$ rpki-client -vvvf r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/36322e3134342e35332e302f32342d3234203d3e203136323736.roa File: 36322e3134342e35332e302f32342d3234203d3e203136323736.roa (raw, json) Hash identifier: MeOE1QqFOjqXZp0UxcpLzO6NT1KMxoLsZgOl7YalkM8= Subject key identifier: 64:EB:61:1A:D0:97:19:87:73:64:CF:CB:D8:FF:D7:F8:34:0F:13:76 Certificate issuer: /CN=B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5 Certificate serial: 32C84BED2101C7D9943EFA9FA3A3D09163822A33 Authority key identifier: B3:54:D3:28:CB:BF:D1:EF:3C:D2:92:68:A2:3B:0F:CC:60:E3:A2:C5 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.cer Subject info access: rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/36322e3134342e35332e302f32342d3234203d3e203136323736.roa Signing time: Sun 18 Oct 2026 19:37:31 +0000 ROA not before: Sun 18 Oct 2026 19:32:31 +0000 ROA not after: Sun 17 Oct 2027 19:37:31 +0000 asID: 16276 IP address blocks: 62.144.53.0/24 maxlen: 24 Validation: OK Signature path: rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.crl rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.mft rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.cer rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/D0A516B50426202A424F0EBFCB7D2BD4F744F964.crl rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/D0A516B50426202A424F0EBFCB7D2BD4F744F964.mft rsync://rpki.ripe.net/repository/DEFAULT/0KUWtQQmICpCTw6_y30r1PdE-WQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Oct 2026 16:36:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 32:c8:4b:ed:21:01:c7:d9:94:3e:fa:9f:a3:a3:d0:91:63:82:2a:33 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5 Validity Not Before: Oct 18 19:32:31 2026 GMT Not After : Oct 17 19:37:31 2027 GMT Subject: CN=64EB611AD09719877364CFCBD8FFD7F8340F1376 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:48:da:85:f2:41:14:c6:dd:75:78:08:a9:b9: fc:d4:c7:68:56:1e:32:60:24:cd:5f:13:ce:05:94: 8c:5e:96:b5:04:84:cd:17:56:a7:c4:d2:d8:05:cb: 7f:cc:52:61:b0:d6:b0:fd:bd:9d:30:41:df:c6:51: 9e:d9:bf:48:5d:44:4f:04:0b:2b:ae:76:b7:2e:05: 9e:50:6e:40:45:34:f3:b4:22:be:1e:0b:f1:e7:cb: 06:ad:71:a7:8f:43:e2:67:7c:8c:d4:80:54:2c:63: 93:1d:62:f7:e1:60:74:48:ca:1e:c1:85:f5:44:d8: 96:77:46:7d:93:28:fb:a1:ec:2b:45:d4:9e:65:81: eb:d1:a8:da:93:5a:f9:e5:3c:1b:20:70:be:6e:04: 12:82:f8:89:f2:53:70:aa:b7:e4:3c:6b:91:b0:46: af:0d:74:a6:64:c1:c3:44:19:82:e3:2e:24:d5:a8: ec:d9:c0:1f:b4:bf:3c:9e:dc:6a:91:6b:51:de:0f: f5:ac:20:8f:a5:ef:f0:0e:9d:1f:09:a2:cc:62:be: 57:57:6f:36:c1:28:a6:39:00:3b:a5:39:da:ab:e1: dd:6a:31:bc:cd:77:d6:af:89:88:e9:80:e2:0a:96: 9d:bf:c1:e5:da:70:52:e4:8d:58:3a:2e:ef:60:ce: af:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:EB:61:1A:D0:97:19:87:73:64:CF:CB:D8:FF:D7:F8:34:0F:13:76 X509v3 Authority Key Identifier: keyid:B3:54:D3:28:CB:BF:D1:EF:3C:D2:92:68:A2:3B:0F:CC:60:E3:A2:C5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.cer Subject Information Access: Signed Object - URI:rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/36322e3134342e35332e302f32342d3234203d3e203136323736.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 62.144.53.0/24 Signature Algorithm: sha256WithRSAEncryption 32:54:4b:eb:66:c3:72:a3:c1:ab:67:2a:d6:73:b6:2a:16:3b: e6:4f:e7:83:b4:e8:b8:55:98:2b:bd:a7:af:bf:e0:03:6d:88: 25:2f:fd:47:0d:11:5b:31:61:fa:a7:11:05:9f:2a:69:70:a3: 20:5e:fb:91:74:52:f4:d8:07:5e:82:dc:49:c0:aa:a0:cb:e0: 44:f5:2e:da:04:79:51:dc:05:54:91:2a:e9:1c:f2:0b:a8:88: 51:70:33:34:e4:19:26:11:7e:11:51:56:c1:22:78:f0:0e:12: 45:48:47:84:e5:5c:f5:e9:7f:83:b4:b0:3c:f3:77:28:a7:58: 67:48:a4:b9:4e:18:e3:92:36:30:0a:30:f4:25:a9:66:0d:87: 7e:0b:da:5c:94:38:56:fe:73:85:76:5e:1f:a8:6c:97:b5:d9: 50:98:7e:b4:ef:cb:e2:5b:15:d0:c3:40:4e:cb:e3:18:6d:8e: 24:f5:60:7e:df:35:f2:2a:00:b2:fd:59:8e:eb:7e:52:1b:c9: 7b:1c:71:06:92:74:13:9b:01:2f:c6:a5:c1:ec:04:6a:06:d4: 61:81:b1:f8:89:b2:93:30:b1:62:c3:12:3b:df:d6:8d:01:fc: a3:12:00:fb:c0:80:b7:a3:dd:ae:1c:ef:1d:d9:5c:7a:52:a7: f8:b1:fc:41 -----BEGIN CERTIFICATE----- MIIFVjCCBD6gAwIBAgIUMshL7SEBx9mUPvqfo6PQkWOCKjMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjM1NEQzMjhDQkJGRDFFRjNDRDI5MjY4QTIzQjBGQ0M2 MEUzQTJDNTAeFw0yNjEwMTgxOTMyMzFaFw0yNzEwMTcxOTM3MzFaMDMxMTAvBgNV BAMTKDY0RUI2MTFBRDA5NzE5ODc3MzY0Q0ZDQkQ4RkZEN0Y4MzQwRjEzNzYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDLSNqF8kEUxt11eAipufzUx2hW HjJgJM1fE84FlIxelrUEhM0XVqfE0tgFy3/MUmGw1rD9vZ0wQd/GUZ7Zv0hdRE8E CyuudrcuBZ5QbkBFNPO0Ir4eC/HnywatcaePQ+JnfIzUgFQsY5MdYvfhYHRIyh7B hfVE2JZ3Rn2TKPuh7CtF1J5lgevRqNqTWvnlPBsgcL5uBBKC+InyU3Cqt+Q8a5Gw Rq8NdKZkwcNEGYLjLiTVqOzZwB+0vzye3GqRa1HeD/WsII+l7/AOnR8JosxivldX bzbBKKY5ADulOdqr4d1qMbzNd9aviYjpgOIKlp2/weXacFLkjVg6Lu9gzq/HAgMB AAGjggJgMIICXDAdBgNVHQ4EFgQUZOthGtCXGYdzZM/L2P/X+DQPE3YwHwYDVR0j BBgwFoAUs1TTKMu/0e880pJoojsPzGDjosUwDgYDVR0PAQH/BAQDAgeAMIGIBgNV HR8EgYAwfjB8oHqgeIZ2cnN5bmM6Ly9yLm1hZ2VsbGFuLmlweG8uY29tL3JlcG8v YTAzNzViMzktZjk0OS00Y2I1LWI1MTktZjk0MDA4YjE2NTRjLTAvMC9CMzU0RDMy OENCQkZEMUVGM0NEMjkyNjhBMjNCMEZDQzYwRTNBMkM1LmNybDCBngYIKwYBBQUH AQEEgZEwgY4wgYsGCCsGAQUFBzAChn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5y aXBlLm5ldC9yZXBvc2l0b3J5LzYxNzA4YTZiLTZjM2EtNDBhMC1hMzAyLTU5NWVj YzE3ODQ4Yy8wL0IzNTREMzI4Q0JCRkQxRUYzQ0QyOTI2OEEyM0IwRkNDNjBFM0Ey QzUuY2VyMIGiBggrBgEFBQcBCwSBlTCBkjCBjwYIKwYBBQUHMAuGgYJyc3luYzov L3IubWFnZWxsYW4uaXB4by5jb20vcmVwby9hMDM3NWIzOS1mOTQ5LTRjYjUtYjUx OS1mOTQwMDhiMTY1NGMtMC8wLzM2MzIyZTMxMzQzNDJlMzUzMzJlMzAyZjMyMzQy ZDMyMzQyMDNkM2UyMDMxMzYzMjM3MzYucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYB BQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAA+kDUwDQYJKoZIhvcN AQELBQADggEBADJUS+tmw3KjwatnKtZztioWO+ZP54O06LhVmCu9p6+/4ANtiCUv /UcNEVsxYfqnEQWfKmlwoyBe+5F0UvTYB16C3EnAqqDL4ET1LtoEeVHcBVSRKukc 8guoiFFwMzTkGSYRfhFRVsEiePAOEkVIR4TlXPXpf4O0sDzzdyinWGdIpLlOGOOS NjAKMPQlqWYNh34L2lyUOFb+c4V2Xh+obJe12VCYfrTvy+JbFdDDQE7L4xhtjiT1 YH7fNfIqALL9WY7rflIbyXsccQaSdBObAS/GpcHsBGoG1GGBsfiJspMwsWLDEjvf 1o0B/KMSAPvAgLej3a4c7x3ZXHpSp/ix/EE= -----END CERTIFICATE-----Generated at Tue Oct 20 03:34:12 2026 by rpki-client