$ rpki-client -vvf r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/AS5650.roa File: AS5650.roa (raw, json) Hash identifier: 6pbtq8uwIGbltAo+evBqF8CSAwoIYoRYNdBw6sUHuqM= Subject key identifier: 57:CD:77:57:0E:6D:46:55:75:C3:39:11:67:E2:0B:7C:57:C3:1E:7F Certificate issuer: /CN=B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5 Certificate serial: 4D02115C03ECE38963E8B572285125821C74F582 Authority key identifier: B3:54:D3:28:CB:BF:D1:EF:3C:D2:92:68:A2:3B:0F:CC:60:E3:A2:C5 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.cer Subject info access: rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/AS5650.roa Signing time: Fri 10 Jul 2026 20:23:20 +0000 ROA not before: Fri 10 Jul 2026 20:18:20 +0000 ROA not after: Fri 09 Jul 2027 20:23:20 +0000 asID: 5650 IP address blocks: 62.144.32.0/22 maxlen: 24 62.144.36.0/22 maxlen: 24 62.144.40.0/22 maxlen: 24 62.144.44.0/22 maxlen: 24 62.144.48.0/24 maxlen: 24 62.144.49.0/24 maxlen: 24 62.144.50.0/24 maxlen: 24 62.144.51.0/24 maxlen: 24 62.144.52.0/24 maxlen: 24 62.144.53.0/24 maxlen: 24 62.144.54.0/24 maxlen: 24 62.144.55.0/24 maxlen: 24 62.144.56.0/24 maxlen: 24 62.144.57.0/24 maxlen: 24 62.144.58.0/24 maxlen: 24 62.144.59.0/24 maxlen: 24 62.144.60.0/24 maxlen: 24 62.144.61.0/24 maxlen: 24 62.144.62.0/24 maxlen: 24 62.144.63.0/24 maxlen: 24 Validation: OK Signature path: rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.crl rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.mft rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.cer rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/D0A516B50426202A424F0EBFCB7D2BD4F744F964.crl rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/D0A516B50426202A424F0EBFCB7D2BD4F744F964.mft rsync://rpki.ripe.net/repository/DEFAULT/0KUWtQQmICpCTw6_y30r1PdE-WQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 18 Jul 2026 15:41:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4d:02:11:5c:03:ec:e3:89:63:e8:b5:72:28:51:25:82:1c:74:f5:82 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5 Validity Not Before: Jul 10 20:18:20 2026 GMT Not After : Jul 9 20:23:20 2027 GMT Subject: CN=57CD77570E6D465575C3391167E20B7C57C31E7F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:41:e7:a8:c4:f6:41:86:9d:e6:fd:8a:5b:10: 92:3d:33:14:24:32:52:4b:ec:aa:c0:7f:76:07:ad: b6:1d:c7:f7:52:2b:35:ef:07:38:2f:d8:cc:19:18: fd:bd:1f:a4:5f:9f:c2:cd:63:b9:3b:9e:88:c1:12: 5a:92:ea:f9:dd:2b:c6:13:60:ce:84:14:4f:54:28: 1b:8f:08:df:76:8b:33:01:1c:7f:eb:8d:98:57:68: a7:27:55:23:32:15:fb:fc:49:f2:52:07:eb:42:9b: 4e:85:29:fe:36:56:5f:5a:aa:fc:25:fb:82:28:98: d4:13:06:cc:b5:ec:d1:99:b4:2e:85:aa:47:62:2c: 85:99:17:05:14:ad:9b:b5:58:de:55:14:cb:a1:47: 19:7a:22:90:f5:d7:ee:02:ff:24:29:f9:48:4e:0c: 5c:b4:16:73:89:34:48:65:5a:f9:a2:13:b7:c9:4c: a5:f1:7e:ac:fa:51:83:f3:5f:15:de:4c:2e:84:5e: 86:a9:d2:9c:6a:25:10:f3:75:8f:0c:54:30:ad:11: e0:c1:1b:12:df:2d:a8:65:90:6b:88:fe:fe:6f:5c: 3b:41:70:a0:be:0e:8f:6e:48:72:07:42:da:87:80: 12:8e:64:d4:81:cc:c8:a6:94:7f:63:58:f7:67:53: a3:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:CD:77:57:0E:6D:46:55:75:C3:39:11:67:E2:0B:7C:57:C3:1E:7F X509v3 Authority Key Identifier: keyid:B3:54:D3:28:CB:BF:D1:EF:3C:D2:92:68:A2:3B:0F:CC:60:E3:A2:C5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.cer Subject Information Access: Signed Object - URI:rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/AS5650.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 62.144.32.0/19 Signature Algorithm: sha256WithRSAEncryption 48:23:da:ae:3f:bb:11:bd:c3:dc:b0:36:17:3c:cd:fe:72:07: 23:91:60:b1:bc:92:6e:be:df:dd:61:35:20:20:b5:f3:7a:43: 13:ba:f2:51:b5:b6:f8:0c:34:fb:be:cb:62:36:ee:bf:37:5f: 82:ed:be:5c:c8:9a:f9:e4:71:a6:f9:7b:0e:35:cb:80:46:be: 0f:25:64:f0:8f:0c:89:8f:b8:6f:15:5f:74:3c:a8:fb:42:9a: 4b:63:83:b6:ac:21:e0:0a:87:9d:4d:5e:cb:02:86:59:36:59: 26:99:87:09:e9:62:47:b2:73:ad:b7:5e:e1:85:a3:fe:3f:96: 0e:49:ed:19:24:d7:37:59:c9:db:c8:24:c0:f9:f7:a1:65:8c: 5b:09:82:c1:02:b1:41:f8:3e:5d:7b:19:95:4f:94:61:cf:b8: 5c:0d:7a:18:59:e2:82:f2:f6:53:b3:d6:d9:b8:05:34:4d:07: dc:c2:35:92:6f:67:4c:8d:df:30:6e:e9:e6:f1:02:cd:9b:82: 43:9a:f1:a2:cf:98:1b:92:28:34:c7:c8:e0:62:17:64:ab:6e: a5:92:32:d1:0c:b1:54:08:1d:49:da:2c:2a:45:0b:d5:2b:60: 39:2b:92:27:0d:43:a7:63:66:5c:aa:9a:8e:3b:e9:cc:49:04: 70:49:d6:f4 -----BEGIN CERTIFICATE----- MIIFIzCCBAugAwIBAgIUTQIRXAPs44lj6LVyKFElghx09YIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjM1NEQzMjhDQkJGRDFFRjNDRDI5MjY4QTIzQjBGQ0M2 MEUzQTJDNTAeFw0yNjA3MTAyMDE4MjBaFw0yNzA3MDkyMDIzMjBaMDMxMTAvBgNV BAMTKDU3Q0Q3NzU3MEU2RDQ2NTU3NUMzMzkxMTY3RTIwQjdDNTdDMzFFN0YwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDIQeeoxPZBhp3m/YpbEJI9MxQk MlJL7KrAf3YHrbYdx/dSKzXvBzgv2MwZGP29H6Rfn8LNY7k7nojBElqS6vndK8YT YM6EFE9UKBuPCN92izMBHH/rjZhXaKcnVSMyFfv8SfJSB+tCm06FKf42Vl9aqvwl +4IomNQTBsy17NGZtC6FqkdiLIWZFwUUrZu1WN5VFMuhRxl6IpD11+4C/yQp+UhO DFy0FnOJNEhlWvmiE7fJTKXxfqz6UYPzXxXeTC6EXoap0pxqJRDzdY8MVDCtEeDB GxLfLahlkGuI/v5vXDtBcKC+Do9uSHIHQtqHgBKOZNSBzMimlH9jWPdnU6NZAgMB AAGjggItMIICKTAdBgNVHQ4EFgQUV813Vw5tRlV1wzkRZ+ILfFfDHn8wHwYDVR0j BBgwFoAUs1TTKMu/0e880pJoojsPzGDjosUwDgYDVR0PAQH/BAQDAgeAMIGIBgNV HR8EgYAwfjB8oHqgeIZ2cnN5bmM6Ly9yLm1hZ2VsbGFuLmlweG8uY29tL3JlcG8v YTAzNzViMzktZjk0OS00Y2I1LWI1MTktZjk0MDA4YjE2NTRjLTAvMC9CMzU0RDMy OENCQkZEMUVGM0NEMjkyNjhBMjNCMEZDQzYwRTNBMkM1LmNybDCBngYIKwYBBQUH AQEEgZEwgY4wgYsGCCsGAQUFBzAChn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5y aXBlLm5ldC9yZXBvc2l0b3J5LzYxNzA4YTZiLTZjM2EtNDBhMC1hMzAyLTU5NWVj YzE3ODQ4Yy8wL0IzNTREMzI4Q0JCRkQxRUYzQ0QyOTI2OEEyM0IwRkNDNjBFM0Ey QzUuY2VyMHAGCCsGAQUFBwELBGQwYjBgBggrBgEFBQcwC4ZUcnN5bmM6Ly9yLm1h Z2VsbGFuLmlweG8uY29tL3JlcG8vYTAzNzViMzktZjk0OS00Y2I1LWI1MTktZjk0 MDA4YjE2NTRjLTAvMC9BUzU2NTAucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUH DgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAU+kCAwDQYJKoZIhvcNAQEL BQADggEBAEgj2q4/uxG9w9ywNhc8zf5yByORYLG8km6+391hNSAgtfN6QxO68lG1 tvgMNPu+y2I27r83X4LtvlzImvnkcab5ew41y4BGvg8lZPCPDImPuG8VX3Q8qPtC mktjg7asIeAKh51NXssChlk2WSaZhwnpYkeyc623XuGFo/4/lg5J7Rkk1zdZydvI JMD596FljFsJgsECsUH4Pl17GZVPlGHPuFwNehhZ4oLy9lOz1tm4BTRNB9zCNZJv Z0yN3zBu6ebxAs2bgkOa8aLPmBuSKDTHyOBiF2SrbqWSMtEMsVQIHUnaLCpFC9Ur YDkrkicNQ6djZlyqmo476cxJBHBJ1vQ= -----END CERTIFICATE-----Generated at Sat Jul 18 03:24:20 2026 by rpki-client