$ rpki-client -vvvf r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/36322e3134342e33332e302f32342d3234203d3e203136323736.roa File: 36322e3134342e33332e302f32342d3234203d3e203136323736.roa (raw, json) Hash identifier: 9yUYcZ7DYD30/FUyBAE5C3ZyIGv3SBfJ6GPcIddEJWg= Subject key identifier: 37:7D:6B:12:AC:C9:35:E3:EA:E4:12:2F:66:0F:05:1D:E1:35:79:13 Certificate issuer: /CN=B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5 Certificate serial: 5ECF7A3D391A2073BBCF56FDC83D4E9C3AE2D867 Authority key identifier: B3:54:D3:28:CB:BF:D1:EF:3C:D2:92:68:A2:3B:0F:CC:60:E3:A2:C5 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.cer Subject info access: rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/36322e3134342e33332e302f32342d3234203d3e203136323736.roa Signing time: Fri 16 Oct 2026 08:16:31 +0000 ROA not before: Fri 16 Oct 2026 08:11:31 +0000 ROA not after: Fri 15 Oct 2027 08:16:31 +0000 asID: 16276 IP address blocks: 62.144.33.0/24 maxlen: 24 Validation: OK Signature path: rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.crl rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.mft rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.cer rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/D0A516B50426202A424F0EBFCB7D2BD4F744F964.crl rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/D0A516B50426202A424F0EBFCB7D2BD4F744F964.mft rsync://rpki.ripe.net/repository/DEFAULT/0KUWtQQmICpCTw6_y30r1PdE-WQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Oct 2026 16:36:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5e:cf:7a:3d:39:1a:20:73:bb:cf:56:fd:c8:3d:4e:9c:3a:e2:d8:67 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5 Validity Not Before: Oct 16 08:11:31 2026 GMT Not After : Oct 15 08:16:31 2027 GMT Subject: CN=377D6B12ACC935E3EAE4122F660F051DE1357913 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:83:91:4e:f3:29:dd:e7:aa:c0:03:af:63:78: a4:f0:11:9d:ee:e1:1e:1d:36:3b:94:94:36:bd:31: e2:ec:7c:2d:d1:d7:c9:4b:1b:48:18:ba:5c:56:4b: 73:0d:67:eb:36:0f:49:ac:b2:83:cc:53:a6:00:6f: f4:cd:29:b2:9a:e5:84:c4:3f:78:d4:f3:04:fb:ae: bc:62:57:88:b4:be:70:ff:fc:7d:15:8d:1f:5f:5e: eb:dd:06:9e:ce:b7:54:f1:75:4f:ab:0e:a0:99:2a: b3:ec:eb:5f:48:2f:d0:26:67:41:94:dd:2a:11:c8: ca:36:08:14:46:80:d6:8f:4f:2a:87:9e:9c:46:b0: 35:5a:d3:e7:02:f6:56:3c:18:c0:79:e6:87:83:d3: 0f:87:7b:32:d5:a3:ed:7b:b3:73:d0:c2:47:c0:03: 85:ac:cd:99:2d:f4:57:33:3d:45:99:6b:d7:da:15: 5a:e4:ed:0c:5f:f9:9a:ad:0c:d8:11:4e:ae:dc:27: 3d:4f:bd:a0:37:9c:d1:d4:b7:29:c1:ae:28:e2:cb: 0e:a5:25:44:96:0c:7c:72:bf:ff:d3:de:7a:a2:cb: 01:e5:9e:cc:c5:c7:26:c7:18:e4:30:16:f7:7d:19: 32:d4:96:e3:13:b5:c2:f1:3d:e3:d3:76:fd:66:8d: 8c:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:7D:6B:12:AC:C9:35:E3:EA:E4:12:2F:66:0F:05:1D:E1:35:79:13 X509v3 Authority Key Identifier: keyid:B3:54:D3:28:CB:BF:D1:EF:3C:D2:92:68:A2:3B:0F:CC:60:E3:A2:C5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.cer Subject Information Access: Signed Object - URI:rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/36322e3134342e33332e302f32342d3234203d3e203136323736.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 62.144.33.0/24 Signature Algorithm: sha256WithRSAEncryption 5e:62:2f:5c:9d:52:a6:0e:88:97:3e:ef:a5:34:3e:aa:58:ea: b0:28:cd:4e:70:79:83:08:ab:2c:25:74:b6:d9:2d:3c:ad:83: 82:1a:e6:5b:62:85:85:06:71:5a:85:cf:2e:f5:8d:5a:89:c8: 70:6b:5c:ef:44:34:84:95:44:82:ca:1d:06:c8:1e:08:c0:03: 58:84:f0:b7:ce:7f:d8:1b:ab:84:a4:d8:12:8d:72:72:a3:3f: 1a:1e:8a:9d:10:96:25:95:16:89:a4:07:0b:05:d7:2f:cd:ea: 73:61:ad:90:f1:ae:14:86:43:56:b1:8c:72:b7:6e:35:90:5f: 8c:a9:29:fd:ae:66:6c:17:99:88:54:c1:ba:95:41:6b:ff:5b: 28:8f:3f:13:12:39:1a:63:90:e1:3b:14:56:43:17:4e:85:83: f6:a4:cd:00:08:17:d9:ec:48:fc:25:e3:01:ac:ae:bd:ef:d2: 24:59:13:3f:30:bf:50:40:5a:cb:52:ff:23:9d:85:e9:18:66: 99:8f:e4:f3:21:ba:31:66:e5:88:55:87:61:27:4e:30:6e:2b: bb:1c:98:33:aa:85:b4:58:bd:d5:0d:7d:ff:b1:08:ef:9d:3f: 7a:97:f6:b9:bc:25:6f:c4:34:ac:11:33:3e:a0:98:c4:03:70: 26:ef:d2:f7 -----BEGIN CERTIFICATE----- MIIFVjCCBD6gAwIBAgIUXs96PTkaIHO7z1b9yD1OnDri2GcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjM1NEQzMjhDQkJGRDFFRjNDRDI5MjY4QTIzQjBGQ0M2 MEUzQTJDNTAeFw0yNjEwMTYwODExMzFaFw0yNzEwMTUwODE2MzFaMDMxMTAvBgNV BAMTKDM3N0Q2QjEyQUNDOTM1RTNFQUU0MTIyRjY2MEYwNTFERTEzNTc5MTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5g5FO8ynd56rAA69jeKTwEZ3u 4R4dNjuUlDa9MeLsfC3R18lLG0gYulxWS3MNZ+s2D0mssoPMU6YAb/TNKbKa5YTE P3jU8wT7rrxiV4i0vnD//H0VjR9fXuvdBp7Ot1TxdU+rDqCZKrPs619IL9AmZ0GU 3SoRyMo2CBRGgNaPTyqHnpxGsDVa0+cC9lY8GMB55oeD0w+HezLVo+17s3PQwkfA A4WszZkt9FczPUWZa9faFVrk7Qxf+ZqtDNgRTq7cJz1PvaA3nNHUtynBrijiyw6l JUSWDHxyv//T3nqiywHlnszFxybHGOQwFvd9GTLUluMTtcLxPePTdv1mjYx9AgMB AAGjggJgMIICXDAdBgNVHQ4EFgQUN31rEqzJNePq5BIvZg8FHeE1eRMwHwYDVR0j BBgwFoAUs1TTKMu/0e880pJoojsPzGDjosUwDgYDVR0PAQH/BAQDAgeAMIGIBgNV HR8EgYAwfjB8oHqgeIZ2cnN5bmM6Ly9yLm1hZ2VsbGFuLmlweG8uY29tL3JlcG8v YTAzNzViMzktZjk0OS00Y2I1LWI1MTktZjk0MDA4YjE2NTRjLTAvMC9CMzU0RDMy OENCQkZEMUVGM0NEMjkyNjhBMjNCMEZDQzYwRTNBMkM1LmNybDCBngYIKwYBBQUH AQEEgZEwgY4wgYsGCCsGAQUFBzAChn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5y aXBlLm5ldC9yZXBvc2l0b3J5LzYxNzA4YTZiLTZjM2EtNDBhMC1hMzAyLTU5NWVj YzE3ODQ4Yy8wL0IzNTREMzI4Q0JCRkQxRUYzQ0QyOTI2OEEyM0IwRkNDNjBFM0Ey QzUuY2VyMIGiBggrBgEFBQcBCwSBlTCBkjCBjwYIKwYBBQUHMAuGgYJyc3luYzov L3IubWFnZWxsYW4uaXB4by5jb20vcmVwby9hMDM3NWIzOS1mOTQ5LTRjYjUtYjUx OS1mOTQwMDhiMTY1NGMtMC8wLzM2MzIyZTMxMzQzNDJlMzMzMzJlMzAyZjMyMzQy ZDMyMzQyMDNkM2UyMDMxMzYzMjM3MzYucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYB BQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAA+kCEwDQYJKoZIhvcN AQELBQADggEBAF5iL1ydUqYOiJc+76U0PqpY6rAozU5weYMIqywldLbZLTytg4Ia 5ltihYUGcVqFzy71jVqJyHBrXO9ENISVRILKHQbIHgjAA1iE8LfOf9gbq4Sk2BKN cnKjPxoeip0QliWVFomkBwsF1y/N6nNhrZDxrhSGQ1axjHK3bjWQX4ypKf2uZmwX mYhUwbqVQWv/WyiPPxMSORpjkOE7FFZDF06Fg/akzQAIF9nsSPwl4wGsrr3v0iRZ Ez8wv1BAWstS/yOdhekYZpmP5PMhujFm5YhVh2EnTjBuK7scmDOqhbRYvdUNff+x CO+dP3qX9rm8JW/ENKwRMz6gmMQDcCbv0vc= -----END CERTIFICATE-----Generated at Tue Oct 20 05:01:36 2026 by rpki-client