$ rpki-client -vvvf r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/3136342e33372e3230322e302f32342d3234203d3e20333933393432.roa File: 3136342e33372e3230322e302f32342d3234203d3e20333933393432.roa (raw, json) Hash identifier: CS7wyinTqgOctcMaPhfcJ3cjZ31VgEH+Cn9UlGIa5M8= Subject key identifier: CB:D7:AF:24:26:1F:82:B4:15:14:A2:F6:47:91:0E:07:8E:9F:3F:99 Certificate issuer: /CN=B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5 Certificate serial: 5939B109049FD78957E0EEEA596A6B1A888C7AA5 Authority key identifier: B3:54:D3:28:CB:BF:D1:EF:3C:D2:92:68:A2:3B:0F:CC:60:E3:A2:C5 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.cer Subject info access: rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/3136342e33372e3230322e302f32342d3234203d3e20333933393432.roa Signing time: Mon 12 Oct 2026 00:02:07 +0000 ROA not before: Sun 11 Oct 2026 23:57:07 +0000 ROA not after: Mon 11 Oct 2027 00:02:07 +0000 asID: 393942 IP address blocks: 164.37.202.0/24 maxlen: 24 Validation: OK Signature path: rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.crl rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.mft rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.cer rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/D0A516B50426202A424F0EBFCB7D2BD4F744F964.crl rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/D0A516B50426202A424F0EBFCB7D2BD4F744F964.mft rsync://rpki.ripe.net/repository/DEFAULT/0KUWtQQmICpCTw6_y30r1PdE-WQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 29 Oct 2026 10:48:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 59:39:b1:09:04:9f:d7:89:57:e0:ee:ea:59:6a:6b:1a:88:8c:7a:a5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5 Validity Not Before: Oct 11 23:57:07 2026 GMT Not After : Oct 11 00:02:07 2027 GMT Subject: CN=CBD7AF24261F82B41514A2F647910E078E9F3F99 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:22:61:62:1b:e7:bf:4f:a0:16:8b:43:42:1a: 2e:76:ef:0c:16:f7:ab:48:e1:bd:0d:80:9e:3d:71: 03:55:9e:03:7b:a6:6e:b4:eb:3c:b7:6a:53:fc:91: ce:11:0a:b0:1c:87:33:07:dd:22:79:34:a8:56:7c: 8c:48:9d:8c:a9:2e:35:3c:9b:03:fe:36:34:d8:09: b7:48:a3:74:9f:31:b3:55:33:a7:dd:7a:fe:dc:bd: 18:e1:ef:66:9f:19:6b:98:ff:c7:cd:ed:36:31:18: f7:65:c8:d4:11:d2:fd:fc:7e:c5:f6:6f:e7:57:0d: 7b:28:f0:f4:f1:02:c4:00:3d:d1:52:5e:aa:2a:3e: ee:0d:7c:6d:96:8b:2a:be:0a:8d:dd:0f:fb:cb:76: 00:72:80:4b:ed:a2:f2:e2:70:e3:2e:ac:a7:39:79: f2:26:b8:8e:ec:d7:4f:0b:ec:b6:b8:49:ef:20:d6: 80:71:ca:7e:88:16:56:7c:37:79:58:6b:1d:1a:61: 84:d8:93:82:48:6c:13:1e:a6:5a:41:9c:64:05:b7: 1b:af:a1:be:1c:c8:6d:5c:da:85:77:1c:5a:e6:ad: d0:5c:bc:4c:bd:82:6a:2d:a5:ca:fb:53:f1:93:69: ff:df:0a:81:06:46:69:70:c9:9a:78:9f:8f:30:35: d4:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:D7:AF:24:26:1F:82:B4:15:14:A2:F6:47:91:0E:07:8E:9F:3F:99 X509v3 Authority Key Identifier: keyid:B3:54:D3:28:CB:BF:D1:EF:3C:D2:92:68:A2:3B:0F:CC:60:E3:A2:C5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.cer Subject Information Access: Signed Object - URI:rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/3136342e33372e3230322e302f32342d3234203d3e20333933393432.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 164.37.202.0/24 Signature Algorithm: sha256WithRSAEncryption c3:85:e1:29:1d:3c:f5:31:8e:d3:92:ee:fa:1f:05:31:68:05: ef:5f:ef:96:19:91:82:99:37:24:2c:e5:98:62:68:09:91:7e: 98:4e:3e:88:c0:a4:68:bb:f2:22:84:03:c1:3b:ff:77:8e:4c: 2c:57:b1:c1:84:e0:46:cd:8a:90:16:ad:47:9c:a4:29:4a:30: 0f:ab:ba:72:61:d2:68:8b:54:74:52:93:89:b3:ba:22:5b:2b: 19:a4:08:76:e5:6b:ab:3a:d6:a0:be:c7:6a:69:9d:71:65:5d: 06:95:99:4b:6d:fc:b3:c4:c8:f2:42:e3:8f:0c:d1:1b:7f:f2: 2b:3d:43:ad:29:da:f2:0e:5a:cb:47:d9:82:66:a3:65:24:55: 87:1a:6c:32:21:1a:4a:46:c2:2e:79:87:64:80:60:14:4d:5a: c9:3a:04:ae:ce:c3:9b:6d:6a:d6:7b:6e:06:5e:a2:44:f3:f0: 81:a6:dc:41:19:43:47:75:2f:c2:fa:9f:2f:88:44:d8:21:f4: 10:a0:6f:15:f4:d5:ad:bc:80:1d:62:66:1e:65:1c:2d:ff:25: 92:e6:4f:19:8d:f4:c8:92:24:a1:4c:ea:72:36:4b:54:8d:29: c8:2a:9b:d9:68:8e:be:14:31:8e:ea:36:d5:ff:82:8b:d8:38: dc:62:ba:8b -----BEGIN CERTIFICATE----- MIIFWjCCBEKgAwIBAgIUWTmxCQSf14lX4O7qWWprGoiMeqUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjM1NEQzMjhDQkJGRDFFRjNDRDI5MjY4QTIzQjBGQ0M2 MEUzQTJDNTAeFw0yNjEwMTEyMzU3MDdaFw0yNzEwMTEwMDAyMDdaMDMxMTAvBgNV BAMTKENCRDdBRjI0MjYxRjgyQjQxNTE0QTJGNjQ3OTEwRTA3OEU5RjNGOTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJImFiG+e/T6AWi0NCGi527wwW 96tI4b0NgJ49cQNVngN7pm606zy3alP8kc4RCrAchzMH3SJ5NKhWfIxInYypLjU8 mwP+NjTYCbdIo3SfMbNVM6fdev7cvRjh72afGWuY/8fN7TYxGPdlyNQR0v38fsX2 b+dXDXso8PTxAsQAPdFSXqoqPu4NfG2Wiyq+Co3dD/vLdgBygEvtovLicOMurKc5 efImuI7s108L7La4Se8g1oBxyn6IFlZ8N3lYax0aYYTYk4JIbBMeplpBnGQFtxuv ob4cyG1c2oV3HFrmrdBcvEy9gmotpcr7U/GTaf/fCoEGRmlwyZp4n48wNdQ5AgMB AAGjggJkMIICYDAdBgNVHQ4EFgQUy9evJCYfgrQVFKL2R5EOB46fP5kwHwYDVR0j BBgwFoAUs1TTKMu/0e880pJoojsPzGDjosUwDgYDVR0PAQH/BAQDAgeAMIGIBgNV HR8EgYAwfjB8oHqgeIZ2cnN5bmM6Ly9yLm1hZ2VsbGFuLmlweG8uY29tL3JlcG8v YTAzNzViMzktZjk0OS00Y2I1LWI1MTktZjk0MDA4YjE2NTRjLTAvMC9CMzU0RDMy OENCQkZEMUVGM0NEMjkyNjhBMjNCMEZDQzYwRTNBMkM1LmNybDCBngYIKwYBBQUH AQEEgZEwgY4wgYsGCCsGAQUFBzAChn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5y aXBlLm5ldC9yZXBvc2l0b3J5LzYxNzA4YTZiLTZjM2EtNDBhMC1hMzAyLTU5NWVj YzE3ODQ4Yy8wL0IzNTREMzI4Q0JCRkQxRUYzQ0QyOTI2OEEyM0IwRkNDNjBFM0Ey QzUuY2VyMIGmBggrBgEFBQcBCwSBmTCBljCBkwYIKwYBBQUHMAuGgYZyc3luYzov L3IubWFnZWxsYW4uaXB4by5jb20vcmVwby9hMDM3NWIzOS1mOTQ5LTRjYjUtYjUx OS1mOTQwMDhiMTY1NGMtMC8wLzMxMzYzNDJlMzMzNzJlMzIzMDMyMmUzMDJmMzIz NDJkMzIzNDIwM2QzZTIwMzMzOTMzMzkzNDMyLnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQApCXKMA0GCSqG SIb3DQEBCwUAA4IBAQDDheEpHTz1MY7Tku76HwUxaAXvX++WGZGCmTckLOWYYmgJ kX6YTj6IwKRou/IihAPBO/93jkwsV7HBhOBGzYqQFq1HnKQpSjAPq7pyYdJoi1R0 UpOJs7oiWysZpAh25WurOtagvsdqaZ1xZV0GlZlLbfyzxMjyQuOPDNEbf/IrPUOt KdryDlrLR9mCZqNlJFWHGmwyIRpKRsIueYdkgGAUTVrJOgSuzsObbWrWe24GXqJE 8/CBptxBGUNHdS/C+p8viETYIfQQoG8V9NWtvIAdYmYeZRwt/yWS5k8ZjfTIkiSh TOpyNktUjSnIKpvZaI6+FDGO6jbV/4KL2DjcYrqL -----END CERTIFICATE-----Generated at Wed Oct 28 18:57:30 2026 by rpki-client