$ rpki-client -vvf r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/36322e3134342e35382e302f32342d3234203d3e2035363530.roa File: 36322e3134342e35382e302f32342d3234203d3e2035363530.roa (raw, json) Hash identifier: PrP7sVkdgbZ7Jmb4hBgk4FwS0GW/72brm0iPHqs1YgE= Subject key identifier: 37:A5:3F:4F:44:E5:5D:78:EF:E6:2E:7D:DB:78:AB:CB:A5:07:F4:59 Certificate issuer: /CN=B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5 Certificate serial: 7E17EE5D06510D3DFB0F285EE6FB12A40606FC38 Authority key identifier: B3:54:D3:28:CB:BF:D1:EF:3C:D2:92:68:A2:3B:0F:CC:60:E3:A2:C5 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.cer Subject info access: rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/36322e3134342e35382e302f32342d3234203d3e2035363530.roa Signing time: Wed 25 Feb 2026 12:40:49 +0000 ROA not before: Wed 25 Feb 2026 12:35:49 +0000 ROA not after: Wed 24 Feb 2027 12:40:49 +0000 asID: 5650 IP address blocks: 62.144.58.0/24 maxlen: 24 Validation: OK Signature path: rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.crl rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.mft rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.cer rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/D0A516B50426202A424F0EBFCB7D2BD4F744F964.crl rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/D0A516B50426202A424F0EBFCB7D2BD4F744F964.mft rsync://rpki.ripe.net/repository/DEFAULT/0KUWtQQmICpCTw6_y30r1PdE-WQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 02 Mar 2026 23:00:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7e:17:ee:5d:06:51:0d:3d:fb:0f:28:5e:e6:fb:12:a4:06:06:fc:38 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5 Validity Not Before: Feb 25 12:35:49 2026 GMT Not After : Feb 24 12:40:49 2027 GMT Subject: CN=37A53F4F44E55D78EFE62E7DDB78ABCBA507F459 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:24:09:5b:1c:15:9b:f4:ea:7f:1b:0f:a7:91: 98:3b:c3:fe:50:19:3f:09:b6:5e:0d:d1:d4:23:c2: 86:c7:ff:e7:ad:35:35:63:10:66:c3:29:f4:ad:ab: f8:89:bf:e4:2a:0a:61:c5:63:49:c7:30:54:ee:47: f1:fc:63:41:ff:32:36:1b:98:c7:2d:0a:13:7f:6b: b1:68:d5:9b:46:6b:ec:6f:a4:7a:b7:02:1e:c9:97: 24:7f:70:db:50:8c:9e:40:90:92:bb:b3:1b:6e:3a: 2b:71:b9:9e:57:8a:9a:e7:e8:f7:07:3c:a2:3a:cf: bc:06:25:ec:4b:2f:09:06:7b:3a:cd:fc:37:61:f6: e3:72:66:b3:70:df:49:30:67:c3:9d:e2:75:8c:4d: c7:45:4e:99:b3:59:0a:a3:6a:88:8d:3f:2b:0b:91: 0e:99:c2:14:b2:e7:82:6d:5d:76:5b:98:e1:2a:44: 88:08:80:ce:8c:bc:64:aa:74:84:c4:a5:0b:82:16: b5:3f:e8:66:22:55:13:d8:a7:be:54:e4:a1:98:85: d7:92:33:fe:67:70:45:06:e8:ba:76:3d:6f:5a:37: 8a:5e:df:84:55:d6:ca:62:11:76:18:01:fa:94:31: d6:14:23:09:92:49:d0:ab:51:b3:50:c3:c3:b7:8b: 51:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:A5:3F:4F:44:E5:5D:78:EF:E6:2E:7D:DB:78:AB:CB:A5:07:F4:59 X509v3 Authority Key Identifier: keyid:B3:54:D3:28:CB:BF:D1:EF:3C:D2:92:68:A2:3B:0F:CC:60:E3:A2:C5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.cer Subject Information Access: Signed Object - URI:rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/36322e3134342e35382e302f32342d3234203d3e2035363530.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 62.144.58.0/24 Signature Algorithm: sha256WithRSAEncryption 35:12:8e:73:ec:ef:c5:3a:2b:fb:4b:83:8d:c5:f3:eb:dd:5d: 27:53:cb:1d:42:4f:3f:76:a2:0a:f1:ec:9e:ea:4f:c1:d3:a6: 49:0d:84:51:07:ab:1c:95:2e:14:45:19:45:a5:8a:53:60:a8: 58:f1:4f:4e:8b:f4:ec:7c:ae:bf:2c:4e:29:e6:9e:9e:f0:a1: fb:7d:73:8d:6f:16:67:ba:5c:35:83:e7:cf:33:da:31:b3:7b: 90:eb:fe:08:e0:d6:da:2c:6a:a2:1c:d3:00:c3:6f:47:cc:f0: a7:eb:92:d6:39:8c:f0:96:d0:4f:9c:bb:98:fd:06:07:1b:dd: a0:c8:5d:2a:27:f9:f6:9d:75:6d:43:d9:de:71:77:0e:85:5d: 30:5f:d7:b0:ad:02:d9:f3:52:ae:21:75:87:1b:8e:aa:f5:e1: b9:8a:f7:74:b8:8e:2b:06:5e:5e:2c:20:bc:c1:52:71:29:eb: ce:ad:90:8f:ec:e7:c1:64:7f:81:4b:07:1c:b4:2a:f6:ff:96: 0f:8a:9e:3e:cd:b9:14:ec:77:49:b2:42:be:b4:1a:af:97:c4: 98:53:6c:1a:81:e0:51:3e:1a:14:ad:9d:f8:31:b1:9e:8a:01: 15:36:19:d1:01:00:01:ae:00:6a:2f:28:79:b0:ca:32:55:9f: a5:e8:e8:2c -----BEGIN CERTIFICATE----- MIIFVDCCBDygAwIBAgIUfhfuXQZRDT37Dyhe5vsSpAYG/DgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjM1NEQzMjhDQkJGRDFFRjNDRDI5MjY4QTIzQjBGQ0M2 MEUzQTJDNTAeFw0yNjAyMjUxMjM1NDlaFw0yNzAyMjQxMjQwNDlaMDMxMTAvBgNV BAMTKDM3QTUzRjRGNDRFNTVENzhFRkU2MkU3RERCNzhBQkNCQTUwN0Y0NTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9JAlbHBWb9Op/Gw+nkZg7w/5Q GT8Jtl4N0dQjwobH/+etNTVjEGbDKfStq/iJv+QqCmHFY0nHMFTuR/H8Y0H/MjYb mMctChN/a7Fo1ZtGa+xvpHq3Ah7JlyR/cNtQjJ5AkJK7sxtuOitxuZ5Xiprn6PcH PKI6z7wGJexLLwkGezrN/Ddh9uNyZrNw30kwZ8Od4nWMTcdFTpmzWQqjaoiNPysL kQ6ZwhSy54JtXXZbmOEqRIgIgM6MvGSqdITEpQuCFrU/6GYiVRPYp75U5KGYhdeS M/5ncEUG6Lp2PW9aN4pe34RV1spiEXYYAfqUMdYUIwmSSdCrUbNQw8O3i1HhAgMB AAGjggJeMIICWjAdBgNVHQ4EFgQUN6U/T0TlXXjv5i5923iry6UH9FkwHwYDVR0j BBgwFoAUs1TTKMu/0e880pJoojsPzGDjosUwDgYDVR0PAQH/BAQDAgeAMIGIBgNV HR8EgYAwfjB8oHqgeIZ2cnN5bmM6Ly9yLm1hZ2VsbGFuLmlweG8uY29tL3JlcG8v YTAzNzViMzktZjk0OS00Y2I1LWI1MTktZjk0MDA4YjE2NTRjLTAvMC9CMzU0RDMy OENCQkZEMUVGM0NEMjkyNjhBMjNCMEZDQzYwRTNBMkM1LmNybDCBngYIKwYBBQUH AQEEgZEwgY4wgYsGCCsGAQUFBzAChn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5y aXBlLm5ldC9yZXBvc2l0b3J5LzYxNzA4YTZiLTZjM2EtNDBhMC1hMzAyLTU5NWVj YzE3ODQ4Yy8wL0IzNTREMzI4Q0JCRkQxRUYzQ0QyOTI2OEEyM0IwRkNDNjBFM0Ey QzUuY2VyMIGgBggrBgEFBQcBCwSBkzCBkDCBjQYIKwYBBQUHMAuGgYByc3luYzov L3IubWFnZWxsYW4uaXB4by5jb20vcmVwby9hMDM3NWIzOS1mOTQ5LTRjYjUtYjUx OS1mOTQwMDhiMTY1NGMtMC8wLzM2MzIyZTMxMzQzNDJlMzUzODJlMzAyZjMyMzQy ZDMyMzQyMDNkM2UyMDM1MzYzNTMwLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAPpA6MA0GCSqGSIb3DQEB CwUAA4IBAQA1Eo5z7O/FOiv7S4ONxfPr3V0nU8sdQk8/dqIK8eye6k/B06ZJDYRR B6sclS4URRlFpYpTYKhY8U9Oi/TsfK6/LE4p5p6e8KH7fXONbxZnulw1g+fPM9ox s3uQ6/4I4NbaLGqiHNMAw29HzPCn65LWOYzwltBPnLuY/QYHG92gyF0qJ/n2nXVt Q9necXcOhV0wX9ewrQLZ81KuIXWHG46q9eG5ivd0uI4rBl5eLCC8wVJxKevOrZCP 7OfBZH+BSwcctCr2/5YPip4+zbkU7HdJskK+tBqvl8SYU2wageBRPhoUrZ34MbGe igEVNhnRAQABrgBqLyh5sMoyVZ+l6Ogs -----END CERTIFICATE-----Generated at Mon Mar 2 11:05:15 2026 by rpki-client