
$ rpki-client -vvf r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/3136342e33372e3139362e302f32332d3234203d3e2032343937.roa
File: 3136342e33372e3139362e302f32332d3234203d3e2032343937.roa (raw, json)
Hash identifier: y+CveEWGb8ntXCTgCZcZtj1afthlLqEvP9qI/4QmR60=
Subject key identifier: 80:02:81:18:D7:69:D2:39:AB:13:A7:A5:AA:6B:95:32:DF:8B:6A:F4
Certificate issuer: /CN=B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5
Certificate serial: 4C8ACB22836A640BB10EF50D1F6B2FA6C5A6FEEF
Authority key identifier: B3:54:D3:28:CB:BF:D1:EF:3C:D2:92:68:A2:3B:0F:CC:60:E3:A2:C5
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.cer
Subject info access: rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/3136342e33372e3139362e302f32332d3234203d3e2032343937.roa
Signing time: Mon 10 Aug 2026 04:49:48 +0000
ROA not before: Mon 10 Aug 2026 04:44:48 +0000
ROA not after: Mon 09 Aug 2027 04:49:48 +0000
asID: 2497
IP address blocks: 164.37.196.0/23 maxlen: 24
Validation: OK
Signature path: rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.crl
rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.mft
rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.cer
rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/D0A516B50426202A424F0EBFCB7D2BD4F744F964.crl
rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/D0A516B50426202A424F0EBFCB7D2BD4F744F964.mft
rsync://rpki.ripe.net/repository/DEFAULT/0KUWtQQmICpCTw6_y30r1PdE-WQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 21 Aug 2026 09:49:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4c:8a:cb:22:83:6a:64:0b:b1:0e:f5:0d:1f:6b:2f:a6:c5:a6:fe:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5
Validity
Not Before: Aug 10 04:44:48 2026 GMT
Not After : Aug 9 04:49:48 2027 GMT
Subject: CN=80028118D769D239AB13A7A5AA6B9532DF8B6AF4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:86:e9:a7:0e:66:ce:a8:b0:87:d5:22:44:4c:
4c:6a:18:41:d4:34:da:3d:64:10:d7:4a:63:62:51:
7c:b8:c6:cf:f1:70:16:03:cc:7f:78:35:72:de:2b:
b0:97:c4:09:62:11:d6:9f:09:c5:2c:04:73:83:74:
bf:e4:58:d9:26:e2:93:42:4a:ae:72:09:79:ad:1c:
f0:1f:ba:aa:a8:c4:0f:12:c2:74:f8:87:cf:af:0f:
ab:e3:61:e6:64:65:3c:06:f9:e5:a6:e8:e4:74:c5:
a8:1e:c8:34:1a:fc:00:23:0e:2e:4b:23:35:bf:ac:
a3:e3:1c:1c:4b:82:76:fc:ba:3c:53:4a:91:11:2f:
ab:09:e5:8e:4b:0e:e5:c6:21:ba:29:9a:a3:9e:a7:
43:a0:40:5d:e2:b4:a6:e9:e3:b9:a0:9f:d7:d5:24:
39:c7:b8:fa:92:eb:df:1d:72:ef:a0:4d:8a:16:53:
bc:18:f4:76:a1:6a:86:44:57:3a:6e:58:6f:cf:8f:
f4:4b:84:96:69:8a:99:c9:8b:e0:cf:53:74:82:1e:
21:f9:ab:06:db:aa:f6:5b:ff:41:ba:34:c8:3c:91:
d6:cb:64:fc:80:bf:c2:52:ef:bb:bd:ac:ee:3f:33:
23:ca:96:e8:21:5c:82:e6:a5:85:fc:51:02:4d:94:
1d:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:02:81:18:D7:69:D2:39:AB:13:A7:A5:AA:6B:95:32:DF:8B:6A:F4
X509v3 Authority Key Identifier:
keyid:B3:54:D3:28:CB:BF:D1:EF:3C:D2:92:68:A2:3B:0F:CC:60:E3:A2:C5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.cer
Subject Information Access:
Signed Object - URI:rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/3136342e33372e3139362e302f32332d3234203d3e2032343937.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
164.37.196.0/23
Signature Algorithm: sha256WithRSAEncryption
6c:c2:66:d4:87:3d:81:f3:21:0b:c9:db:4f:9b:5b:b7:64:0c:
90:3e:c2:3b:b8:3d:e3:bd:7e:80:3c:88:e7:4c:41:00:29:d0:
6d:b9:9e:53:09:7d:90:d7:0d:f4:ef:4c:9d:aa:e0:ce:4f:68:
b3:7a:7e:4d:bc:e7:f7:28:0a:03:e2:ff:b6:56:80:7c:33:17:
79:3c:44:39:e4:0e:c9:dc:04:ed:2d:35:28:06:32:5a:20:d0:
97:d2:5c:3f:6e:69:f7:0d:fd:74:03:f9:ff:84:74:00:bb:53:
f6:05:81:07:e5:14:db:17:99:7a:66:ba:78:ae:54:c5:42:87:
11:15:fa:50:b1:74:b7:48:1f:a3:22:79:01:b8:6c:3b:19:23:
cc:1f:33:52:42:15:8b:77:c1:6b:8f:a9:8f:33:c3:1b:5e:53:
00:eb:04:11:5b:e6:2e:c7:dc:72:00:e5:37:da:c6:a5:4e:86:
82:22:e2:46:8a:51:3b:2b:15:2d:28:83:79:8f:91:8a:e8:c6:
c7:3c:26:eb:4c:3e:6f:10:ee:cf:1d:66:2c:34:c5:a4:ea:0c:
54:d5:d7:c2:ee:4d:a9:91:aa:8e:5c:ae:5e:a0:2f:33:bc:c1:
03:ca:3b:5f:f2:8f:41:7d:cb:ff:e7:79:d8:11:86:30:c4:5d:
69:2c:00:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 21 02:23:57 2026 by rpki-client