
$ rpki-client -vvvf r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/3136342e33372e3233332e302f32342d3234203d3e20313938353636.roa
File: 3136342e33372e3233332e302f32342d3234203d3e20313938353636.roa (raw, json)
Hash identifier: E5+7+CvBHI7MHfgKYH5RmTHH1fu18RWWWC/+ZCzWEAo=
Subject key identifier: BA:34:86:59:F7:36:EB:78:41:4D:E7:5C:3F:A5:B3:05:6B:34:83:8C
Certificate issuer: /CN=B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5
Certificate serial: 52E7A4F5774227E44E3631F3E8246D69355BD19D
Authority key identifier: B3:54:D3:28:CB:BF:D1:EF:3C:D2:92:68:A2:3B:0F:CC:60:E3:A2:C5
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.cer
Subject info access: rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/3136342e33372e3233332e302f32342d3234203d3e20313938353636.roa
Signing time: Mon 17 Aug 2026 17:03:49 +0000
ROA not before: Mon 17 Aug 2026 16:58:49 +0000
ROA not after: Mon 16 Aug 2027 17:03:49 +0000
asID: 198566
IP address blocks: 164.37.233.0/24 maxlen: 24
Validation: OK
Signature path: rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.crl
rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.mft
rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.cer
rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/D0A516B50426202A424F0EBFCB7D2BD4F744F964.crl
rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/D0A516B50426202A424F0EBFCB7D2BD4F744F964.mft
rsync://rpki.ripe.net/repository/DEFAULT/0KUWtQQmICpCTw6_y30r1PdE-WQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 03 Sep 2026 18:02:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
52:e7:a4:f5:77:42:27:e4:4e:36:31:f3:e8:24:6d:69:35:5b:d1:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5
Validity
Not Before: Aug 17 16:58:49 2026 GMT
Not After : Aug 16 17:03:49 2027 GMT
Subject: CN=BA348659F736EB78414DE75C3FA5B3056B34838C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:59:bc:a4:54:56:56:23:7e:29:8c:b9:0e:72:
ea:01:d3:3a:be:7b:88:33:e4:7a:ce:d4:37:54:32:
dd:80:4c:62:2d:19:35:7c:10:34:3a:60:64:12:95:
c9:e0:b2:7f:b4:81:6c:1a:af:4c:57:e7:27:89:76:
72:43:f6:36:2f:e5:ac:0e:b2:22:a3:17:f0:73:71:
70:fe:ef:3b:8c:77:45:a8:a8:17:e2:17:67:50:3b:
92:81:96:29:ae:50:70:74:6f:73:3c:76:3f:25:52:
88:f0:fa:c6:46:3e:67:fc:21:06:fe:cb:c4:e3:5d:
3f:6e:44:87:5d:d9:3a:ed:35:e2:91:3d:63:18:ec:
c8:de:cf:d4:6a:5f:72:a1:ae:ca:d4:28:63:f6:54:
51:26:9c:b4:5a:b6:6b:e9:d4:25:6c:d9:78:63:df:
48:eb:2b:7f:5d:13:8c:67:c0:eb:d7:f6:a4:5f:9b:
6b:d2:0f:26:ad:02:6b:20:a5:44:aa:52:77:87:87:
ad:49:24:d9:d7:db:d7:5e:70:08:ea:66:37:ca:81:
be:b8:43:b5:2f:ef:8a:53:40:1c:ba:55:54:9a:b1:
2f:e0:aa:37:5e:38:c3:11:f3:2c:e4:32:77:2a:22:
38:64:aa:f6:da:da:3c:74:55:c4:aa:b7:6e:44:8f:
26:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:34:86:59:F7:36:EB:78:41:4D:E7:5C:3F:A5:B3:05:6B:34:83:8C
X509v3 Authority Key Identifier:
keyid:B3:54:D3:28:CB:BF:D1:EF:3C:D2:92:68:A2:3B:0F:CC:60:E3:A2:C5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.cer
Subject Information Access:
Signed Object - URI:rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/3136342e33372e3233332e302f32342d3234203d3e20313938353636.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
164.37.233.0/24
Signature Algorithm: sha256WithRSAEncryption
a4:59:86:19:65:00:29:45:a3:09:54:c7:f7:4f:3d:25:ed:93:
4c:57:96:8f:d3:77:16:f5:7e:a5:58:2f:53:31:96:b9:d6:fc:
34:ad:36:9a:83:43:d9:e2:10:66:54:85:92:74:8b:f4:6a:cd:
ce:77:bf:f8:f2:8a:f8:e3:7c:90:65:25:36:05:ec:c2:bb:9a:
1e:c3:9f:cf:86:2d:38:be:ca:77:d4:dc:dd:a9:ac:8d:87:00:
b1:d1:83:50:10:63:56:16:c9:7c:4e:f4:b1:c1:4b:ec:4a:ca:
66:9b:2f:0f:99:81:8d:c6:cb:d9:0a:19:b0:3b:d0:30:0b:01:
56:86:3e:94:0b:4f:0e:3a:4b:ce:cc:b7:58:be:c7:4a:17:ed:
49:eb:7f:d7:ac:35:f2:0e:3d:9f:31:95:7b:b9:32:e5:40:14:
f8:e2:a5:e8:e5:c6:ba:23:64:8d:aa:1c:ce:8b:f9:21:fe:b7:
b9:72:03:3f:e1:11:bf:d5:a4:ad:54:39:01:01:d6:97:d8:7b:
53:a5:5b:f3:1e:fa:10:df:96:b6:b9:1b:70:3d:9d:a7:8a:0b:
4c:b2:e9:03:c7:30:7c:55:99:2a:17:c9:5b:78:40:0f:73:a0:
d7:24:89:4a:3b:12:68:54:87:25:4f:e4:6a:be:d2:23:11:ec:
c2:96:10:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 3 11:00:18 2026 by rpki-client