$ rpki-client -vvvf r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/36322e3134342e34342e302f32322d3234203d3e2035363530.roa File: 36322e3134342e34342e302f32322d3234203d3e2035363530.roa (raw, json) Hash identifier: ZnNr2UYo5LEMNZ1rpTNEQDiwn/LqMU9L5dvO4u2Y0xA= Subject key identifier: B2:A2:24:5B:9A:B2:11:6D:6B:A5:AE:63:6C:31:60:E4:65:6A:14:A8 Certificate issuer: /CN=B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5 Certificate serial: 4BA25AD29E67F2188073A7868D8251CC79BF01FE Authority key identifier: B3:54:D3:28:CB:BF:D1:EF:3C:D2:92:68:A2:3B:0F:CC:60:E3:A2:C5 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.cer Subject info access: rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/36322e3134342e34342e302f32322d3234203d3e2035363530.roa Signing time: Tue 28 Jul 2026 12:18:18 +0000 ROA not before: Tue 28 Jul 2026 12:13:18 +0000 ROA not after: Tue 27 Jul 2027 12:18:18 +0000 asID: 5650 IP address blocks: 62.144.44.0/22 maxlen: 24 Validation: OK Signature path: rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.crl rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.mft rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.cer rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/D0A516B50426202A424F0EBFCB7D2BD4F744F964.crl rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/D0A516B50426202A424F0EBFCB7D2BD4F744F964.mft rsync://rpki.ripe.net/repository/DEFAULT/0KUWtQQmICpCTw6_y30r1PdE-WQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 03 Sep 2026 13:34:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4b:a2:5a:d2:9e:67:f2:18:80:73:a7:86:8d:82:51:cc:79:bf:01:fe Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5 Validity Not Before: Jul 28 12:13:18 2026 GMT Not After : Jul 27 12:18:18 2027 GMT Subject: CN=B2A2245B9AB2116D6BA5AE636C3160E4656A14A8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:3e:f1:22:ef:d5:ab:d4:2f:5c:41:54:14:93: 14:c2:89:6b:6d:0c:21:ae:8b:a6:a1:38:17:b0:3e: ea:fc:72:b7:da:09:ba:d9:e5:9e:c1:7b:c5:b4:4c: 76:5f:5e:0b:fa:a1:90:2c:8d:6f:8b:6c:37:1c:66: 33:a3:1d:29:b8:8b:26:d4:95:80:1d:dd:30:74:b2: d6:9c:a3:d6:58:47:f5:7b:fe:eb:03:9c:db:48:82: d1:54:d8:11:c8:8a:81:62:33:fc:bf:75:06:96:1c: 25:ba:4c:e4:fa:50:83:da:97:1e:8e:78:85:c0:8e: 9f:e2:6b:c0:ac:37:99:ed:c3:22:7e:1b:f1:6d:a3: ff:02:c5:ca:c1:bd:e4:4e:07:92:68:9c:21:b8:74: fa:83:a9:cc:4d:65:59:bc:cb:a7:2d:7f:a2:6e:e9: f3:fd:e7:ab:a6:4d:ea:c1:b5:d1:ef:20:8b:fa:fb: 23:0f:d5:b5:4c:d8:fa:88:20:b7:08:8f:33:d3:c0: b1:87:51:57:9f:23:4c:ff:65:ed:a7:02:a7:de:dd: 45:58:4a:c3:94:0a:49:1f:7c:e3:c2:a3:b5:a6:6a: b9:bd:33:77:8a:0d:34:0c:8f:6a:0d:3b:9e:32:39: 4e:5c:dd:5e:47:db:3a:35:bd:8b:53:b8:d8:29:12: 30:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:A2:24:5B:9A:B2:11:6D:6B:A5:AE:63:6C:31:60:E4:65:6A:14:A8 X509v3 Authority Key Identifier: keyid:B3:54:D3:28:CB:BF:D1:EF:3C:D2:92:68:A2:3B:0F:CC:60:E3:A2:C5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.cer Subject Information Access: Signed Object - URI:rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/36322e3134342e34342e302f32322d3234203d3e2035363530.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 62.144.44.0/22 Signature Algorithm: sha256WithRSAEncryption 24:79:e4:db:c9:10:f3:69:d6:f0:2d:a2:97:1c:e0:b9:c6:b2: 6e:f3:29:93:f6:b5:6b:7e:0f:19:8f:48:a5:10:ac:4d:2c:30: 97:f7:6b:6f:0d:2c:92:a4:14:a7:52:a7:e9:c9:a6:a7:df:1f: 90:b3:e6:5d:b6:91:8e:67:52:9f:c8:3c:56:9c:c7:57:30:33: 78:57:3b:37:ec:88:a6:8f:b2:95:ae:c5:a9:2c:3b:94:3e:5e: 75:56:4f:26:9a:24:77:d3:f3:90:1a:13:1d:09:7a:67:5e:b8: 3a:81:16:6a:8f:27:9e:80:2f:71:5e:10:42:11:b5:9b:7a:47: 0d:32:21:2e:0c:11:03:58:a2:4d:4d:fc:65:8e:80:d1:f2:68: 32:51:d0:b3:d3:d0:6b:0e:a7:43:43:ef:99:5c:9f:22:51:69: 13:07:26:e3:4a:a7:08:7a:06:5d:84:34:db:45:1e:c2:db:1e: c2:97:82:7b:4e:be:54:46:7c:8b:29:5b:01:21:f2:b3:af:91: df:82:7f:c0:dd:c5:60:61:48:5b:eb:8c:89:9f:b1:20:a8:09: cd:88:35:67:75:a4:bd:e0:23:eb:1e:5f:a8:5b:e9:89:ad:b3: c0:a2:55:1a:9d:98:eb:8d:c8:0a:6a:a8:a1:46:35:31:b6:da: a6:2e:4e:c0 -----BEGIN CERTIFICATE----- MIIFVDCCBDygAwIBAgIUS6Ja0p5n8hiAc6eGjYJRzHm/Af4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjM1NEQzMjhDQkJGRDFFRjNDRDI5MjY4QTIzQjBGQ0M2 MEUzQTJDNTAeFw0yNjA3MjgxMjEzMThaFw0yNzA3MjcxMjE4MThaMDMxMTAvBgNV BAMTKEIyQTIyNDVCOUFCMjExNkQ2QkE1QUU2MzZDMzE2MEU0NjU2QTE0QTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCkPvEi79Wr1C9cQVQUkxTCiWtt DCGui6ahOBewPur8crfaCbrZ5Z7Be8W0THZfXgv6oZAsjW+LbDccZjOjHSm4iybU lYAd3TB0staco9ZYR/V7/usDnNtIgtFU2BHIioFiM/y/dQaWHCW6TOT6UIPalx6O eIXAjp/ia8CsN5ntwyJ+G/Fto/8CxcrBveROB5JonCG4dPqDqcxNZVm8y6ctf6Ju 6fP956umTerBtdHvIIv6+yMP1bVM2PqIILcIjzPTwLGHUVefI0z/Ze2nAqfe3UVY SsOUCkkffOPCo7Wmarm9M3eKDTQMj2oNO54yOU5c3V5H2zo1vYtTuNgpEjD9AgMB AAGjggJeMIICWjAdBgNVHQ4EFgQUsqIkW5qyEW1rpa5jbDFg5GVqFKgwHwYDVR0j BBgwFoAUs1TTKMu/0e880pJoojsPzGDjosUwDgYDVR0PAQH/BAQDAgeAMIGIBgNV HR8EgYAwfjB8oHqgeIZ2cnN5bmM6Ly9yLm1hZ2VsbGFuLmlweG8uY29tL3JlcG8v YTAzNzViMzktZjk0OS00Y2I1LWI1MTktZjk0MDA4YjE2NTRjLTAvMC9CMzU0RDMy OENCQkZEMUVGM0NEMjkyNjhBMjNCMEZDQzYwRTNBMkM1LmNybDCBngYIKwYBBQUH AQEEgZEwgY4wgYsGCCsGAQUFBzAChn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5y aXBlLm5ldC9yZXBvc2l0b3J5LzYxNzA4YTZiLTZjM2EtNDBhMC1hMzAyLTU5NWVj YzE3ODQ4Yy8wL0IzNTREMzI4Q0JCRkQxRUYzQ0QyOTI2OEEyM0IwRkNDNjBFM0Ey QzUuY2VyMIGgBggrBgEFBQcBCwSBkzCBkDCBjQYIKwYBBQUHMAuGgYByc3luYzov L3IubWFnZWxsYW4uaXB4by5jb20vcmVwby9hMDM3NWIzOS1mOTQ5LTRjYjUtYjUx OS1mOTQwMDhiMTY1NGMtMC8wLzM2MzIyZTMxMzQzNDJlMzQzNDJlMzAyZjMyMzIy ZDMyMzQyMDNkM2UyMDM1MzYzNTMwLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCPpAsMA0GCSqGSIb3DQEB CwUAA4IBAQAkeeTbyRDzadbwLaKXHOC5xrJu8ymT9rVrfg8Zj0ilEKxNLDCX92tv DSySpBSnUqfpyaan3x+Qs+ZdtpGOZ1KfyDxWnMdXMDN4Vzs37Iimj7KVrsWpLDuU Pl51Vk8mmiR30/OQGhMdCXpnXrg6gRZqjyeegC9xXhBCEbWbekcNMiEuDBEDWKJN TfxljoDR8mgyUdCz09BrDqdDQ++ZXJ8iUWkTBybjSqcIegZdhDTbRR7C2x7Cl4J7 Tr5URnyLKVsBIfKzr5Hfgn/A3cVgYUhb64yJn7EgqAnNiDVndaS94CPrHl+oW+mJ rbPAolUanZjrjcgKaqihRjUxttqmLk7A -----END CERTIFICATE-----Generated at Thu Sep 3 02:01:41 2026 by rpki-client