
$ rpki-client -vvvf r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/AS402265.roa
File: AS402265.roa (raw, json)
Hash identifier: c74naqzNlioDk2oGLN4w3dfn2pX6O7xIf6DDXGf3y1Q=
Subject key identifier: 23:0C:19:F8:38:09:72:8B:8B:AE:66:A5:29:AF:23:66:6D:F3:99:FD
Certificate issuer: /CN=D34606949D385DB42714FE71274FAC9948EF279C
Certificate serial: 99BADA5ECEFF13457D147B37B749BDA9F8AD02
Authority key identifier: D3:46:06:94:9D:38:5D:B4:27:14:FE:71:27:4F:AC:99:48:EF:27:9C
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/D34606949D385DB42714FE71274FAC9948EF279C.cer
Subject info access: rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/AS402265.roa
Signing time: Fri 04 Sep 2026 13:32:40 +0000
ROA not before: Fri 04 Sep 2026 13:27:40 +0000
ROA not after: Fri 03 Sep 2027 13:32:40 +0000
asID: 402265
IP address blocks: 89.116.11.0/24 maxlen: 24
89.117.65.0/24 maxlen: 24
Validation: OK
Signature path: rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/D34606949D385DB42714FE71274FAC9948EF279C.crl
rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/D34606949D385DB42714FE71274FAC9948EF279C.mft
rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/D34606949D385DB42714FE71274FAC9948EF279C.cer
rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/9DF85997B1B9B358E1C43F36765AA0A4A02144AE.crl
rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/9DF85997B1B9B358E1C43F36765AA0A4A02144AE.mft
rsync://rpki.ripe.net/repository/DEFAULT/nfhZl7G5s1jhxD82dlqgpKAhRK4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 10:43:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
99:ba:da:5e:ce:ff:13:45:7d:14:7b:37:b7:49:bd:a9:f8:ad:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D34606949D385DB42714FE71274FAC9948EF279C
Validity
Not Before: Sep 4 13:27:40 2026 GMT
Not After : Sep 3 13:32:40 2027 GMT
Subject: CN=230C19F83809728B8BAE66A529AF23666DF399FD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:dc:c9:6b:26:96:b4:6a:6e:43:8e:58:44:89:
4f:af:55:d2:4f:07:95:24:6a:a1:c7:94:3a:b8:f9:
c3:71:e0:df:25:56:73:50:8b:e1:31:2f:1a:31:b0:
5a:77:d7:a5:0c:0f:c0:8d:e4:89:a7:37:32:05:ea:
77:d6:b9:c9:5d:dd:ba:f1:34:6b:54:90:9a:ef:24:
27:73:5d:b9:b9:26:b2:5f:bc:2f:a9:03:c8:52:05:
4f:6c:74:dd:a5:7b:08:61:92:86:4b:96:e6:38:bf:
19:d3:eb:6e:41:7a:61:90:71:c3:9d:03:e1:7e:85:
27:f2:6d:ea:f6:b8:7a:1d:b0:a5:d5:ff:86:78:57:
f9:8a:f8:b2:08:a9:7f:5e:74:4c:92:a8:b9:7a:52:
1d:bc:7d:7b:46:75:af:2c:4b:cc:03:84:9e:a8:23:
0d:47:6e:88:c0:82:e6:29:a0:47:7b:00:db:7f:e4:
ea:88:d4:72:62:9d:7a:35:18:0f:91:c4:dc:0f:0e:
f6:3a:a9:64:36:df:3f:e3:b2:4d:1a:29:66:ee:2b:
e8:e1:34:7a:3b:69:ce:78:7e:e1:27:a4:b9:2c:77:
3a:52:93:5d:2f:b3:cc:92:75:f8:43:a6:31:30:18:
fa:d3:77:f3:60:20:79:64:02:22:db:5a:06:2e:f6:
1c:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:0C:19:F8:38:09:72:8B:8B:AE:66:A5:29:AF:23:66:6D:F3:99:FD
X509v3 Authority Key Identifier:
keyid:D3:46:06:94:9D:38:5D:B4:27:14:FE:71:27:4F:AC:99:48:EF:27:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/D34606949D385DB42714FE71274FAC9948EF279C.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/D34606949D385DB42714FE71274FAC9948EF279C.cer
Subject Information Access:
Signed Object - URI:rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/AS402265.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.116.11.0/24
89.117.65.0/24
Signature Algorithm: sha256WithRSAEncryption
a8:7a:8d:0b:88:b1:2c:af:c4:28:4b:90:fa:e6:70:32:fb:67:
63:e3:fb:9f:c6:cf:c3:5e:9e:d7:82:79:e1:b4:79:54:a4:eb:
c9:ee:05:e2:ab:81:73:1a:cd:69:58:71:f0:a2:ed:a9:af:c4:
2b:05:c2:0f:2d:a0:61:8c:ae:d9:e0:9e:48:10:e8:01:44:68:
a5:7f:05:ce:e7:b3:6a:5f:2b:0f:de:ec:42:d2:2c:99:21:57:
ec:bf:5c:15:00:e3:39:5d:b7:68:0f:ad:91:1c:bd:ce:c0:10:
76:0e:f8:11:50:4a:67:0f:99:9a:d8:47:fd:c4:98:3d:42:13:
3a:41:70:86:fa:cb:81:47:1e:ae:48:a5:07:27:3a:9a:64:f7:
c0:b1:2a:8a:e0:1c:d9:ad:f9:ce:9a:69:22:44:c4:73:40:77:
48:5b:b2:8d:f1:1a:3c:4f:43:4f:e9:25:1a:3e:8b:90:44:32:
50:5c:11:69:c4:88:30:19:67:2c:be:9b:fd:dd:9f:7f:06:a3:
a6:c7:c6:96:2e:49:7d:06:da:85:72:d6:72:23:dd:22:6e:0b:
12:06:5a:35:57:74:4d:09:a7:da:f0:72:10:37:a4:24:96:e6:
5b:cc:d2:3c:59:e6:da:bb:40:98:40:b9:1a:71:bb:24:b8:85:
60:46:45:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 4 19:32:01 2026 by rpki-client