$ rpki-client -vvf r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/36322e3134342e35372e302f32342d3234203d3e2037303239.roa File: 36322e3134342e35372e302f32342d3234203d3e2037303239.roa (raw, json) Hash identifier: LoQnLPRvDG5PnmoYhhqrApzM7euR8e04mnoxhN3BuUU= Subject key identifier: D6:7E:ED:03:77:74:B5:AF:4B:20:FC:10:E0:0B:7B:6D:AB:B3:CF:D0 Certificate issuer: /CN=B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5 Certificate serial: 688FE7AE706B115FC14C557DD11EB2C8F2C771FB Authority key identifier: B3:54:D3:28:CB:BF:D1:EF:3C:D2:92:68:A2:3B:0F:CC:60:E3:A2:C5 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.cer Subject info access: rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/36322e3134342e35372e302f32342d3234203d3e2037303239.roa Signing time: Tue 28 Jul 2026 12:18:15 +0000 ROA not before: Tue 28 Jul 2026 12:13:15 +0000 ROA not after: Tue 27 Jul 2027 12:18:15 +0000 asID: 7029 IP address blocks: 62.144.57.0/24 maxlen: 24 Validation: OK Signature path: rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.crl rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.mft rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.cer rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/D0A516B50426202A424F0EBFCB7D2BD4F744F964.crl rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/D0A516B50426202A424F0EBFCB7D2BD4F744F964.mft rsync://rpki.ripe.net/repository/DEFAULT/0KUWtQQmICpCTw6_y30r1PdE-WQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 29 Jul 2026 14:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 68:8f:e7:ae:70:6b:11:5f:c1:4c:55:7d:d1:1e:b2:c8:f2:c7:71:fb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5 Validity Not Before: Jul 28 12:13:15 2026 GMT Not After : Jul 27 12:18:15 2027 GMT Subject: CN=D67EED037774B5AF4B20FC10E00B7B6DABB3CFD0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:8e:7f:08:c4:80:a5:ec:15:cb:c4:fd:21:b2: 17:5d:1e:9f:4d:33:bd:de:eb:10:b8:97:a1:a0:b3: 4c:83:12:e4:9f:49:61:64:79:bf:9c:1d:09:d4:e4: cf:a2:f6:dd:1b:f9:75:dc:a5:26:47:c0:c1:84:d2: bc:71:33:16:45:95:26:ee:08:37:fc:e4:de:ed:8d: bc:0e:7e:3b:5e:0d:43:4c:71:38:e4:c5:c1:fb:b3: c6:06:23:2b:e2:f6:d6:25:14:73:39:72:a2:50:ca: 41:f3:2b:05:10:fa:30:2b:39:17:08:2e:c4:0e:6a: 9b:08:3d:34:43:ad:d8:71:39:0a:02:ef:0e:6c:a8: 8d:ff:c3:f7:54:19:8b:9b:ac:43:b8:82:41:3a:6d: b2:3a:8b:72:ba:be:01:48:a8:b7:62:a5:83:80:f9: 4e:b1:1c:0c:9a:82:d7:dc:6e:66:1f:ed:bf:d3:42: a2:af:e5:ec:7b:57:91:eb:9b:68:b8:5e:bb:a4:ba: 71:6b:c8:56:6f:b9:e6:68:94:35:e3:57:b0:6e:49: 1e:e8:e7:b7:77:49:7d:74:62:dd:c8:67:92:82:d3: 94:0b:a4:91:e0:77:da:89:d0:0c:e5:9e:de:84:d1: 0f:d2:4b:b5:b0:09:f0:d8:45:f7:d8:61:bb:b5:1e: f2:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:7E:ED:03:77:74:B5:AF:4B:20:FC:10:E0:0B:7B:6D:AB:B3:CF:D0 X509v3 Authority Key Identifier: keyid:B3:54:D3:28:CB:BF:D1:EF:3C:D2:92:68:A2:3B:0F:CC:60:E3:A2:C5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.cer Subject Information Access: Signed Object - URI:rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/36322e3134342e35372e302f32342d3234203d3e2037303239.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 62.144.57.0/24 Signature Algorithm: sha256WithRSAEncryption a5:87:4f:79:5c:19:bc:19:34:09:97:57:bb:f0:45:f8:1a:e9: aa:e6:de:89:36:bf:68:40:4b:bd:9e:38:b2:08:22:19:2d:9f: b7:66:dc:c6:f8:6a:f0:da:12:eb:85:e6:99:8e:05:86:d6:a5: 6b:33:24:94:85:96:e4:36:cb:8f:30:85:8a:ff:44:34:c8:7a: 3d:29:18:c6:ac:03:84:d5:ad:21:8f:3a:65:68:16:d4:f8:2b: c5:be:0c:9e:12:a1:02:5f:91:b1:1b:0d:20:6b:cc:5a:58:d8: ba:86:48:be:a3:2e:60:59:20:b9:fe:6a:0b:9d:56:3d:5d:a5: 17:f8:55:a9:99:dd:29:c7:db:00:d9:94:dc:b6:eb:47:ed:44: 83:18:03:96:b3:8d:95:8e:ef:05:10:ad:e9:bc:dd:96:ee:94: d5:c2:1a:44:95:9f:99:e0:be:aa:20:79:a6:0a:29:a6:2d:8d: 71:33:03:19:e0:d9:54:17:a7:1f:de:aa:a4:33:bb:7a:d9:29: 84:75:64:31:63:2c:b1:25:ee:c3:f8:02:08:d8:68:09:8b:4a: 43:d0:ee:50:9b:52:8b:34:c4:a7:e8:81:04:2b:b5:1f:9e:84: 02:18:4a:b4:7b:41:34:bb:49:fe:6b:c9:e9:dd:14:20:2a:b7: 96:cb:a3:1b -----BEGIN CERTIFICATE----- MIIFVDCCBDygAwIBAgIUaI/nrnBrEV/BTFV90R6yyPLHcfswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjM1NEQzMjhDQkJGRDFFRjNDRDI5MjY4QTIzQjBGQ0M2 MEUzQTJDNTAeFw0yNjA3MjgxMjEzMTVaFw0yNzA3MjcxMjE4MTVaMDMxMTAvBgNV BAMTKEQ2N0VFRDAzNzc3NEI1QUY0QjIwRkMxMEUwMEI3QjZEQUJCM0NGRDAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCWjn8IxICl7BXLxP0hshddHp9N M73e6xC4l6Ggs0yDEuSfSWFkeb+cHQnU5M+i9t0b+XXcpSZHwMGE0rxxMxZFlSbu CDf85N7tjbwOfjteDUNMcTjkxcH7s8YGIyvi9tYlFHM5cqJQykHzKwUQ+jArORcI LsQOapsIPTRDrdhxOQoC7w5sqI3/w/dUGYubrEO4gkE6bbI6i3K6vgFIqLdipYOA +U6xHAyagtfcbmYf7b/TQqKv5ex7V5Hrm2i4XrukunFryFZvueZolDXjV7BuSR7o 57d3SX10Yt3IZ5KC05QLpJHgd9qJ0Azlnt6E0Q/SS7WwCfDYRffYYbu1HvJBAgMB AAGjggJeMIICWjAdBgNVHQ4EFgQU1n7tA3d0ta9LIPwQ4At7bauzz9AwHwYDVR0j BBgwFoAUs1TTKMu/0e880pJoojsPzGDjosUwDgYDVR0PAQH/BAQDAgeAMIGIBgNV HR8EgYAwfjB8oHqgeIZ2cnN5bmM6Ly9yLm1hZ2VsbGFuLmlweG8uY29tL3JlcG8v YTAzNzViMzktZjk0OS00Y2I1LWI1MTktZjk0MDA4YjE2NTRjLTAvMC9CMzU0RDMy OENCQkZEMUVGM0NEMjkyNjhBMjNCMEZDQzYwRTNBMkM1LmNybDCBngYIKwYBBQUH AQEEgZEwgY4wgYsGCCsGAQUFBzAChn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5y aXBlLm5ldC9yZXBvc2l0b3J5LzYxNzA4YTZiLTZjM2EtNDBhMC1hMzAyLTU5NWVj YzE3ODQ4Yy8wL0IzNTREMzI4Q0JCRkQxRUYzQ0QyOTI2OEEyM0IwRkNDNjBFM0Ey QzUuY2VyMIGgBggrBgEFBQcBCwSBkzCBkDCBjQYIKwYBBQUHMAuGgYByc3luYzov L3IubWFnZWxsYW4uaXB4by5jb20vcmVwby9hMDM3NWIzOS1mOTQ5LTRjYjUtYjUx OS1mOTQwMDhiMTY1NGMtMC8wLzM2MzIyZTMxMzQzNDJlMzUzNzJlMzAyZjMyMzQy ZDMyMzQyMDNkM2UyMDM3MzAzMjM5LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAPpA5MA0GCSqGSIb3DQEB CwUAA4IBAQClh095XBm8GTQJl1e78EX4Gumq5t6JNr9oQEu9njiyCCIZLZ+3ZtzG +Grw2hLrheaZjgWG1qVrMySUhZbkNsuPMIWK/0Q0yHo9KRjGrAOE1a0hjzplaBbU +CvFvgyeEqECX5GxGw0ga8xaWNi6hki+oy5gWSC5/moLnVY9XaUX+FWpmd0px9sA 2ZTctutH7USDGAOWs42Vju8FEK3pvN2W7pTVwhpElZ+Z4L6qIHmmCimmLY1xMwMZ 4NlUF6cf3qqkM7t62SmEdWQxYyyxJe7D+AII2GgJi0pD0O5Qm1KLNMSn6IEEK7Uf noQCGEq0e0E0u0n+a8np3RQgKreWy6Mb -----END CERTIFICATE-----Generated at Tue Jul 28 18:20:28 2026 by rpki-client