$ rpki-client -vvvf r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/36322e3134342e34332e302f32342d3234203d3e20323139303537.roa File: 36322e3134342e34332e302f32342d3234203d3e20323139303537.roa (raw, json) Hash identifier: 2KJcLKK8IzUP+fPWdvFuIukCQ/Wdav+mO4Cr5he2S/8= Subject key identifier: BC:47:F4:71:BD:67:90:21:78:84:77:6B:9E:3C:42:30:55:0D:05:C7 Certificate issuer: /CN=B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5 Certificate serial: 7551E200AADC5F22AB104D33FF3F7C60C53BCFC3 Authority key identifier: B3:54:D3:28:CB:BF:D1:EF:3C:D2:92:68:A2:3B:0F:CC:60:E3:A2:C5 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.cer Subject info access: rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/36322e3134342e34332e302f32342d3234203d3e20323139303537.roa Signing time: Tue 20 Oct 2026 03:16:43 +0000 ROA not before: Tue 20 Oct 2026 03:11:43 +0000 ROA not after: Tue 19 Oct 2027 03:16:43 +0000 asID: 219057 IP address blocks: 62.144.43.0/24 maxlen: 24 Validation: OK Signature path: rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.crl rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.mft rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.cer rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/D0A516B50426202A424F0EBFCB7D2BD4F744F964.crl rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/D0A516B50426202A424F0EBFCB7D2BD4F744F964.mft rsync://rpki.ripe.net/repository/DEFAULT/0KUWtQQmICpCTw6_y30r1PdE-WQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Oct 2026 17:04:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 75:51:e2:00:aa:dc:5f:22:ab:10:4d:33:ff:3f:7c:60:c5:3b:cf:c3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5 Validity Not Before: Oct 20 03:11:43 2026 GMT Not After : Oct 19 03:16:43 2027 GMT Subject: CN=BC47F471BD6790217884776B9E3C4230550D05C7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:3c:81:4c:53:fa:1f:63:43:f1:d2:5b:3e:40: 36:6c:49:86:95:14:d8:1d:25:2c:8a:18:1e:50:f3: 4e:fa:a2:a0:67:1f:85:2a:85:90:4b:93:85:af:07: ac:f6:07:fd:43:f4:ce:e5:de:8c:2c:1d:41:47:82: 1a:38:40:37:e2:b9:a3:cd:1f:db:4f:4a:4b:a4:c5: 16:4c:15:d7:3d:73:e8:5e:6f:58:4e:1d:52:54:47: 9f:17:03:b1:40:98:ce:b2:62:9d:fb:e3:92:2c:d3: ab:b1:76:cb:a8:f2:6c:73:05:15:d8:7f:5d:8e:44: 24:54:65:bb:3f:dd:40:dc:4a:34:c2:2f:b9:0c:8c: 1b:10:85:8a:73:01:ff:4f:2d:57:40:ef:6d:26:d9: 37:b6:7d:fd:e5:7e:3d:df:3f:12:17:9d:b6:6a:cf: 8f:fc:8f:41:93:57:a0:27:4f:5b:dd:20:91:f6:7a: 90:df:1f:e3:8c:92:21:a0:5e:a0:91:5b:0a:0f:1b: 48:22:73:5a:9c:ae:74:eb:44:a4:53:b0:89:5b:ad: 1a:19:c0:73:9e:2f:c0:e1:bf:00:6f:2c:51:2a:72: 0c:51:f2:65:62:1e:30:c9:32:e0:ea:72:28:1a:44: 01:33:d5:b3:ce:bb:f8:03:2f:29:0c:20:f2:0e:be: ed:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:47:F4:71:BD:67:90:21:78:84:77:6B:9E:3C:42:30:55:0D:05:C7 X509v3 Authority Key Identifier: keyid:B3:54:D3:28:CB:BF:D1:EF:3C:D2:92:68:A2:3B:0F:CC:60:E3:A2:C5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.cer Subject Information Access: Signed Object - URI:rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/36322e3134342e34332e302f32342d3234203d3e20323139303537.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 62.144.43.0/24 Signature Algorithm: sha256WithRSAEncryption 89:ab:a6:29:0c:35:2c:bb:20:99:49:32:79:53:98:25:be:4f: bb:f2:db:a7:32:3d:47:b0:f5:38:d6:cc:74:3b:d0:0f:04:a1: b2:4f:35:9f:7c:5f:12:fe:d9:c0:6f:36:4f:3e:db:d0:a9:30: 7a:89:9a:a4:5b:d1:a9:85:ba:00:b9:b7:26:c0:ef:d9:7b:74: de:44:85:e7:01:d3:2f:b5:7a:40:7d:2a:76:72:00:79:ce:03: b4:61:2a:27:f6:b2:75:07:73:61:09:03:13:18:68:9e:1f:1b: 1f:13:78:2c:c8:47:fc:e9:0c:06:f3:b8:cf:9a:05:76:5d:a6: e3:47:fd:f2:a2:39:71:1f:f6:53:06:04:04:32:72:0b:50:72: 7d:f5:aa:02:35:d6:4c:0a:59:92:d3:e9:25:a4:e6:74:c2:fb: b8:9a:8f:9a:3f:6b:2c:71:99:99:5a:60:ca:ef:95:d7:3b:0a: 06:97:3c:c8:f0:3f:2a:34:83:5e:4d:48:9d:fd:50:bb:f8:72: 0a:ff:38:57:55:e3:c6:cb:bf:f8:cb:e1:5a:d1:a4:82:af:12: 75:12:0d:4a:62:a4:ab:91:ce:18:8b:24:9f:83:2f:ec:29:cf: c4:f3:34:c9:7b:72:94:a5:09:66:ee:a5:98:52:7e:7f:be:46: 9a:ad:93:11 -----BEGIN CERTIFICATE----- MIIFWDCCBECgAwIBAgIUdVHiAKrcXyKrEE0z/z98YMU7z8MwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjM1NEQzMjhDQkJGRDFFRjNDRDI5MjY4QTIzQjBGQ0M2 MEUzQTJDNTAeFw0yNjEwMjAwMzExNDNaFw0yNzEwMTkwMzE2NDNaMDMxMTAvBgNV BAMTKEJDNDdGNDcxQkQ2NzkwMjE3ODg0Nzc2QjlFM0M0MjMwNTUwRDA1QzcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDoPIFMU/ofY0Px0ls+QDZsSYaV FNgdJSyKGB5Q8076oqBnH4UqhZBLk4WvB6z2B/1D9M7l3owsHUFHgho4QDfiuaPN H9tPSkukxRZMFdc9c+heb1hOHVJUR58XA7FAmM6yYp3745Is06uxdsuo8mxzBRXY f12ORCRUZbs/3UDcSjTCL7kMjBsQhYpzAf9PLVdA720m2Te2ff3lfj3fPxIXnbZq z4/8j0GTV6AnT1vdIJH2epDfH+OMkiGgXqCRWwoPG0gic1qcrnTrRKRTsIlbrRoZ wHOeL8DhvwBvLFEqcgxR8mViHjDJMuDqcigaRAEz1bPOu/gDLykMIPIOvu3fAgMB AAGjggJiMIICXjAdBgNVHQ4EFgQUvEf0cb1nkCF4hHdrnjxCMFUNBccwHwYDVR0j BBgwFoAUs1TTKMu/0e880pJoojsPzGDjosUwDgYDVR0PAQH/BAQDAgeAMIGIBgNV HR8EgYAwfjB8oHqgeIZ2cnN5bmM6Ly9yLm1hZ2VsbGFuLmlweG8uY29tL3JlcG8v YTAzNzViMzktZjk0OS00Y2I1LWI1MTktZjk0MDA4YjE2NTRjLTAvMC9CMzU0RDMy OENCQkZEMUVGM0NEMjkyNjhBMjNCMEZDQzYwRTNBMkM1LmNybDCBngYIKwYBBQUH AQEEgZEwgY4wgYsGCCsGAQUFBzAChn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5y aXBlLm5ldC9yZXBvc2l0b3J5LzYxNzA4YTZiLTZjM2EtNDBhMC1hMzAyLTU5NWVj YzE3ODQ4Yy8wL0IzNTREMzI4Q0JCRkQxRUYzQ0QyOTI2OEEyM0IwRkNDNjBFM0Ey QzUuY2VyMIGkBggrBgEFBQcBCwSBlzCBlDCBkQYIKwYBBQUHMAuGgYRyc3luYzov L3IubWFnZWxsYW4uaXB4by5jb20vcmVwby9hMDM3NWIzOS1mOTQ5LTRjYjUtYjUx OS1mOTQwMDhiMTY1NGMtMC8wLzM2MzIyZTMxMzQzNDJlMzQzMzJlMzAyZjMyMzQy ZDMyMzQyMDNkM2UyMDMyMzEzOTMwMzUzNy5yb2EwGAYDVR0gAQH/BA4wDDAKBggr BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAD6QKzANBgkqhkiG 9w0BAQsFAAOCAQEAiaumKQw1LLsgmUkyeVOYJb5Pu/LbpzI9R7D1ONbMdDvQDwSh sk81n3xfEv7ZwG82Tz7b0KkweomapFvRqYW6ALm3JsDv2Xt03kSF5wHTL7V6QH0q dnIAec4DtGEqJ/aydQdzYQkDExhonh8bHxN4LMhH/OkMBvO4z5oFdl2m40f98qI5 cR/2UwYEBDJyC1ByffWqAjXWTApZktPpJaTmdML7uJqPmj9rLHGZmVpgyu+V1zsK Bpc8yPA/KjSDXk1Inf1Qu/hyCv84V1Xjxsu/+MvhWtGkgq8SdRINSmKkq5HOGIsk n4Mv7CnPxPM0yXtylKUJZu6lmFJ+f75Gmq2TEQ== -----END CERTIFICATE-----Generated at Sun Oct 25 07:57:33 2026 by rpki-client