
$ rpki-client -vvf r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/3136342e33372e3230312e302f32342d3234203d3e20313334323839.roa
File: 3136342e33372e3230312e302f32342d3234203d3e20313334323839.roa (raw, json)
Hash identifier: vp9+gWRVu/rC0Dq2jZpNSJXxP4FCW7K+9Dv423XUQE4=
Subject key identifier: 35:18:80:8A:D9:09:B7:EC:6D:65:56:1D:61:0A:8E:47:12:C7:7F:DA
Certificate issuer: /CN=B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5
Certificate serial: 58558D66767C41888FE801B718F88ACA256421EE
Authority key identifier: B3:54:D3:28:CB:BF:D1:EF:3C:D2:92:68:A2:3B:0F:CC:60:E3:A2:C5
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.cer
Subject info access: rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/3136342e33372e3230312e302f32342d3234203d3e20313334323839.roa
Signing time: Mon 22 Jun 2026 18:57:45 +0000
ROA not before: Mon 22 Jun 2026 18:52:45 +0000
ROA not after: Mon 21 Jun 2027 18:57:45 +0000
asID: 134289
IP address blocks: 164.37.201.0/24 maxlen: 24
Validation: OK
Signature path: rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.crl
rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.mft
rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.cer
rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/D0A516B50426202A424F0EBFCB7D2BD4F744F964.crl
rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/D0A516B50426202A424F0EBFCB7D2BD4F744F964.mft
rsync://rpki.ripe.net/repository/DEFAULT/0KUWtQQmICpCTw6_y30r1PdE-WQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 23 Jun 2026 17:26:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
58:55:8d:66:76:7c:41:88:8f:e8:01:b7:18:f8:8a:ca:25:64:21:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5
Validity
Not Before: Jun 22 18:52:45 2026 GMT
Not After : Jun 21 18:57:45 2027 GMT
Subject: CN=3518808AD909B7EC6D65561D610A8E4712C77FDA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:30:42:06:a3:9e:5b:9e:3f:76:a6:d4:75:b0:
6a:5a:e2:0a:2e:3c:2b:7a:0e:3d:ed:b9:c2:72:29:
4c:88:06:30:84:3d:2e:9a:c1:94:8a:13:fd:21:c7:
20:2c:63:1f:07:fc:d7:01:44:7c:b7:47:f9:22:84:
48:09:70:84:de:9f:24:81:47:95:c6:ac:2c:a4:7d:
c7:83:eb:8f:de:62:47:e6:07:6c:b4:8a:45:59:52:
34:60:7f:52:ea:d2:d2:37:e0:e6:c3:24:07:1b:a1:
0c:06:48:3d:5c:55:6c:9f:00:0d:1f:8f:d6:60:33:
28:c2:ba:ef:4c:3a:c3:45:86:69:be:b6:4c:58:43:
2e:12:b9:40:21:33:0c:e3:bd:48:9e:58:2f:89:55:
88:38:f9:69:7f:05:ec:63:62:11:5e:3c:b8:97:1c:
91:bb:c1:f3:df:c4:36:b2:f2:e1:20:cf:21:2c:cf:
07:ec:2b:eb:99:13:ab:35:07:6e:31:f5:64:3e:36:
7e:b1:5e:fd:fb:75:4b:6a:65:5e:6d:d3:fb:2a:6b:
81:c5:a2:6e:04:07:06:13:f9:c2:e7:a6:7a:8b:1f:
29:da:6c:9e:82:02:7a:ea:e0:b5:02:b3:6b:78:c9:
d7:37:e3:c5:49:18:d9:42:21:c4:94:24:90:ed:3e:
34:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:18:80:8A:D9:09:B7:EC:6D:65:56:1D:61:0A:8E:47:12:C7:7F:DA
X509v3 Authority Key Identifier:
keyid:B3:54:D3:28:CB:BF:D1:EF:3C:D2:92:68:A2:3B:0F:CC:60:E3:A2:C5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.cer
Subject Information Access:
Signed Object - URI:rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/3136342e33372e3230312e302f32342d3234203d3e20313334323839.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
164.37.201.0/24
Signature Algorithm: sha256WithRSAEncryption
6c:81:6e:11:25:1d:cb:d1:31:46:d0:3d:df:dc:1c:d0:15:c7:
9d:57:24:d9:2b:e7:e3:e1:e1:55:e6:b3:fd:6e:65:38:c3:d4:
ff:29:63:1a:4f:ba:23:e5:52:3a:0c:38:bd:b8:ba:c7:aa:35:
f5:0c:22:66:ea:6d:67:82:e9:07:36:61:93:94:5d:64:01:23:
87:26:f9:69:48:76:ac:ba:42:b4:ff:08:29:cf:ad:fa:ed:11:
61:ed:bd:11:7e:62:3d:b0:b0:36:50:ec:d3:ec:d5:55:a6:13:
69:10:25:c2:0f:ab:55:5d:ed:b7:c8:e1:b0:38:52:68:ea:db:
9d:0a:7c:3c:99:dc:a5:ec:b8:c1:43:0b:ca:a2:bd:c4:50:49:
54:52:71:fc:4e:e6:69:3b:99:f4:86:9d:c4:3c:f4:97:a9:dd:
98:93:04:b3:4e:ea:1c:cf:09:9d:f7:45:5e:f5:c2:64:f8:be:
32:7a:b7:64:22:49:ca:46:c6:55:f4:8a:48:46:d6:49:79:a8:
93:b8:c8:2b:88:79:2b:eb:0c:51:05:2f:a8:b7:b0:97:76:8a:
57:63:80:73:34:18:60:18:75:c3:2f:71:99:19:f6:b3:17:a2:
cd:8c:91:ac:12:84:75:75:63:8b:8d:9c:bb:d4:d8:e5:4c:b9:
59:ab:8c:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 23 06:39:35 2026 by rpki-client