
$ rpki-client -vvf r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/3136342e33372e3139332e302f32342d3234203d3e20343032323231.roa
File: 3136342e33372e3139332e302f32342d3234203d3e20343032323231.roa (raw, json)
Hash identifier: p3wFZM4krkkICIbcmd/oC0Tr5QJ1myyLyJdDdIBwz9w=
Subject key identifier: 53:36:FB:3C:31:94:5D:41:A6:BA:48:15:FC:7B:60:F6:F9:FF:9C:3C
Certificate issuer: /CN=B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5
Certificate serial: 45621FE4E69687568E8C34735C96603DDC2192C9
Authority key identifier: B3:54:D3:28:CB:BF:D1:EF:3C:D2:92:68:A2:3B:0F:CC:60:E3:A2:C5
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.cer
Subject info access: rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/3136342e33372e3139332e302f32342d3234203d3e20343032323231.roa
Signing time: Mon 22 Jun 2026 03:12:31 +0000
ROA not before: Mon 22 Jun 2026 03:07:31 +0000
ROA not after: Mon 21 Jun 2027 03:12:31 +0000
asID: 402221
IP address blocks: 164.37.193.0/24 maxlen: 24
Validation: OK
Signature path: rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.crl
rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.mft
rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.cer
rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/D0A516B50426202A424F0EBFCB7D2BD4F744F964.crl
rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/D0A516B50426202A424F0EBFCB7D2BD4F744F964.mft
rsync://rpki.ripe.net/repository/DEFAULT/0KUWtQQmICpCTw6_y30r1PdE-WQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 07 Jul 2026 09:45:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
45:62:1f:e4:e6:96:87:56:8e:8c:34:73:5c:96:60:3d:dc:21:92:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5
Validity
Not Before: Jun 22 03:07:31 2026 GMT
Not After : Jun 21 03:12:31 2027 GMT
Subject: CN=5336FB3C31945D41A6BA4815FC7B60F6F9FF9C3C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:3c:86:06:6b:e2:05:09:b8:86:c7:39:90:a9:
57:93:80:64:61:60:df:aa:1a:0d:94:f4:78:0d:ee:
31:65:05:a9:57:05:e4:c5:59:03:14:fc:fe:69:6a:
48:40:98:2e:7e:bf:75:7a:b9:48:2b:a1:dd:03:86:
54:a8:b3:76:d4:e2:a0:3d:8e:61:42:66:13:9a:1a:
5a:a0:29:5c:26:12:02:20:fa:0b:8a:66:2a:aa:44:
d6:be:c7:06:49:7b:59:e7:05:74:46:36:75:d6:08:
88:5d:19:cf:2a:12:64:61:9a:e3:1d:bb:24:f4:90:
f2:69:89:37:89:5f:ae:1e:15:66:62:c1:38:d2:8f:
7d:84:f8:44:51:5a:01:7b:ca:a1:5f:49:84:92:a8:
5a:32:6c:13:2f:92:2f:f5:24:f7:97:10:08:ae:ab:
79:f4:b2:c5:d9:54:8e:0b:53:59:2b:0f:c8:e5:7a:
52:69:3f:70:09:a5:df:4e:6a:64:a6:0f:f2:3c:b7:
e8:34:fd:7c:44:d3:28:aa:21:d0:44:01:ce:4f:fa:
45:8f:0a:5a:22:7c:e7:83:37:72:67:cc:f3:7a:d6:
4b:eb:06:05:81:5d:e5:b5:9a:7a:2c:b8:2e:d3:5c:
eb:00:2e:44:67:61:b3:5f:d5:a2:c1:de:b8:7b:3e:
d4:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:36:FB:3C:31:94:5D:41:A6:BA:48:15:FC:7B:60:F6:F9:FF:9C:3C
X509v3 Authority Key Identifier:
keyid:B3:54:D3:28:CB:BF:D1:EF:3C:D2:92:68:A2:3B:0F:CC:60:E3:A2:C5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.cer
Subject Information Access:
Signed Object - URI:rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/3136342e33372e3139332e302f32342d3234203d3e20343032323231.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
164.37.193.0/24
Signature Algorithm: sha256WithRSAEncryption
23:24:d1:49:32:a9:57:9a:d9:9d:52:cc:9c:61:1a:56:a5:66:
c5:65:52:d4:5d:21:7d:31:8b:ac:e2:55:ce:69:39:dc:30:ab:
86:c3:60:81:77:76:6b:c6:cd:a8:9f:eb:d9:cd:d8:18:cc:85:
73:7e:a3:95:45:16:6d:8c:03:2d:e8:84:89:ae:48:d3:cc:73:
33:83:99:2a:69:ef:ce:a3:19:70:bb:ae:e7:96:86:ae:77:14:
78:76:12:3f:43:8b:25:3a:f7:c5:5d:84:b9:9d:b1:5f:85:c6:
0e:cc:89:79:38:00:a4:1c:65:f7:86:86:1f:31:9b:13:ae:1e:
e4:e4:7c:2a:0d:e0:20:44:01:d7:31:36:0f:b4:1d:78:ac:eb:
39:ce:8b:d0:6b:30:d8:af:27:b9:c2:e0:21:96:33:b5:8e:45:
4e:81:3e:72:35:b3:5e:41:95:3b:b0:f7:3b:bb:1b:63:66:fd:
12:45:e9:8d:e0:e7:a9:90:7a:41:55:30:6e:30:67:16:d1:a5:
2c:e1:6e:a7:19:bb:d6:4b:74:41:e1:43:82:fc:4b:5a:53:47:
44:b1:3b:ff:96:d6:f2:54:ba:8c:b0:8d:30:3a:92:10:64:26:
bd:dc:ae:3c:43:70:b4:8e:88:c6:13:91:ed:a7:74:fe:4a:69:
cf:43:d8:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 6 22:11:48 2026 by rpki-client