:e2:
d0:d1:0b:92:af:5f:ae:60:77:37:80:26:97:95:54:
12:e6:d3:d4:bc:ce:21:65:54:31:c6:2f:e5:eb:ec:
94:48:8f:1e:f5:1a:51:48:50:96:cf:15:37:4d:8c:
3e:a5:74:9a:c5:73:4c:7e:8d:2a:44:a1:ae:1a:0c:
a8:46:22:0d:99:fa:bb:7b:96:e9:b8:d6:9e:45:31:
b7:c9:96:03:4c:5d:ee:ee:2b:77:7c:68:a8:4c:ac:
ca:02:69:8d:ec:f9:8a:dc:d7:fb:b8:71:e3:0e:c4:
09:98:67:1c:55:0d:3e:15:ae:23:df:8c:35:cb:66:
01:d9:59:4d:d2:d2:74:a7:f6:58:7b:3c:29:af:68:
32:b2:95:f0:ea:d5:74:f4:c7:af:db:ee:22:9c:cd:
4f:1a:e8:8d:13:d6:db:0d:72:26:8f:6f:35:48:0a:
69:5e:30:fb:8a:4a:d0:b2:0d:b1:88:c4:d4:c8:d4:
96:d6:9f:4c:c9:3e:9a:b8:f9:d4:34:ab:b7:e9:e0:
b9:cd:0d:d1:6c:39:68:4e:95:0f:8c:61:4c:0f:03:
ef:13:02:1b:1c:7c:0d:6e:7f:d0:23:a4:fd:78:bf:
2f:bf:1a:af:27:94:7a:e4:6b:a5:b6:07:c7:3e:9b:
62:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:4A:D2:47:59:A1:3D:ED:BD:2C:E7:F5:F3:E1:D2:27:37:F4:E1:CD
X509v3 Authority Key Identifier:
keyid:D3:46:06:94:9D:38:5D:B4:27:14:FE:71:27:4F:AC:99:48:EF:27:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/D34606949D385DB42714FE71274FAC9948EF279C.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/D34606949D385DB42714FE71274FAC9948EF279C.cer
Subject Information Access:
Signed Object - URI:rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/AS147281.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.117.71.0/24
Signature Algorithm: sha256WithRSAEncryption
68:f6:47:d9:c0:67:43:dc:c1:a1:4c:74:05:5d:cb:7a:1a:ac:
95:a4:dc:c6:80:48:f9:26:57:01:34:bd:e4:5c:0f:63:90:10:
de:f4:a5:7f:07:d8:a1:83:3f:9f:ba:33:85:e7:c4:d9:1b:bb:
a8:5c:54:d2:1c:23:9a:76:86:fc:f9:4a:16:e8:96:8a:e7:ca:
61:8c:8c:ef:b9:8d:d0:8c:7f:7e:52:32:44:86:dd:81:fb:e8:
32:c4:a1:56:88:3b:68:88:72:ca:22:9f:7b:bb:d4:28:d1:f1:
ad:f7:1f:22:53:4a:ee:95:fd:4c:76:dc:f1:24:ec:dc:c2:b7:
20:ab:97:2c:3c:86:71:dc:83:33:d8:e5:a1:70:19:56:f7:7e:
82:ca:b3:47:3a:2c:c1:07:0a:7c:77:ba:99:55:13:c8:0f:45:
db:08:4b:d3:12:3b:b1:19:c9:43:1d:71:f6:ee:80:3e:fa:c3:
58:7b:ac:bc:71:01:29:77:70:4d:94:16:0e:24:9a:b0:03:ef:
4d:07:51:a5:aa:7a:5e:7c:0e:20:5e:66:c1:34:1c:cf:e9:e9:
11:c3:3c:7c:9b:f6:4c:09:b4:c3:5f:64:6f:16:0a:ed:1a:61:
ec:df:23:3e:df:f0:8a:58:57:76:96:d6:9e:d2:ca:16:63:b6:
fd:40:03:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 4 19:31:46 2026 by rpki-client