Route Origin Authorization
$ rpki-client -vvf r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/AS834.roa
File: AS834.roa (raw, json)
Hash identifier: sA8hIiwj11Hergw9LmcRWhJDjdJICD6SrkoKracptTg=
Subject key identifier: BB:91:C7:44:E0:92:8A:31:57:A0:CE:F0:2D:CD:75:EF:8A:70:91:5E
Certificate issuer: /CN=D34606949D385DB42714FE71274FAC9948EF279C
Certificate serial: 4044238F6B46F594327B2E08392ED268ADC409F4
Authority key identifier: D3:46:06:94:9D:38:5D:B4:27:14:FE:71:27:4F:AC:99:48:EF:27:9C
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/D34606949D385DB42714FE71274FAC9948EF279C.cer
Subject info access: rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/AS834.roa
Signing time: Wed 08 Jul 2026 01:54:15 +0000
ROA not before: Wed 08 Jul 2026 01:49:15 +0000
ROA not after: Wed 07 Jul 2027 01:54:15 +0000
asID: 834
IP address blocks: 84.46.236.0/22 maxlen: 24
86.38.180.0/23 maxlen: 24
86.38.183.0/24 maxlen: 24
86.38.246.0/24 maxlen: 24
86.38.251.0/24 maxlen: 24
86.38.255.0/24 maxlen: 24
89.116.10.0/23 maxlen: 24
89.116.45.0/24 maxlen: 24
89.116.64.0/22 maxlen: 24
89.116.72.0/23 maxlen: 24
89.116.127.0/24 maxlen: 24
89.116.165.0/24 maxlen: 24
89.116.172.0/24 maxlen: 24
89.116.184.0/23 maxlen: 24
89.116.210.0/23 maxlen: 23
89.117.0.0/22 maxlen: 24
89.117.12.0/23 maxlen: 24
89.117.65.0/24 maxlen: 24
89.117.81.0/24 maxlen: 24
89.117.94.0/23 maxlen: 24
89.117.96.0/22 maxlen: 24
89.117.112.0/22 maxlen: 22
89.117.120.0/22 maxlen: 24
89.117.132.0/23 maxlen: 24
89.117.142.0/23 maxlen: 24
89.117.158.0/23 maxlen: 24
89.117.172.0/22 maxlen: 24
89.117.216.0/23 maxlen: 23
Validation: OK
Signature path: rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/D34606949D385DB42714FE71274FAC9948EF279C.crl
rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/D34606949D385DB42714FE71274FAC9948EF279C.mft
rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/D34606949D385DB42714FE71274FAC9948EF279C.cer
rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/9DF85997B1B9B358E1C43F36765AA0A4A02144AE.crl
rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/9DF85997B1B9B358E1C43F36765AA0A4A02144AE.mft
rsync://rpki.ripe.net/repository/DEFAULT/nfhZl7G5s1jhxD82dlqgpKAhRK4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 06:12:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
40:44:23:8f:6b:46:f5:94:32:7b:2e:08:39:2e:d2:68:ad:c4:09:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D34606949D385DB42714FE71274FAC9948EF279C
Validity
Not Before: Jul 8 01:49:15 2026 GMT
Not After : Jul 7 01:54:15 2027 GMT
Subject: CN=BB91C744E0928A3157A0CEF02DCD75EF8A70915E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:00:e0:d5:b5:44:4a:1b:4b:57:a9:fc:f4:b2:
95:ae:f6:60:3d:48:3b:47:84:32:04:68:05:1f:71:
4f:b8:b8:94:09:db:05:d3:86:4b:74:3a:f3:0a:7b:
ee:62:98:a7:fc:c0:19:41:ad:04:28:f5:3c:10:94:
2c:a7:b8:c4:6e:4b:0b:59:f6:6d:66:3f:ec:94:ec:
21:6c:55:a9:c5:e7:24:d1:45:7d:81:b6:90:44:c4:
b9:98:46:41:16:13:93:23:65:23:06:a8:e7:e0:d7:
ab:b8:95:79:a1:2f:6e:63:13:be:af:3f:02:12:7a:
5d:84:9c:27:67:93:31:ff:7d:5b:ae:ee:3c:d1:42:
29:e6:79:4b:cc:20:a2:3e:26:88:1f:d2:a5:c2:57:
5f:f8:a2:f9:da:c5:4b:39:12:74:16:5d:c0:46:22:
54:f8:17:fc:d1:af:4e:db:3b:16:e7:8a:97:ac:68:
35:dd:47:5e:e8:7a:bf:f9:e1:7a:46:90:07:f3:20:
f7:47:ee:1a:ba:2d:ac:00:1a:eb:7a:fa:6d:da:5b:
f9:a1:f7:43:ef:63:9e:f7:61:8d:eb:f9:2a:43:8b:
ef:4f:e7:d1:8e:ef:11:f2:b6:80:c3:0b:10:db:09:
d5:8f:16:fb:5b:bb:25:d2:21:e0:b6:c7:a9:53:94:
e2:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:91:C7:44:E0:92:8A:31:57:A0:CE:F0:2D:CD:75:EF:8A:70:91:5E
X509v3 Authority Key Identifier:
keyid:D3:46:06:94:9D:38:5D:B4:27:14:FE:71:27:4F:AC:99:48:EF:27:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/D34606949D385DB42714FE71274FAC9948EF279C.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/D34606949D385DB42714FE71274FAC9948EF279C.cer
Subject Information Access:
Signed Object - URI:rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/AS834.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.46.236.0/22
86.38.180.0/23
86.38.183.0/24
86.38.246.0/24
86.38.251.0/24
86.38.255.0/24
89.116.10.0/23
89.116.45.0/24
89.116.64.0/22
89.116.72.0/23
89.116.127.0/24
89.116.165.0/24
89.116.172.0/24
89.116.184.0/23
89.116.210.0/23
89.117.0.0/22
89.117.12.0/23
89.117.65.0/24
89.117.81.0/24
89.117.94.0-89.117.99.255
89.117.112.0/22
89.117.120.0/22
89.117.132.0/23
89.117.142.0/23
89.117.158.0/23
89.117.172.0/22
89.117.216.0/23
Signature Algorithm: sha256WithRSAEncryption
09:7a:e2:fc:d5:e1:1f:9f:0c:56:f2:61:59:23:40:4e:ba:00:
0b:8c:84:f4:14:d1:62:19:d5:10:7a:9e:1e:8e:61:8b:6a:e9:
b0:a8:ec:41:e1:81:1e:67:94:72:aa:b3:ef:f4:7f:9a:46:90:
71:36:0d:7c:df:26:85:0f:de:e9:ec:98:c3:bb:b5:04:8c:ef:
98:3b:26:a4:5f:41:ce:9e:30:6d:2d:1c:98:5c:89:c8:1a:d6:
b0:97:fa:42:01:52:37:61:d7:e8:0b:7c:5e:b3:59:b5:7f:03:
44:09:30:9e:09:f1:4b:90:36:13:06:ee:cb:99:e9:45:a6:d3:
da:7c:83:ca:0d:ca:28:b3:53:1c:41:0a:33:cd:c3:52:98:b1:
5d:f8:03:af:7d:d2:58:eb:5b:7b:6b:dc:2f:a6:70:a5:92:b8:
c2:1f:df:78:f6:bd:fe:ae:d3:20:a8:24:19:be:65:09:2e:10:
82:01:cb:32:6b:8a:ee:5e:1e:37:98:ef:38:0e:00:a2:71:93:
06:d6:a5:ef:54:95:59:9a:c8:eb:16:8c:59:0b:af:41:a9:31:
13:97:2c:96:15:00:50:da:81:94:ef:55:69:8d:93:35:2f:ea:
32:4b:35:27:e4:b4:c7:1e:65:b1:10:29:47:eb:cb:72:41:0c:
89:13:f4:13
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Tue Jul 21 11:09:29 2026 by rpki-client