
$ rpki-client -vvvf r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/3136342e33372e3233322e302f32342d3234203d3e20323139303835.roa
File: 3136342e33372e3233322e302f32342d3234203d3e20323139303835.roa (raw, json)
Hash identifier: JfJQCTHH7wxO3PuRlRDkIisGnj9ZHQa26atHJZimXXU=
Subject key identifier: 8B:83:24:6D:E5:7A:D2:A9:85:22:16:D4:CB:9E:0A:12:E4:EC:1B:4C
Certificate issuer: /CN=B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5
Certificate serial: 5A96B9D4FFF08C3F6FBB3115EA0C035CB237A0C9
Authority key identifier: B3:54:D3:28:CB:BF:D1:EF:3C:D2:92:68:A2:3B:0F:CC:60:E3:A2:C5
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.cer
Subject info access: rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/3136342e33372e3233322e302f32342d3234203d3e20323139303835.roa
Signing time: Fri 21 Aug 2026 06:36:46 +0000
ROA not before: Fri 21 Aug 2026 06:31:46 +0000
ROA not after: Fri 20 Aug 2027 06:36:46 +0000
asID: 219085
IP address blocks: 164.37.232.0/24 maxlen: 24
Validation: OK
Signature path: rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.crl
rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.mft
rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.cer
rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/D0A516B50426202A424F0EBFCB7D2BD4F744F964.crl
rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/D0A516B50426202A424F0EBFCB7D2BD4F744F964.mft
rsync://rpki.ripe.net/repository/DEFAULT/0KUWtQQmICpCTw6_y30r1PdE-WQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 03 Sep 2026 18:02:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5a:96:b9:d4:ff:f0:8c:3f:6f:bb:31:15:ea:0c:03:5c:b2:37:a0:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5
Validity
Not Before: Aug 21 06:31:46 2026 GMT
Not After : Aug 20 06:36:46 2027 GMT
Subject: CN=8B83246DE57AD2A9852216D4CB9E0A12E4EC1B4C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:3b:83:9c:aa:69:39:be:59:58:70:f3:8e:2a:
78:8e:2d:78:1c:ad:1f:35:98:18:8e:aa:4d:f1:73:
b2:bf:00:94:5c:5a:55:73:f4:af:c3:f1:a5:83:ed:
61:e2:21:2e:ba:b6:8a:fd:bf:de:2d:10:61:62:4f:
f0:6f:6a:90:f2:f3:e6:64:ed:25:3c:f2:0d:f1:61:
41:b3:32:3b:d8:99:bb:44:8f:20:60:b2:28:81:1b:
3b:ca:de:92:92:02:52:28:f7:ed:ba:2f:94:26:2a:
0f:74:e4:96:36:4c:93:38:28:33:a5:6d:1d:98:cf:
b6:ab:44:c0:ba:d1:c3:b1:bc:07:fe:43:47:61:aa:
9e:15:71:6c:4d:f6:7a:85:66:d0:3b:28:61:50:25:
74:5f:4a:cf:59:94:fd:b0:d8:13:b9:3a:f8:ab:b4:
d7:e1:72:9f:bd:a8:b1:7a:44:b3:0a:3c:7d:54:f0:
c4:36:33:4e:e4:80:17:2c:27:e0:52:c4:95:b4:16:
b1:83:d3:b5:40:16:5e:b3:62:15:90:85:fe:b5:75:
4a:ae:90:e8:7d:7b:7d:6e:62:f3:99:dd:cf:ff:a1:
56:13:b0:b5:95:24:7d:f8:2c:02:2e:80:bf:e2:11:
68:22:13:b5:34:44:11:03:46:cc:8d:84:68:b2:ca:
b5:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:83:24:6D:E5:7A:D2:A9:85:22:16:D4:CB:9E:0A:12:E4:EC:1B:4C
X509v3 Authority Key Identifier:
keyid:B3:54:D3:28:CB:BF:D1:EF:3C:D2:92:68:A2:3B:0F:CC:60:E3:A2:C5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.cer
Subject Information Access:
Signed Object - URI:rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/3136342e33372e3233322e302f32342d3234203d3e20323139303835.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
164.37.232.0/24
Signature Algorithm: sha256WithRSAEncryption
73:51:ad:6d:dc:68:15:7e:60:89:a6:f9:01:f8:4a:ec:7a:fb:
ae:60:2e:4c:a1:b0:85:88:6b:68:32:75:07:56:8e:b2:d6:c8:
af:6b:bd:cf:73:dc:ed:8b:cf:fb:be:e1:1f:05:bc:b8:58:d8:
02:ce:07:0a:e0:ed:67:c4:13:c2:38:b9:6c:ec:7b:26:8b:a1:
1b:ef:15:bf:7b:c3:a7:93:c4:7d:6a:cc:1c:ad:fb:0a:ff:ea:
58:3d:b2:79:1e:c5:57:c6:52:9c:21:bb:67:06:c3:bd:e7:fd:
2f:44:ee:4c:a2:c2:47:ae:ba:58:ce:29:31:96:be:8a:e8:02:
34:85:fe:4f:c8:54:eb:f0:ee:70:76:a8:3c:a4:20:ad:58:84:
d3:1d:9f:d7:7b:3b:a7:cc:9f:c4:b3:cf:d0:70:05:84:22:4f:
1c:22:96:48:0f:d4:a6:4c:94:9e:4d:0a:94:1c:99:9d:52:35:
c0:56:04:32:54:62:8b:c1:5c:f1:d8:d2:7e:47:7a:69:5c:45:
bc:53:71:b2:48:39:ac:74:ff:e5:b6:a7:61:57:a4:11:bb:1e:
fd:e3:ee:cc:91:8a:21:4f:c8:c4:89:28:cf:38:78:8e:f6:e4:
ce:f0:fc:3b:d5:b1:e6:a5:42:e8:1f:7f:e8:73:0e:04:35:c8:
aa:b1:9d:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 3 09:21:39 2026 by rpki-client