
$ rpki-client -vvf r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/352e38332e3232312e302f32342d3234203d3e20313938303837.roa
File: 352e38332e3232312e302f32342d3234203d3e20313938303837.roa (raw, json)
Hash identifier: zM5uueVLy6/HkIhWuPDRax8jrEQX1GqvQXsGsbDDG6M=
Subject key identifier: 1B:9D:0C:6F:79:74:2F:77:74:E5:79:C9:8B:34:61:31:8D:18:2A:A8
Certificate issuer: /CN=2A2FB4DB0AA4D006958316872E467B554E0FD0BE
Certificate serial: 4772E0CB36A5877D6C45EC2B3BCA62187A92DCC9
Authority key identifier: 2A:2F:B4:DB:0A:A4:D0:06:95:83:16:87:2E:46:7B:55:4E:0F:D0:BE
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.cer
Subject info access: rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/352e38332e3232312e302f32342d3234203d3e20313938303837.roa
Signing time: Sun 24 May 2026 06:22:47 +0000
ROA not before: Sun 24 May 2026 06:17:47 +0000
ROA not after: Sun 23 May 2027 06:22:47 +0000
asID: 198087
IP address blocks: 5.83.221.0/24 maxlen: 24
Validation: OK
Signature path: rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.crl
rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.mft
rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.cer
rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.crl
rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft
rsync://rpki.ripe.net/repository/DEFAULT/RQLmPOAcrSOaw5e8K7Xmw0fc7uo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 04 Jun 2026 13:35:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
47:72:e0:cb:36:a5:87:7d:6c:45:ec:2b:3b:ca:62:18:7a:92:dc:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2A2FB4DB0AA4D006958316872E467B554E0FD0BE
Validity
Not Before: May 24 06:17:47 2026 GMT
Not After : May 23 06:22:47 2027 GMT
Subject: CN=1B9D0C6F79742F7774E579C98B3461318D182AA8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:fe:bd:18:e6:e2:f9:d0:6a:ae:e0:f8:af:6b:
43:ab:dd:6f:f5:c9:40:3b:02:87:32:9f:1e:70:29:
b3:4b:2c:23:3f:34:ce:bb:9d:99:05:c1:8f:d2:28:
54:d4:02:cd:fa:fa:da:cb:a8:5e:db:a5:67:f1:ff:
c2:c5:b8:f1:7b:ab:20:00:dc:c8:ff:f2:ca:ba:c6:
e8:53:41:30:6c:a2:77:c6:95:c7:2d:73:90:ab:47:
12:9a:4e:ea:64:0b:61:33:09:65:e2:cb:a8:3f:f4:
a6:a0:d1:56:0e:bf:53:02:43:c0:ad:a9:9c:c0:8e:
37:76:64:6b:c3:be:17:c8:c8:e0:17:20:46:9b:7e:
82:25:16:51:51:f4:18:1a:25:cc:40:15:62:e1:9d:
5e:99:bd:49:04:82:2e:11:33:c9:2c:cf:d5:a4:a6:
7c:08:ec:c9:5c:8a:99:9f:a5:ee:00:f8:d4:ea:fd:
10:ef:a5:7b:41:df:2e:c4:a7:39:e5:7b:7f:bd:d4:
a0:01:f8:d7:41:3b:e9:1c:71:3f:24:27:0e:5c:42:
c7:7d:15:f7:93:af:d7:e3:a6:0d:24:f2:2b:a8:71:
1a:bb:9a:50:43:7d:1e:71:15:e4:0e:13:3e:09:1b:
da:a9:54:be:b1:21:d0:1c:d2:13:d3:06:ff:39:2c:
d1:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:9D:0C:6F:79:74:2F:77:74:E5:79:C9:8B:34:61:31:8D:18:2A:A8
X509v3 Authority Key Identifier:
keyid:2A:2F:B4:DB:0A:A4:D0:06:95:83:16:87:2E:46:7B:55:4E:0F:D0:BE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.cer
Subject Information Access:
Signed Object - URI:rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/352e38332e3232312e302f32342d3234203d3e20313938303837.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.83.221.0/24
Signature Algorithm: sha256WithRSAEncryption
31:db:de:c0:ba:e8:4a:93:3d:c9:ef:3a:bb:25:e4:66:9d:98:
4c:7e:c8:49:c8:76:7d:61:dc:e0:e8:b7:ca:8d:1e:b8:e8:e1:
b6:04:9d:69:ce:ae:f5:14:b1:25:11:93:a7:92:97:ab:a2:ac:
47:df:fe:d9:af:13:e7:95:27:1c:01:69:56:e4:73:ed:35:51:
d5:14:33:85:81:ba:12:74:c8:d8:f7:79:a3:9c:b2:31:13:14:
c1:10:de:11:2f:4d:2c:89:59:28:cd:41:d6:8f:df:16:ec:ab:
08:2d:1e:02:cb:ad:dc:11:fa:b6:20:7a:6e:2a:e4:66:c8:a4:
64:f9:0f:f1:3f:70:22:3b:d7:14:9f:fc:2d:90:cf:d5:3a:e3:
33:1a:05:d0:16:6a:4a:ba:1f:0a:c2:9f:ae:a2:27:e5:5c:3c:
d2:ac:93:fa:3a:7b:fe:54:f3:91:65:bf:c6:f2:e0:b6:54:ee:
a7:81:53:68:dc:06:9f:89:e8:6a:e4:3d:32:71:1c:3d:c1:10:
4a:d3:ee:e7:27:49:71:c5:fa:eb:18:b6:07:e7:0e:5a:57:29:
b4:0e:be:22:96:04:4b:78:dd:f0:04:fc:ba:87:c9:ba:65:f7:
71:d4:0d:7a:73:d3:77:0f:59:1c:29:29:24:4d:18:d7:e4:36:
a5:6a:7c:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 4 05:11:22 2026 by rpki-client