
$ rpki-client -vvf r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/33372e3233302e35342e302f32332d3234203d3e20383334.roa
File: 33372e3233302e35342e302f32332d3234203d3e20383334.roa (raw, json)
Hash identifier: 9UxTVEBSh14OlbqhGgNHnuKlgV5wZKU8WNxguuheQUA=
Subject key identifier: 03:CB:E9:00:36:39:65:61:AE:6F:0D:B9:E0:FE:3C:AB:A7:9A:E2:D7
Certificate issuer: /CN=2A2FB4DB0AA4D006958316872E467B554E0FD0BE
Certificate serial: 143D66355961BBF92DB304830F6F5CA1F2B5E2C0
Authority key identifier: 2A:2F:B4:DB:0A:A4:D0:06:95:83:16:87:2E:46:7B:55:4E:0F:D0:BE
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.cer
Subject info access: rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/33372e3233302e35342e302f32332d3234203d3e20383334.roa
Signing time: Thu 02 Jul 2026 16:23:08 +0000
ROA not before: Thu 02 Jul 2026 16:18:08 +0000
ROA not after: Thu 01 Jul 2027 16:23:08 +0000
asID: 834
IP address blocks: 37.230.54.0/23 maxlen: 24
Validation: OK
Signature path: rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.crl
rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.mft
rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.cer
rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.crl
rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft
rsync://rpki.ripe.net/repository/DEFAULT/RQLmPOAcrSOaw5e8K7Xmw0fc7uo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Jul 2026 07:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
14:3d:66:35:59:61:bb:f9:2d:b3:04:83:0f:6f:5c:a1:f2:b5:e2:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2A2FB4DB0AA4D006958316872E467B554E0FD0BE
Validity
Not Before: Jul 2 16:18:08 2026 GMT
Not After : Jul 1 16:23:08 2027 GMT
Subject: CN=03CBE90036396561AE6F0DB9E0FE3CABA79AE2D7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:e1:e5:36:ae:af:01:58:de:97:0b:ff:29:c3:
5b:43:2c:86:ab:40:c3:cd:98:75:4e:a9:c3:cb:eb:
a9:8e:6c:53:9d:ce:cf:5b:7a:e9:87:8c:48:25:ac:
87:4c:4a:cf:50:bc:05:bd:94:5b:63:e3:06:c5:fb:
6a:d0:d1:15:99:9e:3c:d3:e2:a2:16:be:a0:f9:73:
68:47:2c:85:96:50:2b:10:c5:f6:f5:00:72:9c:de:
2e:8f:99:cd:5b:84:4f:5c:b7:2b:ee:13:6c:78:b5:
5f:2d:d8:64:59:e9:30:60:d9:ed:e4:75:6f:ae:c5:
78:df:ad:4d:49:fe:31:bf:3e:ca:2a:ab:d7:20:31:
5f:ea:9b:68:60:ce:13:ee:47:31:36:16:9f:37:ff:
be:cf:92:c0:91:22:77:1b:1f:b4:0b:33:48:6c:a0:
5f:1d:a3:5c:06:0a:3f:3b:ac:44:78:12:51:90:e9:
78:f1:28:28:16:f6:bf:f8:19:f3:a2:a2:d9:a0:29:
53:87:00:88:c8:70:8d:9c:76:d5:77:f1:67:9d:5d:
cf:03:86:f7:a4:df:10:3d:58:09:64:a5:17:7e:b0:
81:a5:a1:08:ed:a4:14:70:2a:d9:b4:02:fa:a2:d4:
9b:67:ba:d8:80:24:69:37:b4:31:9c:81:80:b2:73:
5c:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:CB:E9:00:36:39:65:61:AE:6F:0D:B9:E0:FE:3C:AB:A7:9A:E2:D7
X509v3 Authority Key Identifier:
keyid:2A:2F:B4:DB:0A:A4:D0:06:95:83:16:87:2E:46:7B:55:4E:0F:D0:BE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.cer
Subject Information Access:
Signed Object - URI:rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/33372e3233302e35342e302f32332d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.230.54.0/23
Signature Algorithm: sha256WithRSAEncryption
4b:6d:dd:75:14:c2:db:dd:f9:45:6c:f2:69:4a:60:48:ec:a7:
d2:fe:3a:55:9f:e0:ce:5a:9e:06:f5:18:85:64:68:b6:b0:90:
dd:78:84:12:c4:85:56:29:a4:cc:fc:7f:03:1d:bc:2e:48:50:
4b:f5:98:bf:24:eb:9a:fd:58:e0:30:61:25:0c:12:30:14:7f:
d3:79:67:d0:d2:e5:0b:b3:0f:3d:34:d1:63:47:ea:5a:6e:70:
f0:8a:0a:f3:b7:ca:35:b3:e2:48:49:3d:f5:c3:9d:3f:00:01:
be:fc:54:07:d1:12:5f:50:ba:41:d8:b7:44:a4:99:57:51:f3:
2a:79:49:8d:ae:85:fe:af:4b:f5:71:45:17:c7:7b:86:81:4e:
de:e6:a3:42:87:59:6d:be:0a:dd:0c:2e:41:ce:29:d5:eb:ef:
c0:91:38:bf:bf:22:90:9a:b2:b1:05:99:d9:60:36:de:8c:39:
4c:04:c1:a0:d4:88:fd:69:56:4a:4e:4b:1d:9e:ec:ef:96:e2:
b9:32:0c:db:88:63:17:be:7f:be:24:64:1e:47:94:ac:cc:62:
2c:dd:00:ad:51:f1:5e:3a:b5:e8:fe:32:9d:ee:a5:55:52:6c:
6a:57:30:aa:f1:f0:8a:84:f0:38:46:6e:ff:33:68:72:bb:40:
b6:e1:e9:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 20 23:43:38 2026 by rpki-client