$ rpki-client -vvf r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/36322e3134342e36312e302f32342d3234203d3e2035363530.roa File: 36322e3134342e36312e302f32342d3234203d3e2035363530.roa (raw, json) Hash identifier: XTYUr+nfmCdIIXkpWi2CGat8SgbtvMT6Nz+zpqTewjI= Subject key identifier: 3B:09:2C:FB:39:EA:9E:BD:2F:5E:A2:4D:E6:A4:2A:A4:AC:D2:F6:C9 Certificate issuer: /CN=B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5 Certificate serial: 574892C65A9B81EF9420396AC5BAF684C2872325 Authority key identifier: B3:54:D3:28:CB:BF:D1:EF:3C:D2:92:68:A2:3B:0F:CC:60:E3:A2:C5 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.cer Subject info access: rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/36322e3134342e36312e302f32342d3234203d3e2035363530.roa Signing time: Wed 25 Feb 2026 12:40:50 +0000 ROA not before: Wed 25 Feb 2026 12:35:50 +0000 ROA not after: Wed 24 Feb 2027 12:40:50 +0000 asID: 5650 IP address blocks: 62.144.61.0/24 maxlen: 24 Validation: OK Signature path: rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.crl rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.mft rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.cer rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/D0A516B50426202A424F0EBFCB7D2BD4F744F964.crl rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/D0A516B50426202A424F0EBFCB7D2BD4F744F964.mft rsync://rpki.ripe.net/repository/DEFAULT/0KUWtQQmICpCTw6_y30r1PdE-WQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 02 Mar 2026 23:00:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 57:48:92:c6:5a:9b:81:ef:94:20:39:6a:c5:ba:f6:84:c2:87:23:25 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5 Validity Not Before: Feb 25 12:35:50 2026 GMT Not After : Feb 24 12:40:50 2027 GMT Subject: CN=3B092CFB39EA9EBD2F5EA24DE6A42AA4ACD2F6C9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:d8:e1:df:38:12:e3:78:5a:90:5c:02:b2:bd: 55:05:ec:db:bf:2a:c1:eb:96:d2:17:5e:07:d3:2c: 7c:f9:a3:09:1c:8e:4d:72:0d:af:db:31:99:8d:0e: ec:98:c5:89:10:13:03:92:69:e7:0f:a2:db:fe:27: 59:f3:92:7c:c0:37:8a:d4:3c:45:ac:6d:ae:ab:2b: d8:bd:36:28:f9:1c:d7:71:a8:c9:87:5e:77:33:5d: ec:38:c9:55:e4:a1:95:c8:ef:2c:71:af:4b:5c:c5: 40:51:0f:56:7b:8f:69:3f:df:bd:a7:97:6d:1e:9e: 6a:4d:3a:e9:b9:73:bf:1f:e7:88:e4:74:19:97:fc: 4a:76:1b:e8:a2:1a:26:6a:43:4e:4e:06:67:82:9f: 3f:74:dc:19:07:5d:c9:c8:94:ec:fa:02:45:f5:6e: 0c:d5:27:1d:60:e1:49:a9:61:d6:a2:a3:1b:00:1d: 44:7f:35:fc:f1:bf:d2:f4:ae:aa:04:2a:99:f9:47: de:de:af:a8:94:dc:e8:89:86:f4:75:1f:4a:78:e1: 4c:88:87:20:9d:32:31:ec:5c:44:96:9b:9d:98:26: 3e:4c:69:7d:7b:0b:c7:0f:91:fc:ba:c1:f4:14:70: a3:87:2e:80:20:ba:45:af:4a:34:0c:f7:e9:5b:02: 4c:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:09:2C:FB:39:EA:9E:BD:2F:5E:A2:4D:E6:A4:2A:A4:AC:D2:F6:C9 X509v3 Authority Key Identifier: keyid:B3:54:D3:28:CB:BF:D1:EF:3C:D2:92:68:A2:3B:0F:CC:60:E3:A2:C5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.cer Subject Information Access: Signed Object - URI:rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/36322e3134342e36312e302f32342d3234203d3e2035363530.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 62.144.61.0/24 Signature Algorithm: sha256WithRSAEncryption 8a:ca:68:0d:e4:fc:d2:25:e4:dd:61:5d:5f:eb:27:26:22:79: 7a:37:ef:33:98:9e:8f:85:c3:30:73:8e:d0:f5:f7:57:b9:d5: 9f:8e:5f:71:ad:f6:92:75:97:d6:cf:cc:46:c2:95:24:f8:0c: d2:92:13:8e:71:74:62:75:b8:c6:59:2d:ad:a5:b9:76:7b:4f: e8:fb:ef:b4:8c:aa:a1:5d:7c:c2:dc:b2:8a:b6:e9:9d:db:38: 1e:20:2b:0b:07:46:1e:30:af:25:3f:8b:35:f2:06:cf:7f:3d: 4d:8b:37:fa:34:91:7d:7c:b3:1f:55:8f:d7:bd:0e:59:db:ac: fc:83:a4:14:8e:55:f3:ad:f0:9d:3f:b3:73:97:d8:df:5a:e1: e0:16:f6:59:42:0b:0b:5f:8f:e0:0d:e2:10:35:02:82:47:e7: 0a:95:dc:28:ba:bd:d6:c6:47:d4:dc:2d:7d:43:32:70:6e:b7: 8f:31:be:0c:97:bf:22:be:bb:62:4f:cd:65:e8:15:b1:f2:91: 6c:63:08:a7:35:21:46:29:a0:43:00:73:95:64:6a:da:bd:f9: ae:91:ee:47:c4:ca:76:90:ce:4d:26:09:96:fe:e4:ab:49:4c: a7:14:f9:e1:80:23:c3:f6:05:b2:84:4c:22:48:29:25:51:35: ad:89:50:53 -----BEGIN CERTIFICATE----- MIIFVDCCBDygAwIBAgIUV0iSxlqbge+UIDlqxbr2hMKHIyUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjM1NEQzMjhDQkJGRDFFRjNDRDI5MjY4QTIzQjBGQ0M2 MEUzQTJDNTAeFw0yNjAyMjUxMjM1NTBaFw0yNzAyMjQxMjQwNTBaMDMxMTAvBgNV BAMTKDNCMDkyQ0ZCMzlFQTlFQkQyRjVFQTI0REU2QTQyQUE0QUNEMkY2QzkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDU2OHfOBLjeFqQXAKyvVUF7Nu/ KsHrltIXXgfTLHz5owkcjk1yDa/bMZmNDuyYxYkQEwOSaecPotv+J1nzknzAN4rU PEWsba6rK9i9Nij5HNdxqMmHXnczXew4yVXkoZXI7yxxr0tcxUBRD1Z7j2k/372n l20enmpNOum5c78f54jkdBmX/Ep2G+iiGiZqQ05OBmeCnz903BkHXcnIlOz6AkX1 bgzVJx1g4UmpYdaioxsAHUR/Nfzxv9L0rqoEKpn5R97er6iU3OiJhvR1H0p44UyI hyCdMjHsXESWm52YJj5MaX17C8cPkfy6wfQUcKOHLoAgukWvSjQM9+lbAkz7AgMB AAGjggJeMIICWjAdBgNVHQ4EFgQUOwks+znqnr0vXqJN5qQqpKzS9skwHwYDVR0j BBgwFoAUs1TTKMu/0e880pJoojsPzGDjosUwDgYDVR0PAQH/BAQDAgeAMIGIBgNV HR8EgYAwfjB8oHqgeIZ2cnN5bmM6Ly9yLm1hZ2VsbGFuLmlweG8uY29tL3JlcG8v YTAzNzViMzktZjk0OS00Y2I1LWI1MTktZjk0MDA4YjE2NTRjLTAvMC9CMzU0RDMy OENCQkZEMUVGM0NEMjkyNjhBMjNCMEZDQzYwRTNBMkM1LmNybDCBngYIKwYBBQUH AQEEgZEwgY4wgYsGCCsGAQUFBzAChn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5y aXBlLm5ldC9yZXBvc2l0b3J5LzYxNzA4YTZiLTZjM2EtNDBhMC1hMzAyLTU5NWVj YzE3ODQ4Yy8wL0IzNTREMzI4Q0JCRkQxRUYzQ0QyOTI2OEEyM0IwRkNDNjBFM0Ey QzUuY2VyMIGgBggrBgEFBQcBCwSBkzCBkDCBjQYIKwYBBQUHMAuGgYByc3luYzov L3IubWFnZWxsYW4uaXB4by5jb20vcmVwby9hMDM3NWIzOS1mOTQ5LTRjYjUtYjUx OS1mOTQwMDhiMTY1NGMtMC8wLzM2MzIyZTMxMzQzNDJlMzYzMTJlMzAyZjMyMzQy ZDMyMzQyMDNkM2UyMDM1MzYzNTMwLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAPpA9MA0GCSqGSIb3DQEB CwUAA4IBAQCKymgN5PzSJeTdYV1f6ycmInl6N+8zmJ6PhcMwc47Q9fdXudWfjl9x rfaSdZfWz8xGwpUk+AzSkhOOcXRidbjGWS2tpbl2e0/o+++0jKqhXXzC3LKKtumd 2zgeICsLB0YeMK8lP4s18gbPfz1Nizf6NJF9fLMfVY/XvQ5Z26z8g6QUjlXzrfCd P7Nzl9jfWuHgFvZZQgsLX4/gDeIQNQKCR+cKldwour3WxkfU3C19QzJwbrePMb4M l78ivrtiT81l6BWx8pFsYwinNSFGKaBDAHOVZGravfmuke5HxMp2kM5NJgmW/uSr SUynFPnhgCPD9gWyhEwiSCklUTWtiVBT -----END CERTIFICATE-----Generated at Mon Mar 2 13:44:39 2026 by rpki-client