$ rpki-client -vvf r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/36322e3134342e33322e302f32322d3234203d3e2037303239.roa File: 36322e3134342e33322e302f32322d3234203d3e2037303239.roa (raw, json) Hash identifier: qA9oBPp/1opKX86mVBbs7iwobJ26dXzKWRxp8vP6wMw= Subject key identifier: 5F:DF:0B:FC:D4:80:3D:80:4C:FE:96:A6:CB:F9:F7:66:6B:BC:5F:9F Certificate issuer: /CN=B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5 Certificate serial: 51893321DA513F2C8068ABEDD530EABC813A4FF2 Authority key identifier: B3:54:D3:28:CB:BF:D1:EF:3C:D2:92:68:A2:3B:0F:CC:60:E3:A2:C5 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.cer Subject info access: rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/36322e3134342e33322e302f32322d3234203d3e2037303239.roa Signing time: Wed 08 Apr 2026 19:11:48 +0000 ROA not before: Wed 08 Apr 2026 19:06:48 +0000 ROA not after: Wed 07 Apr 2027 19:11:48 +0000 asID: 7029 IP address blocks: 62.144.32.0/22 maxlen: 24 Validation: OK Signature path: rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.crl rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.mft rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.cer rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/D0A516B50426202A424F0EBFCB7D2BD4F744F964.crl rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/D0A516B50426202A424F0EBFCB7D2BD4F744F964.mft rsync://rpki.ripe.net/repository/DEFAULT/0KUWtQQmICpCTw6_y30r1PdE-WQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 18 Apr 2026 16:00:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 51:89:33:21:da:51:3f:2c:80:68:ab:ed:d5:30:ea:bc:81:3a:4f:f2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5 Validity Not Before: Apr 8 19:06:48 2026 GMT Not After : Apr 7 19:11:48 2027 GMT Subject: CN=5FDF0BFCD4803D804CFE96A6CBF9F7666BBC5F9F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:55:35:cf:3b:f7:37:a3:ea:2e:8c:ae:39:e6: 83:27:90:e4:1e:d9:5e:bf:bf:13:27:8c:2e:8c:d3: f2:7b:3c:05:f0:9a:16:86:05:bf:37:a7:8f:85:cc: fc:d6:53:aa:60:5a:e0:6f:d7:62:2d:a8:84:63:c4: 7b:c4:39:ca:25:6d:7d:62:70:d0:6d:2a:b6:f7:5e: 74:5e:0d:20:4b:15:67:35:7c:3b:6c:aa:b1:79:44: a2:31:81:dc:f0:00:df:44:2a:12:80:70:3f:23:b7: 31:8a:1b:9c:9f:b5:c9:af:f3:9d:0e:02:85:0a:78: 57:36:2d:25:f6:2a:88:8c:08:2e:06:70:7a:78:29: eb:a8:ca:b0:ac:1c:5d:13:df:ea:d8:6e:1a:78:bb: 49:5d:93:8d:aa:cb:84:54:d8:ca:c7:5c:f9:69:61: 48:db:1c:66:1a:11:16:c5:47:69:03:9b:f0:a9:02: 18:0f:2e:dd:78:ab:2d:bd:db:f5:82:bc:c5:2f:04: 76:d0:71:a8:13:e4:38:1b:08:5a:a0:a6:57:bc:0e: 6a:9c:ce:ea:92:05:2f:3e:fb:dd:32:83:a3:ef:aa: d2:ce:ab:7c:d5:02:c4:42:8b:4f:58:f1:4f:95:5e: 03:09:ea:a5:f3:38:c4:8a:40:b1:a3:15:b1:40:a0: d2:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:DF:0B:FC:D4:80:3D:80:4C:FE:96:A6:CB:F9:F7:66:6B:BC:5F:9F X509v3 Authority Key Identifier: keyid:B3:54:D3:28:CB:BF:D1:EF:3C:D2:92:68:A2:3B:0F:CC:60:E3:A2:C5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.cer Subject Information Access: Signed Object - URI:rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/36322e3134342e33322e302f32322d3234203d3e2037303239.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 62.144.32.0/22 Signature Algorithm: sha256WithRSAEncryption 03:e9:11:5d:48:27:46:5c:3f:fc:d4:73:61:31:3d:e3:ac:d5: 75:3f:a2:02:fe:8e:e0:70:15:d3:86:1c:c8:f7:77:ad:cc:3b: a3:ca:11:5d:18:16:71:31:e2:50:6e:09:e0:69:84:af:25:ca: 27:c8:97:19:ff:38:d0:1f:24:82:d3:9a:35:3d:b7:db:5e:78: b7:0a:8c:72:e5:fc:87:9f:70:e6:53:25:b9:fc:af:d3:7e:2a: e1:41:98:41:01:19:19:38:0d:99:ef:81:b3:20:e6:75:d1:d0: 16:54:f4:fd:8e:2f:e0:d0:ea:31:6f:0d:85:0b:de:1e:52:d4: 7c:d7:3f:70:8b:f8:89:89:23:45:5e:4a:da:ca:77:14:99:11: f8:61:74:7e:4e:24:cf:8a:34:5a:c0:ba:fc:d4:1f:2e:ea:13: a5:46:3b:c1:d4:26:bd:48:a6:3a:47:51:bb:ea:84:fe:67:71: 23:e3:f3:f6:0c:af:8c:0a:41:1e:36:3f:66:84:dd:de:87:44: e3:11:5b:15:a9:6a:0b:65:3c:6a:0a:02:44:17:15:e3:17:c4: e0:1f:cd:47:15:c7:99:8c:4c:a6:ab:51:28:6e:87:bc:80:33: 3b:76:77:d9:4a:12:89:9e:95:af:77:62:ea:65:b0:b1:e4:98: 3f:5d:3e:3c -----BEGIN CERTIFICATE----- MIIFVDCCBDygAwIBAgIUUYkzIdpRPyyAaKvt1TDqvIE6T/IwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjM1NEQzMjhDQkJGRDFFRjNDRDI5MjY4QTIzQjBGQ0M2 MEUzQTJDNTAeFw0yNjA0MDgxOTA2NDhaFw0yNzA0MDcxOTExNDhaMDMxMTAvBgNV BAMTKDVGREYwQkZDRDQ4MDNEODA0Q0ZFOTZBNkNCRjlGNzY2NkJCQzVGOUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCxVTXPO/c3o+oujK455oMnkOQe 2V6/vxMnjC6M0/J7PAXwmhaGBb83p4+FzPzWU6pgWuBv12ItqIRjxHvEOcolbX1i cNBtKrb3XnReDSBLFWc1fDtsqrF5RKIxgdzwAN9EKhKAcD8jtzGKG5yftcmv850O AoUKeFc2LSX2KoiMCC4GcHp4KeuoyrCsHF0T3+rYbhp4u0ldk42qy4RU2MrHXPlp YUjbHGYaERbFR2kDm/CpAhgPLt14qy292/WCvMUvBHbQcagT5DgbCFqgple8Dmqc zuqSBS8++90yg6PvqtLOq3zVAsRCi09Y8U+VXgMJ6qXzOMSKQLGjFbFAoNKlAgMB AAGjggJeMIICWjAdBgNVHQ4EFgQUX98L/NSAPYBM/pamy/n3Zmu8X58wHwYDVR0j BBgwFoAUs1TTKMu/0e880pJoojsPzGDjosUwDgYDVR0PAQH/BAQDAgeAMIGIBgNV HR8EgYAwfjB8oHqgeIZ2cnN5bmM6Ly9yLm1hZ2VsbGFuLmlweG8uY29tL3JlcG8v YTAzNzViMzktZjk0OS00Y2I1LWI1MTktZjk0MDA4YjE2NTRjLTAvMC9CMzU0RDMy OENCQkZEMUVGM0NEMjkyNjhBMjNCMEZDQzYwRTNBMkM1LmNybDCBngYIKwYBBQUH AQEEgZEwgY4wgYsGCCsGAQUFBzAChn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5y aXBlLm5ldC9yZXBvc2l0b3J5LzYxNzA4YTZiLTZjM2EtNDBhMC1hMzAyLTU5NWVj YzE3ODQ4Yy8wL0IzNTREMzI4Q0JCRkQxRUYzQ0QyOTI2OEEyM0IwRkNDNjBFM0Ey QzUuY2VyMIGgBggrBgEFBQcBCwSBkzCBkDCBjQYIKwYBBQUHMAuGgYByc3luYzov L3IubWFnZWxsYW4uaXB4by5jb20vcmVwby9hMDM3NWIzOS1mOTQ5LTRjYjUtYjUx OS1mOTQwMDhiMTY1NGMtMC8wLzM2MzIyZTMxMzQzNDJlMzMzMjJlMzAyZjMyMzIy ZDMyMzQyMDNkM2UyMDM3MzAzMjM5LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCPpAgMA0GCSqGSIb3DQEB CwUAA4IBAQAD6RFdSCdGXD/81HNhMT3jrNV1P6IC/o7gcBXThhzI93etzDujyhFd GBZxMeJQbgngaYSvJconyJcZ/zjQHySC05o1PbfbXni3Coxy5fyHn3DmUyW5/K/T firhQZhBARkZOA2Z74GzIOZ10dAWVPT9ji/g0Ooxbw2FC94eUtR81z9wi/iJiSNF XkrayncUmRH4YXR+TiTPijRawLr81B8u6hOlRjvB1Ca9SKY6R1G76oT+Z3Ej4/P2 DK+MCkEeNj9mhN3eh0TjEVsVqWoLZTxqCgJEFxXjF8TgH81HFceZjEymq1Eoboe8 gDM7dnfZShKJnpWvd2LqZbCx5Jg/XT48 -----END CERTIFICATE-----Generated at Fri Apr 17 20:25:11 2026 by rpki-client