$ rpki-client -vvvf r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/36322e3134342e35312e302f32342d3234203d3e203634343537.roa File: 36322e3134342e35312e302f32342d3234203d3e203634343537.roa (raw, json) Hash identifier: F3JBkZEw5MYDWfdlPC/ipndYCE4+RV3S5+XOAn21OzM= Subject key identifier: C2:C6:00:8C:BE:A6:86:3C:22:E4:27:5D:30:82:DF:D9:91:75:39:91 Certificate issuer: /CN=B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5 Certificate serial: 49EABF0007AA36BC0FBA7DAFE43FE321C41848D6 Authority key identifier: B3:54:D3:28:CB:BF:D1:EF:3C:D2:92:68:A2:3B:0F:CC:60:E3:A2:C5 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.cer Subject info access: rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/36322e3134342e35312e302f32342d3234203d3e203634343537.roa Signing time: Mon 12 Oct 2026 17:44:13 +0000 ROA not before: Mon 12 Oct 2026 17:39:13 +0000 ROA not after: Mon 11 Oct 2027 17:44:13 +0000 asID: 64457 IP address blocks: 62.144.51.0/24 maxlen: 24 Validation: OK Signature path: rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.crl rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.mft rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.cer rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/D0A516B50426202A424F0EBFCB7D2BD4F744F964.crl rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/D0A516B50426202A424F0EBFCB7D2BD4F744F964.mft rsync://rpki.ripe.net/repository/DEFAULT/0KUWtQQmICpCTw6_y30r1PdE-WQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Oct 2026 16:36:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 49:ea:bf:00:07:aa:36:bc:0f:ba:7d:af:e4:3f:e3:21:c4:18:48:d6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5 Validity Not Before: Oct 12 17:39:13 2026 GMT Not After : Oct 11 17:44:13 2027 GMT Subject: CN=C2C6008CBEA6863C22E4275D3082DFD991753991 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:46:c1:99:d7:eb:91:66:6e:2f:52:0d:13:ff: 76:60:e9:d8:40:67:05:3b:be:ae:95:1f:39:2f:bc: a5:bf:0b:4d:a3:4f:29:87:24:fb:d8:de:59:ae:f8: 4b:43:a7:66:69:86:0a:92:19:ab:9b:0b:74:25:0a: 37:e2:2d:c0:bd:17:6f:5d:06:f9:15:a5:8f:42:a9: 38:65:c1:91:f2:a7:65:b7:50:74:34:2b:8e:b1:55: 1e:fb:87:c4:7b:7f:fb:8d:a1:c9:43:ae:10:c0:e3: dc:5c:9e:af:60:bf:2b:b1:f8:09:4a:4c:94:a4:4d: 1b:bf:77:c8:d7:47:4b:15:a6:a4:74:a9:53:cf:07: 20:0a:d1:4e:75:9c:21:82:f1:49:a1:f4:89:35:81: a1:10:db:2a:c5:d0:36:84:55:de:bf:a6:4a:61:5c: 61:3d:7d:31:d5:d0:5b:0a:e3:6c:4b:94:6d:4e:42: 46:24:7b:77:bd:7a:e1:f5:a1:33:0f:74:07:31:67: 2b:f6:51:c9:6e:be:33:1b:46:b4:ed:2f:3b:84:68: ad:6a:6b:b5:79:c3:92:c5:3c:9d:70:10:8d:45:78: ae:15:07:8d:9c:54:02:fe:9d:f8:81:0e:4f:1c:ad: d4:91:26:68:3d:6f:2d:26:b5:1d:52:83:e8:e2:66: 15:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:C6:00:8C:BE:A6:86:3C:22:E4:27:5D:30:82:DF:D9:91:75:39:91 X509v3 Authority Key Identifier: keyid:B3:54:D3:28:CB:BF:D1:EF:3C:D2:92:68:A2:3B:0F:CC:60:E3:A2:C5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.cer Subject Information Access: Signed Object - URI:rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/36322e3134342e35312e302f32342d3234203d3e203634343537.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 62.144.51.0/24 Signature Algorithm: sha256WithRSAEncryption 6f:7a:7e:6f:d9:f5:95:18:30:eb:ac:0a:c8:28:f6:9c:e7:97: 12:df:1e:8a:14:b1:6c:8e:92:8a:26:50:6b:0b:f7:7d:da:50: 84:11:70:8b:ce:1c:d7:9c:1e:0e:84:44:96:68:9e:b4:08:af: 66:53:b5:91:72:b4:33:5b:2a:e5:83:89:3c:b7:e6:b3:da:9d: 7b:81:c3:46:1b:84:13:41:e1:60:d7:19:91:c5:da:ca:95:65: 57:d5:10:d1:17:8b:60:7b:80:94:4c:a8:16:20:92:5e:eb:4c: 4e:dc:fe:6c:34:49:3e:1e:2e:da:08:a1:fd:52:c7:8d:6c:a2: 05:10:ca:c8:11:91:ed:52:9b:46:22:97:25:5a:68:81:3a:2f: f5:34:1e:86:fd:a4:63:a2:e2:15:97:d7:1f:cd:b4:6e:13:ab: 02:79:0e:02:8e:76:99:d7:e9:87:a5:5e:e3:0e:62:11:b0:d4: 5c:5f:48:02:81:79:d7:7f:ff:94:a4:b5:01:00:9b:98:40:d0: b4:ae:53:bc:e8:4f:6d:33:95:a6:2e:8d:ce:24:3f:99:c3:e6: ed:6d:57:40:0f:dd:24:46:36:ad:3c:74:4d:88:b7:5e:44:9d: 09:38:cc:be:66:12:5e:af:b6:c3:e2:a9:9e:ab:85:fe:65:02: ef:d5:63:7f -----BEGIN CERTIFICATE----- MIIFVjCCBD6gAwIBAgIUSeq/AAeqNrwPun2v5D/jIcQYSNYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjM1NEQzMjhDQkJGRDFFRjNDRDI5MjY4QTIzQjBGQ0M2 MEUzQTJDNTAeFw0yNjEwMTIxNzM5MTNaFw0yNzEwMTExNzQ0MTNaMDMxMTAvBgNV BAMTKEMyQzYwMDhDQkVBNjg2M0MyMkU0Mjc1RDMwODJERkQ5OTE3NTM5OTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCgRsGZ1+uRZm4vUg0T/3Zg6dhA ZwU7vq6VHzkvvKW/C02jTymHJPvY3lmu+EtDp2ZphgqSGaubC3QlCjfiLcC9F29d BvkVpY9CqThlwZHyp2W3UHQ0K46xVR77h8R7f/uNoclDrhDA49xcnq9gvyux+AlK TJSkTRu/d8jXR0sVpqR0qVPPByAK0U51nCGC8Umh9Ik1gaEQ2yrF0DaEVd6/pkph XGE9fTHV0FsK42xLlG1OQkYke3e9euH1oTMPdAcxZyv2UcluvjMbRrTtLzuEaK1q a7V5w5LFPJ1wEI1FeK4VB42cVAL+nfiBDk8crdSRJmg9by0mtR1Sg+jiZhU7AgMB AAGjggJgMIICXDAdBgNVHQ4EFgQUwsYAjL6mhjwi5CddMILf2ZF1OZEwHwYDVR0j BBgwFoAUs1TTKMu/0e880pJoojsPzGDjosUwDgYDVR0PAQH/BAQDAgeAMIGIBgNV HR8EgYAwfjB8oHqgeIZ2cnN5bmM6Ly9yLm1hZ2VsbGFuLmlweG8uY29tL3JlcG8v YTAzNzViMzktZjk0OS00Y2I1LWI1MTktZjk0MDA4YjE2NTRjLTAvMC9CMzU0RDMy OENCQkZEMUVGM0NEMjkyNjhBMjNCMEZDQzYwRTNBMkM1LmNybDCBngYIKwYBBQUH AQEEgZEwgY4wgYsGCCsGAQUFBzAChn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5y aXBlLm5ldC9yZXBvc2l0b3J5LzYxNzA4YTZiLTZjM2EtNDBhMC1hMzAyLTU5NWVj YzE3ODQ4Yy8wL0IzNTREMzI4Q0JCRkQxRUYzQ0QyOTI2OEEyM0IwRkNDNjBFM0Ey QzUuY2VyMIGiBggrBgEFBQcBCwSBlTCBkjCBjwYIKwYBBQUHMAuGgYJyc3luYzov L3IubWFnZWxsYW4uaXB4by5jb20vcmVwby9hMDM3NWIzOS1mOTQ5LTRjYjUtYjUx OS1mOTQwMDhiMTY1NGMtMC8wLzM2MzIyZTMxMzQzNDJlMzUzMTJlMzAyZjMyMzQy ZDMyMzQyMDNkM2UyMDM2MzQzNDM1Mzcucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYB BQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAA+kDMwDQYJKoZIhvcN AQELBQADggEBAG96fm/Z9ZUYMOusCsgo9pznlxLfHooUsWyOkoomUGsL933aUIQR cIvOHNecHg6ERJZonrQIr2ZTtZFytDNbKuWDiTy35rPanXuBw0YbhBNB4WDXGZHF 2sqVZVfVENEXi2B7gJRMqBYgkl7rTE7c/mw0ST4eLtoIof1Sx41sogUQysgRke1S m0YilyVaaIE6L/U0Hob9pGOi4hWX1x/NtG4TqwJ5DgKOdpnX6YelXuMOYhGw1Fxf SAKBedd//5SktQEAm5hA0LSuU7zoT20zlaYujc4kP5nD5u1tV0AP3SRGNq08dE2I t15EnQk4zL5mEl6vtsPiqZ6rhf5lAu/VY38= -----END CERTIFICATE-----Generated at Tue Oct 20 03:34:23 2026 by rpki-client