$ rpki-client -vvvf r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/3136342e33372e3139382e302f32332d3234203d3e203134363138.roa File: 3136342e33372e3139382e302f32332d3234203d3e203134363138.roa (raw, json) Hash identifier: 12x5mlG1UTdNl92kkCcJFoxTXoXZtflQ8EUUTyeiue8= Subject key identifier: 23:09:32:0E:96:D5:3E:67:AE:67:17:C0:28:3F:63:E6:3F:30:EA:79 Certificate issuer: /CN=B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5 Certificate serial: 39CA705CE2BF23B63C967778D6BCF51BEBE21A75 Authority key identifier: B3:54:D3:28:CB:BF:D1:EF:3C:D2:92:68:A2:3B:0F:CC:60:E3:A2:C5 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.cer Subject info access: rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/3136342e33372e3139382e302f32332d3234203d3e203134363138.roa Signing time: Mon 12 Oct 2026 00:02:08 +0000 ROA not before: Sun 11 Oct 2026 23:57:08 +0000 ROA not after: Mon 11 Oct 2027 00:02:08 +0000 asID: 14618 IP address blocks: 164.37.198.0/23 maxlen: 24 Validation: OK Signature path: rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.crl rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.mft rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.cer rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/D0A516B50426202A424F0EBFCB7D2BD4F744F964.crl rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/D0A516B50426202A424F0EBFCB7D2BD4F744F964.mft rsync://rpki.ripe.net/repository/DEFAULT/0KUWtQQmICpCTw6_y30r1PdE-WQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 29 Oct 2026 10:48:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 39:ca:70:5c:e2:bf:23:b6:3c:96:77:78:d6:bc:f5:1b:eb:e2:1a:75 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5 Validity Not Before: Oct 11 23:57:08 2026 GMT Not After : Oct 11 00:02:08 2027 GMT Subject: CN=2309320E96D53E67AE6717C0283F63E63F30EA79 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:e9:4f:a2:be:b7:fd:72:3c:e3:dd:78:cc:c0: 0b:f0:13:8f:01:3f:74:18:50:60:80:49:e5:18:73: 4e:8a:30:fb:ba:a6:4a:aa:0a:2b:30:56:eb:6e:fc: 8b:98:86:73:6e:03:f2:94:3d:9c:5e:02:64:71:df: 74:33:c6:b1:ae:34:0f:6b:e0:65:b9:e9:ed:0a:09: ca:60:2e:4e:fe:4d:5b:92:a0:9e:44:60:61:f7:d3: a6:85:af:d5:23:09:ee:59:4f:35:b5:2c:51:3a:bf: a2:3d:a3:80:a5:64:f7:8c:c2:71:a2:fe:8c:a5:58: 6b:dd:96:ca:1e:36:25:f5:a0:1d:91:a3:13:e1:0e: a9:6b:4b:07:e0:63:2f:5d:90:cf:04:f5:49:22:39: 03:ba:79:da:ab:e8:2c:c8:81:35:1b:2e:f7:fa:2b: b8:0e:37:39:ef:d4:57:bf:28:36:d2:a8:82:a0:3d: 48:78:cc:d4:d2:6f:fb:71:b5:4b:84:df:a9:22:88: 52:1f:cf:a0:f7:98:3f:c9:20:e2:b4:2e:bf:58:e6: 5f:1d:cb:8f:d0:ae:d6:f2:39:4f:22:c7:85:e7:1d: 1b:59:83:2e:af:7d:29:c0:84:6b:c2:af:02:3d:6a: 03:77:b0:5b:84:18:c5:ed:00:d6:04:a5:2d:8e:3d: 04:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:09:32:0E:96:D5:3E:67:AE:67:17:C0:28:3F:63:E6:3F:30:EA:79 X509v3 Authority Key Identifier: keyid:B3:54:D3:28:CB:BF:D1:EF:3C:D2:92:68:A2:3B:0F:CC:60:E3:A2:C5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.cer Subject Information Access: Signed Object - URI:rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/3136342e33372e3139382e302f32332d3234203d3e203134363138.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 164.37.198.0/23 Signature Algorithm: sha256WithRSAEncryption 65:b8:2d:d4:ff:96:69:9c:8a:5e:18:ab:5d:9c:77:08:00:b3: e1:1e:22:b7:0f:e7:2e:36:98:ab:bd:6d:e1:26:f0:23:aa:bd: 9b:e0:7e:d0:1a:44:06:cc:79:3e:ab:bf:75:d8:de:b1:44:6c: 97:f1:52:cc:22:c4:23:df:d9:41:de:68:3c:0e:20:db:a7:81: 74:73:11:23:fa:b0:31:1d:f1:76:46:e8:f1:ec:d0:45:84:aa: 82:94:48:84:7c:8a:68:66:13:0f:dc:b7:8b:ab:d5:73:e1:e3: ff:5a:f9:6a:95:78:ca:2d:c7:8d:9f:cc:fd:0d:e8:14:4d:cc: 4d:aa:51:31:b2:79:12:60:c6:e7:1b:fe:ff:f4:bd:14:51:bd: b9:00:b8:9d:df:ac:ac:b9:0a:8a:25:ec:a7:03:b1:bd:99:d8: 00:01:67:a2:11:cb:ee:94:c9:33:21:c0:25:2e:3a:35:85:d7: 31:86:34:1c:85:6e:2a:a8:bc:4a:9c:ce:1b:e5:19:28:d7:c4: b1:b6:8f:15:68:7f:61:20:74:ca:23:39:12:d1:62:57:c6:b7: f3:d4:24:40:f4:da:e2:a9:21:22:c1:d0:1d:96:39:0c:ce:b9: 4d:72:42:9c:bc:95:69:1c:88:51:c4:1d:07:26:2a:3f:e2:dd: 55:a3:da:03 -----BEGIN CERTIFICATE----- MIIFWDCCBECgAwIBAgIUOcpwXOK/I7Y8lnd41rz1G+viGnUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjM1NEQzMjhDQkJGRDFFRjNDRDI5MjY4QTIzQjBGQ0M2 MEUzQTJDNTAeFw0yNjEwMTEyMzU3MDhaFw0yNzEwMTEwMDAyMDhaMDMxMTAvBgNV BAMTKDIzMDkzMjBFOTZENTNFNjdBRTY3MTdDMDI4M0Y2M0U2M0YzMEVBNzkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCz6U+ivrf9cjzj3XjMwAvwE48B P3QYUGCASeUYc06KMPu6pkqqCiswVutu/IuYhnNuA/KUPZxeAmRx33QzxrGuNA9r 4GW56e0KCcpgLk7+TVuSoJ5EYGH306aFr9UjCe5ZTzW1LFE6v6I9o4ClZPeMwnGi /oylWGvdlsoeNiX1oB2RoxPhDqlrSwfgYy9dkM8E9UkiOQO6edqr6CzIgTUbLvf6 K7gONznv1Fe/KDbSqIKgPUh4zNTSb/txtUuE36kiiFIfz6D3mD/JIOK0Lr9Y5l8d y4/QrtbyOU8ix4XnHRtZgy6vfSnAhGvCrwI9agN3sFuEGMXtANYEpS2OPQSBAgMB AAGjggJiMIICXjAdBgNVHQ4EFgQUIwkyDpbVPmeuZxfAKD9j5j8w6nkwHwYDVR0j BBgwFoAUs1TTKMu/0e880pJoojsPzGDjosUwDgYDVR0PAQH/BAQDAgeAMIGIBgNV HR8EgYAwfjB8oHqgeIZ2cnN5bmM6Ly9yLm1hZ2VsbGFuLmlweG8uY29tL3JlcG8v YTAzNzViMzktZjk0OS00Y2I1LWI1MTktZjk0MDA4YjE2NTRjLTAvMC9CMzU0RDMy OENCQkZEMUVGM0NEMjkyNjhBMjNCMEZDQzYwRTNBMkM1LmNybDCBngYIKwYBBQUH AQEEgZEwgY4wgYsGCCsGAQUFBzAChn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5y aXBlLm5ldC9yZXBvc2l0b3J5LzYxNzA4YTZiLTZjM2EtNDBhMC1hMzAyLTU5NWVj YzE3ODQ4Yy8wL0IzNTREMzI4Q0JCRkQxRUYzQ0QyOTI2OEEyM0IwRkNDNjBFM0Ey QzUuY2VyMIGkBggrBgEFBQcBCwSBlzCBlDCBkQYIKwYBBQUHMAuGgYRyc3luYzov L3IubWFnZWxsYW4uaXB4by5jb20vcmVwby9hMDM3NWIzOS1mOTQ5LTRjYjUtYjUx OS1mOTQwMDhiMTY1NGMtMC8wLzMxMzYzNDJlMzMzNzJlMzEzOTM4MmUzMDJmMzIz MzJkMzIzNDIwM2QzZTIwMzEzNDM2MzEzOC5yb2EwGAYDVR0gAQH/BA4wDDAKBggr BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAaQlxjANBgkqhkiG 9w0BAQsFAAOCAQEAZbgt1P+WaZyKXhirXZx3CACz4R4itw/nLjaYq71t4SbwI6q9 m+B+0BpEBsx5Pqu/ddjesURsl/FSzCLEI9/ZQd5oPA4g26eBdHMRI/qwMR3xdkbo 8ezQRYSqgpRIhHyKaGYTD9y3i6vVc+Hj/1r5apV4yi3HjZ/M/Q3oFE3MTapRMbJ5 EmDG5xv+//S9FFG9uQC4nd+srLkKiiXspwOxvZnYAAFnohHL7pTJMyHAJS46NYXX MYY0HIVuKqi8SpzOG+UZKNfEsbaPFWh/YSB0yiM5EtFiV8a389QkQPTa4qkhIsHQ HZY5DM65TXJCnLyVaRyIUcQdByYqP+LdVaPaAw== -----END CERTIFICATE-----Generated at Wed Oct 28 19:10:35 2026 by rpki-client