
$ rpki-client -vvf r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/36322e3134342e35362e302f32342d3234203d3e203133333437.roa
File: 36322e3134342e35362e302f32342d3234203d3e203133333437.roa (raw, json)
Hash identifier: 7D0hRdJcfIxB5eUITPHnPr/dQiZlITZSmYRefbsP7YA=
Subject key identifier: DB:C4:02:50:5F:A2:18:28:95:DC:9D:0E:25:DE:B4:08:97:79:3F:AF
Certificate issuer: /CN=B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5
Certificate serial: 3BCFD6328B8CF5D1FE7FA1B4876A331E4C663F60
Authority key identifier: B3:54:D3:28:CB:BF:D1:EF:3C:D2:92:68:A2:3B:0F:CC:60:E3:A2:C5
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.cer
Subject info access: rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/36322e3134342e35362e302f32342d3234203d3e203133333437.roa
Signing time: Tue 28 Jul 2026 12:18:16 +0000
ROA not before: Tue 28 Jul 2026 12:13:16 +0000
ROA not after: Tue 27 Jul 2027 12:18:16 +0000
asID: 13347
IP address blocks: 62.144.56.0/24 maxlen: 24
Validation: OK
Signature path: rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.crl
rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.mft
rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.cer
rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/D0A516B50426202A424F0EBFCB7D2BD4F744F964.crl
rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/D0A516B50426202A424F0EBFCB7D2BD4F744F964.mft
rsync://rpki.ripe.net/repository/DEFAULT/0KUWtQQmICpCTw6_y30r1PdE-WQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3b:cf:d6:32:8b:8c:f5:d1:fe:7f:a1:b4:87:6a:33:1e:4c:66:3f:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5
Validity
Not Before: Jul 28 12:13:16 2026 GMT
Not After : Jul 27 12:18:16 2027 GMT
Subject: CN=DBC402505FA2182895DC9D0E25DEB40897793FAF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:bf:76:33:b7:6a:9b:ef:c8:da:a3:01:40:c2:
5c:23:3f:79:01:04:b5:9e:7e:67:5a:d3:45:5e:23:
60:3b:7d:e0:f2:b6:3f:73:90:94:22:43:33:ab:8d:
d9:6e:c3:25:97:58:fc:8a:04:f7:67:dc:bc:c9:5e:
56:2d:c0:8f:01:83:1b:b1:c6:d1:6b:a7:00:dc:60:
7b:34:7a:86:e2:ec:26:26:e6:a2:4f:d2:1d:97:57:
53:9b:58:87:27:e9:5f:f4:86:17:19:12:7d:c8:41:
2e:c3:08:06:7b:e2:75:23:3c:1d:20:6a:14:d6:83:
93:21:9d:fd:57:26:93:68:66:ce:51:b2:48:fe:99:
a2:3e:57:4f:22:8c:98:8a:c9:e6:9d:07:ac:f0:e6:
ed:05:d2:70:5c:02:7f:8f:9c:f9:80:4b:78:44:46:
b3:25:c2:81:f5:61:78:06:a6:02:e2:51:8f:8c:1b:
8c:f2:a2:df:57:55:04:9d:b6:17:e6:90:97:04:a5:
46:d7:9d:92:81:3f:9f:2a:9e:3c:c6:cd:c0:b6:a0:
91:2f:e2:1c:f0:75:f4:45:9e:d9:7c:d7:ac:15:ce:
a3:41:e2:0a:33:ee:44:e9:3a:ca:2c:22:eb:cd:25:
0f:ed:1a:e6:fb:07:b1:6c:82:da:f3:32:39:db:33:
6f:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:C4:02:50:5F:A2:18:28:95:DC:9D:0E:25:DE:B4:08:97:79:3F:AF
X509v3 Authority Key Identifier:
keyid:B3:54:D3:28:CB:BF:D1:EF:3C:D2:92:68:A2:3B:0F:CC:60:E3:A2:C5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.cer
Subject Information Access:
Signed Object - URI:rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/36322e3134342e35362e302f32342d3234203d3e203133333437.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.144.56.0/24
Signature Algorithm: sha256WithRSAEncryption
ba:43:bf:81:97:1f:65:eb:a6:92:fb:ef:48:c6:a8:09:c4:31:
6b:ff:c6:d3:db:df:a0:e4:5c:f2:b6:30:a8:72:12:c2:e2:95:
8d:66:ec:16:d6:9f:12:8d:2c:df:50:2f:c9:22:1e:b2:a4:5c:
7b:c9:85:0f:7d:76:73:0d:0b:38:67:fe:dd:3e:34:6f:f5:cf:
d4:1d:8d:96:51:1a:dc:a9:61:50:8f:98:61:61:65:ab:77:18:
cb:4e:d1:cf:d9:7d:ce:63:d1:f3:8b:98:03:c2:2c:c5:a5:1e:
27:41:9b:f1:c8:9a:f9:35:f5:a6:00:9b:88:a8:14:28:db:52:
0f:ff:3c:09:e5:ea:5b:98:75:d9:9d:16:85:38:7c:6a:ba:83:
5d:a4:2d:64:59:39:27:73:80:f1:de:ec:bd:81:b3:9e:8d:8b:
8f:86:e7:b2:b0:83:50:79:70:52:98:04:41:4f:34:bf:9c:d0:
eb:04:85:2f:6c:4c:f9:1a:47:10:09:c9:db:1a:b6:97:7f:a3:
e6:b4:19:73:a2:e0:e3:3f:4c:be:f1:70:93:14:11:9a:d8:7a:
80:f1:78:a9:f1:fb:a7:ff:7e:1d:8d:90:98:7e:2c:4f:66:4d:
60:3b:81:16:3a:eb:5e:51:45:74:e8:5e:41:d2:4e:42:a0:d4:
87:94:83:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 17:16:06 2026 by rpki-client