$ rpki-client -vvvf r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/36322e3134342e36332e302f32342d3234203d3e20323139303735.roa File: 36322e3134342e36332e302f32342d3234203d3e20323139303735.roa (raw, json) Hash identifier: 0oJNO8jQ/gvW0DSBS8I2j9tEwU9/7Wma0M5xEKrO768= Subject key identifier: 92:6E:EF:B3:44:43:EF:18:21:4B:44:40:5B:E4:6B:99:D1:A6:09:7A Certificate issuer: /CN=B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5 Certificate serial: 30FF893FACBAD5A4BF6AC6AF7AAA2BE1EFB4FD0C Authority key identifier: B3:54:D3:28:CB:BF:D1:EF:3C:D2:92:68:A2:3B:0F:CC:60:E3:A2:C5 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.cer Subject info access: rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/36322e3134342e36332e302f32342d3234203d3e20323139303735.roa Signing time: Sat 17 Oct 2026 15:56:38 +0000 ROA not before: Sat 17 Oct 2026 15:51:38 +0000 ROA not after: Sat 16 Oct 2027 15:56:38 +0000 asID: 219075 IP address blocks: 62.144.63.0/24 maxlen: 24 Validation: OK Signature path: rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.crl rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.mft rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.cer rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/D0A516B50426202A424F0EBFCB7D2BD4F744F964.crl rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/D0A516B50426202A424F0EBFCB7D2BD4F744F964.mft rsync://rpki.ripe.net/repository/DEFAULT/0KUWtQQmICpCTw6_y30r1PdE-WQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 04 Nov 2026 19:46:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 30:ff:89:3f:ac:ba:d5:a4:bf:6a:c6:af:7a:aa:2b:e1:ef:b4:fd:0c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5 Validity Not Before: Oct 17 15:51:38 2026 GMT Not After : Oct 16 15:56:38 2027 GMT Subject: CN=926EEFB34443EF18214B44405BE46B99D1A6097A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:a2:0a:20:95:1c:70:86:65:ec:21:18:28:c1: 83:4d:3c:8f:48:cd:3c:f5:be:f9:90:43:72:78:e9: 01:30:a7:79:08:a5:9a:f7:21:1b:af:1b:d0:dc:9e: 4f:b7:a8:b3:25:1c:e8:0b:31:84:ca:a4:f9:92:39: d5:b7:d1:25:71:13:b2:80:97:43:0e:a6:0e:4f:d3: 66:f4:7f:99:ab:e3:79:7c:82:10:7f:b1:30:ce:04: ef:97:48:ef:a2:1e:15:77:6a:df:ff:91:8f:e7:0a: 92:b4:66:d8:ee:39:c8:4f:fd:13:0a:ac:c0:20:98: f5:64:1a:94:0a:cd:c5:99:ed:9f:d7:56:bd:8d:e5: 32:84:f0:36:57:90:0f:10:01:2f:75:53:3d:e3:03: 0e:e5:2d:e7:07:2c:b1:31:d1:e4:0a:c0:55:6c:6f: 7d:21:9f:ee:3c:6c:f8:b7:0b:ff:8a:85:d8:a1:87: 24:f7:01:b3:2c:aa:78:d3:40:a8:46:8b:a2:6f:27: 6f:84:57:bc:5e:69:6d:53:a2:fd:ea:4b:29:50:0e: 29:e4:57:8e:22:3a:9a:da:6b:b0:34:7a:df:ec:af: 07:88:21:69:07:f0:c4:86:a0:bb:55:48:a8:ce:8a: 5a:9c:09:75:94:85:35:db:f2:52:f3:f8:8a:f7:64: 4f:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:6E:EF:B3:44:43:EF:18:21:4B:44:40:5B:E4:6B:99:D1:A6:09:7A X509v3 Authority Key Identifier: keyid:B3:54:D3:28:CB:BF:D1:EF:3C:D2:92:68:A2:3B:0F:CC:60:E3:A2:C5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.cer Subject Information Access: Signed Object - URI:rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/36322e3134342e36332e302f32342d3234203d3e20323139303735.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 62.144.63.0/24 Signature Algorithm: sha256WithRSAEncryption c2:7b:15:17:b5:f7:e2:68:65:d7:68:74:20:5e:af:87:58:98: 60:3d:0a:67:9f:76:bc:f5:67:fa:a2:97:57:0b:ba:40:85:f8: 80:13:08:45:af:33:a5:7e:46:14:41:07:94:01:98:a3:db:29: c6:ad:49:df:a1:3d:65:0b:0b:ad:dc:c0:0d:aa:2d:e3:e4:d1: ed:c9:79:48:df:28:d4:26:cf:e0:f8:65:d9:cf:96:42:a8:31: b7:b5:bc:db:67:7b:17:62:96:a2:22:0a:a4:3b:f1:e1:80:d2: 34:69:7f:42:a6:dd:d9:c0:34:14:4c:de:9f:8f:af:2b:92:07: f7:3f:ef:d8:84:5c:aa:16:0a:e9:79:bc:31:58:dd:00:1c:b6: 82:35:1d:c4:33:e3:5e:0d:fc:50:1e:6c:00:29:72:34:28:b6: 70:2c:9f:bc:ed:fd:44:a2:58:ae:33:0f:9b:05:a4:1e:7f:14: 6a:5d:f9:91:7f:3e:18:5a:30:40:39:c7:e2:e4:c8:fb:b7:c4: e4:3b:4c:06:bc:73:0d:67:57:4c:f6:3f:89:9c:d1:eb:5a:67: 6c:65:e1:f3:2d:ea:ba:76:95:54:48:01:9f:3f:32:39:eb:76: 61:e4:e6:3d:d4:e8:84:74:23:14:20:ef:4d:84:89:f9:99:34: 40:2d:e7:68 -----BEGIN CERTIFICATE----- MIIFWDCCBECgAwIBAgIUMP+JP6y61aS/asaveqor4e+0/QwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjM1NEQzMjhDQkJGRDFFRjNDRDI5MjY4QTIzQjBGQ0M2 MEUzQTJDNTAeFw0yNjEwMTcxNTUxMzhaFw0yNzEwMTYxNTU2MzhaMDMxMTAvBgNV BAMTKDkyNkVFRkIzNDQ0M0VGMTgyMTRCNDQ0MDVCRTQ2Qjk5RDFBNjA5N0EwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDhogoglRxwhmXsIRgowYNNPI9I zTz1vvmQQ3J46QEwp3kIpZr3IRuvG9Dcnk+3qLMlHOgLMYTKpPmSOdW30SVxE7KA l0MOpg5P02b0f5mr43l8ghB/sTDOBO+XSO+iHhV3at//kY/nCpK0ZtjuOchP/RMK rMAgmPVkGpQKzcWZ7Z/XVr2N5TKE8DZXkA8QAS91Uz3jAw7lLecHLLEx0eQKwFVs b30hn+48bPi3C/+KhdihhyT3AbMsqnjTQKhGi6JvJ2+EV7xeaW1Tov3qSylQDink V44iOpraa7A0et/srweIIWkH8MSGoLtVSKjOilqcCXWUhTXb8lLz+Ir3ZE+TAgMB AAGjggJiMIICXjAdBgNVHQ4EFgQUkm7vs0RD7xghS0RAW+RrmdGmCXowHwYDVR0j BBgwFoAUs1TTKMu/0e880pJoojsPzGDjosUwDgYDVR0PAQH/BAQDAgeAMIGIBgNV HR8EgYAwfjB8oHqgeIZ2cnN5bmM6Ly9yLm1hZ2VsbGFuLmlweG8uY29tL3JlcG8v YTAzNzViMzktZjk0OS00Y2I1LWI1MTktZjk0MDA4YjE2NTRjLTAvMC9CMzU0RDMy OENCQkZEMUVGM0NEMjkyNjhBMjNCMEZDQzYwRTNBMkM1LmNybDCBngYIKwYBBQUH AQEEgZEwgY4wgYsGCCsGAQUFBzAChn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5y aXBlLm5ldC9yZXBvc2l0b3J5LzYxNzA4YTZiLTZjM2EtNDBhMC1hMzAyLTU5NWVj YzE3ODQ4Yy8wL0IzNTREMzI4Q0JCRkQxRUYzQ0QyOTI2OEEyM0IwRkNDNjBFM0Ey QzUuY2VyMIGkBggrBgEFBQcBCwSBlzCBlDCBkQYIKwYBBQUHMAuGgYRyc3luYzov L3IubWFnZWxsYW4uaXB4by5jb20vcmVwby9hMDM3NWIzOS1mOTQ5LTRjYjUtYjUx OS1mOTQwMDhiMTY1NGMtMC8wLzM2MzIyZTMxMzQzNDJlMzYzMzJlMzAyZjMyMzQy ZDMyMzQyMDNkM2UyMDMyMzEzOTMwMzczNS5yb2EwGAYDVR0gAQH/BA4wDDAKBggr BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAD6QPzANBgkqhkiG 9w0BAQsFAAOCAQEAwnsVF7X34mhl12h0IF6vh1iYYD0KZ592vPVn+qKXVwu6QIX4 gBMIRa8zpX5GFEEHlAGYo9spxq1J36E9ZQsLrdzADaot4+TR7cl5SN8o1CbP4Phl 2c+WQqgxt7W822d7F2KWoiIKpDvx4YDSNGl/Qqbd2cA0FEzen4+vK5IH9z/v2IRc qhYK6Xm8MVjdABy2gjUdxDPjXg38UB5sAClyNCi2cCyfvO39RKJYrjMPmwWkHn8U al35kX8+GFowQDnH4uTI+7fE5DtMBrxzDWdXTPY/iZzR61pnbGXh8y3qunaVVEgB nz8yOet2YeTmPdTohHQjFCDvTYSJ+Zk0QC3naA== -----END CERTIFICATE-----Generated at Wed Nov 4 08:41:43 2026 by rpki-client