
$ rpki-client -vvvf r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/AS402215.roa
File: AS402215.roa (raw, json)
Hash identifier: dQtfNV7LzVWoKHUuQ/fR+BmUK5jShBSMJ7dtVgIPUI4=
Subject key identifier: C7:FE:2B:F9:33:91:C2:F4:CC:36:CD:15:9D:5B:97:75:AE:95:46:32
Certificate issuer: /CN=D34606949D385DB42714FE71274FAC9948EF279C
Certificate serial: 39E9A68B9FA117E2905E053D65BC160C0C1EC2C0
Authority key identifier: D3:46:06:94:9D:38:5D:B4:27:14:FE:71:27:4F:AC:99:48:EF:27:9C
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/D34606949D385DB42714FE71274FAC9948EF279C.cer
Subject info access: rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/AS402215.roa
Signing time: Sat 08 Aug 2026 11:17:59 +0000
ROA not before: Sat 08 Aug 2026 11:12:59 +0000
ROA not after: Sat 07 Aug 2027 11:17:59 +0000
asID: 402215
IP address blocks: 89.116.165.0/24 maxlen: 24
Validation: OK
Signature path: rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/D34606949D385DB42714FE71274FAC9948EF279C.crl
rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/D34606949D385DB42714FE71274FAC9948EF279C.mft
rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/D34606949D385DB42714FE71274FAC9948EF279C.cer
rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/9DF85997B1B9B358E1C43F36765AA0A4A02144AE.crl
rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/9DF85997B1B9B358E1C43F36765AA0A4A02144AE.mft
rsync://rpki.ripe.net/repository/DEFAULT/nfhZl7G5s1jhxD82dlqgpKAhRK4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 01 Sep 2026 11:29:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
39:e9:a6:8b:9f:a1:17:e2:90:5e:05:3d:65:bc:16:0c:0c:1e:c2:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D34606949D385DB42714FE71274FAC9948EF279C
Validity
Not Before: Aug 8 11:12:59 2026 GMT
Not After : Aug 7 11:17:59 2027 GMT
Subject: CN=C7FE2BF93391C2F4CC36CD159D5B9775AE954632
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:06:77:e6:ec:21:5b:7e:12:d6:94:9e:e3:0e:
c1:fa:9c:46:c1:54:10:08:5f:be:b6:9b:cb:eb:2f:
3c:4c:b6:eb:b7:37:66:90:6d:2a:cd:61:ec:12:32:
20:ea:aa:32:b3:02:70:7a:17:a0:69:0d:3f:dc:c2:
e7:aa:84:95:e5:86:ba:f8:bb:ef:1f:19:41:96:44:
50:3d:b7:13:3f:8b:c3:d9:92:16:34:40:68:d3:b4:
4b:67:53:a0:76:27:49:a2:a6:5e:09:e1:99:0a:83:
7f:39:c0:b0:b5:08:13:c9:65:59:f4:dc:24:10:58:
cc:c7:3d:d0:68:d8:87:24:be:df:ee:4c:8a:0d:98:
c8:1c:e5:85:60:b2:de:e8:4f:0b:27:df:10:33:11:
b9:d7:28:7b:09:b6:e5:df:67:87:85:c4:82:b8:18:
86:a6:4b:de:61:b1:20:92:b2:51:c6:b0:c5:52:6d:
83:ed:d6:76:07:35:b1:9c:aa:a4:16:60:cb:ef:84:
db:64:da:cb:a8:9c:8b:43:94:e6:88:a2:30:ea:85:
67:7b:c8:33:51:74:28:35:90:e9:09:31:51:06:13:
94:3a:b5:c3:29:64:34:de:25:b5:6c:1d:a4:f8:be:
bd:82:5d:43:04:e1:f0:64:87:98:42:c5:73:87:b1:
d3:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:FE:2B:F9:33:91:C2:F4:CC:36:CD:15:9D:5B:97:75:AE:95:46:32
X509v3 Authority Key Identifier:
keyid:D3:46:06:94:9D:38:5D:B4:27:14:FE:71:27:4F:AC:99:48:EF:27:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/D34606949D385DB42714FE71274FAC9948EF279C.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/D34606949D385DB42714FE71274FAC9948EF279C.cer
Subject Information Access:
Signed Object - URI:rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/AS402215.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.116.165.0/24
Signature Algorithm: sha256WithRSAEncryption
3a:1f:a9:e4:75:50:e3:ad:e8:c1:69:30:86:b9:7d:ca:7f:7a:
70:43:00:c1:70:ef:e3:a8:76:8e:c7:c7:66:be:6e:f4:7c:f1:
e8:0b:21:a0:7c:80:10:9b:51:b8:1f:46:4b:47:17:56:2d:12:
68:6c:d5:c8:6e:34:e0:73:25:e4:e6:d9:8b:7d:9b:84:32:5d:
75:fa:8d:76:90:07:ee:0e:58:93:41:3f:74:c1:78:b4:fd:03:
8f:cd:34:b4:d7:d0:43:da:c4:78:5c:ff:0b:8a:15:e6:cc:d0:
8a:10:50:ff:23:c2:94:f3:bf:7c:bd:68:a1:54:26:b3:bc:f7:
96:c0:af:28:b8:24:26:bb:44:37:26:6a:be:e1:15:31:65:1d:
00:f3:fa:18:e9:e8:6b:21:cb:a1:61:5d:d2:e1:40:0a:dd:fc:
34:4a:f3:56:d5:bc:6a:7c:13:90:b4:ed:43:ce:e5:6a:a3:e7:
32:ce:a7:59:9c:74:77:e4:df:aa:8c:b0:e7:e5:c7:e3:3d:15:
06:b4:04:67:51:42:51:d7:9e:30:a8:f1:d2:b9:fd:c8:47:cf:
2b:a7:03:13:91:29:10:d7:cf:ad:20:a5:66:e5:d3:9e:8e:8c:
24:31:f4:24:ca:04:99:42:73:6a:d3:ba:c9:82:0d:82:69:fe:
1e:87:46:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 1 02:34:38 2026 by rpki-client