$ rpki-client -vvvf r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/3136342e33372e3230362e302f32342d3234203d3e203136323736.roa File: 3136342e33372e3230362e302f32342d3234203d3e203136323736.roa (raw, json) Hash identifier: P/08+HR/UmPEvPZrkUHt0Ro44A67ir8IGlqF6EHocxc= Subject key identifier: 6D:34:76:A9:B0:DB:B8:5A:01:B6:47:BB:91:F8:03:FE:80:34:2A:D9 Certificate issuer: /CN=B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5 Certificate serial: 657164A762D48A5876EFA251C2F019F7D06EF3CC Authority key identifier: B3:54:D3:28:CB:BF:D1:EF:3C:D2:92:68:A2:3B:0F:CC:60:E3:A2:C5 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.cer Subject info access: rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/3136342e33372e3230362e302f32342d3234203d3e203136323736.roa Signing time: Mon 12 Oct 2026 00:02:08 +0000 ROA not before: Sun 11 Oct 2026 23:57:08 +0000 ROA not after: Mon 11 Oct 2027 00:02:08 +0000 asID: 16276 IP address blocks: 164.37.206.0/24 maxlen: 24 Validation: OK Signature path: rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.crl rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.mft rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.cer rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/D0A516B50426202A424F0EBFCB7D2BD4F744F964.crl rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/D0A516B50426202A424F0EBFCB7D2BD4F744F964.mft rsync://rpki.ripe.net/repository/DEFAULT/0KUWtQQmICpCTw6_y30r1PdE-WQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Oct 2026 16:36:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 65:71:64:a7:62:d4:8a:58:76:ef:a2:51:c2:f0:19:f7:d0:6e:f3:cc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5 Validity Not Before: Oct 11 23:57:08 2026 GMT Not After : Oct 11 00:02:08 2027 GMT Subject: CN=6D3476A9B0DBB85A01B647BB91F803FE80342AD9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:7e:5c:4e:48:48:26:9b:9b:3a:7f:3a:0d:dd: a5:cc:54:4f:63:ff:88:d6:28:7f:11:54:90:ba:10: 0b:ce:d9:c1:80:0a:fd:b5:95:61:bd:c6:b8:0c:58: 49:ec:ca:13:8d:48:d8:81:2f:e7:92:51:24:89:5a: e8:04:1c:a3:6f:74:2b:60:32:e7:70:47:1c:03:35: 4c:9d:22:1d:23:66:d6:eb:29:8f:4a:6d:cc:73:29: 49:4a:90:8e:e2:1c:49:e3:9e:76:33:1e:3e:5f:e5: fc:70:a0:5b:51:62:7d:5e:32:51:fc:1d:17:6c:fc: 3e:8b:b5:43:bb:5d:66:3c:7b:81:97:80:48:9f:b7: e9:9f:de:2b:42:43:7f:cb:64:e7:36:8d:46:49:50: bd:b2:6d:51:1f:e2:9e:10:b0:95:11:78:95:5d:f0: 87:f1:b7:c2:ea:5f:84:b7:01:e5:f1:72:6c:10:ee: 1b:7b:27:40:80:ad:6a:bb:cd:3f:a8:9d:f8:23:7c: 4a:22:e4:d3:b9:78:d0:53:ea:7d:7c:80:8d:8e:cd: 2e:e9:f9:13:1c:01:f5:78:50:77:61:5e:9a:31:3b: bd:d4:78:07:13:af:a6:90:35:f0:49:78:2d:fc:fb: 5d:da:3b:3d:db:ee:2a:6d:c0:68:7f:1f:ec:db:a4: 6b:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:34:76:A9:B0:DB:B8:5A:01:B6:47:BB:91:F8:03:FE:80:34:2A:D9 X509v3 Authority Key Identifier: keyid:B3:54:D3:28:CB:BF:D1:EF:3C:D2:92:68:A2:3B:0F:CC:60:E3:A2:C5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.cer Subject Information Access: Signed Object - URI:rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/3136342e33372e3230362e302f32342d3234203d3e203136323736.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 164.37.206.0/24 Signature Algorithm: sha256WithRSAEncryption 4f:90:72:17:54:17:70:86:ca:d0:53:26:6c:aa:e8:02:0d:37: c5:fd:42:ec:de:58:74:db:13:ee:1a:cf:41:35:e1:77:c7:07: cb:d6:6d:8f:df:b8:59:8a:78:44:72:ba:70:c4:1c:13:e7:df: 5b:a6:45:07:ea:8b:9f:95:d0:a5:aa:45:d1:3c:e2:9c:38:29: 4b:4a:0e:ba:a7:f0:60:55:f1:47:fc:7c:31:81:9a:4f:ce:e3: b1:8d:23:8d:13:24:30:27:4d:3c:2c:40:87:0b:e8:79:43:e0: 62:04:22:1a:f3:4c:39:13:11:64:94:d0:d5:31:17:28:c6:22: a3:35:33:aa:c5:4f:df:d0:46:78:7c:a8:e3:99:ce:81:f4:46: c8:92:f5:eb:2e:eb:3a:6b:9d:51:06:c8:ea:6a:32:0c:06:4a: 9c:d7:23:12:d0:eb:27:13:03:67:37:9f:8f:c6:c3:66:22:d1: 8c:1b:88:b2:83:18:4d:61:29:ff:26:c2:e8:48:dd:47:e6:2f: 18:b0:53:36:ee:62:4d:e2:51:73:23:42:a3:72:86:13:35:5c: 5e:6c:51:2d:66:92:e3:8f:71:17:c3:56:91:1a:5a:ab:d1:11: fa:72:5d:9a:ef:80:6a:94:9a:24:fe:58:e4:62:e2:e3:3f:a5: f0:14:0f:ca -----BEGIN CERTIFICATE----- MIIFWDCCBECgAwIBAgIUZXFkp2LUilh276JRwvAZ99Bu88wwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjM1NEQzMjhDQkJGRDFFRjNDRDI5MjY4QTIzQjBGQ0M2 MEUzQTJDNTAeFw0yNjEwMTEyMzU3MDhaFw0yNzEwMTEwMDAyMDhaMDMxMTAvBgNV BAMTKDZEMzQ3NkE5QjBEQkI4NUEwMUI2NDdCQjkxRjgwM0ZFODAzNDJBRDkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDTflxOSEgmm5s6fzoN3aXMVE9j /4jWKH8RVJC6EAvO2cGACv21lWG9xrgMWEnsyhONSNiBL+eSUSSJWugEHKNvdCtg MudwRxwDNUydIh0jZtbrKY9KbcxzKUlKkI7iHEnjnnYzHj5f5fxwoFtRYn1eMlH8 HRds/D6LtUO7XWY8e4GXgEift+mf3itCQ3/LZOc2jUZJUL2ybVEf4p4QsJUReJVd 8Ifxt8LqX4S3AeXxcmwQ7ht7J0CArWq7zT+onfgjfEoi5NO5eNBT6n18gI2OzS7p +RMcAfV4UHdhXpoxO73UeAcTr6aQNfBJeC38+13aOz3b7iptwGh/H+zbpGtZAgMB AAGjggJiMIICXjAdBgNVHQ4EFgQUbTR2qbDbuFoBtke7kfgD/oA0KtkwHwYDVR0j BBgwFoAUs1TTKMu/0e880pJoojsPzGDjosUwDgYDVR0PAQH/BAQDAgeAMIGIBgNV HR8EgYAwfjB8oHqgeIZ2cnN5bmM6Ly9yLm1hZ2VsbGFuLmlweG8uY29tL3JlcG8v YTAzNzViMzktZjk0OS00Y2I1LWI1MTktZjk0MDA4YjE2NTRjLTAvMC9CMzU0RDMy OENCQkZEMUVGM0NEMjkyNjhBMjNCMEZDQzYwRTNBMkM1LmNybDCBngYIKwYBBQUH AQEEgZEwgY4wgYsGCCsGAQUFBzAChn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5y aXBlLm5ldC9yZXBvc2l0b3J5LzYxNzA4YTZiLTZjM2EtNDBhMC1hMzAyLTU5NWVj YzE3ODQ4Yy8wL0IzNTREMzI4Q0JCRkQxRUYzQ0QyOTI2OEEyM0IwRkNDNjBFM0Ey QzUuY2VyMIGkBggrBgEFBQcBCwSBlzCBlDCBkQYIKwYBBQUHMAuGgYRyc3luYzov L3IubWFnZWxsYW4uaXB4by5jb20vcmVwby9hMDM3NWIzOS1mOTQ5LTRjYjUtYjUx OS1mOTQwMDhiMTY1NGMtMC8wLzMxMzYzNDJlMzMzNzJlMzIzMDM2MmUzMDJmMzIz NDJkMzIzNDIwM2QzZTIwMzEzNjMyMzczNi5yb2EwGAYDVR0gAQH/BA4wDDAKBggr BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAKQlzjANBgkqhkiG 9w0BAQsFAAOCAQEAT5ByF1QXcIbK0FMmbKroAg03xf1C7N5YdNsT7hrPQTXhd8cH y9Ztj9+4WYp4RHK6cMQcE+ffW6ZFB+qLn5XQpapF0TzinDgpS0oOuqfwYFXxR/x8 MYGaT87jsY0jjRMkMCdNPCxAhwvoeUPgYgQiGvNMORMRZJTQ1TEXKMYiozUzqsVP 39BGeHyo45nOgfRGyJL16y7rOmudUQbI6moyDAZKnNcjEtDrJxMDZzefj8bDZiLR jBuIsoMYTWEp/ybC6EjdR+YvGLBTNu5iTeJRcyNCo3KGEzVcXmxRLWaS449xF8NW kRpaq9ER+nJdmu+AapSaJP5Y5GLi4z+l8BQPyg== -----END CERTIFICATE-----Generated at Tue Oct 20 08:59:37 2026 by rpki-client