
$ rpki-client -vvvf r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/AS218862.roa
File: AS218862.roa (raw, json)
Hash identifier: BrTaydTuOvWLkv2jFuUVuabYHW3sQlxntGpg3vV5evk=
Subject key identifier: 15:D8:23:C6:C8:8F:88:87:80:F2:70:BE:6E:A7:F1:76:F7:BD:E9:F5
Certificate issuer: /CN=D34606949D385DB42714FE71274FAC9948EF279C
Certificate serial: 3AECCBE5452C65224DDA27E886068A6F8CEE5BFB
Authority key identifier: D3:46:06:94:9D:38:5D:B4:27:14:FE:71:27:4F:AC:99:48:EF:27:9C
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/D34606949D385DB42714FE71274FAC9948EF279C.cer
Subject info access: rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/AS218862.roa
Signing time: Mon 07 Sep 2026 06:21:28 +0000
ROA not before: Mon 07 Sep 2026 06:16:28 +0000
ROA not after: Mon 06 Sep 2027 06:21:28 +0000
asID: 218862
IP address blocks: 89.116.69.0/24 maxlen: 24
Validation: OK
Signature path: rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/D34606949D385DB42714FE71274FAC9948EF279C.crl
rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/D34606949D385DB42714FE71274FAC9948EF279C.mft
rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/D34606949D385DB42714FE71274FAC9948EF279C.cer
rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/9DF85997B1B9B358E1C43F36765AA0A4A02144AE.crl
rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/9DF85997B1B9B358E1C43F36765AA0A4A02144AE.mft
rsync://rpki.ripe.net/repository/DEFAULT/nfhZl7G5s1jhxD82dlqgpKAhRK4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 10 Sep 2026 14:52:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3a:ec:cb:e5:45:2c:65:22:4d:da:27:e8:86:06:8a:6f:8c:ee:5b:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D34606949D385DB42714FE71274FAC9948EF279C
Validity
Not Before: Sep 7 06:16:28 2026 GMT
Not After : Sep 6 06:21:28 2027 GMT
Subject: CN=15D823C6C88F888780F270BE6EA7F176F7BDE9F5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:7b:41:a0:29:e5:bc:19:aa:7b:7d:c7:93:78:
91:63:32:83:18:c0:07:1b:05:41:d8:23:01:66:e1:
40:5c:2e:1e:7c:38:b6:f9:27:b8:1f:6a:5f:e9:4d:
1a:85:b2:86:9c:47:db:1a:50:19:fd:53:1f:85:88:
f5:ae:78:b1:7e:86:66:fa:ba:85:3e:a1:9b:b3:eb:
a6:f2:67:4e:7c:12:e9:d4:48:a0:7f:87:d8:4e:67:
c7:c3:bd:4a:50:95:0c:11:fa:3b:5b:a7:dc:19:2b:
a9:fa:cd:c8:16:89:ad:d2:10:d2:5b:d4:25:3a:fd:
84:63:96:c2:0e:ff:c1:57:35:05:7c:6e:01:1d:e1:
f2:48:ab:c8:3c:8c:8a:8e:ac:a4:b4:83:02:0c:0a:
a6:55:e1:6d:e7:5d:cc:86:5b:a9:01:96:a8:b4:00:
d9:f5:20:43:1f:1e:e0:79:b9:47:88:86:10:6f:cd:
d2:3f:25:3c:4f:89:ae:2f:f3:d5:93:7f:38:2d:4b:
4d:d6:0b:0b:20:4b:73:df:7d:01:a7:81:dd:3b:e3:
04:df:9e:ae:be:cc:20:f6:05:a8:aa:9a:10:45:6e:
30:55:fc:85:f6:32:f1:d1:f7:39:7f:2c:6b:d9:b3:
21:f0:39:6d:25:5e:57:06:a5:8c:9d:51:3a:9c:67:
5e:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:D8:23:C6:C8:8F:88:87:80:F2:70:BE:6E:A7:F1:76:F7:BD:E9:F5
X509v3 Authority Key Identifier:
keyid:D3:46:06:94:9D:38:5D:B4:27:14:FE:71:27:4F:AC:99:48:EF:27:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/D34606949D385DB42714FE71274FAC9948EF279C.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/D34606949D385DB42714FE71274FAC9948EF279C.cer
Subject Information Access:
Signed Object - URI:rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/AS218862.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.116.69.0/24
Signature Algorithm: sha256WithRSAEncryption
8c:02:01:e2:83:18:c7:78:ac:de:8d:4b:e9:f4:d3:eb:95:d9:
a0:30:4d:a7:3b:b1:6e:cc:ce:af:2a:eb:5e:bf:d1:44:70:e6:
67:18:65:1f:30:6c:90:94:8f:32:b1:e1:06:cd:7a:2a:07:68:
81:83:ce:3c:f4:70:5f:23:0e:95:a4:e0:a6:82:63:ac:dc:84:
83:e6:9e:1a:15:cd:30:fe:15:0a:05:be:cf:62:cc:6c:17:60:
33:7c:22:2f:7c:2a:07:f1:33:fe:bb:5a:cc:22:8d:74:d2:e3:
91:49:1e:ea:27:32:28:16:96:7a:33:25:dc:08:65:ce:e8:52:
03:b7:c6:2e:c5:14:f7:e8:67:10:62:43:55:11:f8:b5:bd:4e:
8a:6e:f6:41:5d:8f:61:c6:3b:77:db:ef:f5:15:59:be:a6:2e:
ef:92:a0:1e:ed:4d:ee:87:ca:e1:61:c0:a3:ea:d7:26:6b:08:
a4:6a:11:84:81:f7:46:c6:b9:d1:03:28:63:7f:1b:f9:a8:35:
37:56:b2:7d:41:f9:78:c8:c1:2a:9f:a4:36:5b:df:56:91:ed:
f3:c0:a8:dd:1e:54:32:69:9c:56:e6:0e:a0:8d:20:76:5b:9c:
13:21:7a:31:96:8c:80:3f:b6:12:6f:7b:d4:a7:79:b5:47:3f:
58:28:b2:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 9 19:46:54 2026 by rpki-client