
$ rpki-client -vvf r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/AS203048.roa
File: AS203048.roa (raw, json)
Hash identifier: D15Pdupf27TA+BxKP1Cp6P+Vd9q4Te43k6RLRWYs0ZE=
Subject key identifier: 8F:4E:28:A6:C1:AD:8D:48:C6:41:CE:B2:1B:6B:8F:5C:3F:35:B1:AC
Certificate issuer: /CN=D34606949D385DB42714FE71274FAC9948EF279C
Certificate serial: 351E9ECFBE3CC2873C99CB519438032C1AF2CA0C
Authority key identifier: D3:46:06:94:9D:38:5D:B4:27:14:FE:71:27:4F:AC:99:48:EF:27:9C
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/D34606949D385DB42714FE71274FAC9948EF279C.cer
Subject info access: rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/AS203048.roa
Signing time: Sun 05 Apr 2026 02:05:53 +0000
ROA not before: Sun 05 Apr 2026 02:00:53 +0000
ROA not after: Sun 04 Apr 2027 02:05:53 +0000
asID: 203048
IP address blocks: 89.116.164.0/24 maxlen: 24
Validation: OK
Signature path: rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/D34606949D385DB42714FE71274FAC9948EF279C.crl
rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/D34606949D385DB42714FE71274FAC9948EF279C.mft
rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/D34606949D385DB42714FE71274FAC9948EF279C.cer
rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/9DF85997B1B9B358E1C43F36765AA0A4A02144AE.crl
rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/9DF85997B1B9B358E1C43F36765AA0A4A02144AE.mft
rsync://rpki.ripe.net/repository/DEFAULT/nfhZl7G5s1jhxD82dlqgpKAhRK4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 11 Apr 2026 13:50:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
35:1e:9e:cf:be:3c:c2:87:3c:99:cb:51:94:38:03:2c:1a:f2:ca:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D34606949D385DB42714FE71274FAC9948EF279C
Validity
Not Before: Apr 5 02:00:53 2026 GMT
Not After : Apr 4 02:05:53 2027 GMT
Subject: CN=8F4E28A6C1AD8D48C641CEB21B6B8F5C3F35B1AC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:5e:66:20:d8:c4:37:3c:da:ea:81:2f:e2:71:
ea:47:79:a4:26:e7:f9:66:dd:f0:9a:21:8b:e8:dd:
92:dd:a8:24:6e:28:37:a2:b2:0e:8d:50:62:81:ae:
b8:14:4c:77:97:7d:4d:42:9b:0f:f0:07:f3:1b:e9:
a0:b6:17:1f:ee:87:ec:fd:e9:69:49:2b:17:92:81:
f5:9b:e6:50:e5:78:98:e0:5f:fd:a4:8d:4f:04:98:
21:9a:8c:db:74:0f:3f:ae:5a:c9:a1:32:78:7e:7e:
57:8c:9d:bb:84:27:4f:b3:6a:da:c0:fe:c6:0d:3b:
24:03:f1:20:fb:f5:6e:c7:ce:7d:cf:23:42:48:17:
8e:37:d1:4f:2e:87:8f:18:56:44:59:76:bf:4e:52:
43:6e:8d:04:c8:e9:e1:2b:5b:cd:22:fc:68:a8:cc:
23:78:f3:c6:2c:45:2b:cb:e2:b5:cd:84:3d:6e:ce:
a7:7d:21:86:b9:d8:fa:4b:95:1a:e3:7e:d1:84:a4:
d5:97:a7:b8:b0:95:6e:3b:08:0a:f7:18:6a:ef:e1:
6e:f7:8b:73:9e:0a:54:24:21:5f:64:ad:58:0f:9b:
d2:68:24:88:fb:64:e5:10:ce:4d:4c:97:12:26:00:
4f:f0:c0:31:47:45:fe:eb:c3:66:c9:4d:52:0f:93:
c1:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:4E:28:A6:C1:AD:8D:48:C6:41:CE:B2:1B:6B:8F:5C:3F:35:B1:AC
X509v3 Authority Key Identifier:
keyid:D3:46:06:94:9D:38:5D:B4:27:14:FE:71:27:4F:AC:99:48:EF:27:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/D34606949D385DB42714FE71274FAC9948EF279C.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/D34606949D385DB42714FE71274FAC9948EF279C.cer
Subject Information Access:
Signed Object - URI:rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/AS203048.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.116.164.0/24
Signature Algorithm: sha256WithRSAEncryption
61:1b:af:02:97:e9:68:9c:25:af:3c:87:83:9c:c6:4d:12:6a:
3f:41:e8:79:77:95:de:fb:41:0e:c9:c0:32:ba:0b:8f:57:c7:
f4:c1:5c:f6:95:4a:40:ef:59:16:a8:c4:ec:5b:53:5e:e8:ee:
34:ec:6c:53:df:d3:bd:07:ce:04:6a:59:ed:0c:f1:14:b6:00:
66:c0:4a:c4:b2:27:be:c6:00:0d:ac:41:d0:80:ab:ba:09:45:
0e:4f:34:36:15:93:18:a7:41:b2:26:ec:a6:36:19:1e:e7:2d:
a0:bf:df:01:2a:b2:10:80:0d:c0:6f:1b:5d:c4:ae:63:3b:26:
76:29:7d:0a:ad:22:28:a4:cf:75:a7:8c:4b:19:33:69:3e:d1:
69:17:9d:b5:19:aa:d6:2e:8d:47:83:80:ea:21:02:7c:d1:eb:
04:98:2b:c2:df:dd:96:ea:61:4a:e6:ae:7d:67:36:dd:b6:a7:
51:d5:d4:f6:79:83:c8:ac:36:7a:1e:b0:03:84:2d:99:0c:5a:
5f:60:62:b4:b1:eb:6c:46:12:ed:9d:90:62:18:a7:a2:89:6f:
18:d6:36:2a:03:dc:b4:55:0f:28:1b:b1:ed:24:b0:78:01:93:
0d:c7:9a:20:86:b1:6a:51:3b:c4:7f:9b:cb:13:f6:bb:16:50:
88:84:c3:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 11 01:28:40 2026 by rpki-client