$ rpki-client -vvvf r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/3136342e33372e3230372e302f32342d3234203d3e203634303936.roa File: 3136342e33372e3230372e302f32342d3234203d3e203634303936.roa (raw, json) Hash identifier: +9q/kzRTqvH+Mb69EsWeIn7uf1TrgGhgypBIKZSB2G8= Subject key identifier: F4:70:C3:B0:0C:5B:FD:EA:04:33:71:98:33:79:E2:6C:2A:6B:FE:0D Certificate issuer: /CN=B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5 Certificate serial: 451B5ADAD88EABD43203DB3B6AA62BF26C0FC074 Authority key identifier: B3:54:D3:28:CB:BF:D1:EF:3C:D2:92:68:A2:3B:0F:CC:60:E3:A2:C5 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.cer Subject info access: rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/3136342e33372e3230372e302f32342d3234203d3e203634303936.roa Signing time: Mon 12 Oct 2026 00:02:09 +0000 ROA not before: Sun 11 Oct 2026 23:57:09 +0000 ROA not after: Mon 11 Oct 2027 00:02:09 +0000 asID: 64096 IP address blocks: 164.37.207.0/24 maxlen: 24 Validation: OK Signature path: rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.crl rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.mft rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.cer rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/D0A516B50426202A424F0EBFCB7D2BD4F744F964.crl rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/D0A516B50426202A424F0EBFCB7D2BD4F744F964.mft rsync://rpki.ripe.net/repository/DEFAULT/0KUWtQQmICpCTw6_y30r1PdE-WQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 28 Oct 2026 13:57:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 45:1b:5a:da:d8:8e:ab:d4:32:03:db:3b:6a:a6:2b:f2:6c:0f:c0:74 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5 Validity Not Before: Oct 11 23:57:09 2026 GMT Not After : Oct 11 00:02:09 2027 GMT Subject: CN=F470C3B00C5BFDEA043371983379E26C2A6BFE0D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:e6:db:a1:9a:6a:2d:a2:04:08:59:40:93:4f: 5e:fe:03:8b:d5:a9:11:9c:35:38:b2:d3:f6:14:1f: 85:3a:93:1e:ef:95:37:b8:7d:19:18:55:e4:f2:6b: a6:2f:49:4d:e3:3d:ef:27:75:f6:26:16:c2:1d:a9: ff:92:6c:e3:40:40:66:22:6e:41:3f:c9:50:c4:0b: 0d:be:15:0f:1b:11:67:2e:df:32:3b:7c:0c:63:81: 6d:b7:ef:aa:33:46:c6:e8:f1:48:b7:13:f1:be:9f: ec:d3:f1:e1:01:ce:b7:ec:3a:71:43:d3:1c:3e:25: de:f9:c0:46:5c:68:c4:34:bd:71:27:1c:b7:ec:97: a7:75:9b:7c:88:53:fe:ff:24:d5:35:57:72:21:4f: 0d:db:61:08:91:39:5e:ff:82:7e:6f:aa:7e:03:5e: f7:0d:3f:a6:82:ee:db:ea:12:03:75:54:9f:11:c4: f0:d0:af:29:b1:40:fd:c9:54:6f:b9:55:af:61:0c: 42:05:62:7f:fd:8c:9f:4d:d9:38:27:42:3c:66:d6: 1e:0b:11:86:04:f3:9e:18:9a:46:d1:1d:a0:11:d6: 1c:c2:40:cf:0a:99:d1:64:ca:2b:b4:8b:2a:24:60: e7:ae:9c:d2:1d:8f:7d:dc:65:a1:14:9e:e1:7f:eb: 7e:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:70:C3:B0:0C:5B:FD:EA:04:33:71:98:33:79:E2:6C:2A:6B:FE:0D X509v3 Authority Key Identifier: keyid:B3:54:D3:28:CB:BF:D1:EF:3C:D2:92:68:A2:3B:0F:CC:60:E3:A2:C5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.cer Subject Information Access: Signed Object - URI:rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/3136342e33372e3230372e302f32342d3234203d3e203634303936.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 164.37.207.0/24 Signature Algorithm: sha256WithRSAEncryption bc:45:ac:aa:48:3f:23:c3:1f:e8:45:dc:71:88:8d:14:45:6c: 67:01:04:53:6b:8c:7e:d4:41:08:68:89:87:4a:d3:6d:fd:3b: b4:bd:18:1e:14:8b:9c:8e:5d:5b:9d:1c:51:17:0b:6a:27:e4: e2:45:4b:fe:8e:49:3d:82:4f:77:d1:9d:9f:a1:57:43:5d:98: 47:1f:55:33:db:95:26:73:c0:e4:9b:8a:d7:6c:ff:62:b4:9e: fe:40:e9:86:73:03:f1:92:37:36:da:8c:cc:02:13:02:e1:27: 94:fb:5d:c5:1f:6a:10:03:2d:c2:4b:ce:f3:1b:d2:71:91:3d: 4c:70:5a:20:ee:e2:9e:7e:e3:f4:50:b5:46:c9:78:32:81:e8: fc:ac:a2:d4:54:58:21:7d:05:82:89:52:4c:05:21:6e:bc:c7: ed:11:39:08:24:94:82:b6:96:4a:19:f6:20:b9:a6:c8:a0:80: a1:a8:ac:45:5a:39:b3:24:8d:8a:b0:a9:1d:91:28:65:e6:ce: 4f:30:c1:6e:62:4e:7a:ff:a4:2b:b5:93:b5:d0:85:cc:52:01: 44:8c:25:11:b9:11:1a:76:f7:f9:32:a6:c9:9a:70:ae:3e:57: fa:59:f1:ea:3d:ef:f1:44:b1:40:49:7a:d5:b0:21:86:85:1a: 40:cb:ef:58 -----BEGIN CERTIFICATE----- MIIFWDCCBECgAwIBAgIURRta2tiOq9QyA9s7aqYr8mwPwHQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjM1NEQzMjhDQkJGRDFFRjNDRDI5MjY4QTIzQjBGQ0M2 MEUzQTJDNTAeFw0yNjEwMTEyMzU3MDlaFw0yNzEwMTEwMDAyMDlaMDMxMTAvBgNV BAMTKEY0NzBDM0IwMEM1QkZERUEwNDMzNzE5ODMzNzlFMjZDMkE2QkZFMEQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCZ5tuhmmotogQIWUCTT17+A4vV qRGcNTiy0/YUH4U6kx7vlTe4fRkYVeTya6YvSU3jPe8ndfYmFsIdqf+SbONAQGYi bkE/yVDECw2+FQ8bEWcu3zI7fAxjgW2376ozRsbo8Ui3E/G+n+zT8eEBzrfsOnFD 0xw+Jd75wEZcaMQ0vXEnHLfsl6d1m3yIU/7/JNU1V3IhTw3bYQiROV7/gn5vqn4D XvcNP6aC7tvqEgN1VJ8RxPDQrymxQP3JVG+5Va9hDEIFYn/9jJ9N2TgnQjxm1h4L EYYE854YmkbRHaAR1hzCQM8KmdFkyiu0iyokYOeunNIdj33cZaEUnuF/635JAgMB AAGjggJiMIICXjAdBgNVHQ4EFgQU9HDDsAxb/eoEM3GYM3nibCpr/g0wHwYDVR0j BBgwFoAUs1TTKMu/0e880pJoojsPzGDjosUwDgYDVR0PAQH/BAQDAgeAMIGIBgNV HR8EgYAwfjB8oHqgeIZ2cnN5bmM6Ly9yLm1hZ2VsbGFuLmlweG8uY29tL3JlcG8v YTAzNzViMzktZjk0OS00Y2I1LWI1MTktZjk0MDA4YjE2NTRjLTAvMC9CMzU0RDMy OENCQkZEMUVGM0NEMjkyNjhBMjNCMEZDQzYwRTNBMkM1LmNybDCBngYIKwYBBQUH AQEEgZEwgY4wgYsGCCsGAQUFBzAChn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5y aXBlLm5ldC9yZXBvc2l0b3J5LzYxNzA4YTZiLTZjM2EtNDBhMC1hMzAyLTU5NWVj YzE3ODQ4Yy8wL0IzNTREMzI4Q0JCRkQxRUYzQ0QyOTI2OEEyM0IwRkNDNjBFM0Ey QzUuY2VyMIGkBggrBgEFBQcBCwSBlzCBlDCBkQYIKwYBBQUHMAuGgYRyc3luYzov L3IubWFnZWxsYW4uaXB4by5jb20vcmVwby9hMDM3NWIzOS1mOTQ5LTRjYjUtYjUx OS1mOTQwMDhiMTY1NGMtMC8wLzMxMzYzNDJlMzMzNzJlMzIzMDM3MmUzMDJmMzIz NDJkMzIzNDIwM2QzZTIwMzYzNDMwMzkzNi5yb2EwGAYDVR0gAQH/BA4wDDAKBggr BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAKQlzzANBgkqhkiG 9w0BAQsFAAOCAQEAvEWsqkg/I8Mf6EXccYiNFEVsZwEEU2uMftRBCGiJh0rTbf07 tL0YHhSLnI5dW50cURcLaifk4kVL/o5JPYJPd9Gdn6FXQ12YRx9VM9uVJnPA5JuK 12z/YrSe/kDphnMD8ZI3NtqMzAITAuEnlPtdxR9qEAMtwkvO8xvScZE9THBaIO7i nn7j9FC1Rsl4MoHo/Kyi1FRYIX0FgolSTAUhbrzH7RE5CCSUgraWShn2ILmmyKCA oaisRVo5sySNirCpHZEoZebOTzDBbmJOev+kK7WTtdCFzFIBRIwlEbkRGnb3+TKm yZpwrj5X+lnx6j3v8USxQEl61bAhhoUaQMvvWA== -----END CERTIFICATE-----Generated at Tue Oct 27 23:03:40 2026 by rpki-client