
$ rpki-client -vvvf r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/AS402535.roa
File: AS402535.roa (raw, json)
Hash identifier: prJtWc98+zUgnEAMx4aiptFkQWhyrTrj4w5+0WUj50I=
Subject key identifier: AD:1C:EA:3D:0A:7A:9E:3A:F2:44:93:55:52:8F:2E:F4:95:4A:A6:3D
Certificate issuer: /CN=D34606949D385DB42714FE71274FAC9948EF279C
Certificate serial: 0EA2237E1DD52E0991B5960159A7CCBDE556F358
Authority key identifier: D3:46:06:94:9D:38:5D:B4:27:14:FE:71:27:4F:AC:99:48:EF:27:9C
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/D34606949D385DB42714FE71274FAC9948EF279C.cer
Subject info access: rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/AS402535.roa
Signing time: Fri 21 Aug 2026 08:46:06 +0000
ROA not before: Fri 21 Aug 2026 08:41:06 +0000
ROA not after: Fri 20 Aug 2027 08:46:06 +0000
asID: 402535
IP address blocks: 86.38.235.0/24 maxlen: 24
Validation: OK
Signature path: rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/D34606949D385DB42714FE71274FAC9948EF279C.crl
rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/D34606949D385DB42714FE71274FAC9948EF279C.mft
rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/D34606949D385DB42714FE71274FAC9948EF279C.cer
rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/9DF85997B1B9B358E1C43F36765AA0A4A02144AE.crl
rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/9DF85997B1B9B358E1C43F36765AA0A4A02144AE.mft
rsync://rpki.ripe.net/repository/DEFAULT/nfhZl7G5s1jhxD82dlqgpKAhRK4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 27 Aug 2026 07:59:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0e:a2:23:7e:1d:d5:2e:09:91:b5:96:01:59:a7:cc:bd:e5:56:f3:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D34606949D385DB42714FE71274FAC9948EF279C
Validity
Not Before: Aug 21 08:41:06 2026 GMT
Not After : Aug 20 08:46:06 2027 GMT
Subject: CN=AD1CEA3D0A7A9E3AF2449355528F2EF4954AA63D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:96:8b:59:67:52:7b:0a:04:4a:eb:00:dc:2b:
80:67:62:22:ea:22:7f:fa:63:5b:4e:61:4e:72:de:
9b:7a:67:8d:cb:b6:e3:d4:4e:23:ed:4b:58:10:be:
d3:d1:91:6f:6d:3f:f9:82:e0:26:1c:e2:1c:e7:28:
1c:d7:2f:15:48:0b:24:bb:ed:b2:a1:fd:35:9b:bc:
97:36:b6:e6:48:7a:93:f0:8a:1a:08:f0:ed:d5:ba:
20:99:ee:3e:0a:16:89:e5:83:8d:53:a2:17:3e:ea:
4b:11:83:5d:78:74:7c:ac:7b:7a:1a:46:c6:09:01:
01:cc:23:27:51:e8:a5:02:6d:58:69:62:71:1a:0f:
b8:e3:14:8d:44:37:4b:00:ec:cd:a6:78:86:90:0d:
5a:f9:ac:4c:e2:ed:c7:7f:f6:73:1b:b3:22:c7:1a:
e5:4f:4d:7e:05:a6:28:18:a0:6d:f1:65:5d:33:bb:
3c:9d:cf:72:ac:8d:c5:ae:d0:0a:a8:6e:83:4e:4d:
5f:b7:08:22:22:32:b1:ad:41:a9:8d:82:87:bc:a7:
98:c6:db:f5:90:32:56:e0:60:9f:5c:77:6c:ae:ce:
28:8b:6b:3a:cc:92:00:14:dc:4a:87:00:44:21:31:
38:7c:2f:5b:99:a9:54:c3:43:dd:21:ba:74:de:00:
6d:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:1C:EA:3D:0A:7A:9E:3A:F2:44:93:55:52:8F:2E:F4:95:4A:A6:3D
X509v3 Authority Key Identifier:
keyid:D3:46:06:94:9D:38:5D:B4:27:14:FE:71:27:4F:AC:99:48:EF:27:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/D34606949D385DB42714FE71274FAC9948EF279C.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/D34606949D385DB42714FE71274FAC9948EF279C.cer
Subject Information Access:
Signed Object - URI:rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/AS402535.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
86.38.235.0/24
Signature Algorithm: sha256WithRSAEncryption
7c:4d:69:7e:cd:11:12:10:a9:3f:01:a7:99:35:9f:2f:ea:97:
92:9d:22:37:17:ce:4d:b0:69:e6:86:ce:37:07:e6:1e:2f:d3:
95:01:e2:b2:c1:3a:86:a9:66:3c:15:3b:35:99:d0:23:ff:c9:
2c:ed:55:90:bf:81:6c:c6:a3:09:04:3a:e7:7b:08:e5:c9:39:
84:8b:91:a2:d3:10:29:40:5b:1b:ad:a8:83:38:77:ee:f2:da:
f9:9b:6e:c7:f8:96:d2:f8:1c:37:74:8d:31:5d:e1:65:bc:e4:
c9:1b:62:66:43:92:c8:d6:9d:c1:56:27:95:04:40:36:1a:e1:
36:1a:2a:46:01:ff:64:95:5e:08:ed:2f:b8:85:a9:c6:03:8b:
05:7c:df:25:d5:c2:68:f4:2f:23:4c:67:f3:ea:5e:89:e0:5d:
cd:f7:ee:c3:e9:bc:58:ef:fc:5c:03:1a:4a:56:7d:c9:be:90:
98:0d:f7:28:87:bb:60:64:53:2e:9e:a6:28:54:54:0d:8d:96:
15:8a:ca:8e:87:c7:e7:05:de:a5:b7:5d:c2:4d:0b:43:60:68:
36:20:7a:ec:e6:f4:6c:6b:b1:64:6e:d7:04:96:24:98:79:9b:
91:85:5d:a6:b0:bd:51:46:a3:d5:ea:f6:9c:3b:a6:dc:67:1b:
3f:3f:4e:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 26 17:22:56 2026 by rpki-client