$ rpki-client -vvf r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/36322e3134342e33322e302f32322d3234203d3e203133333437.roa File: 36322e3134342e33322e302f32322d3234203d3e203133333437.roa (raw, json) Hash identifier: YE0oMsAB8FVeU3kUkKtKiH8ROUHbMOVc+gdD4CNwYEs= Subject key identifier: 64:E4:0D:A7:55:07:E1:FC:32:14:4F:D4:D3:BA:7E:40:69:6B:8F:F1 Certificate issuer: /CN=B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5 Certificate serial: 132E9ECC2AFD0D2A3B80CC41660233300E73F37E Authority key identifier: B3:54:D3:28:CB:BF:D1:EF:3C:D2:92:68:A2:3B:0F:CC:60:E3:A2:C5 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.cer Subject info access: rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/36322e3134342e33322e302f32322d3234203d3e203133333437.roa Signing time: Tue 28 Jul 2026 12:18:15 +0000 ROA not before: Tue 28 Jul 2026 12:13:15 +0000 ROA not after: Tue 27 Jul 2027 12:18:15 +0000 asID: 13347 IP address blocks: 62.144.32.0/22 maxlen: 24 Validation: OK Signature path: rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.crl rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.mft rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.cer rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/D0A516B50426202A424F0EBFCB7D2BD4F744F964.crl rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/D0A516B50426202A424F0EBFCB7D2BD4F744F964.mft rsync://rpki.ripe.net/repository/DEFAULT/0KUWtQQmICpCTw6_y30r1PdE-WQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 29 Jul 2026 14:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13:2e:9e:cc:2a:fd:0d:2a:3b:80:cc:41:66:02:33:30:0e:73:f3:7e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5 Validity Not Before: Jul 28 12:13:15 2026 GMT Not After : Jul 27 12:18:15 2027 GMT Subject: CN=64E40DA75507E1FC32144FD4D3BA7E40696B8FF1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:0e:b9:34:67:9c:ef:6d:f0:a8:5b:9b:b4:38: 7f:46:6d:38:52:86:26:6e:98:1c:c3:9d:da:6c:f8: 61:ef:11:af:94:88:a7:98:cd:fe:56:e4:a0:a8:e3: f2:4a:e3:75:42:e2:12:a1:2f:7a:11:83:00:23:aa: f1:56:c7:19:27:3f:0a:8a:4c:73:2d:f7:d1:01:8a: 71:f7:09:2a:49:c0:9e:6b:73:1f:ee:93:9f:68:22: ce:d0:f8:0e:6c:fe:16:62:ce:27:72:1a:a6:f5:37: 0d:6b:28:c4:7d:20:15:f4:34:27:3f:df:96:57:21: 4a:e0:bd:33:bf:50:da:6b:87:07:f5:f6:60:af:1b: 58:91:3e:90:9d:e1:58:3f:23:f6:9f:4f:8b:9f:53: 37:0a:2a:83:b4:bb:86:3b:4f:9d:e9:ad:4d:ed:93: 66:03:79:b9:90:b1:b5:2a:8b:fd:fc:fb:8a:82:35: d5:4f:8b:53:8f:05:91:1b:bb:5e:1a:57:54:e5:a4: fc:ae:d3:96:4a:8d:9a:0b:e0:ad:4b:bb:2a:e2:65: a2:d3:17:38:ad:b5:5f:7b:e1:0e:54:8b:0a:b2:29: 6b:ec:95:27:76:f4:1e:02:8e:06:4a:d5:f3:12:b7: d9:5b:36:fd:0f:43:0b:98:72:cf:e9:3a:ee:12:45: eb:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:E4:0D:A7:55:07:E1:FC:32:14:4F:D4:D3:BA:7E:40:69:6B:8F:F1 X509v3 Authority Key Identifier: keyid:B3:54:D3:28:CB:BF:D1:EF:3C:D2:92:68:A2:3B:0F:CC:60:E3:A2:C5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.cer Subject Information Access: Signed Object - URI:rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/36322e3134342e33322e302f32322d3234203d3e203133333437.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 62.144.32.0/22 Signature Algorithm: sha256WithRSAEncryption 76:82:d5:98:16:fe:36:a4:ff:c0:94:e9:78:6a:0c:63:60:ba: 55:d1:bf:e2:0b:1c:d1:6c:d5:14:08:6e:e4:18:0e:de:ba:ac: 16:98:09:72:11:e6:4f:e0:57:1c:65:c8:bb:71:13:e8:0c:e3: d4:0e:22:23:7e:b8:7a:7b:a1:0c:d8:89:5f:d8:bf:28:05:ba: f9:50:cb:23:dc:25:39:bf:09:f6:f2:a2:26:70:9e:cc:e1:75: 51:5f:87:ce:2e:ed:0c:a0:2e:f6:bd:32:1d:c5:84:5b:11:32: 0f:f6:24:53:82:f5:4c:b4:62:71:72:00:eb:cc:ee:4d:02:7e: cc:35:40:3b:a5:d9:62:59:01:0c:70:59:c1:d8:fe:6d:13:cd: aa:f9:f6:fa:d0:68:98:11:55:9e:70:ca:1d:e2:80:d0:f9:5b: 1d:b0:ec:f0:cf:d3:2e:da:3a:2a:6b:f6:f9:2b:f4:b3:50:fd: ab:2d:a4:d1:bb:ec:da:68:2e:cb:72:1d:32:07:74:da:52:22: e6:3c:6e:67:89:cf:43:8c:f5:b9:db:19:72:99:51:81:f1:4d: 10:c1:b9:4a:bb:9c:16:a8:39:39:0b:58:44:79:83:49:78:a5: b0:b7:e0:77:f5:d1:c4:9a:58:85:57:88:b8:cb:5a:7e:20:af: c1:4f:43:2e -----BEGIN CERTIFICATE----- MIIFVjCCBD6gAwIBAgIUEy6ezCr9DSo7gMxBZgIzMA5z834wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjM1NEQzMjhDQkJGRDFFRjNDRDI5MjY4QTIzQjBGQ0M2 MEUzQTJDNTAeFw0yNjA3MjgxMjEzMTVaFw0yNzA3MjcxMjE4MTVaMDMxMTAvBgNV BAMTKDY0RTQwREE3NTUwN0UxRkMzMjE0NEZENEQzQkE3RTQwNjk2QjhGRjEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDNDrk0Z5zvbfCoW5u0OH9GbThS hiZumBzDndps+GHvEa+UiKeYzf5W5KCo4/JK43VC4hKhL3oRgwAjqvFWxxknPwqK THMt99EBinH3CSpJwJ5rcx/uk59oIs7Q+A5s/hZizidyGqb1Nw1rKMR9IBX0NCc/ 35ZXIUrgvTO/UNprhwf19mCvG1iRPpCd4Vg/I/afT4ufUzcKKoO0u4Y7T53prU3t k2YDebmQsbUqi/38+4qCNdVPi1OPBZEbu14aV1TlpPyu05ZKjZoL4K1LuyriZaLT FzittV974Q5UiwqyKWvslSd29B4CjgZK1fMSt9lbNv0PQwuYcs/pOu4SReubAgMB AAGjggJgMIICXDAdBgNVHQ4EFgQUZOQNp1UH4fwyFE/U07p+QGlrj/EwHwYDVR0j BBgwFoAUs1TTKMu/0e880pJoojsPzGDjosUwDgYDVR0PAQH/BAQDAgeAMIGIBgNV HR8EgYAwfjB8oHqgeIZ2cnN5bmM6Ly9yLm1hZ2VsbGFuLmlweG8uY29tL3JlcG8v YTAzNzViMzktZjk0OS00Y2I1LWI1MTktZjk0MDA4YjE2NTRjLTAvMC9CMzU0RDMy OENCQkZEMUVGM0NEMjkyNjhBMjNCMEZDQzYwRTNBMkM1LmNybDCBngYIKwYBBQUH AQEEgZEwgY4wgYsGCCsGAQUFBzAChn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5y aXBlLm5ldC9yZXBvc2l0b3J5LzYxNzA4YTZiLTZjM2EtNDBhMC1hMzAyLTU5NWVj YzE3ODQ4Yy8wL0IzNTREMzI4Q0JCRkQxRUYzQ0QyOTI2OEEyM0IwRkNDNjBFM0Ey QzUuY2VyMIGiBggrBgEFBQcBCwSBlTCBkjCBjwYIKwYBBQUHMAuGgYJyc3luYzov L3IubWFnZWxsYW4uaXB4by5jb20vcmVwby9hMDM3NWIzOS1mOTQ5LTRjYjUtYjUx OS1mOTQwMDhiMTY1NGMtMC8wLzM2MzIyZTMxMzQzNDJlMzMzMjJlMzAyZjMyMzIy ZDMyMzQyMDNkM2UyMDMxMzMzMzM0Mzcucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYB BQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAI+kCAwDQYJKoZIhvcN AQELBQADggEBAHaC1ZgW/jak/8CU6XhqDGNgulXRv+ILHNFs1RQIbuQYDt66rBaY CXIR5k/gVxxlyLtxE+gM49QOIiN+uHp7oQzYiV/YvygFuvlQyyPcJTm/CfbyoiZw nszhdVFfh84u7QygLva9Mh3FhFsRMg/2JFOC9Uy0YnFyAOvM7k0Cfsw1QDul2WJZ AQxwWcHY/m0Tzar59vrQaJgRVZ5wyh3igND5Wx2w7PDP0y7aOipr9vkr9LNQ/ast pNG77NpoLstyHTIHdNpSIuY8bmeJz0OM9bnbGXKZUYHxTRDBuUq7nBaoOTkLWER5 g0l4pbC34Hf10cSaWIVXiLjLWn4gr8FPQy4= -----END CERTIFICATE-----Generated at Tue Jul 28 17:15:25 2026 by rpki-client