$ rpki-client -vvvf r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/36322e3134342e34352e302f32342d3234203d3e20323139303533.roa File: 36322e3134342e34352e302f32342d3234203d3e20323139303533.roa (raw, json) Hash identifier: kOMFE5p/Z7kTcUtyhPoXIHek6NmNdqCafBbm+5MDUxk= Subject key identifier: 5C:73:21:F8:0A:4C:5E:D5:70:66:9A:FB:3A:38:C8:4E:8C:29:88:8D Certificate issuer: /CN=B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5 Certificate serial: 60796F1F9A81CABA0CC253F645B88E6F16D55B04 Authority key identifier: B3:54:D3:28:CB:BF:D1:EF:3C:D2:92:68:A2:3B:0F:CC:60:E3:A2:C5 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.cer Subject info access: rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/36322e3134342e34352e302f32342d3234203d3e20323139303533.roa Signing time: Tue 20 Oct 2026 03:16:42 +0000 ROA not before: Tue 20 Oct 2026 03:11:42 +0000 ROA not after: Tue 19 Oct 2027 03:16:42 +0000 asID: 219053 IP address blocks: 62.144.45.0/24 maxlen: 24 Validation: OK Signature path: rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.crl rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.mft rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.cer rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/D0A516B50426202A424F0EBFCB7D2BD4F744F964.crl rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/D0A516B50426202A424F0EBFCB7D2BD4F744F964.mft rsync://rpki.ripe.net/repository/DEFAULT/0KUWtQQmICpCTw6_y30r1PdE-WQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Oct 2026 21:23:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 60:79:6f:1f:9a:81:ca:ba:0c:c2:53:f6:45:b8:8e:6f:16:d5:5b:04 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5 Validity Not Before: Oct 20 03:11:42 2026 GMT Not After : Oct 19 03:16:42 2027 GMT Subject: CN=5C7321F80A4C5ED570669AFB3A38C84E8C29888D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:59:b2:ae:73:6d:69:75:91:33:9a:e8:2e:9c: 5e:c9:44:37:92:df:a8:74:e1:37:02:86:b8:03:60: b4:32:1b:bb:a2:0b:66:29:fc:f2:d0:06:63:6d:d1: 90:73:08:c5:40:32:95:49:ae:28:ef:58:ce:2b:f6: a1:38:9a:52:14:26:c4:7b:3b:8f:77:5d:c7:16:01: 13:b3:60:cf:00:b7:1c:c8:7e:a5:7d:54:0a:7d:fd: f8:4d:9d:fa:e3:6d:0b:92:ac:64:ce:b4:77:8c:d6: 27:72:b6:e3:eb:e9:39:cd:f5:96:76:35:3a:93:ed: ba:fc:32:d3:31:65:18:b6:f6:f0:a1:bf:79:08:77: 75:21:bb:e2:2b:00:00:7d:06:95:f0:34:83:bf:f6: 44:f7:2c:38:db:f7:b2:9e:85:be:83:98:94:f1:0a: 9a:1d:77:09:71:d3:e1:5e:a1:ae:ef:64:07:e8:80: c6:94:03:1c:77:84:13:8e:d0:47:63:b7:4b:05:f2: 4c:50:36:06:8b:9f:91:fe:eb:86:4b:52:36:bd:b7: e5:98:19:45:c9:3d:f3:c7:73:e4:71:78:61:ae:0c: a3:94:72:fd:03:8c:03:e8:f4:14:41:bf:22:84:3c: 5e:ef:e0:4d:44:5f:8a:27:1a:a8:e8:e6:c1:99:0a: 0f:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:73:21:F8:0A:4C:5E:D5:70:66:9A:FB:3A:38:C8:4E:8C:29:88:8D X509v3 Authority Key Identifier: keyid:B3:54:D3:28:CB:BF:D1:EF:3C:D2:92:68:A2:3B:0F:CC:60:E3:A2:C5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.cer Subject Information Access: Signed Object - URI:rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/36322e3134342e34352e302f32342d3234203d3e20323139303533.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 62.144.45.0/24 Signature Algorithm: sha256WithRSAEncryption 17:e0:8a:ec:68:ce:3d:33:e3:25:44:e1:ba:71:2c:1b:d7:b2: e1:a2:37:1b:08:24:1f:5f:d1:f0:78:eb:c1:cc:94:e0:2f:d8: 35:78:e7:d9:4d:7f:c9:a0:bf:0b:d2:e7:4b:19:ef:e4:66:ee: 3b:f9:28:2b:d0:ef:1d:82:ad:9c:80:73:29:f9:42:8a:bd:f7: e8:93:eb:02:c9:03:52:ac:09:78:8f:db:2a:c3:41:9a:8c:f9: e5:fc:11:b1:ff:91:e6:c3:be:26:fe:1e:65:d5:c9:49:fa:3b: 75:ee:c7:74:3c:38:5b:20:b0:73:00:56:03:91:fe:7c:8a:f0: 93:32:05:ba:72:3f:b8:12:f0:f2:67:e1:e2:c5:ac:be:b1:8a: 18:4e:a8:c7:f3:50:fc:5a:a5:cd:b7:98:ef:b9:26:29:c1:84: d6:cf:52:91:77:08:cc:8e:66:2f:08:8f:99:b7:7c:a2:cd:ce: 3e:05:90:3d:8e:36:1a:cd:b3:76:bd:52:79:dd:ae:27:e0:b4: 21:e2:9d:ea:38:2b:64:34:de:06:cc:f6:8e:29:21:1f:bb:0b: 5c:4b:a2:fb:39:98:7e:98:1a:64:ae:e5:61:3a:06:76:ac:48: f6:50:8c:6c:08:32:f5:47:e0:b3:e4:06:9d:b2:ac:f7:7e:bb: f6:1a:00:06 -----BEGIN CERTIFICATE----- MIIFWDCCBECgAwIBAgIUYHlvH5qByroMwlP2RbiObxbVWwQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjM1NEQzMjhDQkJGRDFFRjNDRDI5MjY4QTIzQjBGQ0M2 MEUzQTJDNTAeFw0yNjEwMjAwMzExNDJaFw0yNzEwMTkwMzE2NDJaMDMxMTAvBgNV BAMTKDVDNzMyMUY4MEE0QzVFRDU3MDY2OUFGQjNBMzhDODRFOEMyOTg4OEQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCLWbKuc21pdZEzmugunF7JRDeS 36h04TcChrgDYLQyG7uiC2Yp/PLQBmNt0ZBzCMVAMpVJrijvWM4r9qE4mlIUJsR7 O493XccWAROzYM8AtxzIfqV9VAp9/fhNnfrjbQuSrGTOtHeM1idytuPr6TnN9ZZ2 NTqT7br8MtMxZRi29vChv3kId3Uhu+IrAAB9BpXwNIO/9kT3LDjb97Kehb6DmJTx Cpoddwlx0+Feoa7vZAfogMaUAxx3hBOO0Edjt0sF8kxQNgaLn5H+64ZLUja9t+WY GUXJPfPHc+RxeGGuDKOUcv0DjAPo9BRBvyKEPF7v4E1EX4onGqjo5sGZCg/JAgMB AAGjggJiMIICXjAdBgNVHQ4EFgQUXHMh+ApMXtVwZpr7OjjITowpiI0wHwYDVR0j BBgwFoAUs1TTKMu/0e880pJoojsPzGDjosUwDgYDVR0PAQH/BAQDAgeAMIGIBgNV HR8EgYAwfjB8oHqgeIZ2cnN5bmM6Ly9yLm1hZ2VsbGFuLmlweG8uY29tL3JlcG8v YTAzNzViMzktZjk0OS00Y2I1LWI1MTktZjk0MDA4YjE2NTRjLTAvMC9CMzU0RDMy OENCQkZEMUVGM0NEMjkyNjhBMjNCMEZDQzYwRTNBMkM1LmNybDCBngYIKwYBBQUH AQEEgZEwgY4wgYsGCCsGAQUFBzAChn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5y aXBlLm5ldC9yZXBvc2l0b3J5LzYxNzA4YTZiLTZjM2EtNDBhMC1hMzAyLTU5NWVj YzE3ODQ4Yy8wL0IzNTREMzI4Q0JCRkQxRUYzQ0QyOTI2OEEyM0IwRkNDNjBFM0Ey QzUuY2VyMIGkBggrBgEFBQcBCwSBlzCBlDCBkQYIKwYBBQUHMAuGgYRyc3luYzov L3IubWFnZWxsYW4uaXB4by5jb20vcmVwby9hMDM3NWIzOS1mOTQ5LTRjYjUtYjUx OS1mOTQwMDhiMTY1NGMtMC8wLzM2MzIyZTMxMzQzNDJlMzQzNTJlMzAyZjMyMzQy ZDMyMzQyMDNkM2UyMDMyMzEzOTMwMzUzMy5yb2EwGAYDVR0gAQH/BA4wDDAKBggr BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAD6QLTANBgkqhkiG 9w0BAQsFAAOCAQEAF+CK7GjOPTPjJUThunEsG9ey4aI3GwgkH1/R8HjrwcyU4C/Y NXjn2U1/yaC/C9LnSxnv5GbuO/koK9DvHYKtnIBzKflCir336JPrAskDUqwJeI/b KsNBmoz55fwRsf+R5sO+Jv4eZdXJSfo7de7HdDw4WyCwcwBWA5H+fIrwkzIFunI/ uBLw8mfh4sWsvrGKGE6ox/NQ/FqlzbeY77kmKcGE1s9SkXcIzI5mLwiPmbd8os3O PgWQPY42Gs2zdr1Sed2uJ+C0IeKd6jgrZDTeBsz2jikhH7sLXEui+zmYfpgaZK7l YToGdqxI9lCMbAgy9Ufgs+QGnbKs93679hoABg== -----END CERTIFICATE-----Generated at Thu Oct 22 12:46:35 2026 by rpki-client