$ rpki-client -vvvf r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/3136342e33372e3232342e302f32342d3234203d3e20323138373336.roa File: 3136342e33372e3232342e302f32342d3234203d3e20323138373336.roa (raw, json) Hash identifier: ArsHhnGQ0yL7Rsk4Q0MzNIMGJdyoNfjVb1C41lkQ/P4= Subject key identifier: 36:27:C9:EF:22:31:9B:68:9D:C8:7D:90:C8:18:5B:19:38:89:B2:CF Certificate issuer: /CN=B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5 Certificate serial: 3B744DC908004C2AF6230504D260AB41CFB01B91 Authority key identifier: B3:54:D3:28:CB:BF:D1:EF:3C:D2:92:68:A2:3B:0F:CC:60:E3:A2:C5 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.cer Subject info access: rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/3136342e33372e3232342e302f32342d3234203d3e20323138373336.roa Signing time: Mon 12 Oct 2026 00:02:07 +0000 ROA not before: Sun 11 Oct 2026 23:57:07 +0000 ROA not after: Mon 11 Oct 2027 00:02:07 +0000 asID: 218736 IP address blocks: 164.37.224.0/24 maxlen: 24 Validation: OK Signature path: rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.crl rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.mft rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.cer rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/D0A516B50426202A424F0EBFCB7D2BD4F744F964.crl rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/D0A516B50426202A424F0EBFCB7D2BD4F744F964.mft rsync://rpki.ripe.net/repository/DEFAULT/0KUWtQQmICpCTw6_y30r1PdE-WQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Oct 2026 05:19:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3b:74:4d:c9:08:00:4c:2a:f6:23:05:04:d2:60:ab:41:cf:b0:1b:91 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5 Validity Not Before: Oct 11 23:57:07 2026 GMT Not After : Oct 11 00:02:07 2027 GMT Subject: CN=3627C9EF22319B689DC87D90C8185B193889B2CF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:f9:8f:3a:05:6a:eb:2b:73:ab:90:c1:95:9f: 7c:9f:3f:02:ff:86:c5:8b:e1:60:cc:87:2c:67:17: 1f:7f:45:be:90:0e:6f:ae:ad:30:ac:7d:22:2d:8b: a7:fc:d2:6e:33:54:38:42:aa:ae:62:ee:7b:1b:1e: 5e:67:ce:e0:8e:fc:5c:6d:d9:6d:cf:6d:ea:d5:31: 34:35:c7:c2:7a:71:78:6b:5c:18:27:f9:d0:1f:37: 87:79:c0:29:80:66:3f:23:2b:6d:ff:ce:40:37:68: 8e:77:66:11:53:1b:9d:ee:4a:b7:94:d3:78:33:30: 5d:63:7e:d1:a1:16:f4:f4:25:ae:e9:1d:c8:88:65: ab:f1:ca:8f:e9:d5:16:c9:bb:a2:35:b0:dc:8e:a7: be:75:06:47:88:b4:23:67:21:8d:cf:67:72:7e:77: 0a:b2:15:2f:65:21:7f:6f:d9:8b:c1:42:bb:20:f5: a6:13:34:bd:cf:c9:d5:61:7c:4d:62:71:84:ef:70: 02:ab:0a:49:fe:9e:cd:d5:d8:bd:08:90:1a:75:76: af:6d:47:95:3a:5e:93:a1:f2:a7:66:50:b3:80:d6: a8:a1:98:52:58:31:e9:b0:21:63:fd:34:40:f6:37: 49:97:e7:a3:2f:03:67:91:3b:3c:89:fd:92:c8:f4: ad:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:27:C9:EF:22:31:9B:68:9D:C8:7D:90:C8:18:5B:19:38:89:B2:CF X509v3 Authority Key Identifier: keyid:B3:54:D3:28:CB:BF:D1:EF:3C:D2:92:68:A2:3B:0F:CC:60:E3:A2:C5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.cer Subject Information Access: Signed Object - URI:rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/3136342e33372e3232342e302f32342d3234203d3e20323138373336.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 164.37.224.0/24 Signature Algorithm: sha256WithRSAEncryption 01:71:0c:8c:a1:b5:96:1e:18:9e:bd:d7:3e:a4:8d:70:a9:d7: 7d:a1:75:a4:ee:14:43:ec:da:b3:7e:1e:20:68:22:98:6d:4e: 42:17:9b:ef:6e:8b:94:00:7e:58:d6:60:db:80:e7:1b:e3:f5: 79:52:83:de:06:00:91:2b:7a:dc:67:76:2a:b7:1a:99:ae:91: 9d:56:0e:f0:b9:3d:19:9a:07:b7:07:1f:86:d0:68:0b:d9:9d: 55:7a:ba:b8:1e:4d:75:50:04:36:e5:67:68:98:fa:f4:15:b4: 57:e5:3a:80:ba:17:ac:ac:92:36:14:09:41:31:a9:3e:9e:c6: 8d:7f:83:8c:dc:cd:da:48:4d:6e:f0:35:da:6f:f8:78:61:0c: a3:dc:3d:b0:ca:70:5e:1f:66:fb:c9:f4:f9:58:af:b2:6f:e4: fd:2e:33:09:18:61:40:f3:cf:c4:26:87:a1:69:eb:15:50:00: 86:67:e3:90:d5:77:98:99:7f:81:d1:98:20:c9:2d:11:7a:9c: d8:d2:98:10:43:ea:b7:fd:29:80:d9:3e:36:17:2f:4a:3a:c4: f8:fc:01:6b:7c:35:9e:4c:4d:81:5f:0f:14:9d:24:37:3a:bb: 20:a6:dc:48:9a:7f:9e:58:65:5e:27:24:fb:10:af:e9:4c:f6: 69:28:4d:0a -----BEGIN CERTIFICATE----- MIIFWjCCBEKgAwIBAgIUO3RNyQgATCr2IwUE0mCrQc+wG5EwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjM1NEQzMjhDQkJGRDFFRjNDRDI5MjY4QTIzQjBGQ0M2 MEUzQTJDNTAeFw0yNjEwMTEyMzU3MDdaFw0yNzEwMTEwMDAyMDdaMDMxMTAvBgNV BAMTKDM2MjdDOUVGMjIzMTlCNjg5REM4N0Q5MEM4MTg1QjE5Mzg4OUIyQ0YwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCp+Y86BWrrK3OrkMGVn3yfPwL/ hsWL4WDMhyxnFx9/Rb6QDm+urTCsfSIti6f80m4zVDhCqq5i7nsbHl5nzuCO/Fxt 2W3PberVMTQ1x8J6cXhrXBgn+dAfN4d5wCmAZj8jK23/zkA3aI53ZhFTG53uSreU 03gzMF1jftGhFvT0Ja7pHciIZavxyo/p1RbJu6I1sNyOp751BkeItCNnIY3PZ3J+ dwqyFS9lIX9v2YvBQrsg9aYTNL3PydVhfE1icYTvcAKrCkn+ns3V2L0IkBp1dq9t R5U6XpOh8qdmULOA1qihmFJYMemwIWP9NED2N0mX56MvA2eROzyJ/ZLI9K2hAgMB AAGjggJkMIICYDAdBgNVHQ4EFgQUNifJ7yIxm2idyH2QyBhbGTiJss8wHwYDVR0j BBgwFoAUs1TTKMu/0e880pJoojsPzGDjosUwDgYDVR0PAQH/BAQDAgeAMIGIBgNV HR8EgYAwfjB8oHqgeIZ2cnN5bmM6Ly9yLm1hZ2VsbGFuLmlweG8uY29tL3JlcG8v YTAzNzViMzktZjk0OS00Y2I1LWI1MTktZjk0MDA4YjE2NTRjLTAvMC9CMzU0RDMy OENCQkZEMUVGM0NEMjkyNjhBMjNCMEZDQzYwRTNBMkM1LmNybDCBngYIKwYBBQUH AQEEgZEwgY4wgYsGCCsGAQUFBzAChn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5y aXBlLm5ldC9yZXBvc2l0b3J5LzYxNzA4YTZiLTZjM2EtNDBhMC1hMzAyLTU5NWVj YzE3ODQ4Yy8wL0IzNTREMzI4Q0JCRkQxRUYzQ0QyOTI2OEEyM0IwRkNDNjBFM0Ey QzUuY2VyMIGmBggrBgEFBQcBCwSBmTCBljCBkwYIKwYBBQUHMAuGgYZyc3luYzov L3IubWFnZWxsYW4uaXB4by5jb20vcmVwby9hMDM3NWIzOS1mOTQ5LTRjYjUtYjUx OS1mOTQwMDhiMTY1NGMtMC8wLzMxMzYzNDJlMzMzNzJlMzIzMjM0MmUzMDJmMzIz NDJkMzIzNDIwM2QzZTIwMzIzMTM4MzczMzM2LnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQApCXgMA0GCSqG SIb3DQEBCwUAA4IBAQABcQyMobWWHhievdc+pI1wqdd9oXWk7hRD7Nqzfh4gaCKY bU5CF5vvbouUAH5Y1mDbgOcb4/V5UoPeBgCRK3rcZ3YqtxqZrpGdVg7wuT0Zmge3 Bx+G0GgL2Z1Verq4Hk11UAQ25WdomPr0FbRX5TqAuhesrJI2FAlBMak+nsaNf4OM 3M3aSE1u8DXab/h4YQyj3D2wynBeH2b7yfT5WK+yb+T9LjMJGGFA88/EJoehaesV UACGZ+OQ1XeYmX+B0ZggyS0RepzY0pgQQ+q3/SmA2T42Fy9KOsT4/AFrfDWeTE2B Xw8UnSQ3OrsgptxImn+eWGVeJyT7EK/pTPZpKE0K -----END CERTIFICATE-----Generated at Tue Oct 27 00:16:48 2026 by rpki-client