$ rpki-client -vvvf r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/36322e3134342e34372e302f32342d3234203d3e20323138373032.roa File: 36322e3134342e34372e302f32342d3234203d3e20323138373032.roa (raw, json) Hash identifier: dLpbK/gCFOUVOnABFSTNa87SYebCr6oSwBTOgDXB8Wg= Subject key identifier: 45:AA:B6:FF:14:DD:D5:4C:0C:A9:B2:CF:01:99:10:E1:91:2B:3F:F4 Certificate issuer: /CN=B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5 Certificate serial: 415A074EB13A4DB557F6B7D26A89A86C4E8F42B0 Authority key identifier: B3:54:D3:28:CB:BF:D1:EF:3C:D2:92:68:A2:3B:0F:CC:60:E3:A2:C5 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.cer Subject info access: rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/36322e3134342e34372e302f32342d3234203d3e20323138373032.roa Signing time: Fri 16 Oct 2026 09:17:13 +0000 ROA not before: Fri 16 Oct 2026 09:12:13 +0000 ROA not after: Fri 15 Oct 2027 09:17:13 +0000 asID: 218702 IP address blocks: 62.144.47.0/24 maxlen: 24 Validation: OK Signature path: rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.crl rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.mft rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.cer rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/D0A516B50426202A424F0EBFCB7D2BD4F744F964.crl rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/D0A516B50426202A424F0EBFCB7D2BD4F744F964.mft rsync://rpki.ripe.net/repository/DEFAULT/0KUWtQQmICpCTw6_y30r1PdE-WQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Oct 2026 14:28:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 41:5a:07:4e:b1:3a:4d:b5:57:f6:b7:d2:6a:89:a8:6c:4e:8f:42:b0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5 Validity Not Before: Oct 16 09:12:13 2026 GMT Not After : Oct 15 09:17:13 2027 GMT Subject: CN=45AAB6FF14DDD54C0CA9B2CF019910E1912B3FF4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:1f:cc:ed:d0:b2:8c:f0:c5:90:45:5a:3f:4a: fb:2d:c2:71:92:f8:b1:81:68:1c:ba:c8:34:cb:22: d0:c6:90:fc:0d:bc:ef:2a:56:eb:c8:81:0d:6a:1f: ed:13:f7:06:44:cf:2e:48:77:5b:56:42:92:72:7d: ca:ba:ba:34:6e:33:f0:14:08:1b:80:eb:51:89:55: 64:b4:13:73:68:78:13:50:f0:be:d0:ca:02:6c:40: 75:d8:8d:09:33:ae:d6:4f:7f:64:ef:4c:a0:e3:15: 6a:f2:b0:72:b6:dc:f8:8e:16:a7:12:8f:c0:d6:80: 67:1b:83:8f:40:98:80:39:b3:ea:fe:f2:47:e2:3f: 2a:29:fd:62:a0:f4:15:56:b5:b9:0e:03:73:7d:86: 01:d3:d3:a0:39:0d:e3:89:84:55:2d:43:c9:ae:89: 7d:c3:e6:b8:5f:99:6e:ef:11:c5:3e:7d:e1:50:0f: ae:9c:8c:76:df:27:d9:54:8f:c3:20:74:0d:7c:67: f8:c8:d7:ce:5c:85:2b:d4:4b:2b:ee:83:2e:13:d0: bc:1f:89:46:95:c9:00:ed:9d:0b:76:ac:ec:ae:f8: cd:da:fc:34:4a:2c:41:cf:5a:7b:1d:96:42:53:57: 7f:1d:8f:34:cd:ce:6e:9d:b9:18:05:73:2f:7f:03: 9c:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:AA:B6:FF:14:DD:D5:4C:0C:A9:B2:CF:01:99:10:E1:91:2B:3F:F4 X509v3 Authority Key Identifier: keyid:B3:54:D3:28:CB:BF:D1:EF:3C:D2:92:68:A2:3B:0F:CC:60:E3:A2:C5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.cer Subject Information Access: Signed Object - URI:rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/36322e3134342e34372e302f32342d3234203d3e20323138373032.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 62.144.47.0/24 Signature Algorithm: sha256WithRSAEncryption b2:d7:43:5f:fb:b5:6d:ef:7d:ab:d4:e2:8b:4c:05:9d:b2:77: 1a:42:fe:72:64:3a:eb:b9:b7:1d:43:71:a7:38:f6:30:6a:12: 5e:23:c6:90:00:b4:f7:16:97:d4:56:70:04:16:65:42:68:4e: 42:93:72:be:45:a2:8f:34:d7:00:e1:2b:84:71:d0:02:bb:5d: b4:4e:21:3f:ab:99:f9:d4:a6:9f:7a:1f:3a:b9:7e:30:68:d1: b1:ea:38:0c:ed:e6:82:c6:b9:22:01:98:8e:a1:a9:89:e5:ed: 70:c8:ae:e3:2a:a2:7b:9b:90:9e:76:c6:22:54:15:4f:f2:95: a6:d2:a0:91:04:4a:93:f7:89:75:56:a1:17:14:89:36:20:2e: 0c:15:67:6f:a9:95:8f:a3:22:ca:18:23:c7:52:2c:f3:cc:f6: 74:9b:3d:81:f7:98:d5:16:cf:76:63:7d:16:13:2c:37:b0:f6: 9f:05:da:0b:90:2b:d4:5c:da:a9:03:fa:09:80:1c:04:ee:44: 35:b5:8f:3f:a3:22:90:33:93:46:79:35:3b:58:27:1a:90:bb: 85:0a:42:a7:54:75:6c:34:79:39:66:a6:1d:88:d6:3e:93:e4: a9:8d:b8:05:62:3e:9e:c0:65:91:63:ac:b7:d1:dc:82:d2:48: 3d:b0:88:d2 -----BEGIN CERTIFICATE----- MIIFWDCCBECgAwIBAgIUQVoHTrE6TbVX9rfSaomobE6PQrAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjM1NEQzMjhDQkJGRDFFRjNDRDI5MjY4QTIzQjBGQ0M2 MEUzQTJDNTAeFw0yNjEwMTYwOTEyMTNaFw0yNzEwMTUwOTE3MTNaMDMxMTAvBgNV BAMTKDQ1QUFCNkZGMTREREQ1NEMwQ0E5QjJDRjAxOTkxMEUxOTEyQjNGRjQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCsH8zt0LKM8MWQRVo/SvstwnGS +LGBaBy6yDTLItDGkPwNvO8qVuvIgQ1qH+0T9wZEzy5Id1tWQpJyfcq6ujRuM/AU CBuA61GJVWS0E3NoeBNQ8L7QygJsQHXYjQkzrtZPf2TvTKDjFWrysHK23PiOFqcS j8DWgGcbg49AmIA5s+r+8kfiPyop/WKg9BVWtbkOA3N9hgHT06A5DeOJhFUtQ8mu iX3D5rhfmW7vEcU+feFQD66cjHbfJ9lUj8MgdA18Z/jI185chSvUSyvugy4T0Lwf iUaVyQDtnQt2rOyu+M3a/DRKLEHPWnsdlkJTV38djzTNzm6duRgFcy9/A5zDAgMB AAGjggJiMIICXjAdBgNVHQ4EFgQURaq2/xTd1UwMqbLPAZkQ4ZErP/QwHwYDVR0j BBgwFoAUs1TTKMu/0e880pJoojsPzGDjosUwDgYDVR0PAQH/BAQDAgeAMIGIBgNV HR8EgYAwfjB8oHqgeIZ2cnN5bmM6Ly9yLm1hZ2VsbGFuLmlweG8uY29tL3JlcG8v YTAzNzViMzktZjk0OS00Y2I1LWI1MTktZjk0MDA4YjE2NTRjLTAvMC9CMzU0RDMy OENCQkZEMUVGM0NEMjkyNjhBMjNCMEZDQzYwRTNBMkM1LmNybDCBngYIKwYBBQUH AQEEgZEwgY4wgYsGCCsGAQUFBzAChn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5y aXBlLm5ldC9yZXBvc2l0b3J5LzYxNzA4YTZiLTZjM2EtNDBhMC1hMzAyLTU5NWVj YzE3ODQ4Yy8wL0IzNTREMzI4Q0JCRkQxRUYzQ0QyOTI2OEEyM0IwRkNDNjBFM0Ey QzUuY2VyMIGkBggrBgEFBQcBCwSBlzCBlDCBkQYIKwYBBQUHMAuGgYRyc3luYzov L3IubWFnZWxsYW4uaXB4by5jb20vcmVwby9hMDM3NWIzOS1mOTQ5LTRjYjUtYjUx OS1mOTQwMDhiMTY1NGMtMC8wLzM2MzIyZTMxMzQzNDJlMzQzNzJlMzAyZjMyMzQy ZDMyMzQyMDNkM2UyMDMyMzEzODM3MzAzMi5yb2EwGAYDVR0gAQH/BA4wDDAKBggr BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAD6QLzANBgkqhkiG 9w0BAQsFAAOCAQEAstdDX/u1be99q9Tii0wFnbJ3GkL+cmQ667m3HUNxpzj2MGoS XiPGkAC09xaX1FZwBBZlQmhOQpNyvkWijzTXAOErhHHQArtdtE4hP6uZ+dSmn3of Orl+MGjRseo4DO3mgsa5IgGYjqGpieXtcMiu4yqie5uQnnbGIlQVT/KVptKgkQRK k/eJdVahFxSJNiAuDBVnb6mVj6Miyhgjx1Is88z2dJs9gfeY1RbPdmN9FhMsN7D2 nwXaC5Ar1FzaqQP6CYAcBO5ENbWPP6MikDOTRnk1O1gnGpC7hQpCp1R1bDR5OWam HYjWPpPkqY24BWI+nsBlkWOst9HcgtJIPbCI0g== -----END CERTIFICATE-----Generated at Mon Oct 19 20:34:45 2026 by rpki-client