$ rpki-client -vvvf r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/36322e3134342e33352e302f32342d3234203d3e20333937343233.roa File: 36322e3134342e33352e302f32342d3234203d3e20333937343233.roa (raw, json) Hash identifier: vE0KI2F0HB2BwYEQXT+gVQcqdIlL/x1f8ZZ9ksMOJmw= Subject key identifier: 20:A5:2A:B8:62:64:CF:6D:64:01:52:E6:02:18:23:F0:A2:00:37:DF Certificate issuer: /CN=B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5 Certificate serial: 06A14BC302FE538D98A2E2C4B7C6F4EBF5C6732C Authority key identifier: B3:54:D3:28:CB:BF:D1:EF:3C:D2:92:68:A2:3B:0F:CC:60:E3:A2:C5 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.cer Subject info access: rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/36322e3134342e33352e302f32342d3234203d3e20333937343233.roa Signing time: Sat 17 Oct 2026 03:59:44 +0000 ROA not before: Sat 17 Oct 2026 03:54:44 +0000 ROA not after: Sat 16 Oct 2027 03:59:44 +0000 asID: 397423 IP address blocks: 62.144.35.0/24 maxlen: 24 Validation: OK Signature path: rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.crl rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.mft rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.cer rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/D0A516B50426202A424F0EBFCB7D2BD4F744F964.crl rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/D0A516B50426202A424F0EBFCB7D2BD4F744F964.mft rsync://rpki.ripe.net/repository/DEFAULT/0KUWtQQmICpCTw6_y30r1PdE-WQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Oct 2026 16:36:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 06:a1:4b:c3:02:fe:53:8d:98:a2:e2:c4:b7:c6:f4:eb:f5:c6:73:2c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5 Validity Not Before: Oct 17 03:54:44 2026 GMT Not After : Oct 16 03:59:44 2027 GMT Subject: CN=20A52AB86264CF6D640152E6021823F0A20037DF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:64:b2:99:a8:a5:cb:5e:4e:2f:06:3c:c7:b5: 7d:a7:54:5b:53:7c:2a:6f:0f:b5:67:d6:be:cc:75: 75:04:b3:f2:84:7d:c3:25:f1:78:8d:59:0c:76:bb: bb:47:98:e9:f7:52:60:aa:02:3c:07:90:e1:cd:4d: 7c:71:50:32:84:b8:53:05:ee:2b:8c:40:67:00:33: 92:f5:05:40:39:a8:7a:74:ad:06:7d:71:e5:4d:b1: 64:ed:d7:ad:99:f7:17:9a:51:0f:99:5a:bf:e7:52: 5e:8e:0d:ea:02:04:d7:c5:a3:30:02:15:0f:82:c7: 07:87:83:73:6f:f7:86:66:b0:94:5e:75:1e:cb:78: e4:06:37:23:33:67:04:8b:37:00:09:b9:e4:cd:d2: c2:2e:b5:b4:3a:f8:e4:99:14:ae:86:6e:0f:e6:03: 27:47:68:f1:3d:4f:68:ef:fc:c3:63:71:44:fd:d5: 4d:39:ff:a2:9c:17:f0:5a:c6:6a:2a:70:c8:2f:d2: 3c:d3:fe:80:9c:22:36:10:a0:8a:89:9f:ca:ea:9d: ea:31:d5:a0:f9:32:bf:8f:5e:14:83:62:f2:ed:5e: 61:87:24:86:f4:81:a2:c4:ed:a1:e4:71:0c:07:25: 4a:74:45:01:c7:97:bc:8b:f7:59:80:0b:0b:ed:69: a1:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:A5:2A:B8:62:64:CF:6D:64:01:52:E6:02:18:23:F0:A2:00:37:DF X509v3 Authority Key Identifier: keyid:B3:54:D3:28:CB:BF:D1:EF:3C:D2:92:68:A2:3B:0F:CC:60:E3:A2:C5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.cer Subject Information Access: Signed Object - URI:rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/36322e3134342e33352e302f32342d3234203d3e20333937343233.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 62.144.35.0/24 Signature Algorithm: sha256WithRSAEncryption 9f:3e:10:38:80:5a:fa:e7:79:c9:1b:d6:00:0f:06:eb:b2:51: 1a:fe:66:2b:af:84:9d:bf:a9:8e:87:1d:b2:c9:12:ae:09:8b: 00:88:0b:f9:27:42:0a:df:84:23:52:c0:58:8c:e9:c3:76:a0: 8c:a2:20:00:79:7f:c7:1f:cb:1a:aa:54:30:af:2f:bf:85:c8: 44:ff:cb:63:2e:f7:6b:b0:d4:9a:c0:dd:6a:d5:aa:5a:a1:ba: bd:62:6c:59:d6:61:d5:0b:80:ba:f8:ba:a0:27:91:cd:83:04: 86:5c:16:0d:f6:7c:5a:8d:c1:97:f5:07:65:6f:1c:0d:f0:2b: 6a:eb:a5:8c:ed:dd:92:bf:f8:99:02:e8:57:d7:d0:92:39:a5: 4e:2b:20:de:f1:93:ba:ad:ba:49:1c:4f:99:45:3b:8f:57:02: 4a:04:71:5d:45:97:07:16:59:80:99:50:fa:af:70:f6:4a:cd: 61:bc:6b:d8:b8:91:3b:8f:3b:5a:58:f2:c1:5c:85:a9:23:7e: 87:6a:65:c1:dc:d6:23:07:0c:39:29:9a:07:0d:13:ce:cd:c1: 15:1f:1a:f3:0b:6b:7f:32:68:21:a9:b3:69:ae:73:ab:07:20: 0b:80:d4:e9:6f:ae:b7:18:2c:35:d2:25:6f:47:c2:51:b0:b0: 0e:8e:f8:90 -----BEGIN CERTIFICATE----- MIIFWDCCBECgAwIBAgIUBqFLwwL+U42YouLEt8b06/XGcywwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjM1NEQzMjhDQkJGRDFFRjNDRDI5MjY4QTIzQjBGQ0M2 MEUzQTJDNTAeFw0yNjEwMTcwMzU0NDRaFw0yNzEwMTYwMzU5NDRaMDMxMTAvBgNV BAMTKDIwQTUyQUI4NjI2NENGNkQ2NDAxNTJFNjAyMTgyM0YwQTIwMDM3REYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCoZLKZqKXLXk4vBjzHtX2nVFtT fCpvD7Vn1r7MdXUEs/KEfcMl8XiNWQx2u7tHmOn3UmCqAjwHkOHNTXxxUDKEuFMF 7iuMQGcAM5L1BUA5qHp0rQZ9ceVNsWTt162Z9xeaUQ+ZWr/nUl6ODeoCBNfFozAC FQ+CxweHg3Nv94ZmsJRedR7LeOQGNyMzZwSLNwAJueTN0sIutbQ6+OSZFK6Gbg/m AydHaPE9T2jv/MNjcUT91U05/6KcF/BaxmoqcMgv0jzT/oCcIjYQoIqJn8rqneox 1aD5Mr+PXhSDYvLtXmGHJIb0gaLE7aHkcQwHJUp0RQHHl7yL91mACwvtaaGbAgMB AAGjggJiMIICXjAdBgNVHQ4EFgQUIKUquGJkz21kAVLmAhgj8KIAN98wHwYDVR0j BBgwFoAUs1TTKMu/0e880pJoojsPzGDjosUwDgYDVR0PAQH/BAQDAgeAMIGIBgNV HR8EgYAwfjB8oHqgeIZ2cnN5bmM6Ly9yLm1hZ2VsbGFuLmlweG8uY29tL3JlcG8v YTAzNzViMzktZjk0OS00Y2I1LWI1MTktZjk0MDA4YjE2NTRjLTAvMC9CMzU0RDMy OENCQkZEMUVGM0NEMjkyNjhBMjNCMEZDQzYwRTNBMkM1LmNybDCBngYIKwYBBQUH AQEEgZEwgY4wgYsGCCsGAQUFBzAChn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5y aXBlLm5ldC9yZXBvc2l0b3J5LzYxNzA4YTZiLTZjM2EtNDBhMC1hMzAyLTU5NWVj YzE3ODQ4Yy8wL0IzNTREMzI4Q0JCRkQxRUYzQ0QyOTI2OEEyM0IwRkNDNjBFM0Ey QzUuY2VyMIGkBggrBgEFBQcBCwSBlzCBlDCBkQYIKwYBBQUHMAuGgYRyc3luYzov L3IubWFnZWxsYW4uaXB4by5jb20vcmVwby9hMDM3NWIzOS1mOTQ5LTRjYjUtYjUx OS1mOTQwMDhiMTY1NGMtMC8wLzM2MzIyZTMxMzQzNDJlMzMzNTJlMzAyZjMyMzQy ZDMyMzQyMDNkM2UyMDMzMzkzNzM0MzIzMy5yb2EwGAYDVR0gAQH/BA4wDDAKBggr BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAD6QIzANBgkqhkiG 9w0BAQsFAAOCAQEAnz4QOIBa+ud5yRvWAA8G67JRGv5mK6+Enb+pjocdsskSrgmL AIgL+SdCCt+EI1LAWIzpw3agjKIgAHl/xx/LGqpUMK8vv4XIRP/LYy73a7DUmsDd atWqWqG6vWJsWdZh1QuAuvi6oCeRzYMEhlwWDfZ8Wo3Bl/UHZW8cDfArauuljO3d kr/4mQLoV9fQkjmlTisg3vGTuq26SRxPmUU7j1cCSgRxXUWXBxZZgJlQ+q9w9krN Ybxr2LiRO487WljywVyFqSN+h2plwdzWIwcMOSmaBw0Tzs3BFR8a8wtrfzJoIamz aa5zqwcgC4DU6W+utxgsNdIlb0fCUbCwDo74kA== -----END CERTIFICATE-----Generated at Tue Oct 20 06:37:56 2026 by rpki-client