
$ rpki-client -vvf r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/352e38332e3139322e302f32302d3230203d3e20323037363435.roa
File: 352e38332e3139322e302f32302d3230203d3e20323037363435.roa (raw, json)
Hash identifier: w6VPNWnRmvlSa+81SKrcw+uv7+BVdin3BVbGPkv1X9U=
Subject key identifier: 9C:FA:EA:A6:79:B3:7B:84:76:C8:B6:31:2A:A7:B1:83:DD:53:E9:61
Certificate issuer: /CN=2A2FB4DB0AA4D006958316872E467B554E0FD0BE
Certificate serial: 412800CA7F89B26F3940A147E5AAD8D36901F848
Authority key identifier: 2A:2F:B4:DB:0A:A4:D0:06:95:83:16:87:2E:46:7B:55:4E:0F:D0:BE
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.cer
Subject info access: rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/352e38332e3139322e302f32302d3230203d3e20323037363435.roa
Signing time: Thu 13 Aug 2026 17:49:28 +0000
ROA not before: Thu 13 Aug 2026 17:44:28 +0000
ROA not after: Thu 12 Aug 2027 17:49:28 +0000
asID: 207645
IP address blocks: 5.83.192.0/20 maxlen: 20
Validation: OK
Signature path: rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.crl
rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.mft
rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.cer
rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.crl
rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft
rsync://rpki.ripe.net/repository/DEFAULT/RQLmPOAcrSOaw5e8K7Xmw0fc7uo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 18 Aug 2026 14:17:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
41:28:00:ca:7f:89:b2:6f:39:40:a1:47:e5:aa:d8:d3:69:01:f8:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2A2FB4DB0AA4D006958316872E467B554E0FD0BE
Validity
Not Before: Aug 13 17:44:28 2026 GMT
Not After : Aug 12 17:49:28 2027 GMT
Subject: CN=9CFAEAA679B37B8476C8B6312AA7B183DD53E961
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:4b:8d:ff:0a:d0:29:1e:41:b8:cc:0e:bc:18:
3d:d4:b2:53:eb:fe:29:e6:47:42:f8:48:73:93:26:
0c:60:47:81:0e:7e:06:bf:da:df:59:16:0d:5f:38:
ae:90:2a:8b:b4:02:5c:90:43:e3:4f:ef:2f:64:f5:
4c:2d:81:1a:50:62:c9:8d:3a:78:da:72:9c:cb:f5:
13:3e:d1:49:bc:ff:53:9f:14:1f:f0:72:8a:68:93:
64:7f:3e:07:df:89:46:7f:d7:b5:13:a7:0a:76:91:
16:af:1e:6d:5e:17:75:f8:fc:52:13:cd:ed:47:5b:
c1:cc:23:02:f3:f3:5a:a5:60:c9:48:d5:c9:f8:de:
1e:88:45:fe:32:fe:24:92:c8:46:7d:38:38:16:b8:
ba:8c:6d:b7:79:e6:87:78:95:95:b7:7d:5f:bb:8e:
13:c1:24:4c:8c:fc:36:3b:3d:02:1f:8d:ea:d7:82:
f6:57:eb:eb:4b:01:65:72:fe:e3:db:05:2d:75:9e:
f2:6a:ee:ac:a0:c5:6b:40:93:82:d8:fe:41:09:72:
73:3d:19:cd:a9:43:62:80:68:ca:f6:f9:36:80:dd:
b3:9e:f3:7c:35:c8:5b:55:87:e0:fb:3a:0d:aa:d7:
80:d2:04:0a:7f:b2:8c:ed:ce:6c:43:f4:c8:98:b8:
26:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:FA:EA:A6:79:B3:7B:84:76:C8:B6:31:2A:A7:B1:83:DD:53:E9:61
X509v3 Authority Key Identifier:
keyid:2A:2F:B4:DB:0A:A4:D0:06:95:83:16:87:2E:46:7B:55:4E:0F:D0:BE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.cer
Subject Information Access:
Signed Object - URI:rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/352e38332e3139322e302f32302d3230203d3e20323037363435.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.83.192.0/20
Signature Algorithm: sha256WithRSAEncryption
88:a9:c1:e1:75:44:70:39:98:59:5b:23:10:4e:82:56:58:25:
61:f2:9c:d3:61:d9:d8:d3:4b:83:8a:5c:c2:21:0f:27:6c:f6:
af:dc:b4:f6:ad:ba:e8:90:4f:af:2e:c0:34:d4:e6:17:10:31:
d8:a3:cd:a5:95:6a:8c:66:ba:53:a1:9c:5e:49:a1:7e:76:8d:
3b:89:16:ef:63:20:64:21:3f:2c:8f:fc:74:2e:da:d2:5c:d5:
95:2b:01:21:86:42:44:05:93:d0:fe:a1:0f:22:0e:d5:a4:f4:
a2:9d:ac:ee:33:7f:f1:a5:43:09:61:54:f1:66:97:d1:1d:64:
48:55:eb:47:5a:97:c1:fe:07:95:6d:f5:a1:d4:57:1c:cc:d4:
a4:18:1f:5b:63:fe:c6:4a:5b:86:61:72:d3:fe:62:d9:fc:5a:
e6:28:71:73:43:fe:c5:e6:38:2a:7a:70:3a:d8:2b:d8:58:c4:
6c:7d:71:eb:4b:ea:5b:35:b5:be:d1:8b:2c:5c:a5:5a:ed:47:
55:88:a5:8d:13:da:3d:4c:a7:cb:30:87:cd:61:f1:79:94:bb:
d6:bb:d8:70:79:1f:4d:d4:ea:25:38:7f:f4:7e:08:15:ea:05:
c4:7b:84:f9:6f:29:f6:a5:95:29:33:54:00:6b:81:6f:ab:9d:
4e:d8:fe:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 18 00:09:28 2026 by rpki-client