$ rpki-client -vvf r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/36322e3134342e33322e302f32322d3234203d3e2037303239.roa File: 36322e3134342e33322e302f32322d3234203d3e2037303239.roa (raw, json) Hash identifier: 8UV6F5d2pZ66LPDZCN0wQ4lHbbwm5an6AS9zwumMMJA= Subject key identifier: 4E:71:47:7F:9A:01:B6:03:3C:BA:4E:51:4B:D3:B6:2D:38:4F:B2:B2 Certificate issuer: /CN=B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5 Certificate serial: 1994988BE62991E15D07B42A86CDD0712890C2EA Authority key identifier: B3:54:D3:28:CB:BF:D1:EF:3C:D2:92:68:A2:3B:0F:CC:60:E3:A2:C5 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.cer Subject info access: rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/36322e3134342e33322e302f32322d3234203d3e2037303239.roa Signing time: Tue 28 Jul 2026 12:18:13 +0000 ROA not before: Tue 28 Jul 2026 12:13:13 +0000 ROA not after: Tue 27 Jul 2027 12:18:13 +0000 asID: 7029 IP address blocks: 62.144.32.0/22 maxlen: 24 Validation: OK Signature path: rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.crl rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.mft rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.cer rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/D0A516B50426202A424F0EBFCB7D2BD4F744F964.crl rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/D0A516B50426202A424F0EBFCB7D2BD4F744F964.mft rsync://rpki.ripe.net/repository/DEFAULT/0KUWtQQmICpCTw6_y30r1PdE-WQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 29 Jul 2026 14:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 19:94:98:8b:e6:29:91:e1:5d:07:b4:2a:86:cd:d0:71:28:90:c2:ea Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5 Validity Not Before: Jul 28 12:13:13 2026 GMT Not After : Jul 27 12:18:13 2027 GMT Subject: CN=4E71477F9A01B6033CBA4E514BD3B62D384FB2B2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:45:13:49:f7:39:89:63:05:ae:82:d3:65:61: 8a:d7:aa:bc:74:29:70:61:3b:5b:64:74:84:b6:fe: b7:20:40:62:00:9f:31:23:a2:ff:4d:81:77:4e:ef: 0d:9c:37:b1:de:f0:59:05:55:d1:0f:df:f6:3f:41: ca:ed:66:ae:83:35:e7:c3:0f:d8:e1:4e:1a:d5:93: 1d:39:e2:3e:35:3b:ad:d6:2e:78:5e:7c:2b:d3:11: e1:d6:12:8c:99:dd:a2:76:db:a6:ca:c2:9e:5f:fe: 3f:5c:06:01:c2:bc:cf:57:bd:93:51:c7:bc:68:d6: 53:86:d2:08:b4:c8:fc:3f:45:c5:4c:f4:97:f6:5e: bd:a4:9a:77:6b:b5:ee:d5:48:30:16:15:9b:c5:63: a1:06:ce:c5:0b:be:73:ef:e8:91:d9:36:1b:d8:42: de:25:60:c9:21:4b:46:91:a4:d8:34:3f:8d:84:7b: 42:bf:4b:af:28:8a:de:35:f8:97:7c:80:cf:be:14: 9c:88:3a:fc:5a:2f:51:1c:cf:91:53:c5:68:73:ec: 96:1a:10:e3:cc:04:fc:03:fe:08:09:e0:eb:70:8e: 2a:a0:c0:aa:1f:2b:27:b8:f0:d6:1a:35:c7:42:05: e6:93:7c:c9:f0:0e:0f:d1:07:6d:f3:d4:c7:23:6b: a3:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:71:47:7F:9A:01:B6:03:3C:BA:4E:51:4B:D3:B6:2D:38:4F:B2:B2 X509v3 Authority Key Identifier: keyid:B3:54:D3:28:CB:BF:D1:EF:3C:D2:92:68:A2:3B:0F:CC:60:E3:A2:C5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.cer Subject Information Access: Signed Object - URI:rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/36322e3134342e33322e302f32322d3234203d3e2037303239.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 62.144.32.0/22 Signature Algorithm: sha256WithRSAEncryption af:60:4f:4d:53:1a:87:dc:58:b1:71:f4:b8:6a:62:b6:6f:41: 1c:34:85:b1:31:cf:09:74:6e:46:af:e2:a9:f9:64:e3:6d:ae: 38:f2:c4:c2:3c:f2:40:eb:8b:f0:87:d4:3a:68:8b:2e:88:90: 80:3f:25:f1:af:13:5f:2a:27:77:e2:62:b4:69:8c:5f:f9:d8: 7a:2f:7f:25:b7:2f:39:29:af:c8:80:e0:76:6e:a5:1d:9a:ac: f4:df:5a:ec:77:87:96:73:f8:04:05:99:d6:ee:cc:ff:6a:8a: 76:f9:47:5f:4c:94:ad:21:f8:32:17:0b:9f:d4:04:7d:bf:ce: 9f:3b:f9:0c:71:15:92:d8:da:7c:0f:6c:fa:7c:7c:1d:a3:c8: df:67:c7:ef:bc:31:b1:42:4c:56:43:e6:ea:2a:fb:59:34:e3: 16:09:6f:c3:bb:3e:54:aa:63:f4:53:80:7d:bf:1c:4a:dc:b7: 84:39:21:26:74:07:e1:d7:44:fe:38:d3:81:5a:fb:cc:a5:d3: 87:4a:1c:35:76:5d:02:ad:31:74:d0:0a:b8:1d:22:85:6a:e3: f6:71:92:be:9a:54:3e:53:f3:5d:4e:cc:de:8e:b4:64:3c:29: 6c:5b:3c:d3:93:9d:c6:35:0d:23:47:99:05:19:6f:43:ba:cb: 6c:3b:39:de -----BEGIN CERTIFICATE----- MIIFVDCCBDygAwIBAgIUGZSYi+YpkeFdB7Qqhs3QcSiQwuowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjM1NEQzMjhDQkJGRDFFRjNDRDI5MjY4QTIzQjBGQ0M2 MEUzQTJDNTAeFw0yNjA3MjgxMjEzMTNaFw0yNzA3MjcxMjE4MTNaMDMxMTAvBgNV BAMTKDRFNzE0NzdGOUEwMUI2MDMzQ0JBNEU1MTRCRDNCNjJEMzg0RkIyQjIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDPRRNJ9zmJYwWugtNlYYrXqrx0 KXBhO1tkdIS2/rcgQGIAnzEjov9NgXdO7w2cN7He8FkFVdEP3/Y/QcrtZq6DNefD D9jhThrVkx054j41O63WLnhefCvTEeHWEoyZ3aJ226bKwp5f/j9cBgHCvM9XvZNR x7xo1lOG0gi0yPw/RcVM9Jf2Xr2kmndrte7VSDAWFZvFY6EGzsULvnPv6JHZNhvY Qt4lYMkhS0aRpNg0P42Ee0K/S68oit41+Jd8gM++FJyIOvxaL1Ecz5FTxWhz7JYa EOPMBPwD/ggJ4OtwjiqgwKofKye48NYaNcdCBeaTfMnwDg/RB23z1Mcja6M9AgMB AAGjggJeMIICWjAdBgNVHQ4EFgQUTnFHf5oBtgM8uk5RS9O2LThPsrIwHwYDVR0j BBgwFoAUs1TTKMu/0e880pJoojsPzGDjosUwDgYDVR0PAQH/BAQDAgeAMIGIBgNV HR8EgYAwfjB8oHqgeIZ2cnN5bmM6Ly9yLm1hZ2VsbGFuLmlweG8uY29tL3JlcG8v YTAzNzViMzktZjk0OS00Y2I1LWI1MTktZjk0MDA4YjE2NTRjLTAvMC9CMzU0RDMy OENCQkZEMUVGM0NEMjkyNjhBMjNCMEZDQzYwRTNBMkM1LmNybDCBngYIKwYBBQUH AQEEgZEwgY4wgYsGCCsGAQUFBzAChn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5y aXBlLm5ldC9yZXBvc2l0b3J5LzYxNzA4YTZiLTZjM2EtNDBhMC1hMzAyLTU5NWVj YzE3ODQ4Yy8wL0IzNTREMzI4Q0JCRkQxRUYzQ0QyOTI2OEEyM0IwRkNDNjBFM0Ey QzUuY2VyMIGgBggrBgEFBQcBCwSBkzCBkDCBjQYIKwYBBQUHMAuGgYByc3luYzov L3IubWFnZWxsYW4uaXB4by5jb20vcmVwby9hMDM3NWIzOS1mOTQ5LTRjYjUtYjUx OS1mOTQwMDhiMTY1NGMtMC8wLzM2MzIyZTMxMzQzNDJlMzMzMjJlMzAyZjMyMzIy ZDMyMzQyMDNkM2UyMDM3MzAzMjM5LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCPpAgMA0GCSqGSIb3DQEB CwUAA4IBAQCvYE9NUxqH3FixcfS4amK2b0EcNIWxMc8JdG5Gr+Kp+WTjba448sTC PPJA64vwh9Q6aIsuiJCAPyXxrxNfKid34mK0aYxf+dh6L38lty85Ka/IgOB2bqUd mqz031rsd4eWc/gEBZnW7sz/aop2+UdfTJStIfgyFwuf1AR9v86fO/kMcRWS2Np8 D2z6fHwdo8jfZ8fvvDGxQkxWQ+bqKvtZNOMWCW/Duz5UqmP0U4B9vxxK3LeEOSEm dAfh10T+ONOBWvvMpdOHShw1dl0CrTF00Aq4HSKFauP2cZK+mlQ+U/NdTszejrRk PClsWzzTk53GNQ0jR5kFGW9DustsOzne -----END CERTIFICATE-----Generated at Tue Jul 28 22:31:33 2026 by rpki-client