$ rpki-client -vvvf r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/3136342e33372e3139322e302f32342d3234203d3e20323138393130.roa File: 3136342e33372e3139322e302f32342d3234203d3e20323138393130.roa (raw, json) Hash identifier: EydT+dS5cTRHNmpjr+9UVm1llE8kIcoqZVk4P66Do7s= Subject key identifier: 13:0B:3E:0C:89:0A:61:99:57:B6:E9:39:29:94:8F:4F:75:55:6D:5E Certificate issuer: /CN=B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5 Certificate serial: 076FACC4B95E6CAFF23B1712A2B4A05750C6371F Authority key identifier: B3:54:D3:28:CB:BF:D1:EF:3C:D2:92:68:A2:3B:0F:CC:60:E3:A2:C5 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.cer Subject info access: rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/3136342e33372e3139322e302f32342d3234203d3e20323138393130.roa Signing time: Mon 12 Oct 2026 00:02:11 +0000 ROA not before: Sun 11 Oct 2026 23:57:11 +0000 ROA not after: Mon 11 Oct 2027 00:02:11 +0000 asID: 218910 IP address blocks: 164.37.192.0/24 maxlen: 24 Validation: OK Signature path: rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.crl rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.mft rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.cer rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/D0A516B50426202A424F0EBFCB7D2BD4F744F964.crl rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/D0A516B50426202A424F0EBFCB7D2BD4F744F964.mft rsync://rpki.ripe.net/repository/DEFAULT/0KUWtQQmICpCTw6_y30r1PdE-WQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 19 Oct 2026 19:02:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 07:6f:ac:c4:b9:5e:6c:af:f2:3b:17:12:a2:b4:a0:57:50:c6:37:1f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5 Validity Not Before: Oct 11 23:57:11 2026 GMT Not After : Oct 11 00:02:11 2027 GMT Subject: CN=130B3E0C890A619957B6E93929948F4F75556D5E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:1d:f0:d6:97:15:eb:52:bb:37:c2:d1:a1:e9: fc:32:ae:44:32:06:8d:1a:10:22:3f:0f:74:72:a0: 8c:b9:fa:d0:aa:c3:21:66:82:05:c0:ec:f6:dd:2c: 8e:38:fd:bf:63:37:1e:ae:00:b3:99:16:00:0e:63: e0:3f:ad:76:ae:07:42:b4:f5:39:8f:b9:a5:64:02: 83:84:e1:2a:14:ab:d0:a0:4c:1b:e7:51:cc:b1:c6: 6d:ec:4d:ec:c2:0f:22:1c:52:0f:a6:04:b7:61:e4: 68:83:b1:20:81:97:fc:a1:2e:07:84:eb:8a:1a:a2: 33:e6:16:df:bb:83:cb:42:55:89:21:2f:3e:12:93: 04:c2:52:8a:e2:a7:6c:25:cb:5e:0b:48:01:8c:65: c0:8e:4c:d4:b0:6c:67:9a:85:0a:b2:b8:65:0f:a1: 3f:9a:f1:48:28:95:8e:93:72:82:02:04:4e:a5:2a: 61:8e:37:e1:83:28:c6:3c:98:0b:b6:90:3d:78:98: 18:13:b9:96:5b:fe:4f:85:b2:d4:c1:9c:eb:d1:53: 2e:fd:69:b1:0e:bd:7d:80:7d:45:ce:17:e9:c4:0d: 10:8f:a6:45:fa:9d:fb:12:9b:21:6c:e6:92:4a:cd: 15:3e:bc:4f:f3:9f:4c:2d:f1:76:4d:64:d3:4e:06: 0b:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:0B:3E:0C:89:0A:61:99:57:B6:E9:39:29:94:8F:4F:75:55:6D:5E X509v3 Authority Key Identifier: keyid:B3:54:D3:28:CB:BF:D1:EF:3C:D2:92:68:A2:3B:0F:CC:60:E3:A2:C5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.cer Subject Information Access: Signed Object - URI:rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/3136342e33372e3139322e302f32342d3234203d3e20323138393130.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 164.37.192.0/24 Signature Algorithm: sha256WithRSAEncryption 22:7e:05:8b:7d:64:bb:71:a3:c5:d2:e0:57:7a:49:9d:37:b8: cd:eb:13:f9:9d:06:cc:67:f2:5f:08:68:1b:6c:d0:d9:93:e5: f4:f0:9a:56:b6:1e:2f:a3:cc:42:7f:42:30:e1:f6:78:c2:72: 2e:a5:74:94:e4:fa:4c:a1:cf:4d:96:39:5e:50:39:ba:65:bb: 4d:1c:9d:94:2d:22:a1:e2:35:20:6a:2f:1f:26:84:4a:09:99: c6:1a:02:3b:07:18:7a:eb:ee:12:37:38:6f:12:9a:2f:a8:1b: 2e:84:70:63:9b:82:6d:7d:29:87:a9:79:72:e0:a2:29:70:ab: d8:3c:b8:ee:ae:51:77:44:75:8f:ba:50:99:68:3a:db:87:7d: 36:8d:89:03:3e:7c:95:b0:09:f3:87:6b:6a:f4:1d:cc:40:0c: 12:a8:8f:04:fa:1c:78:7d:77:e3:e9:4a:6a:af:e4:c5:66:e6: c3:3d:17:6f:9d:1f:a1:ed:2b:b5:cc:a9:b0:78:86:3f:5f:0c: 40:eb:8e:4f:c0:26:fa:c1:86:76:06:c0:d0:b8:e5:ae:4c:19: 8b:d9:08:1a:93:d3:17:f2:22:40:f1:32:30:28:82:77:8f:7e: 97:a3:13:ee:cb:26:5b:9d:91:9f:03:de:7d:ec:ac:41:6a:0a: 46:25:84:be -----BEGIN CERTIFICATE----- MIIFWjCCBEKgAwIBAgIUB2+sxLlebK/yOxcSorSgV1DGNx8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjM1NEQzMjhDQkJGRDFFRjNDRDI5MjY4QTIzQjBGQ0M2 MEUzQTJDNTAeFw0yNjEwMTEyMzU3MTFaFw0yNzEwMTEwMDAyMTFaMDMxMTAvBgNV BAMTKDEzMEIzRTBDODkwQTYxOTk1N0I2RTkzOTI5OTQ4RjRGNzU1NTZENUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCMHfDWlxXrUrs3wtGh6fwyrkQy Bo0aECI/D3RyoIy5+tCqwyFmggXA7PbdLI44/b9jNx6uALOZFgAOY+A/rXauB0K0 9TmPuaVkAoOE4SoUq9CgTBvnUcyxxm3sTezCDyIcUg+mBLdh5GiDsSCBl/yhLgeE 64oaojPmFt+7g8tCVYkhLz4SkwTCUorip2wly14LSAGMZcCOTNSwbGeahQqyuGUP oT+a8UgolY6TcoICBE6lKmGON+GDKMY8mAu2kD14mBgTuZZb/k+FstTBnOvRUy79 abEOvX2AfUXOF+nEDRCPpkX6nfsSmyFs5pJKzRU+vE/zn0wt8XZNZNNOBgsxAgMB AAGjggJkMIICYDAdBgNVHQ4EFgQUEws+DIkKYZlXtuk5KZSPT3VVbV4wHwYDVR0j BBgwFoAUs1TTKMu/0e880pJoojsPzGDjosUwDgYDVR0PAQH/BAQDAgeAMIGIBgNV HR8EgYAwfjB8oHqgeIZ2cnN5bmM6Ly9yLm1hZ2VsbGFuLmlweG8uY29tL3JlcG8v YTAzNzViMzktZjk0OS00Y2I1LWI1MTktZjk0MDA4YjE2NTRjLTAvMC9CMzU0RDMy OENCQkZEMUVGM0NEMjkyNjhBMjNCMEZDQzYwRTNBMkM1LmNybDCBngYIKwYBBQUH AQEEgZEwgY4wgYsGCCsGAQUFBzAChn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5y aXBlLm5ldC9yZXBvc2l0b3J5LzYxNzA4YTZiLTZjM2EtNDBhMC1hMzAyLTU5NWVj YzE3ODQ4Yy8wL0IzNTREMzI4Q0JCRkQxRUYzQ0QyOTI2OEEyM0IwRkNDNjBFM0Ey QzUuY2VyMIGmBggrBgEFBQcBCwSBmTCBljCBkwYIKwYBBQUHMAuGgYZyc3luYzov L3IubWFnZWxsYW4uaXB4by5jb20vcmVwby9hMDM3NWIzOS1mOTQ5LTRjYjUtYjUx OS1mOTQwMDhiMTY1NGMtMC8wLzMxMzYzNDJlMzMzNzJlMzEzOTMyMmUzMDJmMzIz NDJkMzIzNDIwM2QzZTIwMzIzMTM4MzkzMTMwLnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQApCXAMA0GCSqG SIb3DQEBCwUAA4IBAQAifgWLfWS7caPF0uBXekmdN7jN6xP5nQbMZ/JfCGgbbNDZ k+X08JpWth4vo8xCf0Iw4fZ4wnIupXSU5PpMoc9NljleUDm6ZbtNHJ2ULSKh4jUg ai8fJoRKCZnGGgI7Bxh66+4SNzhvEpovqBsuhHBjm4JtfSmHqXly4KIpcKvYPLju rlF3RHWPulCZaDrbh302jYkDPnyVsAnzh2tq9B3MQAwSqI8E+hx4fXfj6Upqr+TF ZubDPRdvnR+h7Su1zKmweIY/XwxA645PwCb6wYZ2BsDQuOWuTBmL2Qgak9MX8iJA 8TIwKIJ3j36XoxPuyyZbnZGfA9597KxBagpGJYS+ -----END CERTIFICATE-----Generated at Mon Oct 19 04:56:46 2026 by rpki-client