$ rpki-client -vvvf r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/36322e3134342e34332e302f32342d3234203d3e20323139303533.roa File: 36322e3134342e34332e302f32342d3234203d3e20323139303533.roa (raw, json) Hash identifier: eew4eHzmLekvg6M+QZol5wG5debRO96iApNF7xnEX/A= Subject key identifier: 29:6F:D3:6B:08:59:AB:CC:F5:49:3B:84:1B:60:55:51:CD:67:BE:F9 Certificate issuer: /CN=B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5 Certificate serial: 35C3795B468B620E8644248A96BD456A7B175454 Authority key identifier: B3:54:D3:28:CB:BF:D1:EF:3C:D2:92:68:A2:3B:0F:CC:60:E3:A2:C5 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.cer Subject info access: rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/36322e3134342e34332e302f32342d3234203d3e20323139303533.roa Signing time: Tue 20 Oct 2026 03:16:43 +0000 ROA not before: Tue 20 Oct 2026 03:11:43 +0000 ROA not after: Tue 19 Oct 2027 03:16:43 +0000 asID: 219053 IP address blocks: 62.144.43.0/24 maxlen: 24 Validation: OK Signature path: rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.crl rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.mft rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.cer rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/D0A516B50426202A424F0EBFCB7D2BD4F744F964.crl rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/D0A516B50426202A424F0EBFCB7D2BD4F744F964.mft rsync://rpki.ripe.net/repository/DEFAULT/0KUWtQQmICpCTw6_y30r1PdE-WQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 29 Oct 2026 10:48:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 35:c3:79:5b:46:8b:62:0e:86:44:24:8a:96:bd:45:6a:7b:17:54:54 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5 Validity Not Before: Oct 20 03:11:43 2026 GMT Not After : Oct 19 03:16:43 2027 GMT Subject: CN=296FD36B0859ABCCF5493B841B605551CD67BEF9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:02:d3:55:91:7f:e1:13:64:a9:a8:f5:9b:4b: 5a:2e:82:c0:65:ff:aa:48:fe:f0:7c:c0:f1:0f:17: 82:c8:5d:9a:7a:75:72:ee:a6:14:72:2f:02:1a:5a: fa:e1:fe:d6:ea:4b:17:99:ff:d3:2e:df:86:65:57: e8:c1:db:83:ea:5f:d9:59:6f:37:d7:6d:a1:5f:d2: f7:12:f9:61:97:e4:64:91:47:1a:d4:fa:90:56:bf: 86:0a:fd:95:1f:a1:16:e9:ff:fb:0e:72:a1:c0:63: 33:c1:94:fe:68:79:ca:aa:b1:3b:9c:8f:66:ae:a6: 5f:46:43:3f:38:f0:a1:ca:69:9a:bd:56:89:6f:e9: 84:a3:96:ad:7b:5d:e6:23:5b:67:89:6c:c2:8e:16: e0:8f:ce:5a:cd:7b:56:f0:8b:49:76:0e:08:f6:f2: a8:4b:4e:78:04:3e:9d:2e:1b:1c:cf:93:7c:cf:45: 3d:9b:a4:e0:90:39:30:c6:8e:e4:1d:65:e7:31:09: fb:1b:9f:aa:06:23:a2:95:c5:40:6b:be:b5:31:10: c0:74:1c:32:d4:8f:de:7f:74:ee:4c:4f:9d:38:0d: ec:ef:6a:77:1f:22:98:6e:93:53:67:5a:c8:d4:be: 6a:61:ff:25:42:17:12:35:73:42:b7:f6:ea:61:fe: c9:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:6F:D3:6B:08:59:AB:CC:F5:49:3B:84:1B:60:55:51:CD:67:BE:F9 X509v3 Authority Key Identifier: keyid:B3:54:D3:28:CB:BF:D1:EF:3C:D2:92:68:A2:3B:0F:CC:60:E3:A2:C5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.cer Subject Information Access: Signed Object - URI:rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/36322e3134342e34332e302f32342d3234203d3e20323139303533.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 62.144.43.0/24 Signature Algorithm: sha256WithRSAEncryption 1f:fd:0a:94:b3:ba:4f:ac:3d:21:8d:66:1f:1a:67:38:5b:bb: 52:de:e7:14:0c:6d:7d:ec:41:7e:11:f2:68:05:cb:e2:58:9e: e3:81:e7:d2:c0:2b:46:8d:6d:46:38:1b:43:79:f6:7d:a0:09: 89:fa:85:19:14:45:3b:c6:2b:9e:be:de:58:e4:73:43:b1:b4: 3d:bb:59:94:fe:d8:b1:2a:c9:2f:71:01:e9:8c:9a:bd:75:61: d9:17:fa:0b:3e:d0:df:31:ef:08:ae:c1:70:ca:b5:10:bf:f6: ca:9c:d6:c7:9e:b6:fd:34:b1:25:46:9a:fc:fb:9a:f4:b4:a1: 6f:6c:ff:0d:aa:2f:d1:c9:4c:af:c3:5e:8a:e9:f4:14:8a:33: e9:97:9f:2e:e0:3e:3d:12:0c:96:57:97:31:cf:c9:e9:fc:89: fc:d0:8e:44:04:77:d1:7a:4e:3b:23:d5:07:81:3a:82:52:30: b4:27:05:64:df:dc:6f:1f:3e:99:c4:89:68:23:74:97:13:fc: 27:56:9e:38:7c:8d:3f:3b:a5:f5:5f:ea:14:58:0b:fc:15:66: 21:98:76:4b:be:17:fc:e8:96:70:bb:62:81:dd:98:79:49:20: f2:c1:50:a2:f4:17:ad:44:d5:50:e2:f1:0f:5d:67:48:a7:35: 03:57:27:2d -----BEGIN CERTIFICATE----- MIIFWDCCBECgAwIBAgIUNcN5W0aLYg6GRCSKlr1FansXVFQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjM1NEQzMjhDQkJGRDFFRjNDRDI5MjY4QTIzQjBGQ0M2 MEUzQTJDNTAeFw0yNjEwMjAwMzExNDNaFw0yNzEwMTkwMzE2NDNaMDMxMTAvBgNV BAMTKDI5NkZEMzZCMDg1OUFCQ0NGNTQ5M0I4NDFCNjA1NTUxQ0Q2N0JFRjkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCgAtNVkX/hE2SpqPWbS1ougsBl /6pI/vB8wPEPF4LIXZp6dXLuphRyLwIaWvrh/tbqSxeZ/9Mu34ZlV+jB24PqX9lZ bzfXbaFf0vcS+WGX5GSRRxrU+pBWv4YK/ZUfoRbp//sOcqHAYzPBlP5oecqqsTuc j2aupl9GQz848KHKaZq9Volv6YSjlq17XeYjW2eJbMKOFuCPzlrNe1bwi0l2Dgj2 8qhLTngEPp0uGxzPk3zPRT2bpOCQOTDGjuQdZecxCfsbn6oGI6KVxUBrvrUxEMB0 HDLUj95/dO5MT504DezvancfIphuk1NnWsjUvmph/yVCFxI1c0K39uph/sklAgMB AAGjggJiMIICXjAdBgNVHQ4EFgQUKW/TawhZq8z1STuEG2BVUc1nvvkwHwYDVR0j BBgwFoAUs1TTKMu/0e880pJoojsPzGDjosUwDgYDVR0PAQH/BAQDAgeAMIGIBgNV HR8EgYAwfjB8oHqgeIZ2cnN5bmM6Ly9yLm1hZ2VsbGFuLmlweG8uY29tL3JlcG8v YTAzNzViMzktZjk0OS00Y2I1LWI1MTktZjk0MDA4YjE2NTRjLTAvMC9CMzU0RDMy OENCQkZEMUVGM0NEMjkyNjhBMjNCMEZDQzYwRTNBMkM1LmNybDCBngYIKwYBBQUH AQEEgZEwgY4wgYsGCCsGAQUFBzAChn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5y aXBlLm5ldC9yZXBvc2l0b3J5LzYxNzA4YTZiLTZjM2EtNDBhMC1hMzAyLTU5NWVj YzE3ODQ4Yy8wL0IzNTREMzI4Q0JCRkQxRUYzQ0QyOTI2OEEyM0IwRkNDNjBFM0Ey QzUuY2VyMIGkBggrBgEFBQcBCwSBlzCBlDCBkQYIKwYBBQUHMAuGgYRyc3luYzov L3IubWFnZWxsYW4uaXB4by5jb20vcmVwby9hMDM3NWIzOS1mOTQ5LTRjYjUtYjUx OS1mOTQwMDhiMTY1NGMtMC8wLzM2MzIyZTMxMzQzNDJlMzQzMzJlMzAyZjMyMzQy ZDMyMzQyMDNkM2UyMDMyMzEzOTMwMzUzMy5yb2EwGAYDVR0gAQH/BA4wDDAKBggr BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAD6QKzANBgkqhkiG 9w0BAQsFAAOCAQEAH/0KlLO6T6w9IY1mHxpnOFu7Ut7nFAxtfexBfhHyaAXL4lie 44Hn0sArRo1tRjgbQ3n2faAJifqFGRRFO8Yrnr7eWORzQ7G0PbtZlP7YsSrJL3EB 6YyavXVh2Rf6Cz7Q3zHvCK7BcMq1EL/2ypzWx562/TSxJUaa/Pua9LShb2z/Daov 0clMr8Neiun0FIoz6ZefLuA+PRIMlleXMc/J6fyJ/NCORAR30XpOOyPVB4E6glIw tCcFZN/cbx8+mcSJaCN0lxP8J1aeOHyNPzul9V/qFFgL/BVmIZh2S74X/OiWcLti gd2YeUkg8sFQovQXrUTVUOLxD11nSKc1A1cnLQ== -----END CERTIFICATE-----Generated at Wed Oct 28 18:57:45 2026 by rpki-client