
$ rpki-client -vvf r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/36322e3134342e35372e302f32342d3234203d3e2037303239.roa
File: 36322e3134342e35372e302f32342d3234203d3e2037303239.roa (raw, json)
Hash identifier: 6Xp5H5VI+9QiOJjHy2PlSKbj3Vu5wHjtfvfSiSxsou0=
Subject key identifier: 00:08:04:AD:B0:73:BE:59:8F:E9:E3:67:5A:F2:99:BC:21:E4:CD:68
Certificate issuer: /CN=B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5
Certificate serial: 42A99618AED4D305EF38D8ABB8D7EA17F199190E
Authority key identifier: B3:54:D3:28:CB:BF:D1:EF:3C:D2:92:68:A2:3B:0F:CC:60:E3:A2:C5
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.cer
Subject info access: rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/36322e3134342e35372e302f32342d3234203d3e2037303239.roa
Signing time: Wed 25 Feb 2026 12:40:49 +0000
ROA not before: Wed 25 Feb 2026 12:35:49 +0000
ROA not after: Wed 24 Feb 2027 12:40:49 +0000
asID: 7029
IP address blocks: 62.144.57.0/24 maxlen: 24
Validation: OK
Signature path: rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.crl
rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.mft
rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.cer
rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/D0A516B50426202A424F0EBFCB7D2BD4F744F964.crl
rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/D0A516B50426202A424F0EBFCB7D2BD4F744F964.mft
rsync://rpki.ripe.net/repository/DEFAULT/0KUWtQQmICpCTw6_y30r1PdE-WQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 23:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
42:a9:96:18:ae:d4:d3:05:ef:38:d8:ab:b8:d7:ea:17:f1:99:19:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5
Validity
Not Before: Feb 25 12:35:49 2026 GMT
Not After : Feb 24 12:40:49 2027 GMT
Subject: CN=000804ADB073BE598FE9E3675AF299BC21E4CD68
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:23:97:76:ae:46:1f:1d:96:b8:4b:b9:8a:f6:
fd:35:00:06:46:d3:f0:8f:59:4c:e4:fd:15:8d:14:
da:06:f4:12:75:d2:f5:62:3c:bc:95:5e:ce:93:fb:
cf:b9:a4:2f:7a:0c:e6:4d:8c:d6:de:1c:ec:76:0f:
e7:f8:bb:78:ea:fb:3b:cd:d3:4f:98:ad:96:d3:dc:
48:f1:5c:e5:4e:6b:9c:46:2b:9b:57:79:ae:41:4e:
5a:fa:a9:fe:72:33:54:81:4a:a3:90:09:39:4a:bd:
5e:41:d5:9a:e3:ce:7e:55:41:d3:d1:80:f6:e8:a6:
d3:1e:0c:c2:59:96:ec:3c:c8:62:1e:a6:b9:76:e9:
fd:84:63:a3:5b:3f:ce:8c:e1:13:44:e6:37:ba:c9:
cc:06:1a:88:74:58:1c:45:72:d2:6f:bd:ff:38:5f:
28:2d:1f:b8:83:7a:7b:8b:78:d8:ec:1c:c8:32:a0:
ca:c6:7a:f3:df:60:4e:f0:b6:3d:3e:de:a1:1c:42:
81:37:21:d0:32:85:55:5a:b5:d1:24:84:55:be:44:
85:e5:73:18:2f:3f:a9:db:65:1a:11:62:75:1c:33:
da:bb:d1:29:a6:9a:51:da:1b:d1:4f:e7:1e:d7:34:
48:5e:a4:6b:b6:01:b5:74:eb:83:39:d2:d7:31:24:
fd:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:08:04:AD:B0:73:BE:59:8F:E9:E3:67:5A:F2:99:BC:21:E4:CD:68
X509v3 Authority Key Identifier:
keyid:B3:54:D3:28:CB:BF:D1:EF:3C:D2:92:68:A2:3B:0F:CC:60:E3:A2:C5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.cer
Subject Information Access:
Signed Object - URI:rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/36322e3134342e35372e302f32342d3234203d3e2037303239.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.144.57.0/24
Signature Algorithm: sha256WithRSAEncryption
1d:76:36:b3:65:04:01:46:06:b7:b3:0a:0d:22:c7:63:9f:f8:
4a:45:3f:e1:03:56:d2:c0:8c:56:4f:7a:94:3f:ae:1f:13:7f:
4a:da:e3:a9:4b:99:92:b7:84:eb:bf:87:c5:fd:d6:a8:74:78:
f7:e0:61:8c:8c:8e:f4:50:93:18:dd:1d:a4:9a:09:6e:17:86:
b6:cd:eb:e7:94:d8:20:dd:19:d0:b8:fa:00:d0:89:d4:cd:1f:
18:44:0c:5e:2a:41:27:22:3c:39:87:06:9b:9b:a9:fb:9c:bc:
08:4a:4d:ac:29:68:6d:21:42:15:57:45:7b:f5:6b:b6:f9:5d:
a6:56:47:c9:db:94:c6:d8:75:c5:93:ad:80:1e:4a:86:82:78:
11:10:24:35:64:3d:ad:10:e7:db:c0:1f:43:eb:41:6d:6f:32:
8a:48:85:4d:33:64:f2:4f:09:25:b4:7e:e9:43:d3:74:03:a8:
a6:2a:d5:c2:4f:6d:6f:55:8b:60:b0:ba:0d:62:58:2f:70:9e:
af:b2:a0:fe:14:3d:bb:24:8f:22:31:da:02:91:8d:d3:fe:31:
2d:10:13:ee:2a:4e:ec:a7:33:1f:71:3a:43:b7:45:05:08:9e:
21:d7:a2:37:3d:73:3c:d4:63:48:13:ec:9d:54:5d:e5:72:40:
61:ad:bb:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 12:22:32 2026 by rpki-client