
$ rpki-client -vvvf r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/352e38332e3231372e302f32342d3234203d3e203235313938.roa
File: 352e38332e3231372e302f32342d3234203d3e203235313938.roa (raw, json)
Hash identifier: 65bCrfFdGjdB1qGz7RYFIhLJ5fZaTaY2hSZr6woSL6k=
Subject key identifier: C2:49:DF:81:77:3D:F9:48:58:F1:D5:9F:34:FA:3F:93:9A:1E:37:DB
Certificate issuer: /CN=2A2FB4DB0AA4D006958316872E467B554E0FD0BE
Certificate serial: 0BAA6E1EE33F8A77A7B10C39D3CF23EE2FA499A1
Authority key identifier: 2A:2F:B4:DB:0A:A4:D0:06:95:83:16:87:2E:46:7B:55:4E:0F:D0:BE
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.cer
Subject info access: rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/352e38332e3231372e302f32342d3234203d3e203235313938.roa
Signing time: Thu 06 Aug 2026 14:45:29 +0000
ROA not before: Thu 06 Aug 2026 14:40:29 +0000
ROA not after: Thu 05 Aug 2027 14:45:29 +0000
asID: 25198
IP address blocks: 5.83.217.0/24 maxlen: 24
Validation: OK
Signature path: rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.crl
rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.mft
rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.cer
rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.crl
rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft
rsync://rpki.ripe.net/repository/DEFAULT/RQLmPOAcrSOaw5e8K7Xmw0fc7uo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 24 Aug 2026 15:37:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0b:aa:6e:1e:e3:3f:8a:77:a7:b1:0c:39:d3:cf:23:ee:2f:a4:99:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2A2FB4DB0AA4D006958316872E467B554E0FD0BE
Validity
Not Before: Aug 6 14:40:29 2026 GMT
Not After : Aug 5 14:45:29 2027 GMT
Subject: CN=C249DF81773DF94858F1D59F34FA3F939A1E37DB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:c3:7c:63:14:3b:37:40:c5:e3:37:4e:17:d6:
b5:13:59:ac:5e:19:2a:96:0b:64:bf:4d:da:4a:74:
8b:34:7f:c0:99:42:81:a1:39:a6:84:2e:1a:b3:dd:
a9:03:82:fe:f2:69:51:d0:7b:3e:aa:8d:5b:70:bb:
a2:ba:7d:2a:7f:89:c9:83:9c:8c:c4:d9:84:5b:65:
66:99:7b:43:f0:21:39:41:3f:85:cf:00:fc:b7:25:
b5:bf:27:e5:4d:1a:36:05:3b:cb:9e:76:ee:81:2c:
e2:36:d0:ed:c3:fe:35:de:35:34:ee:75:45:43:f9:
30:0d:8f:16:9a:5e:90:c0:4a:9f:fc:b4:76:43:55:
38:eb:85:a0:7a:a3:48:f3:b9:1a:25:c7:50:fb:cb:
13:44:38:09:76:c4:da:31:63:4a:10:87:e8:e3:61:
bc:82:60:a7:80:4b:8d:a0:dc:62:7c:18:1e:fb:57:
f3:68:24:c6:38:ab:a6:3a:dc:c5:e6:42:0d:5f:54:
d5:e1:5e:f7:ef:b5:cb:03:ea:d7:77:19:76:9d:17:
4c:97:32:d1:ba:56:7f:0a:62:0f:06:d3:32:c8:63:
5e:25:51:96:1a:c2:89:5d:d7:97:e1:78:cb:9a:e8:
55:92:59:ce:7a:30:26:54:c1:05:99:13:6e:b1:1d:
a5:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:49:DF:81:77:3D:F9:48:58:F1:D5:9F:34:FA:3F:93:9A:1E:37:DB
X509v3 Authority Key Identifier:
keyid:2A:2F:B4:DB:0A:A4:D0:06:95:83:16:87:2E:46:7B:55:4E:0F:D0:BE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.cer
Subject Information Access:
Signed Object - URI:rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/352e38332e3231372e302f32342d3234203d3e203235313938.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.83.217.0/24
Signature Algorithm: sha256WithRSAEncryption
2b:a4:3a:40:cc:fe:fb:d5:4b:a0:f2:58:72:43:be:9f:74:3b:
ca:29:c7:5e:ce:a7:45:6a:52:44:2c:ac:38:f3:ef:24:2a:47:
3e:8d:3e:45:17:8a:7b:7f:70:24:82:e4:4d:b2:ed:8e:88:5b:
50:5e:e9:cc:cb:b4:a8:a8:ad:60:b4:1b:c7:8b:6e:5c:89:f0:
04:d5:ce:c3:b4:7c:5b:a3:38:b5:cf:14:9f:cd:4c:f6:0f:39:
19:79:51:36:a9:f9:c2:ea:39:76:af:f9:9e:e6:57:bb:cb:e4:
b8:cd:33:2e:af:62:ef:50:33:2f:72:96:74:d0:2e:5f:d4:fc:
d1:32:7d:86:e7:87:de:4e:1e:cb:a6:03:ee:21:dc:35:4f:fe:
2f:48:0f:61:8d:f7:b3:61:98:96:c4:72:2b:9d:4f:21:71:41:
ee:a1:43:64:bd:23:81:ff:bd:70:67:8b:3d:2c:d7:42:9a:4b:
9d:38:1a:d9:71:17:ab:7e:0a:7d:19:52:78:80:57:ad:d6:c9:
3c:ed:b7:ea:e2:d1:cc:3a:c6:a5:05:9b:d0:72:c3:56:b9:f5:
38:38:49:96:67:ed:d2:50:00:60:f4:87:cc:b3:56:ce:46:f3:
16:26:26:fe:f6:2d:e0:16:66:c9:c4:a5:df:d7:c2:3f:72:de:
9d:30:83:36
-----BEGIN CERTIFICATE-----
MIIFVDCCBDygAwIBAgIUC6puHuM/inensQw5088j7i+kmaEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMkEyRkI0REIwQUE0RDAwNjk1ODMxNjg3MkU0NjdCNTU0
RTBGRDBCRTAeFw0yNjA4MDYxNDQwMjlaFw0yNzA4MDUxNDQ1MjlaMDMxMTAvBgNV
BAMTKEMyNDlERjgxNzczREY5NDg1OEYxRDU5RjM0RkEzRjkzOUExRTM3REIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0w3xjFDs3QMXjN04X1rUTWaxe
GSqWC2S/TdpKdIs0f8CZQoGhOaaELhqz3akDgv7yaVHQez6qjVtwu6K6fSp/icmD
nIzE2YRbZWaZe0PwITlBP4XPAPy3JbW/J+VNGjYFO8uedu6BLOI20O3D/jXeNTTu
dUVD+TANjxaaXpDASp/8tHZDVTjrhaB6o0jzuRolx1D7yxNEOAl2xNoxY0oQh+jj
YbyCYKeAS42g3GJ8GB77V/NoJMY4q6Y63MXmQg1fVNXhXvfvtcsD6td3GXadF0yX
MtG6Vn8KYg8G0zLIY14lUZYawold15fheMua6FWSWc56MCZUwQWZE26xHaVzAgMB
AAGjggJeMIICWjAdBgNVHQ4EFgQUwknfgXc9+UhY8dWfNPo/k5oeN9swHwYDVR0j
BBgwFoAUKi+02wqk0AaVgxaHLkZ7VU4P0L4wDgYDVR0PAQH/BAQDAgeAMIGIBgNV
HR8EgYAwfjB8oHqgeIZ2cnN5bmM6Ly9yLm1hZ2VsbGFuLmlweG8uY29tL3JlcG8v
YTZmMjE0N2EtZGU4YS00NDQwLWJjYTItNmQ4YjdjODc2ZmRhLTAvMC8yQTJGQjRE
QjBBQTREMDA2OTU4MzE2ODcyRTQ2N0I1NTRFMEZEMEJFLmNybDCBngYIKwYBBQUH
AQEEgZEwgY4wgYsGCCsGAQUFBzAChn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5y
aXBlLm5ldC9yZXBvc2l0b3J5LzlkZjMzYTU3LTdlNGYtNDg0NC04NGUyLWI3MTUz
YjU1MTFiNC8wLzJBMkZCNERCMEFBNEQwMDY5NTgzMTY4NzJFNDY3QjU1NEUwRkQw
QkUuY2VyMIGgBggrBgEFBQcBCwSBkzCBkDCBjQYIKwYBBQUHMAuGgYByc3luYzov
L3IubWFnZWxsYW4uaXB4by5jb20vcmVwby9hNmYyMTQ3YS1kZThhLTQ0NDAtYmNh
Mi02ZDhiN2M4NzZmZGEtMC8wLzM1MmUzODMzMmUzMjMxMzcyZTMwMmYzMjM0MmQz
MjM0MjAzZDNlMjAzMjM1MzEzOTM4LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUF
Bw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQABVPZMA0GCSqGSIb3DQEB
CwUAA4IBAQArpDpAzP771Uug8lhyQ76fdDvKKcdezqdFalJELKw48+8kKkc+jT5F
F4p7f3AkguRNsu2OiFtQXunMy7SoqK1gtBvHi25cifAE1c7DtHxbozi1zxSfzUz2
DzkZeVE2qfnC6jl2r/me5le7y+S4zTMur2LvUDMvcpZ00C5f1PzRMn2G54feTh7L
pgPuIdw1T/4vSA9hjfezYZiWxHIrnU8hcUHuoUNkvSOB/71wZ4s9LNdCmkudOBrZ
cRerfgp9GVJ4gFet1sk87bfq4tHMOsalBZvQcsNWufU4OEmWZ+3SUABg9IfMs1bO
RvMWJib+9i3gFmbJxKXf18I/ct6dMIM2
-----END CERTIFICATE-----
Generated at Mon Aug 24 04:35:05 2026 by rpki-client