
$ rpki-client -vvf r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/AS273508.roa
File: AS273508.roa (raw, json)
Hash identifier: bC+N8cYtC1+VMjDKz8Xu9ObIKS29UmkdVlzhPRZhXvI=
Subject key identifier: 16:DC:B9:72:88:AF:8D:77:7B:44:28:13:4E:06:9E:34:95:F3:B4:CB
Certificate issuer: /CN=D34606949D385DB42714FE71274FAC9948EF279C
Certificate serial: 5CB87E559D33A5049686311BB9785E0743986DC6
Authority key identifier: D3:46:06:94:9D:38:5D:B4:27:14:FE:71:27:4F:AC:99:48:EF:27:9C
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/D34606949D385DB42714FE71274FAC9948EF279C.cer
Subject info access: rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/AS273508.roa
Signing time: Mon 31 Mar 2025 19:54:00 +0000
ROA not before: Mon 31 Mar 2025 19:49:00 +0000
ROA not after: Mon 30 Mar 2026 19:54:00 +0000
asID: 273508
IP address blocks: 89.117.25.0/24 maxlen: 24
Validation: OK
Signature path: rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/D34606949D385DB42714FE71274FAC9948EF279C.crl
rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/D34606949D385DB42714FE71274FAC9948EF279C.mft
rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/D34606949D385DB42714FE71274FAC9948EF279C.cer
rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/9DF85997B1B9B358E1C43F36765AA0A4A02144AE.crl
rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/9DF85997B1B9B358E1C43F36765AA0A4A02144AE.mft
rsync://rpki.ripe.net/repository/DEFAULT/nfhZl7G5s1jhxD82dlqgpKAhRK4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 15:58:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5c:b8:7e:55:9d:33:a5:04:96:86:31:1b:b9:78:5e:07:43:98:6d:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D34606949D385DB42714FE71274FAC9948EF279C
Validity
Not Before: Mar 31 19:49:00 2025 GMT
Not After : Mar 30 19:54:00 2026 GMT
Subject: CN=16DCB97288AF8D777B4428134E069E3495F3B4CB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:03:2e:98:6d:af:5c:5c:80:59:d7:03:e5:12:
8a:8d:da:0b:ae:4c:33:32:a0:15:b3:25:c5:ea:da:
4e:ef:11:0a:76:b0:50:0e:c3:2b:d5:2f:b4:22:56:
b8:70:dc:d5:30:6e:93:19:62:92:53:48:d2:03:21:
94:5d:21:c8:f0:7a:01:c8:72:d3:5d:87:fc:38:32:
a9:f1:5b:89:07:3a:56:01:56:dc:8f:b0:88:db:4a:
7c:84:53:40:8b:81:e2:19:fc:f0:df:d3:9a:53:aa:
d8:63:40:05:fd:dc:12:1c:df:6c:c7:82:60:e5:a1:
d8:71:24:72:7d:9a:64:ae:01:2f:2c:ae:15:78:40:
75:5c:43:14:b0:16:b3:4a:1c:0f:0b:7f:73:f1:68:
db:92:c2:ce:c9:3b:f2:8e:57:7d:77:71:3c:c7:bf:
8e:b3:63:e6:be:8f:82:48:f4:60:5f:9b:90:2b:a7:
60:0f:ee:17:a3:99:20:77:c2:09:fe:39:52:65:5b:
95:4e:19:f5:60:6b:b9:ec:59:92:a7:b9:6d:4c:87:
25:56:e7:58:6f:25:18:f7:5b:49:90:a8:26:99:4b:
4f:05:17:a8:94:62:9a:fc:23:cd:cc:a6:3d:2e:17:
ec:16:50:0f:69:64:9f:db:a4:e1:20:87:fe:17:f4:
43:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:DC:B9:72:88:AF:8D:77:7B:44:28:13:4E:06:9E:34:95:F3:B4:CB
X509v3 Authority Key Identifier:
keyid:D3:46:06:94:9D:38:5D:B4:27:14:FE:71:27:4F:AC:99:48:EF:27:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/D34606949D385DB42714FE71274FAC9948EF279C.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/D34606949D385DB42714FE71274FAC9948EF279C.cer
Subject Information Access:
Signed Object - URI:rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/AS273508.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.117.25.0/24
Signature Algorithm: sha256WithRSAEncryption
be:f9:d1:75:01:1f:70:81:a4:be:44:56:13:84:8f:e0:f1:32:
9f:98:e9:24:2c:4d:e9:97:53:83:38:76:d4:09:e4:ac:51:4e:
f5:80:c0:18:46:47:54:ae:18:41:ef:7a:83:0a:62:99:e2:49:
75:c5:14:5b:52:33:f4:b4:dd:11:e7:bf:01:75:73:59:09:d6:
d8:28:c6:2d:c2:39:b8:10:33:a9:4b:e8:45:a8:d0:68:c2:21:
97:2b:7e:e9:e1:54:01:07:be:c0:9b:54:80:ba:19:d3:83:4e:
0b:bb:7c:a8:76:d3:97:81:6a:24:43:b6:e8:4f:00:3c:cb:5a:
41:e3:48:17:82:0b:c3:87:2d:53:11:26:44:ec:aa:d6:36:b5:
fd:4a:9d:69:c8:b9:27:9e:0b:e8:a7:ea:ff:98:66:96:bd:2c:
91:01:54:d0:f1:46:55:1b:de:25:1c:61:14:2f:60:80:94:1c:
5d:7f:2f:7f:c2:f5:17:3d:25:1b:a9:fd:c6:79:4e:4f:7c:55:
02:84:f6:57:64:16:d0:cf:21:a3:68:d7:7c:7d:47:ff:2b:3e:
2e:6c:82:74:a5:f7:5d:d1:d2:cb:33:fd:97:9f:96:1d:14:2c:
75:a3:bf:a9:5b:e9:f6:d1:51:85:7f:88:86:31:f0:7e:c4:0b:
f2:d9:5e:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 08:27:39 2025 by rpki-client