$ rpki-client -vvvf r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/36322e3134342e34332e302f32342d3234203d3e20323139303437.roa File: 36322e3134342e34332e302f32342d3234203d3e20323139303437.roa (raw, json) Hash identifier: jt8enY//83URF/iJSQnN+nGTk6w/0I0rMx3rQ++hZjU= Subject key identifier: 03:2D:19:28:26:17:55:13:C6:A3:6F:B9:C7:34:36:76:2F:BB:C8:BD Certificate issuer: /CN=B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5 Certificate serial: 59EBA319D31AC2EACC28E8E683751CA607407C6D Authority key identifier: B3:54:D3:28:CB:BF:D1:EF:3C:D2:92:68:A2:3B:0F:CC:60:E3:A2:C5 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.cer Subject info access: rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/36322e3134342e34332e302f32342d3234203d3e20323139303437.roa Signing time: Tue 20 Oct 2026 03:16:43 +0000 ROA not before: Tue 20 Oct 2026 03:11:43 +0000 ROA not after: Tue 19 Oct 2027 03:16:43 +0000 asID: 219047 IP address blocks: 62.144.43.0/24 maxlen: 24 Validation: OK Signature path: rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.crl rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.mft rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.cer rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/D0A516B50426202A424F0EBFCB7D2BD4F744F964.crl rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/D0A516B50426202A424F0EBFCB7D2BD4F744F964.mft rsync://rpki.ripe.net/repository/DEFAULT/0KUWtQQmICpCTw6_y30r1PdE-WQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Oct 2026 05:19:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 59:eb:a3:19:d3:1a:c2:ea:cc:28:e8:e6:83:75:1c:a6:07:40:7c:6d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5 Validity Not Before: Oct 20 03:11:43 2026 GMT Not After : Oct 19 03:16:43 2027 GMT Subject: CN=032D192826175513C6A36FB9C73436762FBBC8BD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:27:f3:a3:54:87:c7:62:d3:5d:15:0b:fe:91: 01:1a:ed:52:db:c9:f0:3e:53:0d:f8:a1:86:1b:d3: ba:5e:d6:ed:7e:f8:b4:84:61:e9:86:6e:c0:2a:f7: 19:5f:76:df:99:b7:df:97:09:e1:8f:d8:51:28:c4: f7:5a:f5:7b:fa:da:63:50:05:32:cb:f3:85:1a:3b: 7a:3e:b9:c1:b3:55:10:f6:53:77:c1:f1:01:42:8e: df:af:dc:22:1a:50:6c:da:20:10:74:cc:6f:ac:80: a7:da:eb:f3:40:c7:30:49:b5:b1:02:88:cd:fa:08: 27:ab:7c:7e:6a:06:5a:00:97:8c:49:1e:04:d4:b0: d6:51:89:c9:df:17:21:e2:c0:af:50:0d:2d:3c:fc: 5a:2e:84:46:31:32:3c:b5:9e:04:45:6a:16:d4:e4: 1e:94:9a:b0:13:4f:59:b9:9c:42:42:89:86:d2:4e: 32:f3:56:e5:02:56:c4:02:f2:e0:f6:e6:7c:fd:a2: cd:d6:63:9a:f2:f1:51:85:ba:b0:79:0f:b5:a7:0c: 7c:5c:84:52:63:d5:d2:e0:a9:b1:a5:c8:1a:77:60: c5:de:d7:d6:cc:49:fc:dd:94:c3:33:40:47:93:53: 3c:8d:0e:e1:c2:9c:df:a7:68:9a:a5:43:e1:f1:5a: a0:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:2D:19:28:26:17:55:13:C6:A3:6F:B9:C7:34:36:76:2F:BB:C8:BD X509v3 Authority Key Identifier: keyid:B3:54:D3:28:CB:BF:D1:EF:3C:D2:92:68:A2:3B:0F:CC:60:E3:A2:C5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.cer Subject Information Access: Signed Object - URI:rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/36322e3134342e34332e302f32342d3234203d3e20323139303437.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 62.144.43.0/24 Signature Algorithm: sha256WithRSAEncryption 5b:1a:8f:07:23:a3:69:52:e1:de:6d:df:e5:5f:18:0e:1d:3b: 10:5b:56:bd:9b:ca:60:bb:6b:06:6c:82:99:23:2b:07:51:00: 1a:cc:b5:52:af:03:71:13:e1:e1:74:6e:cd:cd:79:08:bb:b4: 11:9c:11:1c:35:a4:b4:18:4e:0a:0c:37:08:36:e0:15:54:56: b0:61:68:a5:c3:e7:a3:d0:fb:17:b0:4b:b1:6a:14:c6:7e:0d: 64:6b:58:79:b3:97:28:96:3d:75:58:87:42:27:cc:c2:c1:d2: 44:bc:0c:32:25:a4:c4:65:dd:f3:ba:f1:50:2e:79:0b:81:c3: 78:57:12:f4:0c:95:ab:ab:56:70:09:ac:66:1e:48:f3:05:e9: c9:16:5b:03:85:83:15:bc:8d:39:cd:3d:b1:7b:fc:52:0f:ec: 85:49:2a:8d:ef:04:41:07:bf:f5:04:f7:74:50:22:10:06:97: f1:78:95:ed:25:42:08:a0:1b:66:34:94:2d:e9:82:88:d7:86: 45:d7:b2:c6:38:63:bb:39:39:eb:37:88:31:6e:d0:76:fe:12: a9:0f:8a:17:df:18:5d:82:ef:07:e1:c7:ce:72:1a:b0:ca:2f: 0f:30:ca:68:4e:43:e1:b6:61:d0:df:55:68:2f:3e:9b:30:d2: 44:a2:84:e5 -----BEGIN CERTIFICATE----- MIIFWDCCBECgAwIBAgIUWeujGdMawurMKOjmg3UcpgdAfG0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjM1NEQzMjhDQkJGRDFFRjNDRDI5MjY4QTIzQjBGQ0M2 MEUzQTJDNTAeFw0yNjEwMjAwMzExNDNaFw0yNzEwMTkwMzE2NDNaMDMxMTAvBgNV BAMTKDAzMkQxOTI4MjYxNzU1MTNDNkEzNkZCOUM3MzQzNjc2MkZCQkM4QkQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDfJ/OjVIfHYtNdFQv+kQEa7VLb yfA+Uw34oYYb07pe1u1++LSEYemGbsAq9xlfdt+Zt9+XCeGP2FEoxPda9Xv62mNQ BTLL84UaO3o+ucGzVRD2U3fB8QFCjt+v3CIaUGzaIBB0zG+sgKfa6/NAxzBJtbEC iM36CCerfH5qBloAl4xJHgTUsNZRicnfFyHiwK9QDS08/FouhEYxMjy1ngRFahbU 5B6UmrATT1m5nEJCiYbSTjLzVuUCVsQC8uD25nz9os3WY5ry8VGFurB5D7WnDHxc hFJj1dLgqbGlyBp3YMXe19bMSfzdlMMzQEeTUzyNDuHCnN+naJqlQ+HxWqBFAgMB AAGjggJiMIICXjAdBgNVHQ4EFgQUAy0ZKCYXVRPGo2+5xzQ2di+7yL0wHwYDVR0j BBgwFoAUs1TTKMu/0e880pJoojsPzGDjosUwDgYDVR0PAQH/BAQDAgeAMIGIBgNV HR8EgYAwfjB8oHqgeIZ2cnN5bmM6Ly9yLm1hZ2VsbGFuLmlweG8uY29tL3JlcG8v YTAzNzViMzktZjk0OS00Y2I1LWI1MTktZjk0MDA4YjE2NTRjLTAvMC9CMzU0RDMy OENCQkZEMUVGM0NEMjkyNjhBMjNCMEZDQzYwRTNBMkM1LmNybDCBngYIKwYBBQUH AQEEgZEwgY4wgYsGCCsGAQUFBzAChn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5y aXBlLm5ldC9yZXBvc2l0b3J5LzYxNzA4YTZiLTZjM2EtNDBhMC1hMzAyLTU5NWVj YzE3ODQ4Yy8wL0IzNTREMzI4Q0JCRkQxRUYzQ0QyOTI2OEEyM0IwRkNDNjBFM0Ey QzUuY2VyMIGkBggrBgEFBQcBCwSBlzCBlDCBkQYIKwYBBQUHMAuGgYRyc3luYzov L3IubWFnZWxsYW4uaXB4by5jb20vcmVwby9hMDM3NWIzOS1mOTQ5LTRjYjUtYjUx OS1mOTQwMDhiMTY1NGMtMC8wLzM2MzIyZTMxMzQzNDJlMzQzMzJlMzAyZjMyMzQy ZDMyMzQyMDNkM2UyMDMyMzEzOTMwMzQzNy5yb2EwGAYDVR0gAQH/BA4wDDAKBggr BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAD6QKzANBgkqhkiG 9w0BAQsFAAOCAQEAWxqPByOjaVLh3m3f5V8YDh07EFtWvZvKYLtrBmyCmSMrB1EA Gsy1Uq8DcRPh4XRuzc15CLu0EZwRHDWktBhOCgw3CDbgFVRWsGFopcPno9D7F7BL sWoUxn4NZGtYebOXKJY9dViHQifMwsHSRLwMMiWkxGXd87rxUC55C4HDeFcS9AyV q6tWcAmsZh5I8wXpyRZbA4WDFbyNOc09sXv8Ug/shUkqje8EQQe/9QT3dFAiEAaX 8XiV7SVCCKAbZjSULemCiNeGRdeyxjhjuzk56zeIMW7Qdv4SqQ+KF98YXYLvB+HH znIasMovDzDKaE5D4bZh0N9VaC8+mzDSRKKE5Q== -----END CERTIFICATE-----Generated at Mon Oct 26 17:52:03 2026 by rpki-client