
$ rpki-client -vvf r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/36322e3134342e34382e302f32342d3234203d3e2035363530.roa
File: 36322e3134342e34382e302f32342d3234203d3e2035363530.roa (raw, json)
Hash identifier: PlYPKmmbOm0Dy0WlstTESSWEWN+VoAGTNQg4J0Nlf+Y=
Subject key identifier: A3:85:8E:FD:4E:66:B6:5E:0F:46:CE:69:E6:70:0C:AC:E3:A3:46:20
Certificate issuer: /CN=B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5
Certificate serial: 32CED910FCBF66F797AA157B1304A68A2EE55F7D
Authority key identifier: B3:54:D3:28:CB:BF:D1:EF:3C:D2:92:68:A2:3B:0F:CC:60:E3:A2:C5
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.cer
Subject info access: rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/36322e3134342e34382e302f32342d3234203d3e2035363530.roa
Signing time: Wed 25 Feb 2026 12:40:45 +0000
ROA not before: Wed 25 Feb 2026 12:35:45 +0000
ROA not after: Wed 24 Feb 2027 12:40:45 +0000
asID: 5650
IP address blocks: 62.144.48.0/24 maxlen: 24
Validation: OK
Signature path: rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.crl
rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.mft
rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.cer
rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/D0A516B50426202A424F0EBFCB7D2BD4F744F964.crl
rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/D0A516B50426202A424F0EBFCB7D2BD4F744F964.mft
rsync://rpki.ripe.net/repository/DEFAULT/0KUWtQQmICpCTw6_y30r1PdE-WQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 23:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
32:ce:d9:10:fc:bf:66:f7:97:aa:15:7b:13:04:a6:8a:2e:e5:5f:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5
Validity
Not Before: Feb 25 12:35:45 2026 GMT
Not After : Feb 24 12:40:45 2027 GMT
Subject: CN=A3858EFD4E66B65E0F46CE69E6700CACE3A34620
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:df:34:62:ef:d8:d6:3c:0a:ef:ce:7f:57:05:
1a:d4:c8:8f:5b:d2:16:4b:a6:d7:4f:e7:d6:8a:b9:
68:8e:b4:19:43:12:af:51:18:b1:68:23:bc:1b:86:
27:26:5a:ec:0c:b1:55:80:ba:b0:d9:bd:ac:0d:83:
ea:fd:7c:83:1d:80:eb:80:f8:6d:96:ee:df:b7:78:
bf:60:61:cf:b5:1c:52:ad:2d:03:71:12:2a:0c:13:
f7:3a:ce:8a:67:02:1c:bf:c4:73:80:94:53:bb:b7:
c0:c6:bc:08:13:d4:0d:dc:44:ef:be:5e:59:b5:a3:
e1:6e:d1:62:e9:f9:7d:93:8f:0c:bc:35:26:93:ac:
26:46:95:c5:5f:f8:9a:88:b8:3b:13:3e:68:af:e4:
4b:76:12:8f:4b:98:f7:6c:4b:01:47:bb:1d:99:d3:
73:bd:ca:25:d5:8e:8b:9b:d7:22:d8:f8:e3:01:15:
2c:19:51:2a:b0:39:fa:2f:22:f4:5f:5c:99:22:bc:
5c:96:19:55:d7:0e:5e:50:17:ea:ca:5d:bd:ca:38:
2d:2b:8f:c3:1e:de:ed:2d:5e:00:a8:d4:14:72:79:
24:69:11:62:9e:b6:76:9c:01:a0:10:bb:ac:b7:82:
80:dd:71:fb:32:bf:a9:41:53:90:a0:65:c7:72:e7:
f9:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:85:8E:FD:4E:66:B6:5E:0F:46:CE:69:E6:70:0C:AC:E3:A3:46:20
X509v3 Authority Key Identifier:
keyid:B3:54:D3:28:CB:BF:D1:EF:3C:D2:92:68:A2:3B:0F:CC:60:E3:A2:C5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.cer
Subject Information Access:
Signed Object - URI:rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/36322e3134342e34382e302f32342d3234203d3e2035363530.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.144.48.0/24
Signature Algorithm: sha256WithRSAEncryption
96:b8:35:3e:1a:73:3d:f0:3d:d4:1e:bf:bf:ce:84:97:f8:d7:
28:64:83:a6:63:c1:86:a6:26:6d:7b:d8:41:a6:d6:ad:52:bd:
63:95:2c:66:4b:45:9c:96:a9:f1:fe:b7:0f:63:40:c0:3c:45:
f8:b7:66:42:ca:37:2f:b5:92:2d:2f:9c:b1:09:13:9c:fb:af:
a0:77:cd:25:ba:da:e4:80:56:ac:71:b2:22:f2:8f:31:54:9b:
67:8c:44:4e:83:ca:53:83:47:12:08:53:5a:b3:6c:c4:25:62:
6d:f5:17:ed:ed:da:98:b8:8d:2c:07:59:16:2c:3a:06:d0:d3:
3b:52:24:7d:49:af:c1:7d:b8:2e:d7:d6:9a:46:2c:31:25:65:
d5:e2:d9:5b:87:d9:9e:3c:7a:fb:c6:33:c3:64:22:bf:48:f3:
0e:d8:85:40:49:50:35:f0:6c:2d:1f:86:39:8e:de:31:6c:af:
c5:4e:68:74:eb:71:28:05:c6:57:0f:67:53:7c:c3:79:a5:c3:
eb:61:6c:36:2e:76:d3:dc:7d:d5:f8:80:fb:19:6f:2c:58:8b:
86:70:ca:11:31:41:cc:8d:2e:b1:1c:8c:e8:40:b3:0e:40:f8:
61:82:6d:a9:fb:42:da:a0:cd:d0:74:8c:d8:24:b2:2b:4f:a3:
fc:16:b9:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 11:04:14 2026 by rpki-client