
$ rpki-client -vvf r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/AS153947.roa
File: AS153947.roa (raw, json)
Hash identifier: +anmvCw9FWG2yz7uSM96+lfI2ekgMiEelM1gsXyX/YY=
Subject key identifier: 8D:23:66:75:ED:F2:D9:77:AC:DD:D5:16:7C:F1:91:35:4B:3B:7D:06
Certificate issuer: /CN=D34606949D385DB42714FE71274FAC9948EF279C
Certificate serial: 04FAA73DF656DDC56285B2C68AE69D3ECCA65753
Authority key identifier: D3:46:06:94:9D:38:5D:B4:27:14:FE:71:27:4F:AC:99:48:EF:27:9C
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/D34606949D385DB42714FE71274FAC9948EF279C.cer
Subject info access: rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/AS153947.roa
Signing time: Fri 15 May 2026 12:03:39 +0000
ROA not before: Fri 15 May 2026 11:58:39 +0000
ROA not after: Fri 14 May 2027 12:03:39 +0000
asID: 153947
IP address blocks: 89.116.164.0/24 maxlen: 24
Validation: OK
Signature path: rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/D34606949D385DB42714FE71274FAC9948EF279C.crl
rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/D34606949D385DB42714FE71274FAC9948EF279C.mft
rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/D34606949D385DB42714FE71274FAC9948EF279C.cer
rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/9DF85997B1B9B358E1C43F36765AA0A4A02144AE.crl
rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/9DF85997B1B9B358E1C43F36765AA0A4A02144AE.mft
rsync://rpki.ripe.net/repository/DEFAULT/nfhZl7G5s1jhxD82dlqgpKAhRK4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 04 Jun 2026 10:59:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
04:fa:a7:3d:f6:56:dd:c5:62:85:b2:c6:8a:e6:9d:3e:cc:a6:57:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D34606949D385DB42714FE71274FAC9948EF279C
Validity
Not Before: May 15 11:58:39 2026 GMT
Not After : May 14 12:03:39 2027 GMT
Subject: CN=8D236675EDF2D977ACDDD5167CF191354B3B7D06
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:bc:a4:b6:c3:e3:74:de:8d:1e:69:b5:ec:1f:
c7:9e:93:7a:f8:1c:f6:f8:78:1f:f2:6b:6e:7b:7f:
c6:28:96:71:33:e2:c8:5e:d7:c3:28:2e:6e:cc:18:
69:85:51:c4:cf:3b:44:53:16:4f:c2:69:24:a0:19:
6a:7c:10:ee:69:53:53:d6:44:2d:43:0c:40:67:e7:
b5:56:68:40:ed:91:92:05:02:5d:ae:4b:80:73:db:
19:a2:ce:1b:c9:e4:70:39:8b:09:07:0f:b6:31:dd:
a2:e9:42:80:76:cf:95:dd:31:53:df:d2:87:2b:f2:
69:3e:d0:fa:be:3b:68:c4:99:72:15:a9:67:13:cb:
26:1d:fa:52:65:af:b5:3f:19:56:c6:1c:8e:f4:43:
f3:87:9b:ed:7e:99:d5:66:04:e0:fc:09:85:0e:8d:
ff:ce:16:d3:0e:7b:f1:5e:69:e4:2a:7c:81:b6:01:
4e:8c:93:68:84:54:0d:e4:ca:dc:d1:ad:b1:67:96:
a5:fc:bd:a5:ab:a3:3e:39:07:0f:c3:db:40:2c:de:
3c:f3:1e:f5:bc:25:f3:21:4b:13:11:07:a1:af:5f:
6f:75:9e:86:e7:9a:b9:0b:ab:95:b0:d6:16:83:85:
a8:fc:11:12:a5:b1:97:d1:8d:8e:2e:5e:1b:c7:19:
19:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:23:66:75:ED:F2:D9:77:AC:DD:D5:16:7C:F1:91:35:4B:3B:7D:06
X509v3 Authority Key Identifier:
keyid:D3:46:06:94:9D:38:5D:B4:27:14:FE:71:27:4F:AC:99:48:EF:27:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/D34606949D385DB42714FE71274FAC9948EF279C.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/D34606949D385DB42714FE71274FAC9948EF279C.cer
Subject Information Access:
Signed Object - URI:rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/AS153947.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.116.164.0/24
Signature Algorithm: sha256WithRSAEncryption
24:81:8f:9e:f8:0f:5c:ef:8e:52:c8:83:b6:d3:8b:05:be:ab:
c2:99:8a:eb:63:f8:22:0c:c2:5a:fc:3d:39:8e:62:4a:63:4a:
7e:2f:36:27:f5:52:b3:0b:fd:8a:3c:f5:49:25:3f:dc:c5:d1:
19:83:8a:d3:81:30:4b:61:d1:93:a7:7d:74:7c:f6:9e:68:cb:
f5:ae:8b:32:a7:a7:bd:22:ad:be:29:d6:53:3f:5d:4e:61:b3:
a7:0f:76:5c:bd:58:e8:88:31:02:d9:44:e7:7f:b8:21:8b:22:
55:63:f7:83:e2:c3:33:b8:28:07:24:ad:9b:b9:ff:da:1b:e4:
6b:a9:b1:52:22:b7:1b:1c:da:1a:e4:7a:9b:8c:2f:33:d5:e1:
b9:85:7e:e7:6c:4e:6c:ac:07:2d:9c:73:8f:9d:b5:9f:c7:d3:
d0:af:40:16:c0:2b:04:53:d7:d6:34:29:44:e6:4d:25:42:1d:
a1:ed:2e:a5:e0:6c:35:87:f9:30:9e:10:61:a5:cc:40:0b:4f:
8d:8e:75:f8:98:52:1b:e1:76:1f:6c:55:e7:af:83:7a:4f:20:
13:90:d6:00:7b:20:27:7b:a8:0b:21:9b:38:01:a6:be:b9:5b:
45:01:be:01:e9:31:43:68:32:6b:40:dd:27:6e:f4:08:4b:83:
f3:1e:c9:90
-----BEGIN CERTIFICATE-----
MIIFJTCCBA2gAwIBAgIUBPqnPfZW3cVihbLGiuadPsymV1MwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRDM0NjA2OTQ5RDM4NURCNDI3MTRGRTcxMjc0RkFDOTk0
OEVGMjc5QzAeFw0yNjA1MTUxMTU4MzlaFw0yNzA1MTQxMjAzMzlaMDMxMTAvBgNV
BAMTKDhEMjM2Njc1RURGMkQ5NzdBQ0RERDUxNjdDRjE5MTM1NEIzQjdEMDYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCdvKS2w+N03o0eabXsH8eek3r4
HPb4eB/ya257f8YolnEz4she18MoLm7MGGmFUcTPO0RTFk/CaSSgGWp8EO5pU1PW
RC1DDEBn57VWaEDtkZIFAl2uS4Bz2xmizhvJ5HA5iwkHD7Yx3aLpQoB2z5XdMVPf
0ocr8mk+0Pq+O2jEmXIVqWcTyyYd+lJlr7U/GVbGHI70Q/OHm+1+mdVmBOD8CYUO
jf/OFtMOe/FeaeQqfIG2AU6Mk2iEVA3kytzRrbFnlqX8vaWroz45Bw/D20As3jzz
HvW8JfMhSxMRB6GvX291nobnmrkLq5Ww1haDhaj8ERKlsZfRjY4uXhvHGRkXAgMB
AAGjggIvMIICKzAdBgNVHQ4EFgQUjSNmde3y2Xes3dUWfPGRNUs7fQYwHwYDVR0j
BBgwFoAU00YGlJ04XbQnFP5xJ0+smUjvJ5wwDgYDVR0PAQH/BAQDAgeAMIGIBgNV
HR8EgYAwfjB8oHqgeIZ2cnN5bmM6Ly9yLm1hZ2VsbGFuLmlweG8uY29tL3JlcG8v
NTI4YTIxOGYtYWQyOC00MGQyLWJkN2YtMzUwZWFkYTNkNzA1LTAvMC9EMzQ2MDY5
NDlEMzg1REI0MjcxNEZFNzEyNzRGQUM5OTQ4RUYyNzlDLmNybDCBngYIKwYBBQUH
AQEEgZEwgY4wgYsGCCsGAQUFBzAChn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5y
aXBlLm5ldC9yZXBvc2l0b3J5LzAwMmUwYmEzLWZlNjAtNDViMS05MTYwLTg2OGEy
ZjhhNDNiMS8zL0QzNDYwNjk0OUQzODVEQjQyNzE0RkU3MTI3NEZBQzk5NDhFRjI3
OUMuY2VyMHIGCCsGAQUFBwELBGYwZDBiBggrBgEFBQcwC4ZWcnN5bmM6Ly9yLm1h
Z2VsbGFuLmlweG8uY29tL3JlcG8vNTI4YTIxOGYtYWQyOC00MGQyLWJkN2YtMzUw
ZWFkYTNkNzA1LTAvMC9BUzE1Mzk0Ny5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEF
BQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAFl0pDANBgkqhkiG9w0B
AQsFAAOCAQEAJIGPnvgPXO+OUsiDttOLBb6rwpmK62P4IgzCWvw9OY5iSmNKfi82
J/VSswv9ijz1SSU/3MXRGYOK04EwS2HRk6d9dHz2nmjL9a6LMqenvSKtvinWUz9d
TmGzpw92XL1Y6IgxAtlE53+4IYsiVWP3g+LDM7goByStm7n/2hvka6mxUiK3Gxza
GuR6m4wvM9XhuYV+52xObKwHLZxzj521n8fT0K9AFsArBFPX1jQpROZNJUIdoe0u
peBsNYf5MJ4QYaXMQAtPjY51+JhSG+F2H2xV56+Dek8gE5DWAHsgJ3uoCyGbOAGm
vrlbRQG+AekxQ2gya0DdJ270CEuD8x7JkA==
-----END CERTIFICATE-----
Generated at Thu Jun 4 03:14:36 2026 by rpki-client