$ rpki-client -vvvf r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/3136342e33372e3231322e302f32342d3234203d3e203634343537.roa File: 3136342e33372e3231322e302f32342d3234203d3e203634343537.roa (raw, json) Hash identifier: Mu5HDmCnnSZ5LeIT89xS5+j2zZFp2q6LWbnN+Q18Goc= Subject key identifier: 02:63:8F:7F:F2:E4:12:86:25:A1:F1:0F:61:F8:43:3F:8A:98:DF:D6 Certificate issuer: /CN=B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5 Certificate serial: 53D2A39DC9F667874B2ADEEB38D412447E0A6754 Authority key identifier: B3:54:D3:28:CB:BF:D1:EF:3C:D2:92:68:A2:3B:0F:CC:60:E3:A2:C5 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.cer Subject info access: rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/3136342e33372e3231322e302f32342d3234203d3e203634343537.roa Signing time: Mon 12 Oct 2026 17:44:14 +0000 ROA not before: Mon 12 Oct 2026 17:39:14 +0000 ROA not after: Mon 11 Oct 2027 17:44:14 +0000 asID: 64457 IP address blocks: 164.37.212.0/24 maxlen: 24 Validation: OK Signature path: rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.crl rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.mft rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.cer rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/D0A516B50426202A424F0EBFCB7D2BD4F744F964.crl rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/D0A516B50426202A424F0EBFCB7D2BD4F744F964.mft rsync://rpki.ripe.net/repository/DEFAULT/0KUWtQQmICpCTw6_y30r1PdE-WQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Oct 2026 16:36:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 53:d2:a3:9d:c9:f6:67:87:4b:2a:de:eb:38:d4:12:44:7e:0a:67:54 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5 Validity Not Before: Oct 12 17:39:14 2026 GMT Not After : Oct 11 17:44:14 2027 GMT Subject: CN=02638F7FF2E4128625A1F10F61F8433F8A98DFD6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:71:e9:8a:73:9c:44:41:0f:73:4b:43:a4:b2: 63:44:f9:50:91:af:65:0b:b3:2c:1e:ee:b0:46:23: 53:72:b4:2c:2d:86:af:46:5e:13:ef:73:f7:1b:b5: 10:21:55:0e:6e:e1:a6:90:0e:60:25:95:23:e4:ca: dc:c2:ab:f1:9b:91:86:76:c9:3e:13:d3:d1:c9:0c: 7a:26:1f:bd:f1:c8:45:52:25:fd:ba:39:08:e6:7c: 3c:0c:e8:36:56:66:b8:ae:53:b9:77:8a:b8:17:c3: 46:43:76:83:57:b6:e6:9c:fe:8e:32:ad:63:71:6a: 3e:c5:24:f0:85:17:9a:58:6e:2f:1c:b7:d2:29:56: 97:28:2e:b1:fa:e6:2f:5e:33:0b:2c:27:22:fc:85: 80:ce:7c:d0:27:bf:0c:8e:71:63:82:0c:42:33:b6: bb:0c:45:4a:22:ac:af:23:16:03:30:42:47:53:b3: 65:11:26:ce:3b:86:53:69:83:1d:4b:62:62:b8:b9: a9:1d:92:ea:ee:c3:7d:0f:34:34:3e:f2:70:69:3a: e3:6e:c2:2f:b9:0b:6e:e1:21:a7:0a:f1:74:84:9a: 25:37:9a:dc:c2:cc:9a:a4:e9:38:54:47:9c:82:f8: a9:f7:af:1e:71:56:da:85:e7:e6:ec:2a:1c:8a:a8: d6:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:63:8F:7F:F2:E4:12:86:25:A1:F1:0F:61:F8:43:3F:8A:98:DF:D6 X509v3 Authority Key Identifier: keyid:B3:54:D3:28:CB:BF:D1:EF:3C:D2:92:68:A2:3B:0F:CC:60:E3:A2:C5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.cer Subject Information Access: Signed Object - URI:rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/3136342e33372e3231322e302f32342d3234203d3e203634343537.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 164.37.212.0/24 Signature Algorithm: sha256WithRSAEncryption 4c:5e:94:db:0f:bc:ab:4b:ba:5b:10:ef:fb:2d:9b:a8:30:f9: 87:80:b5:a0:e6:50:e8:0d:c4:ec:fe:11:8f:d4:3f:ce:38:1d: 7b:4a:fb:b8:52:ef:bb:1e:d8:12:06:2d:6a:41:e2:37:31:ac: 6d:74:54:77:8e:26:4f:cc:ab:d4:dc:7f:f0:75:35:e3:f6:ff: cd:da:b0:18:e8:6b:fb:60:8c:32:36:7c:81:1e:af:b5:23:31: 53:26:ed:c9:7a:cf:4e:8e:82:0b:ab:89:36:c9:78:82:9b:8b: 36:c8:1d:86:ae:17:2c:78:76:63:ff:bb:fb:09:92:1a:68:0a: 4a:04:9a:7d:89:e3:4a:cc:ad:3b:fa:2f:6b:50:b9:a7:89:a7: c4:39:a8:72:b9:e1:87:c0:48:99:bd:72:97:fb:32:54:fb:15: fa:5e:d3:f2:ce:36:75:2e:92:1a:06:95:0a:18:d8:72:95:70: f6:6e:fe:e1:0d:7a:88:33:3b:f2:3a:2a:ce:08:a1:41:24:94: e2:b3:94:27:10:6f:71:7e:d1:fb:d0:56:9b:cf:08:b8:18:36: 46:8b:60:b2:34:21:bc:ff:6d:8f:83:39:70:d0:fa:c5:28:54: ae:fa:41:fe:77:9d:99:a7:dc:da:d3:52:81:57:1d:81:bd:7c: 9f:ab:b5:2d -----BEGIN CERTIFICATE----- MIIFWDCCBECgAwIBAgIUU9Kjncn2Z4dLKt7rONQSRH4KZ1QwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjM1NEQzMjhDQkJGRDFFRjNDRDI5MjY4QTIzQjBGQ0M2 MEUzQTJDNTAeFw0yNjEwMTIxNzM5MTRaFw0yNzEwMTExNzQ0MTRaMDMxMTAvBgNV BAMTKDAyNjM4RjdGRjJFNDEyODYyNUExRjEwRjYxRjg0MzNGOEE5OERGRDYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCjcemKc5xEQQ9zS0OksmNE+VCR r2ULsywe7rBGI1NytCwthq9GXhPvc/cbtRAhVQ5u4aaQDmAllSPkytzCq/GbkYZ2 yT4T09HJDHomH73xyEVSJf26OQjmfDwM6DZWZriuU7l3irgXw0ZDdoNXtuac/o4y rWNxaj7FJPCFF5pYbi8ct9IpVpcoLrH65i9eMwssJyL8hYDOfNAnvwyOcWOCDEIz trsMRUoirK8jFgMwQkdTs2URJs47hlNpgx1LYmK4uakdkuruw30PNDQ+8nBpOuNu wi+5C27hIacK8XSEmiU3mtzCzJqk6ThUR5yC+Kn3rx5xVtqF5+bsKhyKqNYpAgMB AAGjggJiMIICXjAdBgNVHQ4EFgQUAmOPf/LkEoYlofEPYfhDP4qY39YwHwYDVR0j BBgwFoAUs1TTKMu/0e880pJoojsPzGDjosUwDgYDVR0PAQH/BAQDAgeAMIGIBgNV HR8EgYAwfjB8oHqgeIZ2cnN5bmM6Ly9yLm1hZ2VsbGFuLmlweG8uY29tL3JlcG8v YTAzNzViMzktZjk0OS00Y2I1LWI1MTktZjk0MDA4YjE2NTRjLTAvMC9CMzU0RDMy OENCQkZEMUVGM0NEMjkyNjhBMjNCMEZDQzYwRTNBMkM1LmNybDCBngYIKwYBBQUH AQEEgZEwgY4wgYsGCCsGAQUFBzAChn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5y aXBlLm5ldC9yZXBvc2l0b3J5LzYxNzA4YTZiLTZjM2EtNDBhMC1hMzAyLTU5NWVj YzE3ODQ4Yy8wL0IzNTREMzI4Q0JCRkQxRUYzQ0QyOTI2OEEyM0IwRkNDNjBFM0Ey QzUuY2VyMIGkBggrBgEFBQcBCwSBlzCBlDCBkQYIKwYBBQUHMAuGgYRyc3luYzov L3IubWFnZWxsYW4uaXB4by5jb20vcmVwby9hMDM3NWIzOS1mOTQ5LTRjYjUtYjUx OS1mOTQwMDhiMTY1NGMtMC8wLzMxMzYzNDJlMzMzNzJlMzIzMTMyMmUzMDJmMzIz NDJkMzIzNDIwM2QzZTIwMzYzNDM0MzUzNy5yb2EwGAYDVR0gAQH/BA4wDDAKBggr BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAKQl1DANBgkqhkiG 9w0BAQsFAAOCAQEATF6U2w+8q0u6WxDv+y2bqDD5h4C1oOZQ6A3E7P4Rj9Q/zjgd e0r7uFLvux7YEgYtakHiNzGsbXRUd44mT8yr1Nx/8HU14/b/zdqwGOhr+2CMMjZ8 gR6vtSMxUybtyXrPTo6CC6uJNsl4gpuLNsgdhq4XLHh2Y/+7+wmSGmgKSgSafYnj SsytO/ova1C5p4mnxDmocrnhh8BImb1yl/syVPsV+l7T8s42dS6SGgaVChjYcpVw 9m7+4Q16iDM78joqzgihQSSU4rOUJxBvcX7R+9BWm88IuBg2RotgsjQhvP9tj4M5 cND6xShUrvpB/nedmafc2tNSgVcdgb18n6u1LQ== -----END CERTIFICATE-----Generated at Tue Oct 20 06:37:57 2026 by rpki-client