$ rpki-client -vvvf r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/AS402133.roa File: AS402133.roa (raw, json) Hash identifier: Gv9Uq31qmPtYVg8QhxbGSDfZotDIDxptBF8q2pbIk70= Subject key identifier: DB:95:CE:03:56:32:24:CA:B2:17:4D:AB:32:7B:D8:48:0B:10:0D:05 Certificate issuer: /CN=B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5 Certificate serial: 63551DFAFD90F4E58ECE9DDA77A90EC71418C2C1 Authority key identifier: B3:54:D3:28:CB:BF:D1:EF:3C:D2:92:68:A2:3B:0F:CC:60:E3:A2:C5 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.cer Subject info access: rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/AS402133.roa Signing time: Thu 10 Sep 2026 08:49:21 +0000 ROA not before: Thu 10 Sep 2026 08:44:21 +0000 ROA not after: Thu 09 Sep 2027 08:49:21 +0000 asID: 402133 IP address blocks: 62.144.59.0/24 maxlen: 24 62.144.60.0/22 maxlen: 24 Validation: OK Signature path: rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.crl rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.mft rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.cer rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/D0A516B50426202A424F0EBFCB7D2BD4F744F964.crl rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/D0A516B50426202A424F0EBFCB7D2BD4F744F964.mft rsync://rpki.ripe.net/repository/DEFAULT/0KUWtQQmICpCTw6_y30r1PdE-WQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 21 Sep 2026 05:00:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 63:55:1d:fa:fd:90:f4:e5:8e:ce:9d:da:77:a9:0e:c7:14:18:c2:c1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5 Validity Not Before: Sep 10 08:44:21 2026 GMT Not After : Sep 9 08:49:21 2027 GMT Subject: CN=DB95CE03563224CAB2174DAB327BD8480B100D05 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:00:92:66:da:bc:24:5c:bf:da:b9:69:80:e3: 5a:b2:09:59:8e:6c:91:f3:8a:e8:81:1a:d6:20:43: 0f:7b:8d:3a:ee:c2:a5:c5:3f:37:5d:4d:db:87:e0: ab:62:29:d7:28:7c:d4:04:b3:e2:c1:8c:18:fb:ea: 0c:35:95:47:d5:83:ae:2c:ef:a7:d1:19:84:10:1b: 85:04:32:ae:bd:ae:b6:8d:31:1c:02:47:0d:03:52: de:cd:51:ff:18:b0:e4:90:78:21:0f:46:39:02:7f: de:41:93:f4:03:d6:6e:ac:36:b1:0f:1b:8f:24:ef: 1f:df:9b:73:8b:1c:95:16:b9:74:99:f1:dd:f5:a5: b8:7a:67:81:00:10:f3:2b:83:a3:7d:62:22:27:89: 45:cf:a5:92:78:51:32:ab:e5:46:9f:aa:e8:aa:72: ba:6b:e6:29:2a:45:af:81:4f:c8:ac:f9:83:f0:32: 62:64:a8:23:7f:b3:eb:74:12:00:6b:c3:b5:7c:15: 8f:0d:7a:87:11:74:26:cd:2e:2a:bb:30:cb:87:15: 5f:9f:ab:0d:8c:3e:24:40:61:a4:6c:a7:37:6b:dd: 1d:da:d4:5e:29:a5:7c:57:79:ca:cd:1c:98:57:53: 92:c3:09:79:7e:3c:ad:fd:af:4a:82:14:2e:2f:f0: 22:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:95:CE:03:56:32:24:CA:B2:17:4D:AB:32:7B:D8:48:0B:10:0D:05 X509v3 Authority Key Identifier: keyid:B3:54:D3:28:CB:BF:D1:EF:3C:D2:92:68:A2:3B:0F:CC:60:E3:A2:C5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.cer Subject Information Access: Signed Object - URI:rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/AS402133.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 62.144.59.0-62.144.63.255 Signature Algorithm: sha256WithRSAEncryption 6e:84:1f:31:12:5b:83:5a:04:48:4d:28:0c:c7:eb:7a:a8:5f: fb:38:47:14:9c:31:d4:b5:1f:73:a7:b2:db:5f:f6:93:3a:58: dd:a9:aa:57:d3:0b:97:f4:20:db:7a:eb:34:23:44:7c:4f:3a: 34:5f:36:87:2b:87:ab:07:22:01:61:df:12:0d:18:b6:23:34: c3:6e:f8:79:38:30:e5:7a:8b:f3:18:54:55:a6:29:ac:a4:25: 7a:c6:b9:3c:97:1b:5d:7b:c2:d6:b9:3f:c5:3e:7f:8a:22:c7: ab:7c:bf:32:18:9e:36:2e:a0:e1:13:b1:41:f4:77:d3:a6:85: 88:e1:9c:8c:4d:b6:bf:5a:d2:78:12:90:0f:88:f3:f3:e3:ad: 7c:b8:4c:6b:6b:ce:9c:a2:72:28:ad:3d:74:4e:e8:59:52:8e: cc:9d:9f:e0:ec:f6:36:5c:16:0a:1d:1c:b5:3a:3f:1e:b8:d2: 78:2f:cf:68:a4:5e:ce:ef:69:15:24:bb:03:f0:11:0b:c8:90: a1:fd:41:40:40:fc:5b:b9:4f:b1:1e:fa:85:81:6a:06:08:39: 83:5b:44:60:ba:35:a1:87:60:08:73:a7:3d:ad:d4:fd:07:a0: cf:f0:fd:d4:13:9a:fb:e8:13:8e:7e:6c:6d:ab:ad:fa:cb:0f: e3:43:a7:27 -----BEGIN CERTIFICATE----- MIIFLTCCBBWgAwIBAgIUY1Ud+v2Q9OWOzp3ad6kOxxQYwsEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjM1NEQzMjhDQkJGRDFFRjNDRDI5MjY4QTIzQjBGQ0M2 MEUzQTJDNTAeFw0yNjA5MTAwODQ0MjFaFw0yNzA5MDkwODQ5MjFaMDMxMTAvBgNV BAMTKERCOTVDRTAzNTYzMjI0Q0FCMjE3NERBQjMyN0JEODQ4MEIxMDBEMDUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJAJJm2rwkXL/auWmA41qyCVmO bJHziuiBGtYgQw97jTruwqXFPzddTduH4KtiKdcofNQEs+LBjBj76gw1lUfVg64s 76fRGYQQG4UEMq69rraNMRwCRw0DUt7NUf8YsOSQeCEPRjkCf95Bk/QD1m6sNrEP G48k7x/fm3OLHJUWuXSZ8d31pbh6Z4EAEPMrg6N9YiIniUXPpZJ4UTKr5Uafquiq crpr5ikqRa+BT8is+YPwMmJkqCN/s+t0EgBrw7V8FY8NeocRdCbNLiq7MMuHFV+f qw2MPiRAYaRspzdr3R3a1F4ppXxXecrNHJhXU5LDCXl+PK39r0qCFC4v8CKlAgMB AAGjggI3MIICMzAdBgNVHQ4EFgQU25XOA1YyJMqyF02rMnvYSAsQDQUwHwYDVR0j BBgwFoAUs1TTKMu/0e880pJoojsPzGDjosUwDgYDVR0PAQH/BAQDAgeAMIGIBgNV HR8EgYAwfjB8oHqgeIZ2cnN5bmM6Ly9yLm1hZ2VsbGFuLmlweG8uY29tL3JlcG8v YTAzNzViMzktZjk0OS00Y2I1LWI1MTktZjk0MDA4YjE2NTRjLTAvMC9CMzU0RDMy OENCQkZEMUVGM0NEMjkyNjhBMjNCMEZDQzYwRTNBMkM1LmNybDCBngYIKwYBBQUH AQEEgZEwgY4wgYsGCCsGAQUFBzAChn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5y aXBlLm5ldC9yZXBvc2l0b3J5LzYxNzA4YTZiLTZjM2EtNDBhMC1hMzAyLTU5NWVj YzE3ODQ4Yy8wL0IzNTREMzI4Q0JCRkQxRUYzQ0QyOTI2OEEyM0IwRkNDNjBFM0Ey QzUuY2VyMHIGCCsGAQUFBwELBGYwZDBiBggrBgEFBQcwC4ZWcnN5bmM6Ly9yLm1h Z2VsbGFuLmlweG8uY29tL3JlcG8vYTAzNzViMzktZjk0OS00Y2I1LWI1MTktZjk0 MDA4YjE2NTRjLTAvMC9BUzQwMjEzMy5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEF BQcOAjAnBggrBgEFBQcBBwEB/wQYMBYwFAQCAAEwDjAMAwQAPpA7AwQGPpAAMA0G CSqGSIb3DQEBCwUAA4IBAQBuhB8xEluDWgRITSgMx+t6qF/7OEcUnDHUtR9zp7Lb X/aTOljdqapX0wuX9CDbeus0I0R8Tzo0XzaHK4erByIBYd8SDRi2IzTDbvh5ODDl eovzGFRVpimspCV6xrk8lxtde8LWuT/FPn+KIserfL8yGJ42LqDhE7FB9HfTpoWI 4ZyMTba/WtJ4EpAPiPPz4618uExra86conIorT10TuhZUo7MnZ/g7PY2XBYKHRy1 Oj8euNJ4L89opF7O72kVJLsD8BELyJCh/UFAQPxbuU+xHvqFgWoGCDmDW0RgujWh h2AIc6c9rdT9B6DP8P3UE5r76BOOfmxtq636yw/jQ6cn -----END CERTIFICATE-----Generated at Sun Sep 20 15:44:57 2026 by rpki-client