$ rpki-client -vvvf r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/36322e3134342e35392e302f32342d3234203d3e20343032313333.roa File: 36322e3134342e35392e302f32342d3234203d3e20343032313333.roa (raw, json) Hash identifier: I2sapPYmh8GHL+NBSZsvtFQ1gtFiTgR0mbX8CDPIZdU= Subject key identifier: 1D:A1:3B:DA:2D:B4:E9:1A:F0:21:E1:FE:7D:C2:EE:34:5E:CB:DF:86 Certificate issuer: /CN=B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5 Certificate serial: 6337CB4A7EECE31103986C63DBE736F88157F228 Authority key identifier: B3:54:D3:28:CB:BF:D1:EF:3C:D2:92:68:A2:3B:0F:CC:60:E3:A2:C5 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.cer Subject info access: rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/36322e3134342e35392e302f32342d3234203d3e20343032313333.roa Signing time: Mon 17 Aug 2026 09:28:32 +0000 ROA not before: Mon 17 Aug 2026 09:23:32 +0000 ROA not after: Mon 16 Aug 2027 09:28:32 +0000 asID: 402133 IP address blocks: 62.144.59.0/24 maxlen: 24 Validation: OK Signature path: rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.crl rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.mft rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.cer rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/D0A516B50426202A424F0EBFCB7D2BD4F744F964.crl rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/D0A516B50426202A424F0EBFCB7D2BD4F744F964.mft rsync://rpki.ripe.net/repository/DEFAULT/0KUWtQQmICpCTw6_y30r1PdE-WQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 03 Sep 2026 18:02:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 63:37:cb:4a:7e:ec:e3:11:03:98:6c:63:db:e7:36:f8:81:57:f2:28 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5 Validity Not Before: Aug 17 09:23:32 2026 GMT Not After : Aug 16 09:28:32 2027 GMT Subject: CN=1DA13BDA2DB4E91AF021E1FE7DC2EE345ECBDF86 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:2d:cf:e3:29:f7:71:87:eb:05:fe:91:71:7b: 3f:15:a8:01:4c:4a:72:ac:a5:22:e6:d3:b5:1c:30: 37:9e:a3:d3:5b:36:b7:72:e2:14:a4:76:94:1d:2f: 84:b6:32:dc:08:06:a3:bc:fb:22:ee:56:b8:3c:17: d0:82:e6:da:ee:4c:32:99:38:e3:04:be:c5:a4:97: cc:a9:cd:d4:c8:b0:18:b3:7f:7d:5c:13:57:d4:41: e1:25:af:0e:b9:93:55:72:47:46:ee:c6:44:be:7d: 54:67:d8:3c:5a:e2:ab:73:83:96:44:2b:33:93:fb: ec:29:34:d8:5a:0f:cc:34:41:cf:00:c9:39:88:62: 2f:e5:cd:78:51:20:d2:d5:49:b7:de:11:c8:80:54: 66:b0:fd:15:20:78:9e:df:4d:18:98:7d:c2:c4:1a: be:b2:02:f6:2f:b1:66:dc:d7:fc:ba:6f:b2:20:e9: 28:d3:1e:2d:25:89:1b:7f:b1:07:4d:5f:96:8a:90: 51:5c:38:2c:24:45:04:43:2a:70:1f:83:b7:19:ff: 8d:a9:7e:9c:af:e1:a2:f8:76:e0:ad:6a:3f:c8:cb: 08:c1:de:e6:98:75:2f:12:b9:b1:8b:54:e6:ad:59: 72:7e:0d:18:20:fd:cb:b8:03:01:11:e1:07:56:e4: 1c:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:A1:3B:DA:2D:B4:E9:1A:F0:21:E1:FE:7D:C2:EE:34:5E:CB:DF:86 X509v3 Authority Key Identifier: keyid:B3:54:D3:28:CB:BF:D1:EF:3C:D2:92:68:A2:3B:0F:CC:60:E3:A2:C5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.cer Subject Information Access: Signed Object - URI:rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/36322e3134342e35392e302f32342d3234203d3e20343032313333.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 62.144.59.0/24 Signature Algorithm: sha256WithRSAEncryption b8:e7:f2:02:d7:6d:9d:f1:63:7d:ec:03:f5:1d:fa:0b:b8:84: a9:c1:29:2f:cd:b0:9b:f5:44:b6:9c:6d:3f:af:d3:fc:d4:36: d6:03:2a:a0:d5:42:4c:e8:81:d4:5c:77:bd:51:36:d8:0c:84: 33:ce:63:d1:64:e0:65:0a:38:76:d5:a3:8a:ef:12:3e:e6:1a: 1e:2f:e8:7d:e5:16:85:a9:2e:9d:33:af:c6:be:9f:51:6e:85: 32:6c:7c:00:25:0b:b9:0a:c8:f1:83:3b:51:00:45:85:6e:5c: 5e:10:72:99:f0:53:bf:c0:68:7b:a3:b6:5e:93:cb:b4:fe:8a: a5:ad:b7:37:85:78:a4:cf:0b:d7:07:28:f1:fb:34:fd:1c:7b: 12:07:12:12:0b:2b:81:91:4d:86:c4:d5:53:9f:d1:47:f5:4c: f9:ba:97:8a:a0:2c:9e:76:2a:9e:15:1f:43:7f:8e:5c:ca:41: 78:f0:d1:0a:51:9b:64:ea:65:c4:9d:f5:b1:88:5f:a5:9d:c1: e1:ec:82:d9:cb:7b:f6:b3:e6:55:72:7f:93:17:6a:d1:98:05: ec:ff:da:dc:44:b0:f0:31:2d:d6:87:72:05:bd:f1:8a:7f:0d: d8:4a:f7:8e:57:9b:26:0e:9b:f9:8f:4f:62:d3:ab:4d:16:9b: 9a:17:2a:b2 -----BEGIN CERTIFICATE----- MIIFWDCCBECgAwIBAgIUYzfLSn7s4xEDmGxj2+c2+IFX8igwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjM1NEQzMjhDQkJGRDFFRjNDRDI5MjY4QTIzQjBGQ0M2 MEUzQTJDNTAeFw0yNjA4MTcwOTIzMzJaFw0yNzA4MTYwOTI4MzJaMDMxMTAvBgNV BAMTKDFEQTEzQkRBMkRCNEU5MUFGMDIxRTFGRTdEQzJFRTM0NUVDQkRGODYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDYLc/jKfdxh+sF/pFxez8VqAFM SnKspSLm07UcMDeeo9NbNrdy4hSkdpQdL4S2MtwIBqO8+yLuVrg8F9CC5truTDKZ OOMEvsWkl8ypzdTIsBizf31cE1fUQeElrw65k1VyR0buxkS+fVRn2Dxa4qtzg5ZE KzOT++wpNNhaD8w0Qc8AyTmIYi/lzXhRINLVSbfeEciAVGaw/RUgeJ7fTRiYfcLE Gr6yAvYvsWbc1/y6b7Ig6SjTHi0liRt/sQdNX5aKkFFcOCwkRQRDKnAfg7cZ/42p fpyv4aL4duCtaj/IywjB3uaYdS8SubGLVOatWXJ+DRgg/cu4AwER4QdW5BwBAgMB AAGjggJiMIICXjAdBgNVHQ4EFgQUHaE72i206RrwIeH+fcLuNF7L34YwHwYDVR0j BBgwFoAUs1TTKMu/0e880pJoojsPzGDjosUwDgYDVR0PAQH/BAQDAgeAMIGIBgNV HR8EgYAwfjB8oHqgeIZ2cnN5bmM6Ly9yLm1hZ2VsbGFuLmlweG8uY29tL3JlcG8v YTAzNzViMzktZjk0OS00Y2I1LWI1MTktZjk0MDA4YjE2NTRjLTAvMC9CMzU0RDMy OENCQkZEMUVGM0NEMjkyNjhBMjNCMEZDQzYwRTNBMkM1LmNybDCBngYIKwYBBQUH AQEEgZEwgY4wgYsGCCsGAQUFBzAChn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5y aXBlLm5ldC9yZXBvc2l0b3J5LzYxNzA4YTZiLTZjM2EtNDBhMC1hMzAyLTU5NWVj YzE3ODQ4Yy8wL0IzNTREMzI4Q0JCRkQxRUYzQ0QyOTI2OEEyM0IwRkNDNjBFM0Ey QzUuY2VyMIGkBggrBgEFBQcBCwSBlzCBlDCBkQYIKwYBBQUHMAuGgYRyc3luYzov L3IubWFnZWxsYW4uaXB4by5jb20vcmVwby9hMDM3NWIzOS1mOTQ5LTRjYjUtYjUx OS1mOTQwMDhiMTY1NGMtMC8wLzM2MzIyZTMxMzQzNDJlMzUzOTJlMzAyZjMyMzQy ZDMyMzQyMDNkM2UyMDM0MzAzMjMxMzMzMy5yb2EwGAYDVR0gAQH/BA4wDDAKBggr BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAD6QOzANBgkqhkiG 9w0BAQsFAAOCAQEAuOfyAtdtnfFjfewD9R36C7iEqcEpL82wm/VEtpxtP6/T/NQ2 1gMqoNVCTOiB1Fx3vVE22AyEM85j0WTgZQo4dtWjiu8SPuYaHi/ofeUWhakunTOv xr6fUW6FMmx8ACULuQrI8YM7UQBFhW5cXhBymfBTv8Boe6O2XpPLtP6Kpa23N4V4 pM8L1wco8fs0/Rx7EgcSEgsrgZFNhsTVU5/RR/VM+bqXiqAsnnYqnhUfQ3+OXMpB ePDRClGbZOplxJ31sYhfpZ3B4eyC2ct79rPmVXJ/kxdq0ZgF7P/a3ESw8DEt1ody Bb3xin8N2Er3jlebJg6b+Y9PYtOrTRabmhcqsg== -----END CERTIFICATE-----Generated at Thu Sep 3 09:22:03 2026 by rpki-client