
$ rpki-client -vvf r.magellan.ipxo.com/repo/ddd1818b-9fbf-440c-aaec-44a4d1590f87-0/0/3130392e37322e3132312e302f32342d3234203d3e2036303739.roa
File: 3130392e37322e3132312e302f32342d3234203d3e2036303739.roa (raw, json)
Hash identifier: MOFYT8K/pKsc6KBoRr2Pq5oeTEYERCK2fFjNhb4UUXY=
Subject key identifier: FF:A2:42:72:51:6B:E5:DC:BF:E3:C2:90:94:E9:1B:AD:F3:CF:B7:39
Certificate issuer: /CN=C972E8671DEDC43FE908B548531C969A051CD34C
Certificate serial: 498EE204D23E978E85421EDFBBAEC0D5B64ED9E3
Authority key identifier: C9:72:E8:67:1D:ED:C4:3F:E9:08:B5:48:53:1C:96:9A:05:1C:D3:4C
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/2/C972E8671DEDC43FE908B548531C969A051CD34C.cer
Subject info access: rsync://r.magellan.ipxo.com/repo/ddd1818b-9fbf-440c-aaec-44a4d1590f87-0/0/3130392e37322e3132312e302f32342d3234203d3e2036303739.roa
Signing time: Mon 06 Jul 2026 18:22:47 +0000
ROA not before: Mon 06 Jul 2026 18:17:47 +0000
ROA not after: Mon 05 Jul 2027 18:22:47 +0000
asID: 6079
IP address blocks: 109.72.121.0/24 maxlen: 24
Validation: OK
Signature path: rsync://r.magellan.ipxo.com/repo/ddd1818b-9fbf-440c-aaec-44a4d1590f87-0/0/C972E8671DEDC43FE908B548531C969A051CD34C.crl
rsync://r.magellan.ipxo.com/repo/ddd1818b-9fbf-440c-aaec-44a4d1590f87-0/0/C972E8671DEDC43FE908B548531C969A051CD34C.mft
rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/2/C972E8671DEDC43FE908B548531C969A051CD34C.cer
rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/2/CF0631D33A3C9DC5C45424D55C3E7663838657A3.crl
rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/2/CF0631D33A3C9DC5C45424D55C3E7663838657A3.mft
rsync://rpki.ripe.net/repository/DEFAULT/zwYx0zo8ncXEVCTVXD52Y4OGV6M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Jul 2026 09:59:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
49:8e:e2:04:d2:3e:97:8e:85:42:1e:df:bb:ae:c0:d5:b6:4e:d9:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C972E8671DEDC43FE908B548531C969A051CD34C
Validity
Not Before: Jul 6 18:17:47 2026 GMT
Not After : Jul 5 18:22:47 2027 GMT
Subject: CN=FFA24272516BE5DCBFE3C29094E91BADF3CFB739
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:60:fc:a3:a4:d8:27:ac:36:62:f2:31:46:00:
34:2d:8f:76:39:c6:a6:5c:24:ed:75:39:fb:5f:34:
c5:69:88:78:ff:51:44:9f:a9:e4:51:b5:f9:e4:f6:
67:06:a5:f0:58:30:bf:eb:7a:8d:05:03:c9:ed:c8:
1d:c3:b5:07:c8:8a:40:b4:81:4b:0f:98:38:6c:e2:
ac:89:24:93:dc:42:ec:4c:38:e7:77:ce:6f:9a:a3:
04:78:6e:23:3b:88:ac:0a:93:ac:72:15:0f:1f:90:
1d:74:f8:73:6f:cb:22:98:7d:f4:e9:0e:45:f9:c9:
a1:67:a6:d2:6c:66:0d:22:50:f2:d3:93:db:72:50:
7e:57:86:5c:e6:53:71:03:8c:9b:33:13:a5:fb:71:
b5:84:0d:5c:03:6e:c2:97:a2:d6:0f:65:5c:d3:dd:
bf:48:aa:7c:fc:a5:de:a1:df:7b:d7:43:62:51:39:
ac:a8:5e:9b:df:b3:02:52:65:ce:23:cc:96:97:37:
a4:6f:cb:3b:84:6d:d6:80:90:42:ca:78:b5:ad:41:
c9:e6:8b:68:5c:da:a4:27:61:01:c5:9c:4a:d6:e0:
c3:9a:d1:a5:48:b2:1e:bf:76:b3:8a:e3:ab:bb:0c:
3a:59:d0:84:21:9c:4f:2d:a1:a5:55:24:32:89:8f:
60:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:A2:42:72:51:6B:E5:DC:BF:E3:C2:90:94:E9:1B:AD:F3:CF:B7:39
X509v3 Authority Key Identifier:
keyid:C9:72:E8:67:1D:ED:C4:3F:E9:08:B5:48:53:1C:96:9A:05:1C:D3:4C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://r.magellan.ipxo.com/repo/ddd1818b-9fbf-440c-aaec-44a4d1590f87-0/0/C972E8671DEDC43FE908B548531C969A051CD34C.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/2/C972E8671DEDC43FE908B548531C969A051CD34C.cer
Subject Information Access:
Signed Object - URI:rsync://r.magellan.ipxo.com/repo/ddd1818b-9fbf-440c-aaec-44a4d1590f87-0/0/3130392e37322e3132312e302f32342d3234203d3e2036303739.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.72.121.0/24
Signature Algorithm: sha256WithRSAEncryption
89:23:0c:b9:a0:40:f0:22:a5:15:f7:fe:c5:d9:a6:26:ed:62:
dd:ea:52:be:d4:14:8b:16:68:f0:ea:36:a1:d9:04:2a:b2:27:
8c:ce:bc:a4:a3:bf:79:2e:2a:6f:8c:28:74:06:1a:1b:d1:ba:
da:17:99:70:3b:ad:66:1f:7e:f4:e8:47:66:86:32:83:9a:b4:
20:38:d7:fc:3e:d3:24:3d:05:3f:4f:50:ab:76:a9:92:98:39:
37:79:d6:15:9a:9a:b5:c4:85:e2:f3:10:2b:26:7a:24:bd:08:
63:3b:db:61:09:cd:6b:6b:bd:eb:0c:1c:42:34:b9:b2:7f:c3:
4d:8d:ae:d9:56:ae:8b:a6:58:44:cd:f4:36:76:7e:b7:ea:fe:
80:a4:ce:11:7b:ac:fc:11:e9:c2:02:90:15:e0:e4:7b:6e:92:
f3:ec:bb:ed:81:83:80:10:ef:c4:1a:91:02:8a:63:ed:0f:e2:
e2:ff:e0:57:09:0b:10:28:81:35:bf:01:b9:78:5b:a9:f5:e6:
7e:bf:52:20:3a:d0:dd:6c:78:e5:37:da:e4:f0:0d:b1:4e:76:
2d:ab:7e:0d:6b:41:6e:00:57:19:f1:12:ee:8e:b0:24:eb:52:
9d:9b:76:6b:33:ae:05:a7:2d:09:97:b4:b0:98:04:67:83:9b:
e6:3c:4b:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 18 02:20:14 2026 by rpki-client