
$ rpki-client -vvvf r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/AS212238.roa
File: AS212238.roa (raw, json)
Hash identifier: eZiKl0jQNngQx8cgkml/jFKM+Ic/5BPJiV6wbhnP5f8=
Subject key identifier: 24:BF:42:0A:7C:A2:79:06:D3:74:FA:F6:20:7C:B5:3B:9F:C1:D1:3C
Certificate issuer: /CN=B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5
Certificate serial: 49AE6800BC5B5E64BBD20D785E41B124466B4A38
Authority key identifier: B3:54:D3:28:CB:BF:D1:EF:3C:D2:92:68:A2:3B:0F:CC:60:E3:A2:C5
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.cer
Subject info access: rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/AS212238.roa
Signing time: Thu 10 Sep 2026 15:51:18 +0000
ROA not before: Thu 10 Sep 2026 15:46:18 +0000
ROA not after: Thu 09 Sep 2027 15:51:18 +0000
asID: 212238
IP address blocks: 164.37.223.0/24 maxlen: 24
Validation: OK
Signature path: rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.crl
rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.mft
rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.cer
rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/D0A516B50426202A424F0EBFCB7D2BD4F744F964.crl
rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/D0A516B50426202A424F0EBFCB7D2BD4F744F964.mft
rsync://rpki.ripe.net/repository/DEFAULT/0KUWtQQmICpCTw6_y30r1PdE-WQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 19 Sep 2026 05:39:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
49:ae:68:00:bc:5b:5e:64:bb:d2:0d:78:5e:41:b1:24:46:6b:4a:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5
Validity
Not Before: Sep 10 15:46:18 2026 GMT
Not After : Sep 9 15:51:18 2027 GMT
Subject: CN=24BF420A7CA27906D374FAF6207CB53B9FC1D13C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f9:c4:3a:54:1f:8c:b5:99:f4:51:17:90:df:19:
68:ee:91:36:5e:70:d6:ae:2d:76:8d:17:b5:ed:b9:
5a:ba:c7:35:84:92:ee:f2:4b:3a:cf:1b:82:f7:14:
d4:eb:9e:bb:f9:c4:55:02:1a:d9:59:13:ef:fd:30:
b3:45:63:84:8d:90:4b:7d:a4:66:b2:84:a0:05:0a:
39:d8:84:a2:87:1b:0f:79:b7:3d:44:6f:f0:6a:6e:
51:e6:8d:00:9f:f4:5a:7d:72:c0:92:c0:e0:bc:f9:
28:61:4b:08:d0:a7:bc:e9:71:ee:41:7b:9e:62:9f:
ad:e5:bf:87:7b:34:dc:9f:ec:d5:cb:c1:2d:6f:2a:
1b:2a:aa:b6:91:6e:f6:c1:2b:07:69:8e:8a:c5:74:
ec:85:81:2d:72:c8:2e:c3:f5:f3:77:9c:b8:35:15:
a7:1f:77:24:72:f4:c6:2e:3b:f2:53:b2:19:85:ab:
9e:35:b6:6d:23:88:3c:a1:5a:76:6e:99:2a:48:24:
10:c8:41:ec:ad:d5:bf:a3:7b:7b:f7:33:95:70:0c:
6d:37:2c:4a:d6:39:f1:ca:64:e6:5a:ee:63:b3:70:
70:8f:f0:f7:d6:6c:d2:d8:00:66:78:ce:6d:63:b4:
11:c9:8e:3c:f3:3b:e7:35:b0:b0:ed:cd:46:0e:71:
89:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:BF:42:0A:7C:A2:79:06:D3:74:FA:F6:20:7C:B5:3B:9F:C1:D1:3C
X509v3 Authority Key Identifier:
keyid:B3:54:D3:28:CB:BF:D1:EF:3C:D2:92:68:A2:3B:0F:CC:60:E3:A2:C5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.cer
Subject Information Access:
Signed Object - URI:rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/AS212238.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
164.37.223.0/24
Signature Algorithm: sha256WithRSAEncryption
91:a3:bb:bd:b3:92:94:67:b0:e9:14:f4:59:e2:ca:b5:b3:35:
58:86:4d:c7:2d:88:99:6b:1b:44:8d:fd:6b:cf:c3:36:5d:37:
a8:7b:ee:61:08:e4:91:95:cd:ee:83:7b:e6:a6:ea:99:94:ce:
15:15:a3:7b:84:f9:8e:0d:51:a1:31:0e:24:07:3d:22:5c:30:
53:52:28:2c:c5:73:61:1a:35:a6:ef:eb:02:3a:54:8e:5c:40:
b4:3f:e8:84:43:94:ee:f4:6a:29:09:75:e6:af:95:a8:7d:bb:
ae:48:18:91:84:cc:9b:1c:07:48:ea:d5:0f:12:2e:08:ea:d9:
58:e6:0d:2d:f7:7d:3e:3e:79:ef:0d:d0:d2:59:47:7a:7e:de:
82:20:59:6a:2f:58:80:5a:fb:82:3b:5d:2c:28:de:e4:b3:29:
83:87:1f:fd:51:37:27:c3:75:2d:7b:8c:50:ef:e9:44:1f:cb:
89:cb:a4:8f:4f:2d:98:5f:52:4e:25:c4:c6:2f:5f:e3:3f:48:
5c:29:9f:27:da:4f:38:ff:93:48:09:75:63:ac:68:14:0b:ec:
22:77:f4:48:be:9b:ce:b3:5f:9a:4a:96:38:fb:9a:14:91:ee:
74:ef:8e:c6:48:3c:10:01:13:6f:b1:57:83:7b:cb:39:70:f9:
05:5a:73:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 18 17:06:45 2026 by rpki-client