$ rpki-client -vvvf r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/3136342e33372e3231302e302f32332d3234203d3e20393739.roa File: 3136342e33372e3231302e302f32332d3234203d3e20393739.roa (raw, json) Hash identifier: nyx35EGR18D2updE29+L2OTxdcasxc/n0OxRYVBKmlc= Subject key identifier: 4D:B9:35:3C:AE:72:FD:1E:13:62:04:CA:72:DC:2A:FA:6B:70:5A:D6 Certificate issuer: /CN=B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5 Certificate serial: 2EB717B08C8E12369B9C22DB5A0526D16C2B9A34 Authority key identifier: B3:54:D3:28:CB:BF:D1:EF:3C:D2:92:68:A2:3B:0F:CC:60:E3:A2:C5 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.cer Subject info access: rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/3136342e33372e3231302e302f32332d3234203d3e20393739.roa Signing time: Mon 12 Oct 2026 00:02:10 +0000 ROA not before: Sun 11 Oct 2026 23:57:10 +0000 ROA not after: Mon 11 Oct 2027 00:02:10 +0000 asID: 979 IP address blocks: 164.37.210.0/23 maxlen: 24 Validation: OK Signature path: rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.crl rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.mft rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.cer rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/D0A516B50426202A424F0EBFCB7D2BD4F744F964.crl rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/D0A516B50426202A424F0EBFCB7D2BD4F744F964.mft rsync://rpki.ripe.net/repository/DEFAULT/0KUWtQQmICpCTw6_y30r1PdE-WQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Oct 2026 08:42:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2e:b7:17:b0:8c:8e:12:36:9b:9c:22:db:5a:05:26:d1:6c:2b:9a:34 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5 Validity Not Before: Oct 11 23:57:10 2026 GMT Not After : Oct 11 00:02:10 2027 GMT Subject: CN=4DB9353CAE72FD1E136204CA72DC2AFA6B705AD6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f0:c8:92:a2:4e:d5:56:57:ac:f2:51:40:14:aa: 23:ac:e3:e8:6b:c7:36:f2:97:19:ce:34:8b:2d:cf: 70:04:65:3c:e8:af:44:f2:37:48:a4:b5:15:57:88: d4:db:0c:a6:de:ba:a7:c9:bb:9a:d9:f0:c4:61:d1: f7:b2:49:3d:8f:e4:de:00:02:a8:ef:03:7a:b0:fc: 4c:15:71:55:a4:2e:f4:96:2e:66:4f:45:eb:c9:1d: f3:af:4d:3d:3b:aa:83:3b:c0:49:c3:f1:7a:dd:a6: 8e:5b:ca:1d:0e:44:65:73:59:12:8b:81:c5:ac:ac: c5:8b:b7:43:ee:00:c2:1c:58:14:92:41:0f:2e:fd: ee:db:7a:36:6c:b9:c3:b0:98:df:e1:90:54:7c:78: 65:00:81:d7:23:26:54:d3:fb:52:1c:3b:8a:ca:a0: 44:dc:44:6e:c4:a2:30:88:93:57:f8:8d:37:c4:a1: 7f:6e:18:61:23:02:80:fd:fc:0b:3d:b9:3e:14:7c: 94:63:5e:d2:e4:82:3e:e1:e1:8d:1d:fa:f7:ab:9b: 0c:0a:1f:5e:0f:00:d1:01:c6:14:15:4d:da:64:c6: 77:e8:c1:9e:f9:27:f4:03:0b:6e:08:46:ca:83:64: 2f:6b:0a:27:46:d8:58:01:1a:62:c1:15:3a:90:57: ae:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:B9:35:3C:AE:72:FD:1E:13:62:04:CA:72:DC:2A:FA:6B:70:5A:D6 X509v3 Authority Key Identifier: keyid:B3:54:D3:28:CB:BF:D1:EF:3C:D2:92:68:A2:3B:0F:CC:60:E3:A2:C5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.cer Subject Information Access: Signed Object - URI:rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/3136342e33372e3231302e302f32332d3234203d3e20393739.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 164.37.210.0/23 Signature Algorithm: sha256WithRSAEncryption 14:7e:bc:fc:e4:ea:a9:63:aa:78:f4:1a:a4:18:d4:dd:35:a6: 19:2c:03:2d:06:c2:27:b8:17:c1:9d:12:c1:b1:56:82:74:5a: 8e:d5:b5:c6:5d:62:b5:76:47:7d:f1:27:97:d2:4a:25:7f:70: 18:6f:b1:d0:53:2b:e7:45:1f:2d:b9:75:a2:f1:63:44:dc:e4: c3:ac:7e:1b:8d:f5:9e:cf:8c:b6:4f:92:da:1f:18:84:82:fa: 9c:cc:6a:17:d0:f0:9f:95:d0:b9:0a:39:39:b6:1c:96:cc:a2: 04:ac:7d:d6:93:71:f5:79:12:75:04:63:28:ee:b9:47:c0:2a: 98:69:78:89:97:c4:22:66:d4:d6:58:c6:2c:49:cf:08:52:5f: 46:4b:2d:a5:48:73:b9:47:58:17:20:de:b0:37:5f:2f:3a:11: 7f:b6:1e:7a:4e:99:6e:54:1e:f6:b1:35:6f:31:5c:74:25:ed: ad:8f:1a:8b:cc:62:42:ff:11:7f:52:b2:39:81:4a:d9:62:d4: ab:b7:15:5b:2c:2a:f4:9f:06:56:32:c7:59:6b:2d:b9:19:86: 4c:68:3d:3a:1f:78:d6:b2:eb:bf:cc:67:dc:f7:5c:ea:26:d0: ae:4d:41:1b:c9:b0:5c:a7:a8:4f:6c:d5:93:29:03:68:f0:21: fc:14:4b:55 -----BEGIN CERTIFICATE----- MIIFVDCCBDygAwIBAgIULrcXsIyOEjabnCLbWgUm0WwrmjQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjM1NEQzMjhDQkJGRDFFRjNDRDI5MjY4QTIzQjBGQ0M2 MEUzQTJDNTAeFw0yNjEwMTEyMzU3MTBaFw0yNzEwMTEwMDAyMTBaMDMxMTAvBgNV BAMTKDREQjkzNTNDQUU3MkZEMUUxMzYyMDRDQTcyREMyQUZBNkI3MDVBRDYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDwyJKiTtVWV6zyUUAUqiOs4+hr xzbylxnONIstz3AEZTzor0TyN0iktRVXiNTbDKbeuqfJu5rZ8MRh0feyST2P5N4A AqjvA3qw/EwVcVWkLvSWLmZPRevJHfOvTT07qoM7wEnD8Xrdpo5byh0ORGVzWRKL gcWsrMWLt0PuAMIcWBSSQQ8u/e7bejZsucOwmN/hkFR8eGUAgdcjJlTT+1IcO4rK oETcRG7EojCIk1f4jTfEoX9uGGEjAoD9/As9uT4UfJRjXtLkgj7h4Y0d+vermwwK H14PANEBxhQVTdpkxnfowZ75J/QDC24IRsqDZC9rCidG2FgBGmLBFTqQV669AgMB AAGjggJeMIICWjAdBgNVHQ4EFgQUTbk1PK5y/R4TYgTKctwq+mtwWtYwHwYDVR0j BBgwFoAUs1TTKMu/0e880pJoojsPzGDjosUwDgYDVR0PAQH/BAQDAgeAMIGIBgNV HR8EgYAwfjB8oHqgeIZ2cnN5bmM6Ly9yLm1hZ2VsbGFuLmlweG8uY29tL3JlcG8v YTAzNzViMzktZjk0OS00Y2I1LWI1MTktZjk0MDA4YjE2NTRjLTAvMC9CMzU0RDMy OENCQkZEMUVGM0NEMjkyNjhBMjNCMEZDQzYwRTNBMkM1LmNybDCBngYIKwYBBQUH AQEEgZEwgY4wgYsGCCsGAQUFBzAChn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5y aXBlLm5ldC9yZXBvc2l0b3J5LzYxNzA4YTZiLTZjM2EtNDBhMC1hMzAyLTU5NWVj YzE3ODQ4Yy8wL0IzNTREMzI4Q0JCRkQxRUYzQ0QyOTI2OEEyM0IwRkNDNjBFM0Ey QzUuY2VyMIGgBggrBgEFBQcBCwSBkzCBkDCBjQYIKwYBBQUHMAuGgYByc3luYzov L3IubWFnZWxsYW4uaXB4by5jb20vcmVwby9hMDM3NWIzOS1mOTQ5LTRjYjUtYjUx OS1mOTQwMDhiMTY1NGMtMC8wLzMxMzYzNDJlMzMzNzJlMzIzMTMwMmUzMDJmMzIz MzJkMzIzNDIwM2QzZTIwMzkzNzM5LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBpCXSMA0GCSqGSIb3DQEB CwUAA4IBAQAUfrz85OqpY6p49BqkGNTdNaYZLAMtBsInuBfBnRLBsVaCdFqO1bXG XWK1dkd98SeX0kolf3AYb7HQUyvnRR8tuXWi8WNE3OTDrH4bjfWez4y2T5LaHxiE gvqczGoX0PCfldC5Cjk5thyWzKIErH3Wk3H1eRJ1BGMo7rlHwCqYaXiJl8QiZtTW WMYsSc8IUl9GSy2lSHO5R1gXIN6wN18vOhF/th56TpluVB72sTVvMVx0Je2tjxqL zGJC/xF/UrI5gUrZYtSrtxVbLCr0nwZWMsdZay25GYZMaD06H3jWsuu/zGfc91zq JtCuTUEbybBcp6hPbNWTKQNo8CH8FEtV -----END CERTIFICATE-----Generated at Tue Oct 27 00:17:17 2026 by rpki-client