$ rpki-client -vvvf r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/3136342e33372e3232322e302f32342d3234203d3e2037333436.roa File: 3136342e33372e3232322e302f32342d3234203d3e2037333436.roa (raw, json) Hash identifier: aUkd/ie++nYpVXRjaEAT4/hwPnNOMmTy4dC+a4k9LPE= Subject key identifier: 3D:A0:67:A5:4C:9C:F4:1D:5D:6C:94:E7:BD:B6:96:1E:2D:B4:DC:43 Certificate issuer: /CN=B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5 Certificate serial: 41A45B2C1BD8405B181E914F1B4433B06806FD45 Authority key identifier: B3:54:D3:28:CB:BF:D1:EF:3C:D2:92:68:A2:3B:0F:CC:60:E3:A2:C5 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.cer Subject info access: rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/3136342e33372e3232322e302f32342d3234203d3e2037333436.roa Signing time: Mon 12 Oct 2026 06:53:23 +0000 ROA not before: Mon 12 Oct 2026 06:48:23 +0000 ROA not after: Mon 11 Oct 2027 06:53:23 +0000 asID: 7346 IP address blocks: 164.37.222.0/24 maxlen: 24 Validation: OK Signature path: rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.crl rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.mft rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.cer rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/D0A516B50426202A424F0EBFCB7D2BD4F744F964.crl rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/D0A516B50426202A424F0EBFCB7D2BD4F744F964.mft rsync://rpki.ripe.net/repository/DEFAULT/0KUWtQQmICpCTw6_y30r1PdE-WQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 19 Oct 2026 22:20:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 41:a4:5b:2c:1b:d8:40:5b:18:1e:91:4f:1b:44:33:b0:68:06:fd:45 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5 Validity Not Before: Oct 12 06:48:23 2026 GMT Not After : Oct 11 06:53:23 2027 GMT Subject: CN=3DA067A54C9CF41D5D6C94E7BDB6961E2DB4DC43 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:a2:c6:39:64:bf:3c:a4:36:1d:4a:3a:17:5a: a9:ba:e7:eb:80:71:52:2e:4c:4b:13:e1:70:b5:fc: ca:20:a8:45:68:80:f0:10:16:29:88:83:96:d1:2b: 44:2d:d0:15:30:30:6b:2e:cf:7d:5f:70:1a:ae:4e: 37:75:96:b1:a4:1b:45:1f:dc:68:aa:0c:7d:b5:cf: 15:00:3b:2d:e0:51:ac:01:d7:f0:3d:e6:77:83:27: 9e:ef:73:b3:13:2d:b1:20:e6:04:7d:5d:80:c2:b7: f1:fe:6e:d3:4a:c8:ec:6c:06:ba:ea:88:01:ee:36: 88:22:bc:c8:6b:69:a0:9a:27:25:64:1a:37:84:a1: 1d:f8:15:7d:96:08:1f:eb:d1:2f:f7:12:39:61:63: 5a:38:59:93:64:39:b9:a6:bb:2f:30:45:ef:d6:a5: 73:a0:b9:7a:bf:84:d6:e0:26:f7:3e:1d:e7:14:c0: e0:36:78:38:0a:db:d7:8f:0c:99:2e:57:37:be:9f: e0:33:55:e5:45:a0:fb:45:cd:e2:94:c4:94:54:46: 75:28:9f:d7:ed:6b:5c:12:6d:f4:82:0b:23:56:f1: 89:25:0e:2e:35:4a:90:4a:45:32:b0:b0:6f:7a:45: 0d:14:c7:b0:2b:dd:98:d6:0f:a9:be:26:5d:2c:81: 82:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:A0:67:A5:4C:9C:F4:1D:5D:6C:94:E7:BD:B6:96:1E:2D:B4:DC:43 X509v3 Authority Key Identifier: keyid:B3:54:D3:28:CB:BF:D1:EF:3C:D2:92:68:A2:3B:0F:CC:60:E3:A2:C5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.cer Subject Information Access: Signed Object - URI:rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/3136342e33372e3232322e302f32342d3234203d3e2037333436.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 164.37.222.0/24 Signature Algorithm: sha256WithRSAEncryption a2:d6:3a:9b:23:1a:22:ba:c7:d8:21:c5:91:03:54:20:51:8b: 76:8b:09:59:c1:92:60:76:91:f6:f5:2a:d6:7b:23:86:0f:f9: bb:ec:8c:65:d7:f8:2f:0c:09:3c:91:f4:61:c0:eb:75:10:98: 90:d7:9b:f6:47:ef:36:70:8a:73:51:7b:12:4a:65:5d:49:ea: 4a:62:e7:b3:aa:4e:40:e0:0c:98:6c:ba:5d:76:b4:7f:69:4f: fc:7f:f4:d7:78:dd:24:7a:49:07:06:65:b5:06:62:4c:d8:09: 79:ae:e1:9b:dc:e1:60:91:8c:b1:3b:80:41:3b:bb:4a:a6:63: 69:ea:70:1a:04:55:f4:55:67:84:89:1d:20:89:c7:01:9a:88: ec:ed:89:c6:25:8b:37:a4:48:7e:9c:a5:95:31:d1:67:df:d8: da:99:ad:d8:85:24:dc:65:01:32:80:fb:ee:12:b8:c7:9b:4f: ec:a4:b4:58:cd:76:38:8d:3e:61:df:57:0a:b2:f0:51:41:ce: ee:81:49:63:da:8a:52:da:e9:d3:13:64:3a:91:a7:c6:f1:4a: 57:cb:8f:68:b5:47:e0:b1:fb:7a:31:f0:ac:f6:55:aa:d0:30: 5c:5f:2b:4a:b0:90:5b:61:9d:0d:d5:88:49:b9:73:08:9a:1d: ae:99:f7:a9 -----BEGIN CERTIFICATE----- MIIFVjCCBD6gAwIBAgIUQaRbLBvYQFsYHpFPG0QzsGgG/UUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjM1NEQzMjhDQkJGRDFFRjNDRDI5MjY4QTIzQjBGQ0M2 MEUzQTJDNTAeFw0yNjEwMTIwNjQ4MjNaFw0yNzEwMTEwNjUzMjNaMDMxMTAvBgNV BAMTKDNEQTA2N0E1NEM5Q0Y0MUQ1RDZDOTRFN0JEQjY5NjFFMkRCNERDNDMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDNosY5ZL88pDYdSjoXWqm65+uA cVIuTEsT4XC1/MogqEVogPAQFimIg5bRK0Qt0BUwMGsuz31fcBquTjd1lrGkG0Uf 3GiqDH21zxUAOy3gUawB1/A95neDJ57vc7MTLbEg5gR9XYDCt/H+btNKyOxsBrrq iAHuNogivMhraaCaJyVkGjeEoR34FX2WCB/r0S/3EjlhY1o4WZNkObmmuy8wRe/W pXOguXq/hNbgJvc+HecUwOA2eDgK29ePDJkuVze+n+AzVeVFoPtFzeKUxJRURnUo n9fta1wSbfSCCyNW8YklDi41SpBKRTKwsG96RQ0Ux7Ar3ZjWD6m+Jl0sgYIRAgMB AAGjggJgMIICXDAdBgNVHQ4EFgQUPaBnpUyc9B1dbJTnvbaWHi203EMwHwYDVR0j BBgwFoAUs1TTKMu/0e880pJoojsPzGDjosUwDgYDVR0PAQH/BAQDAgeAMIGIBgNV HR8EgYAwfjB8oHqgeIZ2cnN5bmM6Ly9yLm1hZ2VsbGFuLmlweG8uY29tL3JlcG8v YTAzNzViMzktZjk0OS00Y2I1LWI1MTktZjk0MDA4YjE2NTRjLTAvMC9CMzU0RDMy OENCQkZEMUVGM0NEMjkyNjhBMjNCMEZDQzYwRTNBMkM1LmNybDCBngYIKwYBBQUH AQEEgZEwgY4wgYsGCCsGAQUFBzAChn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5y aXBlLm5ldC9yZXBvc2l0b3J5LzYxNzA4YTZiLTZjM2EtNDBhMC1hMzAyLTU5NWVj YzE3ODQ4Yy8wL0IzNTREMzI4Q0JCRkQxRUYzQ0QyOTI2OEEyM0IwRkNDNjBFM0Ey QzUuY2VyMIGiBggrBgEFBQcBCwSBlTCBkjCBjwYIKwYBBQUHMAuGgYJyc3luYzov L3IubWFnZWxsYW4uaXB4by5jb20vcmVwby9hMDM3NWIzOS1mOTQ5LTRjYjUtYjUx OS1mOTQwMDhiMTY1NGMtMC8wLzMxMzYzNDJlMzMzNzJlMzIzMjMyMmUzMDJmMzIz NDJkMzIzNDIwM2QzZTIwMzczMzM0MzYucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYB BQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBACkJd4wDQYJKoZIhvcN AQELBQADggEBAKLWOpsjGiK6x9ghxZEDVCBRi3aLCVnBkmB2kfb1KtZ7I4YP+bvs jGXX+C8MCTyR9GHA63UQmJDXm/ZH7zZwinNRexJKZV1J6kpi57OqTkDgDJhsul12 tH9pT/x/9Nd43SR6SQcGZbUGYkzYCXmu4Zvc4WCRjLE7gEE7u0qmY2nqcBoEVfRV Z4SJHSCJxwGaiOzticYlizekSH6cpZUx0Wff2NqZrdiFJNxlATKA++4SuMebT+yk tFjNdjiNPmHfVwqy8FFBzu6BSWPailLa6dMTZDqRp8bxSlfLj2i1R+Cx+3ox8Kz2 VarQMFxfK0qwkFthnQ3ViEm5cwiaHa6Z96k= -----END CERTIFICATE-----Generated at Mon Oct 19 07:42:17 2026 by rpki-client