$ rpki-client -vvvf r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/36322e3134342e34352e302f32342d3234203d3e20323139343437.roa File: 36322e3134342e34352e302f32342d3234203d3e20323139343437.roa (raw, json) Hash identifier: Xf5A4dwLn7Mne1fRrulVo8GasnpLyLk3QRV3NHLXA/g= Subject key identifier: 2C:D5:51:31:D1:43:6B:1F:8D:C9:A7:EE:5F:A8:6D:31:26:C8:8C:5A Certificate issuer: /CN=B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5 Certificate serial: 7A60EA23EF0AD874DBEAD8121EB5006BE0AE9036 Authority key identifier: B3:54:D3:28:CB:BF:D1:EF:3C:D2:92:68:A2:3B:0F:CC:60:E3:A2:C5 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.cer Subject info access: rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/36322e3134342e34352e302f32342d3234203d3e20323139343437.roa Signing time: Tue 20 Oct 2026 03:16:42 +0000 ROA not before: Tue 20 Oct 2026 03:11:42 +0000 ROA not after: Tue 19 Oct 2027 03:16:42 +0000 asID: 219447 IP address blocks: 62.144.45.0/24 maxlen: 24 Validation: OK Signature path: rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.crl rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.mft rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.cer rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/D0A516B50426202A424F0EBFCB7D2BD4F744F964.crl rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/D0A516B50426202A424F0EBFCB7D2BD4F744F964.mft rsync://rpki.ripe.net/repository/DEFAULT/0KUWtQQmICpCTw6_y30r1PdE-WQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 28 Oct 2026 01:41:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7a:60:ea:23:ef:0a:d8:74:db:ea:d8:12:1e:b5:00:6b:e0:ae:90:36 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5 Validity Not Before: Oct 20 03:11:42 2026 GMT Not After : Oct 19 03:16:42 2027 GMT Subject: CN=2CD55131D1436B1F8DC9A7EE5FA86D3126C88C5A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:3c:95:8e:9a:fc:5d:76:1d:49:ec:ad:1b:e1: 5c:09:5b:b1:dc:91:1f:e6:1c:1a:5b:2c:98:cb:ef: 41:af:78:17:59:38:b9:a1:75:2f:40:cc:26:ca:f1: 2f:e9:64:d6:93:7a:a1:25:ab:65:18:19:10:dd:09: cf:53:f7:a1:5c:50:e3:d7:0e:87:09:95:77:f3:50: 7d:16:36:58:33:ff:d2:66:e9:1e:8b:e3:ba:12:45: 9c:c2:8d:bc:78:80:53:74:f1:55:7b:dd:f0:86:90: 6b:39:ee:9d:72:91:85:cc:8f:62:e3:c2:56:6a:a9: c7:84:54:75:c8:cc:54:94:e2:05:0e:62:83:de:ab: 1a:6f:a6:65:20:5a:62:6f:b3:53:3b:48:cd:c5:0e: 74:d8:83:9e:f7:86:f7:f7:0c:3a:a0:2b:8b:47:08: 34:12:b7:d9:36:63:1a:ad:60:7b:9e:8a:aa:5d:ee: 75:e2:5c:33:4b:1b:c3:a1:f9:cf:5b:9f:d0:62:c0: 34:07:8e:45:26:cc:27:e0:92:36:6a:3f:5e:9c:db: 1c:b7:fe:9d:de:b0:65:d4:95:8a:4f:b6:da:0d:8e: 02:88:3c:46:0e:9e:09:44:76:f4:d4:69:5c:74:a2: e3:3f:5b:6b:2f:2f:b0:57:f6:4f:a2:35:35:b1:77: 6a:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:D5:51:31:D1:43:6B:1F:8D:C9:A7:EE:5F:A8:6D:31:26:C8:8C:5A X509v3 Authority Key Identifier: keyid:B3:54:D3:28:CB:BF:D1:EF:3C:D2:92:68:A2:3B:0F:CC:60:E3:A2:C5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.cer Subject Information Access: Signed Object - URI:rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/36322e3134342e34352e302f32342d3234203d3e20323139343437.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 62.144.45.0/24 Signature Algorithm: sha256WithRSAEncryption 54:35:e1:3a:ea:32:39:9a:fc:0f:8b:64:b2:0c:1a:35:90:61: d5:30:91:17:2d:a8:e2:f4:1f:f8:60:c8:23:e6:75:dc:c7:14: 46:88:05:21:a2:19:44:10:85:2f:a2:dd:f9:08:f8:88:90:1c: 1d:ed:80:07:4f:6b:3f:a9:11:c8:e2:f6:9b:1d:b9:0d:6e:28: e7:ef:06:14:cb:cb:e7:08:8a:aa:52:ba:d0:38:ca:57:68:c7: 5c:3b:40:05:66:eb:05:cb:30:b4:c5:69:76:bb:86:b6:c0:71: 05:5f:fa:12:67:fc:ae:41:4b:f9:f1:43:f2:83:dd:d7:a5:96: 14:dc:51:6c:84:44:c8:5c:f6:71:3c:3d:9c:69:ef:38:39:9e: 1e:c1:19:bb:68:91:91:74:6b:f4:44:bd:1b:cc:c3:bd:3e:f6: 69:19:97:96:fd:c2:53:af:fc:e6:9c:29:6e:71:bc:78:eb:a5: ee:b2:f1:57:2c:91:ff:ea:28:52:9b:92:1c:af:86:1a:69:16: 19:34:3f:f1:86:7f:4e:78:98:eb:5a:4d:dd:70:df:ea:36:e5: 49:a9:c6:2f:cc:f6:e3:52:7d:01:57:d5:d8:cd:67:7d:ef:e3: a4:94:1d:55:b9:0f:27:20:0e:69:e6:7a:9e:e9:f0:e8:6d:2d: cb:98:dd:2f -----BEGIN CERTIFICATE----- MIIFWDCCBECgAwIBAgIUemDqI+8K2HTb6tgSHrUAa+CukDYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjM1NEQzMjhDQkJGRDFFRjNDRDI5MjY4QTIzQjBGQ0M2 MEUzQTJDNTAeFw0yNjEwMjAwMzExNDJaFw0yNzEwMTkwMzE2NDJaMDMxMTAvBgNV BAMTKDJDRDU1MTMxRDE0MzZCMUY4REM5QTdFRTVGQTg2RDMxMjZDODhDNUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDZPJWOmvxddh1J7K0b4VwJW7Hc kR/mHBpbLJjL70GveBdZOLmhdS9AzCbK8S/pZNaTeqElq2UYGRDdCc9T96FcUOPX DocJlXfzUH0WNlgz/9Jm6R6L47oSRZzCjbx4gFN08VV73fCGkGs57p1ykYXMj2Lj wlZqqceEVHXIzFSU4gUOYoPeqxpvpmUgWmJvs1M7SM3FDnTYg573hvf3DDqgK4tH CDQSt9k2YxqtYHueiqpd7nXiXDNLG8Oh+c9bn9BiwDQHjkUmzCfgkjZqP16c2xy3 /p3esGXUlYpPttoNjgKIPEYOnglEdvTUaVx0ouM/W2svL7BX9k+iNTWxd2oFAgMB AAGjggJiMIICXjAdBgNVHQ4EFgQULNVRMdFDax+NyafuX6htMSbIjFowHwYDVR0j BBgwFoAUs1TTKMu/0e880pJoojsPzGDjosUwDgYDVR0PAQH/BAQDAgeAMIGIBgNV HR8EgYAwfjB8oHqgeIZ2cnN5bmM6Ly9yLm1hZ2VsbGFuLmlweG8uY29tL3JlcG8v YTAzNzViMzktZjk0OS00Y2I1LWI1MTktZjk0MDA4YjE2NTRjLTAvMC9CMzU0RDMy OENCQkZEMUVGM0NEMjkyNjhBMjNCMEZDQzYwRTNBMkM1LmNybDCBngYIKwYBBQUH AQEEgZEwgY4wgYsGCCsGAQUFBzAChn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5y aXBlLm5ldC9yZXBvc2l0b3J5LzYxNzA4YTZiLTZjM2EtNDBhMC1hMzAyLTU5NWVj YzE3ODQ4Yy8wL0IzNTREMzI4Q0JCRkQxRUYzQ0QyOTI2OEEyM0IwRkNDNjBFM0Ey QzUuY2VyMIGkBggrBgEFBQcBCwSBlzCBlDCBkQYIKwYBBQUHMAuGgYRyc3luYzov L3IubWFnZWxsYW4uaXB4by5jb20vcmVwby9hMDM3NWIzOS1mOTQ5LTRjYjUtYjUx OS1mOTQwMDhiMTY1NGMtMC8wLzM2MzIyZTMxMzQzNDJlMzQzNTJlMzAyZjMyMzQy ZDMyMzQyMDNkM2UyMDMyMzEzOTM0MzQzNy5yb2EwGAYDVR0gAQH/BA4wDDAKBggr BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAD6QLTANBgkqhkiG 9w0BAQsFAAOCAQEAVDXhOuoyOZr8D4tksgwaNZBh1TCRFy2o4vQf+GDII+Z13McU RogFIaIZRBCFL6Ld+Qj4iJAcHe2AB09rP6kRyOL2mx25DW4o5+8GFMvL5wiKqlK6 0DjKV2jHXDtABWbrBcswtMVpdruGtsBxBV/6Emf8rkFL+fFD8oPd16WWFNxRbIRE yFz2cTw9nGnvODmeHsEZu2iRkXRr9ES9G8zDvT72aRmXlv3CU6/85pwpbnG8eOul 7rLxVyyR/+ooUpuSHK+GGmkWGTQ/8YZ/TniY61pN3XDf6jblSanGL8z241J9AVfV 2M1nfe/jpJQdVbkPJyAOaeZ6nunw6G0ty5jdLw== -----END CERTIFICATE-----Generated at Tue Oct 27 19:38:04 2026 by rpki-client