$ rpki-client -vvf r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/36322e3134342e34302e302f32322d3234203d3e2037303239.roa File: 36322e3134342e34302e302f32322d3234203d3e2037303239.roa (raw, json) Hash identifier: XrhK/0CDz9Pi590RfVO7rlhtBt7uic/qs/ixnA7Ayu8= Subject key identifier: CD:40:AF:70:1A:DD:73:D0:69:F6:DC:99:B4:68:1B:BE:05:23:5E:B9 Certificate issuer: /CN=B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5 Certificate serial: 4DA8EB6FED5FC1F8F64038596E53697688246B4A Authority key identifier: B3:54:D3:28:CB:BF:D1:EF:3C:D2:92:68:A2:3B:0F:CC:60:E3:A2:C5 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.cer Subject info access: rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/36322e3134342e34302e302f32322d3234203d3e2037303239.roa Signing time: Wed 08 Apr 2026 19:11:46 +0000 ROA not before: Wed 08 Apr 2026 19:06:46 +0000 ROA not after: Wed 07 Apr 2027 19:11:46 +0000 asID: 7029 IP address blocks: 62.144.40.0/22 maxlen: 24 Validation: OK Signature path: rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.crl rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.mft rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.cer rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/D0A516B50426202A424F0EBFCB7D2BD4F744F964.crl rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/D0A516B50426202A424F0EBFCB7D2BD4F744F964.mft rsync://rpki.ripe.net/repository/DEFAULT/0KUWtQQmICpCTw6_y30r1PdE-WQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 18 Apr 2026 16:00:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4d:a8:eb:6f:ed:5f:c1:f8:f6:40:38:59:6e:53:69:76:88:24:6b:4a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5 Validity Not Before: Apr 8 19:06:46 2026 GMT Not After : Apr 7 19:11:46 2027 GMT Subject: CN=CD40AF701ADD73D069F6DC99B4681BBE05235EB9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:3f:1b:8c:da:0e:ea:d7:0d:e1:09:97:91:00: b3:17:a5:81:7b:65:01:52:d0:1a:ee:28:6e:d8:26: ad:38:26:11:54:fc:cf:0c:67:5f:2c:8b:0a:5b:0b: 88:78:a1:5e:41:e5:ae:f6:f9:41:17:02:8e:c1:71: bf:41:ef:4e:eb:78:ee:97:34:6c:51:9c:17:4b:df: 53:5f:e9:72:7f:65:b2:ec:ce:0b:e3:92:39:45:4e: 78:d6:a3:18:81:04:ad:f5:42:b7:30:b7:42:ef:93: 32:c3:ea:2d:3c:9c:d3:73:41:f2:b0:09:63:ca:29: 7d:71:60:d8:ad:85:1c:84:94:1e:76:dc:e3:e1:6b: 46:32:86:c3:b5:f0:ea:24:7f:38:d2:6b:3e:2f:0d: 3c:29:69:94:e6:d6:ee:5f:07:61:ca:8a:85:4e:b1: 89:72:68:54:26:3d:69:03:91:f3:97:44:0b:e4:a6: cc:ca:fb:bd:e2:87:e6:b5:55:d2:57:10:8e:e2:66: 23:4b:ab:ce:6f:22:c5:df:87:2e:04:87:27:35:ed: 84:04:c9:77:22:bd:58:01:27:52:52:e9:e4:89:fe: 18:80:34:89:83:03:40:7b:4a:df:20:32:2d:67:e6: a4:a1:2b:2b:1f:a2:b9:49:91:72:d7:96:fa:cb:59: f7:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:40:AF:70:1A:DD:73:D0:69:F6:DC:99:B4:68:1B:BE:05:23:5E:B9 X509v3 Authority Key Identifier: keyid:B3:54:D3:28:CB:BF:D1:EF:3C:D2:92:68:A2:3B:0F:CC:60:E3:A2:C5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.cer Subject Information Access: Signed Object - URI:rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/36322e3134342e34302e302f32322d3234203d3e2037303239.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 62.144.40.0/22 Signature Algorithm: sha256WithRSAEncryption 0d:11:b1:b6:c7:c7:ec:62:70:6e:81:a4:11:4b:7c:2a:21:6c: b7:7d:f3:63:95:4f:14:f7:27:9a:bd:5c:0a:be:42:7e:91:6c: e3:ad:89:80:cb:81:88:a4:2a:5f:09:ff:32:f9:e0:b6:77:cd: 42:5b:e8:e0:46:97:0d:87:4e:e2:dd:c5:1f:de:82:9d:19:f3: b6:b2:0c:c9:16:30:11:86:93:7b:4c:fe:0b:a1:00:74:da:75: c5:5e:aa:9e:8a:9d:99:6c:56:89:8f:7d:0f:49:af:69:e1:6a: a2:b7:4d:c0:48:ed:fe:6b:8c:a4:2c:87:35:2d:22:21:90:39: 08:75:ed:e1:e7:65:00:f0:8d:54:6f:39:ae:b5:06:c8:b5:d7: 54:8e:69:8f:3c:8c:bb:38:91:15:a1:63:52:b1:e7:fd:c0:43: fc:44:f9:12:fd:72:d9:b5:a0:b4:f8:52:a1:76:fb:a5:56:d5: 3e:16:0b:43:4b:90:1b:75:bf:55:9c:5c:25:18:bc:16:f5:e2: 06:6e:18:c5:7a:f8:dd:57:ea:b9:c4:ba:f1:41:8f:b4:45:5f: ad:43:3e:c7:46:99:6b:b5:b3:05:eb:dd:64:12:7b:74:78:5a: 97:db:93:e4:69:0c:2e:9c:ed:bd:92:02:61:c7:76:6c:fd:0b: 71:96:45:58 -----BEGIN CERTIFICATE----- MIIFVDCCBDygAwIBAgIUTajrb+1fwfj2QDhZblNpdogka0owDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjM1NEQzMjhDQkJGRDFFRjNDRDI5MjY4QTIzQjBGQ0M2 MEUzQTJDNTAeFw0yNjA0MDgxOTA2NDZaFw0yNzA0MDcxOTExNDZaMDMxMTAvBgNV BAMTKENENDBBRjcwMUFERDczRDA2OUY2REM5OUI0NjgxQkJFMDUyMzVFQjkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDSPxuM2g7q1w3hCZeRALMXpYF7 ZQFS0BruKG7YJq04JhFU/M8MZ18siwpbC4h4oV5B5a72+UEXAo7Bcb9B707reO6X NGxRnBdL31Nf6XJ/ZbLszgvjkjlFTnjWoxiBBK31Qrcwt0LvkzLD6i08nNNzQfKw CWPKKX1xYNithRyElB523OPha0YyhsO18OokfzjSaz4vDTwpaZTm1u5fB2HKioVO sYlyaFQmPWkDkfOXRAvkpszK+73ih+a1VdJXEI7iZiNLq85vIsXfhy4Ehyc17YQE yXcivVgBJ1JS6eSJ/hiANImDA0B7St8gMi1n5qShKysforlJkXLXlvrLWfcNAgMB AAGjggJeMIICWjAdBgNVHQ4EFgQUzUCvcBrdc9Bp9tyZtGgbvgUjXrkwHwYDVR0j BBgwFoAUs1TTKMu/0e880pJoojsPzGDjosUwDgYDVR0PAQH/BAQDAgeAMIGIBgNV HR8EgYAwfjB8oHqgeIZ2cnN5bmM6Ly9yLm1hZ2VsbGFuLmlweG8uY29tL3JlcG8v YTAzNzViMzktZjk0OS00Y2I1LWI1MTktZjk0MDA4YjE2NTRjLTAvMC9CMzU0RDMy OENCQkZEMUVGM0NEMjkyNjhBMjNCMEZDQzYwRTNBMkM1LmNybDCBngYIKwYBBQUH AQEEgZEwgY4wgYsGCCsGAQUFBzAChn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5y aXBlLm5ldC9yZXBvc2l0b3J5LzYxNzA4YTZiLTZjM2EtNDBhMC1hMzAyLTU5NWVj YzE3ODQ4Yy8wL0IzNTREMzI4Q0JCRkQxRUYzQ0QyOTI2OEEyM0IwRkNDNjBFM0Ey QzUuY2VyMIGgBggrBgEFBQcBCwSBkzCBkDCBjQYIKwYBBQUHMAuGgYByc3luYzov L3IubWFnZWxsYW4uaXB4by5jb20vcmVwby9hMDM3NWIzOS1mOTQ5LTRjYjUtYjUx OS1mOTQwMDhiMTY1NGMtMC8wLzM2MzIyZTMxMzQzNDJlMzQzMDJlMzAyZjMyMzIy ZDMyMzQyMDNkM2UyMDM3MzAzMjM5LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCPpAoMA0GCSqGSIb3DQEB CwUAA4IBAQANEbG2x8fsYnBugaQRS3wqIWy3ffNjlU8U9yeavVwKvkJ+kWzjrYmA y4GIpCpfCf8y+eC2d81CW+jgRpcNh07i3cUf3oKdGfO2sgzJFjARhpN7TP4LoQB0 2nXFXqqeip2ZbFaJj30PSa9p4Wqit03ASO3+a4ykLIc1LSIhkDkIde3h52UA8I1U bzmutQbItddUjmmPPIy7OJEVoWNSsef9wEP8RPkS/XLZtaC0+FKhdvulVtU+FgtD S5Abdb9VnFwlGLwW9eIGbhjFevjdV+q5xLrxQY+0RV+tQz7HRplrtbMF691kEnt0 eFqX25PkaQwunO29kgJhx3Zs/QtxlkVY -----END CERTIFICATE-----Generated at Fri Apr 17 23:26:59 2026 by rpki-client