$ rpki-client -vvvf r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/AS5650.roa File: AS5650.roa (raw, json) Hash identifier: YFbheRz8rztH6LIXBCXzgqo2KurlrckAFdSTd3ho0D8= Subject key identifier: F5:C9:96:3F:55:69:8E:38:D7:22:1E:65:B8:EB:CE:82:ED:71:E3:DD Certificate issuer: /CN=B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5 Certificate serial: 2E6B85440B488B08BD5C9EA5CC34C78AB1CA525E Authority key identifier: B3:54:D3:28:CB:BF:D1:EF:3C:D2:92:68:A2:3B:0F:CC:60:E3:A2:C5 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.cer Subject info access: rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/AS5650.roa Signing time: Thu 10 Sep 2026 08:49:21 +0000 ROA not before: Thu 10 Sep 2026 08:44:21 +0000 ROA not after: Thu 09 Sep 2027 08:49:21 +0000 asID: 5650 IP address blocks: 62.144.32.0/22 maxlen: 24 62.144.36.0/22 maxlen: 24 62.144.40.0/22 maxlen: 24 62.144.44.0/22 maxlen: 24 62.144.48.0/24 maxlen: 24 62.144.49.0/24 maxlen: 24 62.144.50.0/24 maxlen: 24 62.144.51.0/24 maxlen: 24 62.144.52.0/24 maxlen: 24 62.144.53.0/24 maxlen: 24 62.144.54.0/24 maxlen: 24 62.144.55.0/24 maxlen: 24 Validation: OK Signature path: rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.crl rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.mft rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.cer rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/D0A516B50426202A424F0EBFCB7D2BD4F744F964.crl rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/D0A516B50426202A424F0EBFCB7D2BD4F744F964.mft rsync://rpki.ripe.net/repository/DEFAULT/0KUWtQQmICpCTw6_y30r1PdE-WQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 21 Sep 2026 05:00:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2e:6b:85:44:0b:48:8b:08:bd:5c:9e:a5:cc:34:c7:8a:b1:ca:52:5e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5 Validity Not Before: Sep 10 08:44:21 2026 GMT Not After : Sep 9 08:49:21 2027 GMT Subject: CN=F5C9963F55698E38D7221E65B8EBCE82ED71E3DD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:f8:d5:b8:25:cd:f4:e9:50:6c:91:c0:ec:ab: e4:a4:11:a3:11:6c:ed:5d:94:67:22:46:1a:0f:6e: 5c:c8:eb:a7:b2:27:e2:5b:76:8b:e9:72:c8:9f:31: 73:98:c6:f1:1b:d1:7d:28:a0:73:12:8a:64:63:ed: 28:63:fa:90:05:16:55:10:d0:2c:e4:58:79:9d:9f: 6d:86:32:37:af:06:f6:07:2a:e5:19:92:53:39:e4: 0a:5a:71:c2:a4:70:25:f8:96:ff:30:4e:a1:06:16: f1:33:fd:1b:f3:c8:7e:d7:7e:aa:9c:77:06:00:95: a0:86:a1:d0:33:39:d9:31:fa:76:5c:b7:66:cf:23: 73:bf:0a:a6:f5:02:77:33:40:23:6c:3f:39:47:3f: e2:63:f8:c4:ca:bf:cc:38:1f:31:e0:cf:3e:d7:5c: e0:12:0c:92:ad:bc:cd:fc:86:f9:d3:35:3e:d5:26: f4:b7:70:bd:de:bc:10:1b:01:a3:8b:a4:57:38:6f: dd:bc:49:da:86:63:79:44:4b:2b:94:25:d2:ae:df: 5d:5d:31:89:4f:40:92:3a:3a:01:3a:cc:31:cb:d4: 88:e8:94:d4:d3:c9:30:66:8e:c0:4f:84:cd:be:2a: e0:83:35:73:53:4d:4c:06:10:94:0a:73:a4:56:ba: 3f:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:C9:96:3F:55:69:8E:38:D7:22:1E:65:B8:EB:CE:82:ED:71:E3:DD X509v3 Authority Key Identifier: keyid:B3:54:D3:28:CB:BF:D1:EF:3C:D2:92:68:A2:3B:0F:CC:60:E3:A2:C5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.cer Subject Information Access: Signed Object - URI:rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/AS5650.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 62.144.32.0-62.144.55.255 Signature Algorithm: sha256WithRSAEncryption 3f:19:fb:b6:10:cc:bd:8b:29:4a:69:81:4f:1b:e5:7d:2b:17: b3:89:51:a0:55:7b:32:e3:26:ea:43:ba:51:e5:5e:b8:8f:13: 38:9b:83:74:7c:b5:eb:0c:15:2d:0c:21:15:e7:e5:7f:23:39: a9:16:8b:96:e0:29:60:c7:bd:af:0a:1e:59:fa:3b:99:b7:49: a0:0f:e4:d4:00:96:b7:4c:9d:95:74:2e:13:23:1a:ce:03:ae: 02:2d:05:97:61:ea:e7:92:73:32:ba:7e:2f:e5:c7:60:45:8a: dc:de:24:e9:56:45:20:c9:ea:fd:35:98:bd:c7:c0:7e:00:f4: 26:05:ce:4c:39:4b:c6:e3:f7:a2:a6:55:e3:17:aa:9d:1b:5e: db:e9:7f:45:99:c5:ba:06:e3:e1:e0:7e:65:f8:92:a4:dc:d6: f0:16:5b:de:91:8b:97:b4:22:77:54:e1:0f:50:ff:b2:35:90: b4:dc:af:f0:60:11:fa:7e:c0:3c:07:6c:80:9e:81:cb:b6:94: ff:a9:95:fa:b3:b3:28:0b:a7:1d:3e:a9:fa:bb:c9:de:17:e4: 7b:d5:a0:71:12:91:d8:15:aa:b6:b7:59:3e:a0:65:53:79:46: c5:ad:40:9a:4a:ce:44:50:42:ff:e0:83:7f:1a:27:ab:0b:2e: 92:c4:a7:ac -----BEGIN CERTIFICATE----- MIIFKzCCBBOgAwIBAgIULmuFRAtIiwi9XJ6lzDTHirHKUl4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjM1NEQzMjhDQkJGRDFFRjNDRDI5MjY4QTIzQjBGQ0M2 MEUzQTJDNTAeFw0yNjA5MTAwODQ0MjFaFw0yNzA5MDkwODQ5MjFaMDMxMTAvBgNV BAMTKEY1Qzk5NjNGNTU2OThFMzhENzIyMUU2NUI4RUJDRTgyRUQ3MUUzREQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7+NW4Jc306VBskcDsq+SkEaMR bO1dlGciRhoPblzI66eyJ+JbdovpcsifMXOYxvEb0X0ooHMSimRj7Shj+pAFFlUQ 0CzkWHmdn22GMjevBvYHKuUZklM55ApaccKkcCX4lv8wTqEGFvEz/RvzyH7Xfqqc dwYAlaCGodAzOdkx+nZct2bPI3O/Cqb1AnczQCNsPzlHP+Jj+MTKv8w4HzHgzz7X XOASDJKtvM38hvnTNT7VJvS3cL3evBAbAaOLpFc4b928SdqGY3lESyuUJdKu311d MYlPQJI6OgE6zDHL1IjolNTTyTBmjsBPhM2+KuCDNXNTTUwGEJQKc6RWuj9ZAgMB AAGjggI1MIICMTAdBgNVHQ4EFgQU9cmWP1VpjjjXIh5luOvOgu1x490wHwYDVR0j BBgwFoAUs1TTKMu/0e880pJoojsPzGDjosUwDgYDVR0PAQH/BAQDAgeAMIGIBgNV HR8EgYAwfjB8oHqgeIZ2cnN5bmM6Ly9yLm1hZ2VsbGFuLmlweG8uY29tL3JlcG8v YTAzNzViMzktZjk0OS00Y2I1LWI1MTktZjk0MDA4YjE2NTRjLTAvMC9CMzU0RDMy OENCQkZEMUVGM0NEMjkyNjhBMjNCMEZDQzYwRTNBMkM1LmNybDCBngYIKwYBBQUH AQEEgZEwgY4wgYsGCCsGAQUFBzAChn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5y aXBlLm5ldC9yZXBvc2l0b3J5LzYxNzA4YTZiLTZjM2EtNDBhMC1hMzAyLTU5NWVj YzE3ODQ4Yy8wL0IzNTREMzI4Q0JCRkQxRUYzQ0QyOTI2OEEyM0IwRkNDNjBFM0Ey QzUuY2VyMHAGCCsGAQUFBwELBGQwYjBgBggrBgEFBQcwC4ZUcnN5bmM6Ly9yLm1h Z2VsbGFuLmlweG8uY29tL3JlcG8vYTAzNzViMzktZjk0OS00Y2I1LWI1MTktZjk0 MDA4YjE2NTRjLTAvMC9BUzU2NTAucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUH DgIwJwYIKwYBBQUHAQcBAf8EGDAWMBQEAgABMA4wDAMEBT6QIAMEAz6QMDANBgkq hkiG9w0BAQsFAAOCAQEAPxn7thDMvYspSmmBTxvlfSsXs4lRoFV7MuMm6kO6UeVe uI8TOJuDdHy16wwVLQwhFeflfyM5qRaLluApYMe9rwoeWfo7mbdJoA/k1ACWt0yd lXQuEyMazgOuAi0Fl2Hq55JzMrp+L+XHYEWK3N4k6VZFIMnq/TWYvcfAfgD0JgXO TDlLxuP3oqZV4xeqnRte2+l/RZnFugbj4eB+ZfiSpNzW8BZb3pGLl7Qid1ThD1D/ sjWQtNyv8GAR+n7APAdsgJ6By7aU/6mV+rOzKAunHT6p+rvJ3hfke9WgcRKR2BWq trdZPqBlU3lGxa1AmkrORFBC/+CDfxonqwsuksSnrA== -----END CERTIFICATE-----Generated at Sun Sep 20 15:44:47 2026 by rpki-client