
$ rpki-client -vvf r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/352e38332e3231322e302f32342d3234203d3e20313734.roa
File: 352e38332e3231322e302f32342d3234203d3e20313734.roa (raw, json)
Hash identifier: M/PcJj5Fpnp9RWrIsQGMsu6ZYbNoWsZifOGR37x+nco=
Subject key identifier: 5A:F9:D2:5A:9C:25:1A:D1:6F:15:98:3F:76:D3:85:E8:57:5F:3B:BA
Certificate issuer: /CN=2A2FB4DB0AA4D006958316872E467B554E0FD0BE
Certificate serial: 36DBC059C08817D05599B104CD909636D0B15CF9
Authority key identifier: 2A:2F:B4:DB:0A:A4:D0:06:95:83:16:87:2E:46:7B:55:4E:0F:D0:BE
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.cer
Subject info access: rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/352e38332e3231322e302f32342d3234203d3e20313734.roa
Signing time: Tue 10 Feb 2026 10:07:11 +0000
ROA not before: Tue 10 Feb 2026 10:02:11 +0000
ROA not after: Tue 09 Feb 2027 10:07:11 +0000
asID: 174
IP address blocks: 5.83.212.0/24 maxlen: 24
Validation: OK
Signature path: rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.crl
rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.mft
rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.cer
rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.crl
rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft
rsync://rpki.ripe.net/repository/DEFAULT/RQLmPOAcrSOaw5e8K7Xmw0fc7uo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Feb 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
36:db:c0:59:c0:88:17:d0:55:99:b1:04:cd:90:96:36:d0:b1:5c:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2A2FB4DB0AA4D006958316872E467B554E0FD0BE
Validity
Not Before: Feb 10 10:02:11 2026 GMT
Not After : Feb 9 10:07:11 2027 GMT
Subject: CN=5AF9D25A9C251AD16F15983F76D385E8575F3BBA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:f9:1f:9f:a1:04:be:bb:8b:81:b9:f3:23:22:
70:93:e3:00:3c:35:1b:e4:52:78:da:49:36:53:7b:
79:2c:c6:7a:97:88:39:f2:42:f4:73:f2:94:db:5a:
93:d7:d3:0c:da:b1:7b:9b:36:88:a8:85:54:3f:66:
ad:df:81:4c:4d:d4:bb:fa:fb:61:4d:89:bc:92:69:
20:30:bb:32:34:47:d5:2d:52:7c:99:96:0a:26:c5:
6f:d9:ae:06:96:97:44:93:eb:51:72:36:e3:c4:7f:
2c:ff:34:5f:7a:61:22:1b:47:ae:cc:73:a7:4f:99:
33:d4:dc:5a:b2:2f:35:fb:46:17:15:af:58:4a:e5:
5b:7d:a5:ef:84:b5:f6:00:40:f2:db:2f:12:4f:3a:
6c:89:52:0d:07:83:2d:e5:4f:ae:f7:24:97:e2:a9:
34:93:0d:ea:c1:be:ab:bd:8a:3d:4b:ae:21:2c:fa:
2d:7d:3e:17:44:4a:65:d6:78:d7:09:f1:e5:6a:3c:
2e:6e:91:6a:2b:00:8d:5a:3e:05:0a:c8:c1:87:0f:
d2:f4:51:e6:a9:1f:dc:d3:60:90:af:f0:65:c8:72:
d9:03:a3:7c:ca:9d:9a:c9:9f:67:e5:7b:e1:6d:59:
da:3f:5a:79:e6:14:42:2e:41:be:83:0f:5b:c4:88:
90:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:F9:D2:5A:9C:25:1A:D1:6F:15:98:3F:76:D3:85:E8:57:5F:3B:BA
X509v3 Authority Key Identifier:
keyid:2A:2F:B4:DB:0A:A4:D0:06:95:83:16:87:2E:46:7B:55:4E:0F:D0:BE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.cer
Subject Information Access:
Signed Object - URI:rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/352e38332e3231322e302f32342d3234203d3e20313734.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.83.212.0/24
Signature Algorithm: sha256WithRSAEncryption
43:1c:53:ad:86:0d:41:ad:f9:aa:cf:3c:86:f4:a0:3e:d7:55:
bc:27:b6:79:5b:f9:ca:cb:91:92:7e:4a:1c:36:fe:78:13:1e:
bb:ae:31:c6:ec:55:c6:e4:8f:f7:96:28:4e:00:0d:75:4d:b0:
ae:a4:46:a8:ec:12:ef:69:5b:a4:e5:f5:51:91:2a:96:0e:30:
30:53:83:87:d5:f0:cd:bc:0d:c3:a8:2e:58:79:9d:55:63:f4:
af:9f:2e:67:43:a2:ce:13:52:11:9d:a6:82:de:cc:3a:61:a3:
20:23:84:75:bc:03:3d:b3:17:ba:c1:5f:73:14:9c:9d:c2:9a:
4e:40:a4:e5:85:56:f4:a7:76:c8:5d:79:39:59:69:3e:68:3d:
ca:73:14:bf:6b:01:a1:54:66:7c:01:08:e9:e4:b6:5b:81:08:
7a:55:ca:16:bd:2b:96:b9:b1:46:c0:50:5a:f9:06:a6:86:3e:
94:da:4a:db:3e:68:1e:5d:ab:33:00:1a:c7:59:af:e2:01:27:
75:9a:99:85:63:ec:86:eb:14:ac:2c:70:9d:f6:24:36:5e:da:
d3:da:bb:38:a8:a5:2e:70:60:90:a0:f8:84:f4:c8:5a:6a:9d:
7a:8b:b5:32:70:cd:72:d1:67:4e:b1:57:3e:4f:52:4e:ab:7c:
f3:f4:66:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 26 10:32:45 2026 by rpki-client