
$ rpki-client -vvvf r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/3136342e33372e3230312e302f32342d3234203d3e2039303039.roa
File: 3136342e33372e3230312e302f32342d3234203d3e2039303039.roa (raw, json)
Hash identifier: iu7IMjuahulJP4shazO8YF9XaGK1aC6wS8Ak+ZL5dJs=
Subject key identifier: 82:5A:22:E2:AF:3D:E1:1F:CB:36:C7:F7:DA:AB:AA:D7:F3:15:D3:AC
Certificate issuer: /CN=B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5
Certificate serial: 1BBF21A4A5F193308114195710621EE1FBE780D4
Authority key identifier: B3:54:D3:28:CB:BF:D1:EF:3C:D2:92:68:A2:3B:0F:CC:60:E3:A2:C5
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.cer
Subject info access: rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/3136342e33372e3230312e302f32342d3234203d3e2039303039.roa
Signing time: Thu 13 Aug 2026 05:39:35 +0000
ROA not before: Thu 13 Aug 2026 05:34:35 +0000
ROA not after: Thu 12 Aug 2027 05:39:35 +0000
asID: 9009
IP address blocks: 164.37.201.0/24 maxlen: 24
Validation: OK
Signature path: rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.crl
rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.mft
rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.cer
rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/D0A516B50426202A424F0EBFCB7D2BD4F744F964.crl
rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/D0A516B50426202A424F0EBFCB7D2BD4F744F964.mft
rsync://rpki.ripe.net/repository/DEFAULT/0KUWtQQmICpCTw6_y30r1PdE-WQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 01 Sep 2026 21:38:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1b:bf:21:a4:a5:f1:93:30:81:14:19:57:10:62:1e:e1:fb:e7:80:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5
Validity
Not Before: Aug 13 05:34:35 2026 GMT
Not After : Aug 12 05:39:35 2027 GMT
Subject: CN=825A22E2AF3DE11FCB36C7F7DAABAAD7F315D3AC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:61:7f:54:99:46:1c:e3:a0:f4:8d:22:9f:1c:
ee:ea:f0:b8:a4:3e:e4:d8:ed:56:75:e7:6f:88:cc:
c7:14:3a:23:d0:ba:cf:fc:1a:36:c5:b4:0e:7e:82:
f3:ab:9f:03:7e:28:dc:5c:f7:2d:b5:0b:8c:da:1b:
20:aa:07:29:c3:3c:5d:93:48:87:64:0f:f0:ab:b1:
52:e7:dc:79:33:eb:ce:2e:52:9f:63:86:e6:8a:d1:
4a:f3:7c:2a:a4:45:55:f6:0e:0c:2b:09:61:95:b1:
f0:5f:d2:f1:c3:a5:94:af:62:68:e1:d0:7d:84:12:
e6:f6:d8:5e:a6:63:79:e8:8a:75:d6:0d:50:e7:c5:
7a:84:1b:7a:16:13:f4:45:e2:f7:0a:97:35:b1:bc:
a5:da:6d:33:3b:db:69:bc:d6:ee:f6:34:80:b8:68:
0b:17:36:56:5c:86:7c:0c:79:18:3d:b6:f6:34:b5:
98:8b:41:39:2f:da:24:13:39:c2:1a:30:c1:a7:29:
50:b5:c6:23:e9:ae:ac:0e:62:c1:99:68:70:10:4b:
70:fe:b1:4f:8e:7b:46:27:a7:e6:c3:0a:7f:40:21:
7a:91:33:c7:a0:73:72:91:11:ae:a2:5e:2b:66:c3:
ef:89:81:8e:2a:16:f2:00:71:58:03:84:36:e4:f7:
7a:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:5A:22:E2:AF:3D:E1:1F:CB:36:C7:F7:DA:AB:AA:D7:F3:15:D3:AC
X509v3 Authority Key Identifier:
keyid:B3:54:D3:28:CB:BF:D1:EF:3C:D2:92:68:A2:3B:0F:CC:60:E3:A2:C5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.cer
Subject Information Access:
Signed Object - URI:rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/3136342e33372e3230312e302f32342d3234203d3e2039303039.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
164.37.201.0/24
Signature Algorithm: sha256WithRSAEncryption
6c:14:c2:df:6f:a5:5e:db:ee:b2:36:87:aa:8d:44:92:bb:13:
47:2b:d9:91:da:58:cc:38:e7:2c:4d:27:9b:3f:9f:8f:92:ff:
e5:9b:94:4f:04:b0:12:e6:1d:6c:f8:2b:f1:51:c9:f5:b0:96:
3c:ef:77:3e:d3:35:72:ea:c8:c1:94:ff:2f:b3:ac:fd:50:9d:
fc:f0:0f:6a:3d:b5:11:1b:d7:7e:87:f4:56:d0:d3:c0:ed:ed:
b0:1f:30:da:5a:2d:88:f4:71:ef:bb:b7:7e:97:da:0c:41:bf:
58:e0:50:b2:38:66:6a:c0:22:8e:e6:ca:97:16:a3:27:2d:57:
6f:2e:e6:13:b0:a3:3e:e2:f4:dc:06:d2:85:8e:40:d5:60:b4:
c7:6d:f3:f6:4b:77:8d:1e:99:c2:40:cb:48:09:c8:f2:d3:ca:
b9:84:2c:fd:95:03:18:d3:f9:36:79:51:b1:4e:b4:22:c9:23:
4a:24:7c:de:86:98:d7:c1:fe:73:fd:16:6b:31:00:9a:26:92:
9f:3f:ac:2c:bd:cd:89:54:68:a7:f6:ba:4c:4f:a9:ec:4d:e6:
0b:d1:de:aa:c2:0d:0f:4a:3c:98:c9:4c:46:38:1c:6b:77:18:
29:b7:ad:ee:d5:a5:35:6a:45:63:49:69:7b:29:77:a2:19:d4:
59:db:6f:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 1 02:09:02 2026 by rpki-client