$ rpki-client -vvf r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/36322e3134342e33362e302f32322d3234203d3e203133333437.roa File: 36322e3134342e33362e302f32322d3234203d3e203133333437.roa (raw, json) Hash identifier: lpbO1/xN6BSAqzZPWCmn1dC7sm6BfS8XakW8T2YTFws= Subject key identifier: 37:86:D7:47:7E:B4:94:B4:A2:C7:74:30:76:F8:D4:FB:1B:3B:E5:56 Certificate issuer: /CN=B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5 Certificate serial: 4221EE23C61F5AA4B2287CAFEF09EA19999438F3 Authority key identifier: B3:54:D3:28:CB:BF:D1:EF:3C:D2:92:68:A2:3B:0F:CC:60:E3:A2:C5 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.cer Subject info access: rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/36322e3134342e33362e302f32322d3234203d3e203133333437.roa Signing time: Tue 28 Jul 2026 12:18:17 +0000 ROA not before: Tue 28 Jul 2026 12:13:17 +0000 ROA not after: Tue 27 Jul 2027 12:18:17 +0000 asID: 13347 IP address blocks: 62.144.36.0/22 maxlen: 24 Validation: OK Signature path: rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.crl rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.mft rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.cer rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/D0A516B50426202A424F0EBFCB7D2BD4F744F964.crl rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/D0A516B50426202A424F0EBFCB7D2BD4F744F964.mft rsync://rpki.ripe.net/repository/DEFAULT/0KUWtQQmICpCTw6_y30r1PdE-WQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 29 Jul 2026 14:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 42:21:ee:23:c6:1f:5a:a4:b2:28:7c:af:ef:09:ea:19:99:94:38:f3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5 Validity Not Before: Jul 28 12:13:17 2026 GMT Not After : Jul 27 12:18:17 2027 GMT Subject: CN=3786D7477EB494B4A2C7743076F8D4FB1B3BE556 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:8f:93:4e:05:8e:6a:34:f5:b1:2c:3e:03:c9: 5c:ce:80:20:f7:c2:59:9c:7d:84:20:06:31:af:ee: 38:5c:94:fe:af:ff:50:61:80:14:91:3a:d5:ad:ab: 96:c2:59:de:ca:e0:e7:27:00:02:e4:44:93:80:62: f5:f4:7b:be:bd:f2:0e:77:06:d6:3d:c0:bc:be:2c: a1:9f:e7:8b:97:8d:20:dd:6b:fe:01:ae:08:13:39: 83:29:48:8f:da:3e:48:da:98:18:63:9c:10:87:eb: 39:1b:d4:9e:44:f0:f1:4a:71:47:c4:31:ea:16:19: 61:b4:c2:20:67:88:eb:83:e7:0d:e0:28:35:46:5e: 35:a2:ff:e9:ac:60:92:1d:5f:27:7e:e3:52:fd:51: 5f:c2:67:d9:a4:67:b0:c2:6c:08:dd:da:5d:84:42: cf:6d:20:cc:da:5f:ff:59:23:9b:e4:76:0b:b1:4f: 60:b5:01:1b:f4:39:6e:21:e6:a1:0e:6c:7c:21:e1: 8e:b3:66:78:d2:7c:0c:e6:75:f7:b0:c5:4a:d8:fc: eb:63:21:7d:88:be:9a:8f:16:eb:cb:5e:8d:73:79: 8f:c9:63:1c:bb:88:35:da:4e:f8:65:52:08:87:19: cd:87:8b:d8:d5:78:e9:d0:1e:af:32:be:79:35:34: ee:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:86:D7:47:7E:B4:94:B4:A2:C7:74:30:76:F8:D4:FB:1B:3B:E5:56 X509v3 Authority Key Identifier: keyid:B3:54:D3:28:CB:BF:D1:EF:3C:D2:92:68:A2:3B:0F:CC:60:E3:A2:C5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.cer Subject Information Access: Signed Object - URI:rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/36322e3134342e33362e302f32322d3234203d3e203133333437.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 62.144.36.0/22 Signature Algorithm: sha256WithRSAEncryption 3c:8a:8e:03:bb:46:2e:2c:77:92:c8:fa:55:93:95:6e:1c:8f: 63:01:7a:12:62:93:e1:50:19:ed:64:24:36:49:41:84:40:0c: 41:45:bd:55:15:77:ba:96:79:67:53:ff:2e:8a:23:b6:0a:09: 90:8e:45:94:1d:62:a3:0e:8e:05:04:73:f4:2f:9d:6f:e3:b4: 49:94:29:f9:a1:4a:72:dc:7b:b0:1d:4d:a5:66:fd:3a:96:65: d1:e3:16:58:c4:13:33:fb:90:70:9b:7e:d6:2e:53:73:76:51: 69:75:00:ce:95:5f:08:19:23:79:33:8d:13:6b:52:69:a5:7a: 8b:0e:a0:eb:0c:1a:e9:26:17:61:22:e1:13:f1:9a:59:1a:49: 23:af:9b:aa:80:64:f9:85:c9:4d:c3:b8:26:f8:b4:47:6e:54: a3:1a:33:c8:44:5f:71:d1:aa:d8:e7:84:f9:ff:85:38:86:b9: 47:20:af:0a:96:7d:d1:09:bf:14:7c:79:a5:58:fc:90:68:ba: 88:24:dc:de:a1:a8:58:8c:d5:26:3a:c1:a7:0f:bf:5d:8c:17: f7:cb:90:a5:fc:9e:35:76:b1:5c:df:55:ef:38:e2:ab:25:ff: 36:af:ac:9e:51:f1:8f:5c:40:97:11:76:3e:9e:ad:e0:ea:f2: be:ed:e2:57 -----BEGIN CERTIFICATE----- MIIFVjCCBD6gAwIBAgIUQiHuI8YfWqSyKHyv7wnqGZmUOPMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjM1NEQzMjhDQkJGRDFFRjNDRDI5MjY4QTIzQjBGQ0M2 MEUzQTJDNTAeFw0yNjA3MjgxMjEzMTdaFw0yNzA3MjcxMjE4MTdaMDMxMTAvBgNV BAMTKDM3ODZENzQ3N0VCNDk0QjRBMkM3NzQzMDc2RjhENEZCMUIzQkU1NTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDqj5NOBY5qNPWxLD4DyVzOgCD3 wlmcfYQgBjGv7jhclP6v/1BhgBSROtWtq5bCWd7K4OcnAALkRJOAYvX0e7698g53 BtY9wLy+LKGf54uXjSDda/4BrggTOYMpSI/aPkjamBhjnBCH6zkb1J5E8PFKcUfE MeoWGWG0wiBniOuD5w3gKDVGXjWi/+msYJIdXyd+41L9UV/CZ9mkZ7DCbAjd2l2E Qs9tIMzaX/9ZI5vkdguxT2C1ARv0OW4h5qEObHwh4Y6zZnjSfAzmdfewxUrY/Otj IX2IvpqPFuvLXo1zeY/JYxy7iDXaTvhlUgiHGc2Hi9jVeOnQHq8yvnk1NO4NAgMB AAGjggJgMIICXDAdBgNVHQ4EFgQUN4bXR360lLSix3QwdvjU+xs75VYwHwYDVR0j BBgwFoAUs1TTKMu/0e880pJoojsPzGDjosUwDgYDVR0PAQH/BAQDAgeAMIGIBgNV HR8EgYAwfjB8oHqgeIZ2cnN5bmM6Ly9yLm1hZ2VsbGFuLmlweG8uY29tL3JlcG8v YTAzNzViMzktZjk0OS00Y2I1LWI1MTktZjk0MDA4YjE2NTRjLTAvMC9CMzU0RDMy OENCQkZEMUVGM0NEMjkyNjhBMjNCMEZDQzYwRTNBMkM1LmNybDCBngYIKwYBBQUH AQEEgZEwgY4wgYsGCCsGAQUFBzAChn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5y aXBlLm5ldC9yZXBvc2l0b3J5LzYxNzA4YTZiLTZjM2EtNDBhMC1hMzAyLTU5NWVj YzE3ODQ4Yy8wL0IzNTREMzI4Q0JCRkQxRUYzQ0QyOTI2OEEyM0IwRkNDNjBFM0Ey QzUuY2VyMIGiBggrBgEFBQcBCwSBlTCBkjCBjwYIKwYBBQUHMAuGgYJyc3luYzov L3IubWFnZWxsYW4uaXB4by5jb20vcmVwby9hMDM3NWIzOS1mOTQ5LTRjYjUtYjUx OS1mOTQwMDhiMTY1NGMtMC8wLzM2MzIyZTMxMzQzNDJlMzMzNjJlMzAyZjMyMzIy ZDMyMzQyMDNkM2UyMDMxMzMzMzM0Mzcucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYB BQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAI+kCQwDQYJKoZIhvcN AQELBQADggEBADyKjgO7Ri4sd5LI+lWTlW4cj2MBehJik+FQGe1kJDZJQYRADEFF vVUVd7qWeWdT/y6KI7YKCZCORZQdYqMOjgUEc/QvnW/jtEmUKfmhSnLce7AdTaVm /TqWZdHjFljEEzP7kHCbftYuU3N2UWl1AM6VXwgZI3kzjRNrUmmleosOoOsMGukm F2Ei4RPxmlkaSSOvm6qAZPmFyU3DuCb4tEduVKMaM8hEX3HRqtjnhPn/hTiGuUcg rwqWfdEJvxR8eaVY/JBouogk3N6hqFiM1SY6wacPv12MF/fLkKX8njV2sVzfVe84 4qsl/zavrJ5R8Y9cQJcRdj6ereDq8r7t4lc= -----END CERTIFICATE-----Generated at Tue Jul 28 17:16:06 2026 by rpki-client