$ rpki-client -vvf r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/36322e3134342e33362e302f32322d3234203d3e2037303239.roa File: 36322e3134342e33362e302f32322d3234203d3e2037303239.roa (raw, json) Hash identifier: KQFInlN3hPSPB7od19k3btbPEoQ0diKCzGNl6rfXaks= Subject key identifier: B5:57:D1:BD:EE:32:81:0C:92:D6:57:6A:5C:91:85:68:B4:1D:80:5F Certificate issuer: /CN=B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5 Certificate serial: 5C08B322D427D9E4486538CD6CBFFED7D77751E5 Authority key identifier: B3:54:D3:28:CB:BF:D1:EF:3C:D2:92:68:A2:3B:0F:CC:60:E3:A2:C5 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.cer Subject info access: rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/36322e3134342e33362e302f32322d3234203d3e2037303239.roa Signing time: Tue 28 Jul 2026 12:18:18 +0000 ROA not before: Tue 28 Jul 2026 12:13:18 +0000 ROA not after: Tue 27 Jul 2027 12:18:18 +0000 asID: 7029 IP address blocks: 62.144.36.0/22 maxlen: 24 Validation: OK Signature path: rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.crl rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.mft rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.cer rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/D0A516B50426202A424F0EBFCB7D2BD4F744F964.crl rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/D0A516B50426202A424F0EBFCB7D2BD4F744F964.mft rsync://rpki.ripe.net/repository/DEFAULT/0KUWtQQmICpCTw6_y30r1PdE-WQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 29 Jul 2026 14:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5c:08:b3:22:d4:27:d9:e4:48:65:38:cd:6c:bf:fe:d7:d7:77:51:e5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5 Validity Not Before: Jul 28 12:13:18 2026 GMT Not After : Jul 27 12:18:18 2027 GMT Subject: CN=B557D1BDEE32810C92D6576A5C918568B41D805F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:1f:16:1a:47:49:50:79:a4:ea:86:8c:5d:78: 89:17:d7:4b:cb:ef:29:07:a4:bc:27:0e:63:b5:b9: cc:f1:00:24:3b:f4:c1:71:0a:42:13:b6:b9:da:cc: e7:ca:24:9b:6d:ec:bf:ca:e4:d1:13:a8:6e:dc:33: 12:05:fa:f0:64:e3:aa:df:ec:5c:ab:ea:57:53:6c: 53:d5:23:80:3f:82:74:86:d4:ec:5e:71:7e:85:f3: 07:e3:52:d3:1c:01:45:9c:54:17:7a:d2:6a:4c:45: 8a:10:75:3c:6d:e6:91:10:9c:1f:57:56:13:2f:b3: 20:56:5c:fd:62:62:7e:e4:b7:1b:1f:32:42:c2:eb: f1:bf:87:09:ba:a3:57:c3:75:5f:88:ae:24:0f:83: f7:5f:04:2e:29:f3:aa:d1:72:76:68:40:97:88:42: 2e:d1:66:92:44:42:a0:13:b5:d6:47:bc:f1:ff:64: 4e:d6:f6:cb:b9:a1:60:8b:fd:09:76:bb:eb:7c:c1: e1:9c:6d:cc:bf:b8:9c:2d:a9:c3:ee:a0:e4:1c:c2: 41:18:60:cb:ff:b9:0c:ce:f3:26:39:95:03:82:3e: 43:84:3a:cf:f5:0f:84:e2:62:56:cb:de:37:a7:50: 5f:5a:e2:ca:93:8c:4a:ab:38:27:11:89:e0:dc:27: 93:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:57:D1:BD:EE:32:81:0C:92:D6:57:6A:5C:91:85:68:B4:1D:80:5F X509v3 Authority Key Identifier: keyid:B3:54:D3:28:CB:BF:D1:EF:3C:D2:92:68:A2:3B:0F:CC:60:E3:A2:C5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.cer Subject Information Access: Signed Object - URI:rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/36322e3134342e33362e302f32322d3234203d3e2037303239.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 62.144.36.0/22 Signature Algorithm: sha256WithRSAEncryption 20:97:6b:b1:a4:e8:2d:aa:88:35:49:83:f6:49:03:d8:63:1e: 27:10:2f:14:a8:c9:ab:36:25:9c:b2:76:f2:8f:c4:60:c5:ff: 5e:5d:79:e7:5a:c2:58:43:54:d0:3c:0c:f0:ba:da:10:c9:d1: c0:a2:ab:46:00:2e:24:1b:cf:c6:91:ec:6f:45:17:bd:67:12: 1f:ee:9d:0f:b8:1f:b5:33:54:fd:30:45:a5:d0:23:20:e6:eb: aa:ea:20:55:80:45:c4:eb:76:ad:a2:05:ce:6a:f8:70:7e:c7: fa:99:75:25:f7:40:82:db:c2:2a:15:dc:a1:62:0d:f1:e9:1d: 6a:08:09:c8:6f:6c:18:af:f6:85:93:3f:79:67:08:ea:a0:55: fc:7d:a4:77:76:9c:47:aa:ce:d0:a8:68:c6:d2:eb:81:4e:e0: e9:0b:19:f9:a0:0f:35:47:5c:ac:2a:dd:1b:e6:f2:0f:a3:12: aa:17:46:f1:47:a5:b9:6e:a6:fd:0a:ca:60:cd:d5:6a:f1:3f: 60:2e:6c:a2:54:14:f0:fe:0c:dd:ef:d0:d2:a5:d4:a7:ff:d5: 85:05:de:ea:2e:64:fb:97:b7:57:ba:3b:3c:f7:c1:e7:e3:5c: 32:4d:7d:cf:8e:96:b8:5c:4b:cd:71:eb:7d:cf:e8:5f:16:46: 12:a1:ee:fe -----BEGIN CERTIFICATE----- MIIFVDCCBDygAwIBAgIUXAizItQn2eRIZTjNbL/+19d3UeUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjM1NEQzMjhDQkJGRDFFRjNDRDI5MjY4QTIzQjBGQ0M2 MEUzQTJDNTAeFw0yNjA3MjgxMjEzMThaFw0yNzA3MjcxMjE4MThaMDMxMTAvBgNV BAMTKEI1NTdEMUJERUUzMjgxMEM5MkQ2NTc2QTVDOTE4NTY4QjQxRDgwNUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDAHxYaR0lQeaTqhoxdeIkX10vL 7ykHpLwnDmO1uczxACQ79MFxCkITtrnazOfKJJtt7L/K5NETqG7cMxIF+vBk46rf 7Fyr6ldTbFPVI4A/gnSG1OxecX6F8wfjUtMcAUWcVBd60mpMRYoQdTxt5pEQnB9X VhMvsyBWXP1iYn7ktxsfMkLC6/G/hwm6o1fDdV+IriQPg/dfBC4p86rRcnZoQJeI Qi7RZpJEQqATtdZHvPH/ZE7W9su5oWCL/Ql2u+t8weGcbcy/uJwtqcPuoOQcwkEY YMv/uQzO8yY5lQOCPkOEOs/1D4TiYlbL3jenUF9a4sqTjEqrOCcRieDcJ5N9AgMB AAGjggJeMIICWjAdBgNVHQ4EFgQUtVfRve4ygQyS1ldqXJGFaLQdgF8wHwYDVR0j BBgwFoAUs1TTKMu/0e880pJoojsPzGDjosUwDgYDVR0PAQH/BAQDAgeAMIGIBgNV HR8EgYAwfjB8oHqgeIZ2cnN5bmM6Ly9yLm1hZ2VsbGFuLmlweG8uY29tL3JlcG8v YTAzNzViMzktZjk0OS00Y2I1LWI1MTktZjk0MDA4YjE2NTRjLTAvMC9CMzU0RDMy OENCQkZEMUVGM0NEMjkyNjhBMjNCMEZDQzYwRTNBMkM1LmNybDCBngYIKwYBBQUH AQEEgZEwgY4wgYsGCCsGAQUFBzAChn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5y aXBlLm5ldC9yZXBvc2l0b3J5LzYxNzA4YTZiLTZjM2EtNDBhMC1hMzAyLTU5NWVj YzE3ODQ4Yy8wL0IzNTREMzI4Q0JCRkQxRUYzQ0QyOTI2OEEyM0IwRkNDNjBFM0Ey QzUuY2VyMIGgBggrBgEFBQcBCwSBkzCBkDCBjQYIKwYBBQUHMAuGgYByc3luYzov L3IubWFnZWxsYW4uaXB4by5jb20vcmVwby9hMDM3NWIzOS1mOTQ5LTRjYjUtYjUx OS1mOTQwMDhiMTY1NGMtMC8wLzM2MzIyZTMxMzQzNDJlMzMzNjJlMzAyZjMyMzIy ZDMyMzQyMDNkM2UyMDM3MzAzMjM5LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCPpAkMA0GCSqGSIb3DQEB CwUAA4IBAQAgl2uxpOgtqog1SYP2SQPYYx4nEC8UqMmrNiWcsnbyj8Rgxf9eXXnn WsJYQ1TQPAzwutoQydHAoqtGAC4kG8/GkexvRRe9ZxIf7p0PuB+1M1T9MEWl0CMg 5uuq6iBVgEXE63atogXOavhwfsf6mXUl90CC28IqFdyhYg3x6R1qCAnIb2wYr/aF kz95ZwjqoFX8faR3dpxHqs7QqGjG0uuBTuDpCxn5oA81R1ysKt0b5vIPoxKqF0bx R6W5bqb9CspgzdVq8T9gLmyiVBTw/gzd79DSpdSn/9WFBd7qLmT7l7dXujs898Hn 41wyTX3Pjpa4XEvNcet9z+hfFkYSoe7+ -----END CERTIFICATE-----Generated at Tue Jul 28 18:20:23 2026 by rpki-client