
$ rpki-client -vvf r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/3136342e33372e3230382e302f32342d3234203d3e20343032323231.roa
File: 3136342e33372e3230382e302f32342d3234203d3e20343032323231.roa (raw, json)
Hash identifier: A5Erk8aoxrceyL2HYONUsfIG16hOMF4cSuhdrHIshaM=
Subject key identifier: 9A:A8:8A:9B:ED:68:42:67:9A:B8:1A:16:3B:76:DD:A3:94:BC:F5:19
Certificate issuer: /CN=B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5
Certificate serial: 76A4E2B392EF20157EE23F464C8DD75D9AE5EB74
Authority key identifier: B3:54:D3:28:CB:BF:D1:EF:3C:D2:92:68:A2:3B:0F:CC:60:E3:A2:C5
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.cer
Subject info access: rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/3136342e33372e3230382e302f32342d3234203d3e20343032323231.roa
Signing time: Sat 27 Jun 2026 14:52:51 +0000
ROA not before: Sat 27 Jun 2026 14:47:51 +0000
ROA not after: Sat 26 Jun 2027 14:52:51 +0000
asID: 402221
IP address blocks: 164.37.208.0/24 maxlen: 24
Validation: OK
Signature path: rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.crl
rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.mft
rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.cer
rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/D0A516B50426202A424F0EBFCB7D2BD4F744F964.crl
rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/D0A516B50426202A424F0EBFCB7D2BD4F744F964.mft
rsync://rpki.ripe.net/repository/DEFAULT/0KUWtQQmICpCTw6_y30r1PdE-WQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 07 Jul 2026 09:45:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
76:a4:e2:b3:92:ef:20:15:7e:e2:3f:46:4c:8d:d7:5d:9a:e5:eb:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5
Validity
Not Before: Jun 27 14:47:51 2026 GMT
Not After : Jun 26 14:52:51 2027 GMT
Subject: CN=9AA88A9BED6842679AB81A163B76DDA394BCF519
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:c7:89:34:81:c5:00:78:41:bc:3c:bd:09:b4:
a4:16:9d:b2:fa:5d:8f:de:65:0f:88:82:7e:11:2f:
1c:62:26:d0:cd:4b:3c:6b:ff:2d:ef:00:a7:b9:80:
97:28:37:cd:e9:d2:26:f1:1d:8f:eb:c6:7e:b2:89:
82:ae:e2:d5:31:ca:56:a0:4b:aa:49:bc:77:3f:ad:
4a:ae:cb:0f:48:28:e0:d5:66:d2:b7:ce:b0:79:ba:
d8:ea:ba:88:76:ae:3e:4a:e3:be:7a:40:67:f9:dd:
ea:73:72:cf:16:5e:a1:07:7b:9f:57:24:9b:6b:cd:
86:df:5b:88:63:bb:cb:8f:52:40:4f:6b:45:83:3b:
39:ab:f7:88:21:2c:05:af:b6:73:ee:0c:d1:0b:e3:
fa:b2:d5:c5:ce:e1:98:84:11:58:29:df:0c:bc:e6:
5e:f5:cf:7a:62:3a:58:4f:92:45:de:9a:07:c7:a2:
ac:0e:93:a2:b3:71:37:9f:56:06:8c:06:34:55:a0:
0e:38:b6:6d:a5:22:7e:b0:bc:89:ab:02:21:16:50:
a4:5a:27:a1:cc:73:e3:80:f2:54:37:8d:76:50:3d:
16:21:66:82:e9:16:31:2e:08:3b:fa:89:02:42:a3:
53:9f:ec:8e:93:ce:5a:f8:a7:66:bc:75:0e:96:35:
16:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:A8:8A:9B:ED:68:42:67:9A:B8:1A:16:3B:76:DD:A3:94:BC:F5:19
X509v3 Authority Key Identifier:
keyid:B3:54:D3:28:CB:BF:D1:EF:3C:D2:92:68:A2:3B:0F:CC:60:E3:A2:C5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.cer
Subject Information Access:
Signed Object - URI:rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/3136342e33372e3230382e302f32342d3234203d3e20343032323231.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
164.37.208.0/24
Signature Algorithm: sha256WithRSAEncryption
3c:73:ee:d3:51:95:56:21:5b:b3:99:69:4d:20:6a:d1:c8:15:
0e:01:b8:b6:35:2b:a8:3e:d2:5d:ea:ec:de:a6:99:2f:c5:2b:
45:54:04:67:64:64:ff:35:58:52:cf:ab:f0:44:d0:cc:44:7f:
d1:85:63:a9:81:2d:1e:57:68:c6:61:7d:b9:b6:54:dd:9b:f3:
47:f2:6a:18:6f:68:ad:bb:55:2f:ef:2a:dd:65:8e:47:7e:c5:
89:7d:66:3b:71:3c:0f:ad:ba:5b:98:41:ba:ba:f4:80:d2:25:
de:d6:d0:28:77:f3:98:b2:6e:20:9e:68:c6:5b:5d:c3:54:2a:
5e:d9:9e:2f:c5:18:8b:21:14:c9:d1:d7:98:2f:2b:97:15:5b:
56:83:7d:ed:df:59:ba:1f:d2:4d:c0:a3:d2:6b:2c:cf:0b:2d:
5d:ad:c2:54:ab:cd:0a:f9:01:53:cd:79:48:a2:b2:5e:9a:e9:
be:87:42:b6:b8:51:9e:3e:19:7f:84:05:7e:7b:82:eb:d1:f5:
5b:89:a6:b7:37:69:d9:1b:1b:01:cb:a1:2f:22:d3:83:8b:6c:
9d:f8:a0:0b:25:a4:57:31:7c:fc:e6:9d:48:05:e4:a9:df:97:
ec:d7:b9:5e:42:72:9d:cf:11:24:78:e8:14:21:26:aa:b3:29:
e7:a5:d5:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 6 22:11:51 2026 by rpki-client