
$ rpki-client -vvf r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/352e38332e3231302e302f32342d3234203d3e20343032323938.roa
File: 352e38332e3231302e302f32342d3234203d3e20343032323938.roa (raw, json)
Hash identifier: pjhMMwsahKm83Rce8Mqve1qgmizmn3Ry2PP8+IEi+js=
Subject key identifier: A8:46:92:8B:E7:30:0F:32:F6:03:B0:17:A5:58:43:C4:39:80:FC:EB
Certificate issuer: /CN=2A2FB4DB0AA4D006958316872E467B554E0FD0BE
Certificate serial: 39B0C72BB0503C2AF90367566BD7C1C9A8990780
Authority key identifier: 2A:2F:B4:DB:0A:A4:D0:06:95:83:16:87:2E:46:7B:55:4E:0F:D0:BE
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.cer
Subject info access: rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/352e38332e3231302e302f32342d3234203d3e20343032323938.roa
Signing time: Wed 29 Apr 2026 13:17:10 +0000
ROA not before: Wed 29 Apr 2026 13:12:10 +0000
ROA not after: Wed 28 Apr 2027 13:17:10 +0000
asID: 402298
IP address blocks: 5.83.210.0/24 maxlen: 24
Validation: OK
Signature path: rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.crl
rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.mft
rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.cer
rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.crl
rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft
rsync://rpki.ripe.net/repository/DEFAULT/RQLmPOAcrSOaw5e8K7Xmw0fc7uo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 01 May 2026 06:46:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
39:b0:c7:2b:b0:50:3c:2a:f9:03:67:56:6b:d7:c1:c9:a8:99:07:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2A2FB4DB0AA4D006958316872E467B554E0FD0BE
Validity
Not Before: Apr 29 13:12:10 2026 GMT
Not After : Apr 28 13:17:10 2027 GMT
Subject: CN=A846928BE7300F32F603B017A55843C43980FCEB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:81:1d:9b:09:08:0c:2e:b4:bc:47:09:64:8e:
66:c8:45:29:df:45:6c:a8:2e:f3:b6:e4:b8:b2:42:
48:f8:4d:75:e4:30:b8:5c:1b:e7:52:ce:c9:23:0f:
fc:d0:a0:ea:ca:5b:50:9c:09:4f:c4:d4:d6:26:8b:
34:8b:22:2a:25:2c:ff:81:f2:77:4c:48:5b:08:c2:
7d:93:f8:ca:05:98:75:22:85:03:b4:2d:76:83:5c:
69:7c:cd:0a:86:c1:6e:6b:ef:c4:91:75:0e:52:d0:
85:c2:79:8b:51:ab:18:dd:dd:3d:29:ff:85:9e:1f:
19:71:d9:a8:2b:df:ad:28:3c:41:29:13:ef:3f:3d:
12:31:b1:9b:8c:d3:41:e4:e5:a3:38:1a:2e:fc:32:
41:f2:f8:37:49:98:28:ff:1b:07:29:b1:66:31:d6:
e0:ec:1c:7d:28:4e:a9:0d:f9:31:d6:c8:8f:ad:ca:
dc:26:dd:6a:bd:af:ac:29:41:b8:35:69:38:d0:b2:
a1:64:b0:91:df:3f:df:30:1d:41:e9:25:5a:06:10:
54:31:ef:40:be:6a:2f:04:a6:43:45:95:a0:f0:65:
f6:d5:06:c7:90:c2:65:c1:16:6c:3a:19:12:f6:a6:
3a:2a:ec:b7:98:5f:18:bf:c6:42:3f:dc:fc:24:e2:
c8:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:46:92:8B:E7:30:0F:32:F6:03:B0:17:A5:58:43:C4:39:80:FC:EB
X509v3 Authority Key Identifier:
keyid:2A:2F:B4:DB:0A:A4:D0:06:95:83:16:87:2E:46:7B:55:4E:0F:D0:BE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.cer
Subject Information Access:
Signed Object - URI:rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/352e38332e3231302e302f32342d3234203d3e20343032323938.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.83.210.0/24
Signature Algorithm: sha256WithRSAEncryption
85:7a:07:ee:c7:f7:48:f4:be:a5:0e:72:08:0c:0a:1d:e8:81:
0e:59:cc:c9:c4:fb:69:85:d5:11:b2:31:fd:52:b4:b6:27:c2:
fd:88:46:6f:f8:7a:f5:1b:03:eb:51:99:f1:f0:99:9e:43:ea:
32:58:5d:8f:e3:59:bf:02:13:56:03:56:38:53:1e:65:90:b0:
1e:d7:d6:a9:35:40:65:f8:79:86:e0:16:af:64:00:7b:9b:05:
7f:38:32:1e:78:1f:5c:22:78:6e:5f:24:f4:28:c6:0e:fa:ef:
70:b2:f4:94:40:ea:a4:9d:c5:48:46:cd:c8:ce:fa:2f:37:64:
3b:6a:ee:a8:e8:ad:a4:9d:67:6e:20:ec:b8:97:91:44:3a:df:
d2:44:08:29:aa:63:1d:98:36:43:86:34:ff:b5:f3:10:97:09:
32:8b:31:25:a7:cf:3e:a5:4b:dd:71:21:72:bc:f0:db:c2:10:
40:cc:85:c1:e1:0e:8b:af:2c:08:cb:72:f1:63:3a:79:08:93:
88:94:e7:e9:6c:5b:a6:14:73:de:f3:f3:99:94:77:40:a1:e6:
8b:f7:78:51:6c:f2:4a:71:ff:f1:06:a3:ca:5d:e1:ae:c7:d0:
86:8a:2d:84:62:ec:ee:ab:24:06:50:a4:32:2b:36:77:4c:e4:
de:07:93:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 30 17:26:08 2026 by rpki-client