$ rpki-client -vvvf r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/3136342e33372e3139362e302f32332d3234203d3e2032343937.roa File: 3136342e33372e3139362e302f32332d3234203d3e2032343937.roa (raw, json) Hash identifier: 2McgR+3UU0NLR13/Llu3/98Nzi6AVNwjUBnClKSTRDM= Subject key identifier: A7:B1:D6:32:FA:8D:0E:38:C9:50:51:37:B8:51:5F:5C:80:5A:57:D2 Certificate issuer: /CN=B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5 Certificate serial: 6AB914A955BD65B0DC50B8F6357AB125FD2E3873 Authority key identifier: B3:54:D3:28:CB:BF:D1:EF:3C:D2:92:68:A2:3B:0F:CC:60:E3:A2:C5 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.cer Subject info access: rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/3136342e33372e3139362e302f32332d3234203d3e2032343937.roa Signing time: Mon 12 Oct 2026 00:02:11 +0000 ROA not before: Sun 11 Oct 2026 23:57:11 +0000 ROA not after: Mon 11 Oct 2027 00:02:11 +0000 asID: 2497 IP address blocks: 164.37.196.0/23 maxlen: 24 Validation: OK Signature path: rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.crl rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.mft rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.cer rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/D0A516B50426202A424F0EBFCB7D2BD4F744F964.crl rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/D0A516B50426202A424F0EBFCB7D2BD4F744F964.mft rsync://rpki.ripe.net/repository/DEFAULT/0KUWtQQmICpCTw6_y30r1PdE-WQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Oct 2026 16:36:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6a:b9:14:a9:55:bd:65:b0:dc:50:b8:f6:35:7a:b1:25:fd:2e:38:73 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5 Validity Not Before: Oct 11 23:57:11 2026 GMT Not After : Oct 11 00:02:11 2027 GMT Subject: CN=A7B1D632FA8D0E38C9505137B8515F5C805A57D2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:3c:88:b8:08:52:78:63:95:ee:15:1e:c3:b3: c0:1c:d1:04:b2:96:52:a2:8e:a9:be:e5:41:d1:82: 76:ec:fc:36:96:0b:75:b0:4a:e4:2d:e3:3e:f5:5d: 4b:d1:5e:f2:ca:4d:8f:cd:3e:f5:b3:c4:ac:91:ee: 6c:61:f4:c8:6a:b9:79:c1:e6:7d:70:90:77:70:ee: 73:62:93:9d:b6:aa:36:73:b6:90:85:4a:f2:a2:05: ee:b5:34:f6:10:56:1a:4c:71:90:dd:13:be:c3:0b: 96:f2:49:4b:68:a6:60:05:3c:0a:82:1a:57:da:41: 52:0e:fd:1f:79:20:70:6a:40:6f:8a:b5:63:f3:dc: 1b:59:b9:68:08:39:7d:1e:b9:a4:31:80:33:9a:10: 70:76:ac:a7:e1:4d:55:2e:db:d2:56:30:23:55:b4: e7:5a:af:17:d1:94:d7:b8:5a:21:61:ba:eb:08:36: 44:f4:59:26:35:48:99:9f:b6:ad:7f:3c:01:85:ee: dc:00:b3:13:9b:31:78:b1:85:7b:54:10:df:9e:38: 71:f5:72:d9:95:df:08:b2:59:ed:e5:1f:d0:7f:8d: 39:b6:c2:2e:f5:05:da:c2:57:ef:2b:8f:12:9a:a6: 33:e0:94:18:96:7c:3a:22:ee:2f:2c:92:d6:0b:5c: aa:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:B1:D6:32:FA:8D:0E:38:C9:50:51:37:B8:51:5F:5C:80:5A:57:D2 X509v3 Authority Key Identifier: keyid:B3:54:D3:28:CB:BF:D1:EF:3C:D2:92:68:A2:3B:0F:CC:60:E3:A2:C5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.cer Subject Information Access: Signed Object - URI:rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/3136342e33372e3139362e302f32332d3234203d3e2032343937.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 164.37.196.0/23 Signature Algorithm: sha256WithRSAEncryption bd:c8:8c:1b:e6:aa:a2:31:4d:2b:f1:60:0a:38:32:b2:d7:2b: f0:78:b5:db:9a:a3:17:d7:5d:42:72:b4:46:1f:47:72:0d:c4: db:02:db:df:64:8c:df:a5:25:1b:f4:a3:9c:41:a3:20:d6:18: 6d:c8:c8:d9:d0:2a:98:a1:c9:eb:e0:e8:60:2b:0f:6a:75:8d: 03:e7:c3:7d:ac:55:f8:db:7d:96:e7:02:cc:b6:ec:a2:2d:50: 4c:87:47:50:ca:cb:32:81:33:01:64:ca:6d:db:37:42:ec:f3: 71:fd:53:f5:96:ad:80:2b:f9:49:96:bf:0b:9f:39:e7:68:02: 9a:50:53:83:cf:70:a8:f1:6d:06:8f:d3:7d:f9:d4:fd:c0:3e: 97:f1:10:6c:9d:8d:c1:37:4c:f2:69:1f:81:5d:bc:b0:3f:7f: ea:63:f3:05:3a:cd:bd:5b:45:75:b1:dc:f1:b3:00:54:cc:e0: 1d:cc:be:49:10:9d:89:8a:77:4a:d4:f2:d4:ba:c8:a7:db:04: a4:cc:cd:32:10:39:6d:6b:66:65:86:af:ab:a1:e2:71:82:a1: 82:99:b4:7d:28:0b:57:3d:2f:ca:8e:7e:1d:57:6c:e8:10:10: e1:90:3a:f0:f8:39:88:9a:be:c4:35:c2:86:d4:ae:ad:75:c2: 4b:bf:41:39 -----BEGIN CERTIFICATE----- MIIFVjCCBD6gAwIBAgIUarkUqVW9ZbDcULj2NXqxJf0uOHMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjM1NEQzMjhDQkJGRDFFRjNDRDI5MjY4QTIzQjBGQ0M2 MEUzQTJDNTAeFw0yNjEwMTEyMzU3MTFaFw0yNzEwMTEwMDAyMTFaMDMxMTAvBgNV BAMTKEE3QjFENjMyRkE4RDBFMzhDOTUwNTEzN0I4NTE1RjVDODA1QTU3RDIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1PIi4CFJ4Y5XuFR7Ds8Ac0QSy llKijqm+5UHRgnbs/DaWC3WwSuQt4z71XUvRXvLKTY/NPvWzxKyR7mxh9MhquXnB 5n1wkHdw7nNik522qjZztpCFSvKiBe61NPYQVhpMcZDdE77DC5bySUtopmAFPAqC GlfaQVIO/R95IHBqQG+KtWPz3BtZuWgIOX0euaQxgDOaEHB2rKfhTVUu29JWMCNV tOdarxfRlNe4WiFhuusINkT0WSY1SJmftq1/PAGF7twAsxObMXixhXtUEN+eOHH1 ctmV3wiyWe3lH9B/jTm2wi71BdrCV+8rjxKapjPglBiWfDoi7i8sktYLXKpZAgMB AAGjggJgMIICXDAdBgNVHQ4EFgQUp7HWMvqNDjjJUFE3uFFfXIBaV9IwHwYDVR0j BBgwFoAUs1TTKMu/0e880pJoojsPzGDjosUwDgYDVR0PAQH/BAQDAgeAMIGIBgNV HR8EgYAwfjB8oHqgeIZ2cnN5bmM6Ly9yLm1hZ2VsbGFuLmlweG8uY29tL3JlcG8v YTAzNzViMzktZjk0OS00Y2I1LWI1MTktZjk0MDA4YjE2NTRjLTAvMC9CMzU0RDMy OENCQkZEMUVGM0NEMjkyNjhBMjNCMEZDQzYwRTNBMkM1LmNybDCBngYIKwYBBQUH AQEEgZEwgY4wgYsGCCsGAQUFBzAChn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5y aXBlLm5ldC9yZXBvc2l0b3J5LzYxNzA4YTZiLTZjM2EtNDBhMC1hMzAyLTU5NWVj YzE3ODQ4Yy8wL0IzNTREMzI4Q0JCRkQxRUYzQ0QyOTI2OEEyM0IwRkNDNjBFM0Ey QzUuY2VyMIGiBggrBgEFBQcBCwSBlTCBkjCBjwYIKwYBBQUHMAuGgYJyc3luYzov L3IubWFnZWxsYW4uaXB4by5jb20vcmVwby9hMDM3NWIzOS1mOTQ5LTRjYjUtYjUx OS1mOTQwMDhiMTY1NGMtMC8wLzMxMzYzNDJlMzMzNzJlMzEzOTM2MmUzMDJmMzIz MzJkMzIzNDIwM2QzZTIwMzIzNDM5Mzcucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYB BQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAGkJcQwDQYJKoZIhvcN AQELBQADggEBAL3IjBvmqqIxTSvxYAo4MrLXK/B4tduaoxfXXUJytEYfR3INxNsC 299kjN+lJRv0o5xBoyDWGG3IyNnQKpihyevg6GArD2p1jQPnw32sVfjbfZbnAsy2 7KItUEyHR1DKyzKBMwFkym3bN0Ls83H9U/WWrYAr+UmWvwufOedoAppQU4PPcKjx bQaP03351P3APpfxEGydjcE3TPJpH4FdvLA/f+pj8wU6zb1bRXWx3PGzAFTM4B3M vkkQnYmKd0rU8tS6yKfbBKTMzTIQOW1rZmWGr6uh4nGCoYKZtH0oC1c9L8qOfh1X bOgQEOGQOvD4OYiavsQ1wobUrq11wku/QTk= -----END CERTIFICATE-----Generated at Tue Oct 20 06:43:48 2026 by rpki-client