$ rpki-client -vvvf r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/36322e3134342e33372e302f32342d3234203d3e20323138393131.roa File: 36322e3134342e33372e302f32342d3234203d3e20323138393131.roa (raw, json) Hash identifier: kE7It0bC2F0BxpUvxepV1eRbLDafBKMrgjmyEundbKI= Subject key identifier: A6:2E:17:73:97:0C:BC:32:6D:2D:96:48:5D:FB:99:62:AD:EF:B3:76 Certificate issuer: /CN=B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5 Certificate serial: 2D6534BAD7FA4068BF0E687EC5575C883E6AD25A Authority key identifier: B3:54:D3:28:CB:BF:D1:EF:3C:D2:92:68:A2:3B:0F:CC:60:E3:A2:C5 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.cer Subject info access: rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/36322e3134342e33372e302f32342d3234203d3e20323138393131.roa Signing time: Sat 17 Oct 2026 15:56:39 +0000 ROA not before: Sat 17 Oct 2026 15:51:39 +0000 ROA not after: Sat 16 Oct 2027 15:56:39 +0000 asID: 218911 IP address blocks: 62.144.37.0/24 maxlen: 24 Validation: OK Signature path: rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.crl rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.mft rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.cer rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/D0A516B50426202A424F0EBFCB7D2BD4F744F964.crl rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/D0A516B50426202A424F0EBFCB7D2BD4F744F964.mft rsync://rpki.ripe.net/repository/DEFAULT/0KUWtQQmICpCTw6_y30r1PdE-WQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 29 Oct 2026 10:48:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2d:65:34:ba:d7:fa:40:68:bf:0e:68:7e:c5:57:5c:88:3e:6a:d2:5a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5 Validity Not Before: Oct 17 15:51:39 2026 GMT Not After : Oct 16 15:56:39 2027 GMT Subject: CN=A62E1773970CBC326D2D96485DFB9962ADEFB376 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:2f:ef:4d:1e:9e:f4:cb:4f:fd:b2:57:5d:aa: 24:df:44:49:60:e4:c7:14:7b:21:cc:23:31:3c:3e: d1:a0:8b:a7:19:0d:cf:d7:b1:34:31:2a:b1:9a:85: a6:63:9d:a4:89:d0:47:25:66:92:2b:52:a8:da:42: 15:90:80:05:b7:1d:e5:25:ca:3c:0a:3c:36:c8:d8: 50:94:95:54:bb:57:ba:49:1f:c9:a3:a5:ba:23:ad: c3:e3:cf:a0:22:6a:34:24:03:2b:7d:4d:52:57:c8: c7:07:e3:2f:7b:22:c8:fc:69:c2:e0:13:26:2a:4b: b2:0c:51:ec:59:97:96:13:4f:bc:30:43:67:98:23: ed:b4:77:bb:06:c3:a0:9c:34:d4:3d:5b:a4:96:f7: 88:4a:3c:3d:d0:46:37:78:8a:84:7f:1b:6f:83:7f: 32:96:a2:8e:93:5e:ad:e6:9c:7f:a1:e3:4f:f1:1c: da:1e:6b:d7:d8:ea:d8:c6:d9:33:c2:ca:b2:d1:3d: 0c:db:05:45:70:8e:a0:2a:02:31:db:66:98:af:62: 58:5a:30:74:bf:e2:9c:08:61:c2:6f:8e:6d:68:31: e8:f0:d4:bf:eb:28:e9:83:4f:a4:c1:04:8c:f4:e1: 05:4b:d2:ed:3e:c9:e1:ab:5f:5c:a3:9e:c4:a2:ea: 91:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:2E:17:73:97:0C:BC:32:6D:2D:96:48:5D:FB:99:62:AD:EF:B3:76 X509v3 Authority Key Identifier: keyid:B3:54:D3:28:CB:BF:D1:EF:3C:D2:92:68:A2:3B:0F:CC:60:E3:A2:C5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.cer Subject Information Access: Signed Object - URI:rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/36322e3134342e33372e302f32342d3234203d3e20323138393131.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 62.144.37.0/24 Signature Algorithm: sha256WithRSAEncryption 41:91:21:73:f8:29:1f:c7:db:91:95:d7:1d:ac:b6:66:88:ad: 71:a3:c8:18:20:5d:8f:1a:1b:95:28:e6:75:5e:5b:2b:cd:29: b5:eb:01:7a:05:9b:7a:ab:48:67:53:34:13:25:b3:ce:b1:85: ab:ae:fe:67:b4:d3:f4:dc:5d:6a:ea:c0:45:3e:21:3c:12:e8: 5d:58:16:09:13:e2:8e:83:16:eb:b2:80:81:6a:e0:6e:02:b6: 18:1c:17:48:23:40:24:d9:16:71:4c:ba:e0:df:f2:69:70:f0: 6a:d3:81:0a:16:14:2a:be:9e:16:9e:72:46:eb:13:44:e0:f1: 56:3f:42:b7:cc:48:a9:ce:af:3b:fb:97:41:e3:45:d3:dd:09: 11:8e:a5:84:0c:06:e8:f2:09:b5:fe:60:e7:ba:07:2f:00:7e: af:52:95:b4:f2:9a:2d:89:3e:fc:d2:59:88:f7:42:bc:c9:ac: 2f:4a:54:8b:f0:69:7d:6b:30:31:46:59:c6:60:d3:7f:85:af: 1c:4d:5c:25:2d:0f:06:7a:25:30:ac:9d:cb:f1:0c:95:08:87: c6:e5:0e:1b:9d:20:52:e6:ba:15:c3:8b:bd:16:4b:4e:28:97: 5c:28:ec:0a:66:f7:b1:81:cc:fc:d5:cd:51:ce:a2:c6:3a:a1: 60:4a:99:54 -----BEGIN CERTIFICATE----- MIIFWDCCBECgAwIBAgIULWU0utf6QGi/Dmh+xVdciD5q0lowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjM1NEQzMjhDQkJGRDFFRjNDRDI5MjY4QTIzQjBGQ0M2 MEUzQTJDNTAeFw0yNjEwMTcxNTUxMzlaFw0yNzEwMTYxNTU2MzlaMDMxMTAvBgNV BAMTKEE2MkUxNzczOTcwQ0JDMzI2RDJEOTY0ODVERkI5OTYyQURFRkIzNzYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCvL+9NHp70y0/9slddqiTfRElg 5McUeyHMIzE8PtGgi6cZDc/XsTQxKrGahaZjnaSJ0EclZpIrUqjaQhWQgAW3HeUl yjwKPDbI2FCUlVS7V7pJH8mjpbojrcPjz6AiajQkAyt9TVJXyMcH4y97Isj8acLg EyYqS7IMUexZl5YTT7wwQ2eYI+20d7sGw6CcNNQ9W6SW94hKPD3QRjd4ioR/G2+D fzKWoo6TXq3mnH+h40/xHNoea9fY6tjG2TPCyrLRPQzbBUVwjqAqAjHbZpivYlha MHS/4pwIYcJvjm1oMejw1L/rKOmDT6TBBIz04QVL0u0+yeGrX1yjnsSi6pHPAgMB AAGjggJiMIICXjAdBgNVHQ4EFgQUpi4Xc5cMvDJtLZZIXfuZYq3vs3YwHwYDVR0j BBgwFoAUs1TTKMu/0e880pJoojsPzGDjosUwDgYDVR0PAQH/BAQDAgeAMIGIBgNV HR8EgYAwfjB8oHqgeIZ2cnN5bmM6Ly9yLm1hZ2VsbGFuLmlweG8uY29tL3JlcG8v YTAzNzViMzktZjk0OS00Y2I1LWI1MTktZjk0MDA4YjE2NTRjLTAvMC9CMzU0RDMy OENCQkZEMUVGM0NEMjkyNjhBMjNCMEZDQzYwRTNBMkM1LmNybDCBngYIKwYBBQUH AQEEgZEwgY4wgYsGCCsGAQUFBzAChn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5y aXBlLm5ldC9yZXBvc2l0b3J5LzYxNzA4YTZiLTZjM2EtNDBhMC1hMzAyLTU5NWVj YzE3ODQ4Yy8wL0IzNTREMzI4Q0JCRkQxRUYzQ0QyOTI2OEEyM0IwRkNDNjBFM0Ey QzUuY2VyMIGkBggrBgEFBQcBCwSBlzCBlDCBkQYIKwYBBQUHMAuGgYRyc3luYzov L3IubWFnZWxsYW4uaXB4by5jb20vcmVwby9hMDM3NWIzOS1mOTQ5LTRjYjUtYjUx OS1mOTQwMDhiMTY1NGMtMC8wLzM2MzIyZTMxMzQzNDJlMzMzNzJlMzAyZjMyMzQy ZDMyMzQyMDNkM2UyMDMyMzEzODM5MzEzMS5yb2EwGAYDVR0gAQH/BA4wDDAKBggr BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAD6QJTANBgkqhkiG 9w0BAQsFAAOCAQEAQZEhc/gpH8fbkZXXHay2ZoitcaPIGCBdjxoblSjmdV5bK80p tesBegWbeqtIZ1M0EyWzzrGFq67+Z7TT9NxdaurART4hPBLoXVgWCRPijoMW67KA gWrgbgK2GBwXSCNAJNkWcUy64N/yaXDwatOBChYUKr6eFp5yRusTRODxVj9Ct8xI qc6vO/uXQeNF090JEY6lhAwG6PIJtf5g57oHLwB+r1KVtPKaLYk+/NJZiPdCvMms L0pUi/BpfWswMUZZxmDTf4WvHE1cJS0PBnolMKydy/EMlQiHxuUOG50gUua6FcOL vRZLTiiXXCjsCmb3sYHM/NXNUc6ixjqhYEqZVA== -----END CERTIFICATE-----Generated at Wed Oct 28 18:57:36 2026 by rpki-client