
$ rpki-client -vvf r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/36322e3134342e35332e302f32342d3234203d3e2037303239.roa
File: 36322e3134342e35332e302f32342d3234203d3e2037303239.roa (raw, json)
Hash identifier: 13fNPAdyQROKINu0O9Q1e37HmnSeElc/qUpwn7i5dvc=
Subject key identifier: CE:AA:E2:EF:08:4C:5B:A7:7E:08:ED:61:1B:A5:E7:2F:A3:74:FB:67
Certificate issuer: /CN=B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5
Certificate serial: 2C23F95FAFD3B8ED0C4840CBEAA7CA1AE8F7D8E1
Authority key identifier: B3:54:D3:28:CB:BF:D1:EF:3C:D2:92:68:A2:3B:0F:CC:60:E3:A2:C5
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.cer
Subject info access: rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/36322e3134342e35332e302f32342d3234203d3e2037303239.roa
Signing time: Wed 25 Feb 2026 12:40:47 +0000
ROA not before: Wed 25 Feb 2026 12:35:47 +0000
ROA not after: Wed 24 Feb 2027 12:40:47 +0000
asID: 7029
IP address blocks: 62.144.53.0/24 maxlen: 24
Validation: OK
Signature path: rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.crl
rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.mft
rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.cer
rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/D0A516B50426202A424F0EBFCB7D2BD4F744F964.crl
rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/D0A516B50426202A424F0EBFCB7D2BD4F744F964.mft
rsync://rpki.ripe.net/repository/DEFAULT/0KUWtQQmICpCTw6_y30r1PdE-WQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 23:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2c:23:f9:5f:af:d3:b8:ed:0c:48:40:cb:ea:a7:ca:1a:e8:f7:d8:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5
Validity
Not Before: Feb 25 12:35:47 2026 GMT
Not After : Feb 24 12:40:47 2027 GMT
Subject: CN=CEAAE2EF084C5BA77E08ED611BA5E72FA374FB67
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:8e:92:80:c4:7d:d6:b4:84:0c:c4:cb:2e:43:
60:97:5b:33:4d:f5:89:eb:d7:ab:2f:17:79:5b:42:
81:29:09:87:c4:16:20:ad:97:7a:21:8b:1a:e6:a0:
b1:f1:fb:13:2f:da:8c:b0:67:bb:e4:73:12:60:8c:
58:17:28:01:29:fc:6e:91:57:f3:2a:7d:c4:36:3b:
f3:d3:22:b2:0d:1b:78:bd:a2:74:36:92:42:85:52:
82:37:c2:11:2a:fb:7f:04:8c:fa:23:1c:09:ec:43:
ff:17:70:89:e0:0f:0b:3b:68:36:46:61:e8:ce:73:
db:08:74:ed:08:9c:23:a4:33:1c:1e:94:ec:4a:aa:
e2:10:3d:20:63:cb:ae:d1:56:e1:ae:9d:c1:1b:94:
0b:60:fc:e5:d1:2b:41:41:89:41:cc:58:4d:7a:97:
83:8d:a3:93:43:89:fa:04:49:ef:cf:48:9e:d8:7f:
79:cb:df:5d:25:20:95:4b:a6:ef:c1:f9:96:d9:47:
f0:b9:91:05:20:6c:c2:80:86:df:c3:a8:86:19:9c:
5d:3f:96:36:a4:5b:b7:94:66:c0:d0:ff:f6:98:aa:
04:18:9c:e2:df:e1:c5:4a:86:78:68:b4:76:f1:a2:
82:fb:cd:eb:30:f4:1a:1f:92:a6:f8:14:0a:69:dc:
e7:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:AA:E2:EF:08:4C:5B:A7:7E:08:ED:61:1B:A5:E7:2F:A3:74:FB:67
X509v3 Authority Key Identifier:
keyid:B3:54:D3:28:CB:BF:D1:EF:3C:D2:92:68:A2:3B:0F:CC:60:E3:A2:C5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.cer
Subject Information Access:
Signed Object - URI:rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/36322e3134342e35332e302f32342d3234203d3e2037303239.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.144.53.0/24
Signature Algorithm: sha256WithRSAEncryption
bb:4a:c6:fb:18:e5:c8:48:6e:46:1a:05:f3:b4:38:ff:ca:5f:
60:7b:b6:aa:35:5e:bb:1a:62:d3:09:4e:29:76:1b:14:c1:54:
31:ce:13:08:f2:0a:ed:96:9b:41:a1:61:e8:cc:63:07:61:e4:
e7:41:67:5b:68:be:48:23:75:e3:6b:85:42:08:29:4a:62:09:
9e:27:b9:2b:51:15:34:f4:d5:4e:de:02:02:30:59:69:df:66:
15:c8:bc:a1:db:19:a2:05:96:f6:98:3c:54:71:d6:b5:36:f1:
7a:3f:03:ae:74:e3:da:ca:9e:e4:40:53:66:63:02:fb:b8:fd:
4b:ad:8e:b4:e3:52:c7:ae:2e:ae:06:66:6e:46:8f:e4:39:5e:
e4:11:f2:8f:6c:ab:cb:1d:30:d9:b0:40:41:05:0d:b5:7d:97:
c9:7e:be:57:4b:21:1a:78:4d:ee:ad:b9:51:ca:e9:67:73:ea:
b0:6d:39:8d:14:d6:b0:76:28:06:ed:96:c4:59:42:0e:63:ff:
52:d5:86:6c:86:52:f5:1d:fd:7c:a3:ec:ce:8d:5f:0f:83:49:
6d:dc:17:2a:2f:ec:e0:01:35:45:f6:63:42:73:fc:85:89:f9:
61:a9:b9:f3:e5:74:31:21:3c:89:82:71:fd:54:dc:8e:74:0f:
ab:31:27:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 16:20:05 2026 by rpki-client