Route Origin Authorization
$ rpki-client -vvvf r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/AS834.roa
File: AS834.roa (raw, json)
Hash identifier: YPNmkwtzhSEd3pBxAvi9iwA/G4fja5s+h9+Unv4fU2E=
Subject key identifier: 44:D4:B3:CF:06:9C:32:FB:FE:C4:DA:15:87:14:1F:28:B2:63:42:75
Certificate issuer: /CN=D34606949D385DB42714FE71274FAC9948EF279C
Certificate serial: 196FF9C6AEE7F3B30641BAB53A124D4FA1A7A52A
Authority key identifier: D3:46:06:94:9D:38:5D:B4:27:14:FE:71:27:4F:AC:99:48:EF:27:9C
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/D34606949D385DB42714FE71274FAC9948EF279C.cer
Subject info access: rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/AS834.roa
Signing time: Fri 04 Sep 2026 13:32:41 +0000
ROA not before: Fri 04 Sep 2026 13:27:41 +0000
ROA not after: Fri 03 Sep 2027 13:32:41 +0000
asID: 834
IP address blocks: 84.46.236.0/22 maxlen: 24
86.38.180.0/23 maxlen: 24
86.38.183.0/24 maxlen: 24
86.38.184.0/24 maxlen: 24
86.38.246.0/24 maxlen: 24
86.38.255.0/24 maxlen: 24
89.116.8.0/23 maxlen: 24
89.116.64.0/22 maxlen: 24
89.116.69.0/24 maxlen: 24
89.116.72.0/23 maxlen: 24
89.116.127.0/24 maxlen: 24
89.116.164.0/24 maxlen: 24
89.116.185.0/24 maxlen: 24
89.116.210.0/23 maxlen: 23
89.117.0.0/22 maxlen: 24
89.117.12.0/23 maxlen: 24
89.117.28.0/24 maxlen: 24
89.117.81.0/24 maxlen: 24
89.117.94.0/23 maxlen: 24
89.117.96.0/22 maxlen: 24
89.117.112.0/22 maxlen: 22
89.117.120.0/22 maxlen: 24
89.117.132.0/23 maxlen: 24
89.117.142.0/23 maxlen: 24
89.117.153.0/24 maxlen: 24
89.117.158.0/23 maxlen: 24
89.117.172.0/22 maxlen: 24
89.117.216.0/23 maxlen: 23
Validation: OK
Signature path: rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/D34606949D385DB42714FE71274FAC9948EF279C.crl
rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/D34606949D385DB42714FE71274FAC9948EF279C.mft
rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/D34606949D385DB42714FE71274FAC9948EF279C.cer
rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/9DF85997B1B9B358E1C43F36765AA0A4A02144AE.crl
rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/9DF85997B1B9B358E1C43F36765AA0A4A02144AE.mft
rsync://rpki.ripe.net/repository/DEFAULT/nfhZl7G5s1jhxD82dlqgpKAhRK4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 10:43:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
19:6f:f9:c6:ae:e7:f3:b3:06:41:ba:b5:3a:12:4d:4f:a1:a7:a5:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D34606949D385DB42714FE71274FAC9948EF279C
Validity
Not Before: Sep 4 13:27:41 2026 GMT
Not After : Sep 3 13:32:41 2027 GMT
Subject: CN=44D4B3CF069C32FBFEC4DA1587141F28B2634275
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:27:b2:6b:da:8e:71:e2:97:f0:9f:f6:e5:3b:
8f:3c:90:c9:eb:12:a3:83:f2:75:b1:c1:7a:1a:be:
e2:2a:d3:ba:d9:d1:de:61:dd:52:44:60:6a:19:ab:
5f:c0:1a:8a:d6:a7:f3:d3:5f:64:04:ff:ad:39:70:
18:6a:0c:84:e7:b6:89:ac:43:c6:c5:25:34:8e:6f:
11:42:9e:f5:89:8f:55:8a:24:96:b0:bd:00:03:fe:
4c:3c:02:98:c3:88:0e:17:ff:0d:f6:15:77:13:4a:
73:d9:45:f4:74:c9:da:ac:cb:dd:f6:dd:34:66:22:
13:de:5d:8c:f9:81:23:44:08:69:86:ac:72:ca:d7:
81:8e:e1:93:2d:c7:00:eb:ea:f7:63:ae:1e:c6:78:
71:61:ba:71:89:ef:f7:30:a3:47:fe:72:f6:b5:05:
56:76:7a:a3:0c:8c:15:21:ee:fe:65:11:bf:39:b2:
c4:ce:b7:64:df:5a:33:45:7b:c7:3b:a9:8f:8b:5e:
80:26:0c:8e:b8:61:98:22:38:d9:0e:71:76:88:47:
e1:5e:d9:88:74:9a:fd:57:c3:fd:ab:ec:4a:b4:19:
f2:49:8b:79:75:e9:0c:6e:78:4d:66:dd:29:d1:ab:
4f:90:5f:68:f3:6c:e6:99:07:fb:9b:36:da:bb:f4:
60:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:D4:B3:CF:06:9C:32:FB:FE:C4:DA:15:87:14:1F:28:B2:63:42:75
X509v3 Authority Key Identifier:
keyid:D3:46:06:94:9D:38:5D:B4:27:14:FE:71:27:4F:AC:99:48:EF:27:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/D34606949D385DB42714FE71274FAC9948EF279C.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/D34606949D385DB42714FE71274FAC9948EF279C.cer
Subject Information Access:
Signed Object - URI:rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/AS834.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.46.236.0/22
86.38.180.0/23
86.38.183.0-86.38.184.255
86.38.246.0/24
86.38.255.0/24
89.116.8.0/23
89.116.64.0/22
89.116.69.0/24
89.116.72.0/23
89.116.127.0/24
89.116.164.0/24
89.116.185.0/24
89.116.210.0/23
89.117.0.0/22
89.117.12.0/23
89.117.28.0/24
89.117.81.0/24
89.117.94.0-89.117.99.255
89.117.112.0/22
89.117.120.0/22
89.117.132.0/23
89.117.142.0/23
89.117.153.0/24
89.117.158.0/23
89.117.172.0/22
89.117.216.0/23
Signature Algorithm: sha256WithRSAEncryption
57:7f:86:ad:33:66:4e:1c:b1:55:ef:39:fb:bc:32:3b:c8:8f:
f8:77:f6:19:33:31:71:14:e7:a5:cc:d8:a0:82:fd:e5:d1:ff:
e7:d0:8e:c9:17:d8:d4:44:38:c9:00:4c:0f:f0:d7:d8:de:0c:
33:69:90:6e:5b:3a:34:48:cb:7b:55:ed:02:38:2a:81:23:a9:
55:0d:8f:1c:96:2f:d5:d1:c3:32:36:6f:96:ce:9c:bb:73:7f:
0f:5b:90:39:9c:bf:97:93:79:9d:f2:84:93:23:84:ef:53:b0:
d6:03:2b:b9:74:ea:6b:a3:4a:0d:ce:39:8b:d9:23:23:d5:0f:
e5:8a:d8:1c:66:a9:b7:5b:db:71:1f:3d:d3:65:6a:d4:e3:8c:
42:71:6e:97:53:c4:70:f8:c6:17:fc:82:03:b3:45:b0:9e:34:
c6:6a:a9:62:ff:12:79:92:8f:22:05:04:16:3e:0f:0f:0c:19:
93:89:5e:ac:a9:32:02:58:10:4c:8c:92:17:24:a4:84:d1:71:
1f:8e:3f:97:c8:a5:de:57:fe:d0:42:92:e8:2b:8a:96:b5:93:
04:a1:26:2a:3c:e6:32:a9:59:44:8a:49:00:22:b0:d1:1b:77:
6f:af:db:22:1f:41:6b:be:f1:89:05:ef:ba:ae:d9:48:f6:23:
27:00:e1:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 4 20:35:27 2026 by rpki-client