$ rpki-client -vvvf r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/3136342e33372e3232302e302f32342d3234203d3e20343031353630.roa File: 3136342e33372e3232302e302f32342d3234203d3e20343031353630.roa (raw, json) Hash identifier: EPawbtwdzsh/ASlSFwp7XyovD9+81croXq28ftfrWD4= Subject key identifier: D4:B2:FC:A5:81:0D:C4:5F:6F:38:56:6D:E3:E2:F2:DB:93:A8:3E:9F Certificate issuer: /CN=B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5 Certificate serial: 7DA2268A54786019C83A81464EB19DFF4967B9D2 Authority key identifier: B3:54:D3:28:CB:BF:D1:EF:3C:D2:92:68:A2:3B:0F:CC:60:E3:A2:C5 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.cer Subject info access: rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/3136342e33372e3232302e302f32342d3234203d3e20343031353630.roa Signing time: Mon 12 Oct 2026 00:02:11 +0000 ROA not before: Sun 11 Oct 2026 23:57:11 +0000 ROA not after: Mon 11 Oct 2027 00:02:11 +0000 asID: 401560 IP address blocks: 164.37.220.0/24 maxlen: 24 Validation: OK Signature path: rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.crl rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.mft rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.cer rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/D0A516B50426202A424F0EBFCB7D2BD4F744F964.crl rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/D0A516B50426202A424F0EBFCB7D2BD4F744F964.mft rsync://rpki.ripe.net/repository/DEFAULT/0KUWtQQmICpCTw6_y30r1PdE-WQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Oct 2026 16:36:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7d:a2:26:8a:54:78:60:19:c8:3a:81:46:4e:b1:9d:ff:49:67:b9:d2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5 Validity Not Before: Oct 11 23:57:11 2026 GMT Not After : Oct 11 00:02:11 2027 GMT Subject: CN=D4B2FCA5810DC45F6F38566DE3E2F2DB93A83E9F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:50:13:93:24:75:91:ff:d8:19:80:ab:05:3e: 79:8d:12:fb:fa:5f:13:3e:c5:46:74:29:af:a8:8c: b0:1b:1e:92:33:38:c4:80:2c:e6:c2:f0:92:3c:a1: 2b:96:7b:1c:1e:3a:cc:5f:2e:46:2f:be:ac:58:24: b1:bb:0d:ea:e3:64:87:47:ca:47:74:1e:22:ec:69: cb:68:26:ff:bd:fa:46:12:4c:da:f7:67:68:99:db: 90:b4:cc:19:f3:76:62:66:87:7c:26:12:41:0d:66: 65:1f:13:b7:66:e5:81:05:fe:f8:23:89:4c:e5:65: ff:66:17:f6:0c:69:f0:5b:df:68:2c:d8:65:af:7f: 6e:bb:2b:ff:10:c5:fc:55:ff:02:a6:1e:a4:51:96: 75:98:12:96:83:70:13:07:f8:b1:1f:5d:58:c9:cc: 6b:df:87:6b:65:13:6b:bc:df:2b:87:49:25:a4:74: e8:1b:1f:3d:f8:65:9f:b8:10:c8:fc:8e:01:ee:55: f0:60:a3:20:06:3e:8b:ae:69:a5:83:c3:75:7e:39: e0:c6:a1:78:b0:47:56:d5:11:27:96:2b:a2:f1:cc: c9:bd:28:8b:ec:22:5c:50:62:00:fb:64:35:6f:8a: 79:ae:10:4c:17:d3:7a:8f:cb:11:47:ff:49:d6:c8: 33:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:B2:FC:A5:81:0D:C4:5F:6F:38:56:6D:E3:E2:F2:DB:93:A8:3E:9F X509v3 Authority Key Identifier: keyid:B3:54:D3:28:CB:BF:D1:EF:3C:D2:92:68:A2:3B:0F:CC:60:E3:A2:C5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.cer Subject Information Access: Signed Object - URI:rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/3136342e33372e3232302e302f32342d3234203d3e20343031353630.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 164.37.220.0/24 Signature Algorithm: sha256WithRSAEncryption 92:92:50:66:40:0d:60:04:34:aa:46:70:c4:63:f5:ba:48:57: 38:2c:8e:78:ad:b4:f5:ca:f4:be:da:b1:ed:a5:92:2f:b7:60: ce:bd:fe:12:7d:d0:63:d7:09:a5:1b:72:2e:16:0b:03:75:86: 18:e9:04:6b:e2:21:cf:57:51:b5:1f:f6:4a:4e:92:5a:b5:80: e3:c3:e7:07:e6:e8:2c:d9:b3:65:8e:93:19:05:f0:d4:98:aa: 31:ed:18:28:bd:05:4c:99:40:0e:65:c5:f5:93:67:20:85:6e: 21:a3:3a:6c:2a:99:a6:3f:46:9d:cf:d6:55:fe:4e:97:fc:ff: 50:15:7d:7c:6d:56:60:c4:49:cf:5c:7e:2e:94:0f:a0:0a:75: 47:6d:31:05:a6:de:c2:c5:f5:b2:cb:46:87:75:df:15:1b:cb: 7e:a9:a8:af:9c:2f:2d:60:f2:a1:2c:64:a2:dd:9b:33:76:cd: a2:1f:e5:f5:da:91:a4:23:62:ce:e5:5e:8b:44:f8:3f:b4:4c: 21:4b:5f:27:d3:55:36:84:e7:d6:7a:61:9d:6c:c5:d4:33:0a: 37:de:6e:d7:01:05:e0:fc:ff:77:2f:a5:8f:38:35:22:40:f0: ca:8f:ca:f9:09:e4:87:df:e3:fc:9b:ed:62:fb:79:1c:fa:ec: b2:ed:98:ab -----BEGIN CERTIFICATE----- MIIFWjCCBEKgAwIBAgIUfaImilR4YBnIOoFGTrGd/0lnudIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjM1NEQzMjhDQkJGRDFFRjNDRDI5MjY4QTIzQjBGQ0M2 MEUzQTJDNTAeFw0yNjEwMTEyMzU3MTFaFw0yNzEwMTEwMDAyMTFaMDMxMTAvBgNV BAMTKEQ0QjJGQ0E1ODEwREM0NUY2RjM4NTY2REUzRTJGMkRCOTNBODNFOUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCpUBOTJHWR/9gZgKsFPnmNEvv6 XxM+xUZ0Ka+ojLAbHpIzOMSALObC8JI8oSuWexweOsxfLkYvvqxYJLG7DerjZIdH ykd0HiLsactoJv+9+kYSTNr3Z2iZ25C0zBnzdmJmh3wmEkENZmUfE7dm5YEF/vgj iUzlZf9mF/YMafBb32gs2GWvf267K/8QxfxV/wKmHqRRlnWYEpaDcBMH+LEfXVjJ zGvfh2tlE2u83yuHSSWkdOgbHz34ZZ+4EMj8jgHuVfBgoyAGPouuaaWDw3V+OeDG oXiwR1bVESeWK6LxzMm9KIvsIlxQYgD7ZDVvinmuEEwX03qPyxFH/0nWyDPtAgMB AAGjggJkMIICYDAdBgNVHQ4EFgQU1LL8pYENxF9vOFZt4+Ly25OoPp8wHwYDVR0j BBgwFoAUs1TTKMu/0e880pJoojsPzGDjosUwDgYDVR0PAQH/BAQDAgeAMIGIBgNV HR8EgYAwfjB8oHqgeIZ2cnN5bmM6Ly9yLm1hZ2VsbGFuLmlweG8uY29tL3JlcG8v YTAzNzViMzktZjk0OS00Y2I1LWI1MTktZjk0MDA4YjE2NTRjLTAvMC9CMzU0RDMy OENCQkZEMUVGM0NEMjkyNjhBMjNCMEZDQzYwRTNBMkM1LmNybDCBngYIKwYBBQUH AQEEgZEwgY4wgYsGCCsGAQUFBzAChn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5y aXBlLm5ldC9yZXBvc2l0b3J5LzYxNzA4YTZiLTZjM2EtNDBhMC1hMzAyLTU5NWVj YzE3ODQ4Yy8wL0IzNTREMzI4Q0JCRkQxRUYzQ0QyOTI2OEEyM0IwRkNDNjBFM0Ey QzUuY2VyMIGmBggrBgEFBQcBCwSBmTCBljCBkwYIKwYBBQUHMAuGgYZyc3luYzov L3IubWFnZWxsYW4uaXB4by5jb20vcmVwby9hMDM3NWIzOS1mOTQ5LTRjYjUtYjUx OS1mOTQwMDhiMTY1NGMtMC8wLzMxMzYzNDJlMzMzNzJlMzIzMjMwMmUzMDJmMzIz NDJkMzIzNDIwM2QzZTIwMzQzMDMxMzUzNjMwLnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQApCXcMA0GCSqG SIb3DQEBCwUAA4IBAQCSklBmQA1gBDSqRnDEY/W6SFc4LI54rbT1yvS+2rHtpZIv t2DOvf4SfdBj1wmlG3IuFgsDdYYY6QRr4iHPV1G1H/ZKTpJatYDjw+cH5ugs2bNl jpMZBfDUmKox7RgovQVMmUAOZcX1k2cghW4hozpsKpmmP0adz9ZV/k6X/P9QFX18 bVZgxEnPXH4ulA+gCnVHbTEFpt7CxfWyy0aHdd8VG8t+qaivnC8tYPKhLGSi3Zsz ds2iH+X12pGkI2LO5V6LRPg/tEwhS18n01U2hOfWemGdbMXUMwo33m7XAQXg/P93 L6WPODUiQPDKj8r5CeSH3+P8m+1i+3kc+uyy7Zir -----END CERTIFICATE-----Generated at Tue Oct 20 05:01:33 2026 by rpki-client