$ rpki-client -vvvf r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/3136342e33372e3230382e302f32342d3234203d3e20323139313835.roa File: 3136342e33372e3230382e302f32342d3234203d3e20323139313835.roa (raw, json) Hash identifier: YPpqy7Ru3GR1f1Gy3GZba/2mHBW61pbiA0Hmy3LJgqY= Subject key identifier: C5:35:12:3B:43:B2:A9:1F:90:DE:74:3F:42:23:66:E3:F6:FA:3E:09 Certificate issuer: /CN=B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5 Certificate serial: 5700BB53B559A7168E372D68DF0B9D0E29CB1EB0 Authority key identifier: B3:54:D3:28:CB:BF:D1:EF:3C:D2:92:68:A2:3B:0F:CC:60:E3:A2:C5 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.cer Subject info access: rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/3136342e33372e3230382e302f32342d3234203d3e20323139313835.roa Signing time: Mon 12 Oct 2026 04:33:58 +0000 ROA not before: Mon 12 Oct 2026 04:28:58 +0000 ROA not after: Mon 11 Oct 2027 04:33:58 +0000 asID: 219185 IP address blocks: 164.37.208.0/24 maxlen: 24 Validation: OK Signature path: rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.crl rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.mft rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.cer rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/D0A516B50426202A424F0EBFCB7D2BD4F744F964.crl rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/D0A516B50426202A424F0EBFCB7D2BD4F744F964.mft rsync://rpki.ripe.net/repository/DEFAULT/0KUWtQQmICpCTw6_y30r1PdE-WQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 29 Oct 2026 10:48:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 57:00:bb:53:b5:59:a7:16:8e:37:2d:68:df:0b:9d:0e:29:cb:1e:b0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5 Validity Not Before: Oct 12 04:28:58 2026 GMT Not After : Oct 11 04:33:58 2027 GMT Subject: CN=C535123B43B2A91F90DE743F422366E3F6FA3E09 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:f2:fa:3e:37:e0:37:78:c6:ab:5e:b8:1a:a6: 7c:37:f5:75:93:b3:ad:16:8c:eb:0e:df:bf:e7:9b: 6d:e0:19:d9:97:67:5b:08:13:ad:a9:a9:c2:d5:11: d4:d1:5a:21:f4:21:65:6b:75:9d:ad:0e:21:7f:94: 7a:74:3f:08:01:e2:7a:b2:49:03:4f:fd:9e:f6:fb: 8d:e0:b0:57:41:a8:f1:d8:bc:5c:ef:23:96:95:2a: ca:55:e3:82:a9:ef:93:a2:8e:25:0a:fa:f1:43:85: 0f:9d:70:db:f7:3a:ea:41:8e:18:2e:17:bb:4d:4c: d7:c3:a8:18:34:91:18:1a:39:fc:88:da:e1:a6:f7: 51:ff:d6:2c:e5:0a:ec:2a:9e:3a:27:f8:ec:ae:43: 23:6c:95:37:e0:36:53:6b:18:2d:97:c4:db:39:1f: 1e:4a:7a:a3:5f:aa:eb:55:58:13:ff:b0:de:55:d8: 07:7c:68:ee:fa:c2:7c:80:86:37:2c:2a:8d:f2:25: 7c:d1:8e:b3:fb:d4:4c:43:a9:e2:ad:ce:a0:e5:77: 60:77:56:d9:46:cc:4c:fd:81:53:30:1c:72:7e:f5: dd:a1:2c:5a:b5:ba:b9:cc:b2:b4:7b:4d:e8:01:4f: 38:0e:69:5a:38:2b:53:f8:83:63:17:1f:49:0e:b4: 44:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:35:12:3B:43:B2:A9:1F:90:DE:74:3F:42:23:66:E3:F6:FA:3E:09 X509v3 Authority Key Identifier: keyid:B3:54:D3:28:CB:BF:D1:EF:3C:D2:92:68:A2:3B:0F:CC:60:E3:A2:C5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.cer Subject Information Access: Signed Object - URI:rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/3136342e33372e3230382e302f32342d3234203d3e20323139313835.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 164.37.208.0/24 Signature Algorithm: sha256WithRSAEncryption 6f:1f:36:0c:75:81:f9:e7:00:8b:59:bd:b2:18:14:fc:4f:f5: 3c:48:d7:7b:80:bf:ae:2f:cd:f7:89:96:b4:c8:ff:c6:d1:2a: b5:8d:e2:6a:28:f8:ed:de:a1:f8:a4:a0:7c:30:18:53:14:97: 0e:d7:12:6b:8e:12:de:33:f5:8c:8c:fb:17:ba:a0:22:8c:a9: 65:92:62:11:20:cf:79:c9:77:14:d4:51:42:38:94:2c:71:45: b5:1c:3e:6a:22:f6:37:18:8f:0b:d1:f8:a7:ed:27:18:be:af: fc:32:70:2b:19:cd:6d:2f:a9:2c:6a:81:52:3a:67:78:af:6c: 41:6b:c4:04:b3:7f:ec:47:84:f3:fb:61:b5:74:3f:57:d5:fa: 76:af:91:5e:c1:ee:ab:1a:ac:24:5b:24:54:20:1a:2e:62:d2: 1c:b2:81:88:d8:a4:39:bd:e6:d2:65:9c:79:51:56:79:bb:71: 94:41:1c:f9:45:10:af:0a:aa:4a:2c:94:9f:35:a4:79:ed:71: 66:d4:d9:85:04:bb:ff:48:c5:fb:29:eb:3d:65:0e:a2:3f:bf: bc:63:04:7c:2f:41:67:ca:1e:db:34:0f:61:35:e9:65:0e:44: 25:21:25:14:cb:59:75:7f:6b:ce:17:2e:df:20:23:0c:30:13: 68:cf:86:8e -----BEGIN CERTIFICATE----- MIIFWjCCBEKgAwIBAgIUVwC7U7VZpxaONy1o3wudDinLHrAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjM1NEQzMjhDQkJGRDFFRjNDRDI5MjY4QTIzQjBGQ0M2 MEUzQTJDNTAeFw0yNjEwMTIwNDI4NThaFw0yNzEwMTEwNDMzNThaMDMxMTAvBgNV BAMTKEM1MzUxMjNCNDNCMkE5MUY5MERFNzQzRjQyMjM2NkUzRjZGQTNFMDkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDB8vo+N+A3eMarXrgapnw39XWT s60WjOsO37/nm23gGdmXZ1sIE62pqcLVEdTRWiH0IWVrdZ2tDiF/lHp0PwgB4nqy SQNP/Z72+43gsFdBqPHYvFzvI5aVKspV44Kp75OijiUK+vFDhQ+dcNv3OupBjhgu F7tNTNfDqBg0kRgaOfyI2uGm91H/1izlCuwqnjon+OyuQyNslTfgNlNrGC2XxNs5 Hx5KeqNfqutVWBP/sN5V2Ad8aO76wnyAhjcsKo3yJXzRjrP71ExDqeKtzqDld2B3 VtlGzEz9gVMwHHJ+9d2hLFq1urnMsrR7TegBTzgOaVo4K1P4g2MXH0kOtESbAgMB AAGjggJkMIICYDAdBgNVHQ4EFgQUxTUSO0OyqR+Q3nQ/QiNm4/b6PgkwHwYDVR0j BBgwFoAUs1TTKMu/0e880pJoojsPzGDjosUwDgYDVR0PAQH/BAQDAgeAMIGIBgNV HR8EgYAwfjB8oHqgeIZ2cnN5bmM6Ly9yLm1hZ2VsbGFuLmlweG8uY29tL3JlcG8v YTAzNzViMzktZjk0OS00Y2I1LWI1MTktZjk0MDA4YjE2NTRjLTAvMC9CMzU0RDMy OENCQkZEMUVGM0NEMjkyNjhBMjNCMEZDQzYwRTNBMkM1LmNybDCBngYIKwYBBQUH AQEEgZEwgY4wgYsGCCsGAQUFBzAChn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5y aXBlLm5ldC9yZXBvc2l0b3J5LzYxNzA4YTZiLTZjM2EtNDBhMC1hMzAyLTU5NWVj YzE3ODQ4Yy8wL0IzNTREMzI4Q0JCRkQxRUYzQ0QyOTI2OEEyM0IwRkNDNjBFM0Ey QzUuY2VyMIGmBggrBgEFBQcBCwSBmTCBljCBkwYIKwYBBQUHMAuGgYZyc3luYzov L3IubWFnZWxsYW4uaXB4by5jb20vcmVwby9hMDM3NWIzOS1mOTQ5LTRjYjUtYjUx OS1mOTQwMDhiMTY1NGMtMC8wLzMxMzYzNDJlMzMzNzJlMzIzMDM4MmUzMDJmMzIz NDJkMzIzNDIwM2QzZTIwMzIzMTM5MzEzODM1LnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQApCXQMA0GCSqG SIb3DQEBCwUAA4IBAQBvHzYMdYH55wCLWb2yGBT8T/U8SNd7gL+uL833iZa0yP/G 0Sq1jeJqKPjt3qH4pKB8MBhTFJcO1xJrjhLeM/WMjPsXuqAijKllkmIRIM95yXcU 1FFCOJQscUW1HD5qIvY3GI8L0fin7ScYvq/8MnArGc1tL6ksaoFSOmd4r2xBa8QE s3/sR4Tz+2G1dD9X1fp2r5Fewe6rGqwkWyRUIBouYtIcsoGI2KQ5vebSZZx5UVZ5 u3GUQRz5RRCvCqpKLJSfNaR57XFm1NmFBLv/SMX7Kes9ZQ6iP7+8YwR8L0Fnyh7b NA9hNellDkQlISUUy1l1f2vOFy7fICMMMBNoz4aO -----END CERTIFICATE-----Generated at Wed Oct 28 18:57:43 2026 by rpki-client