$ rpki-client -vvvf r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/3136342e33372e3232362e302f32342d3234203d3e20323132323338.roa File: 3136342e33372e3232362e302f32342d3234203d3e20323132323338.roa (raw, json) Hash identifier: 0Znuk3Mfvu34OjDMem+gwuLopf/iN5mPhUmjFuy1bqA= Subject key identifier: 42:52:43:F1:CB:F1:A6:EF:65:56:7B:62:98:67:42:F5:A5:C6:D5:2A Certificate issuer: /CN=B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5 Certificate serial: 449855E262E5787285D4F2E5DA5294C66BFB8B24 Authority key identifier: B3:54:D3:28:CB:BF:D1:EF:3C:D2:92:68:A2:3B:0F:CC:60:E3:A2:C5 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.cer Subject info access: rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/3136342e33372e3232362e302f32342d3234203d3e20323132323338.roa Signing time: Mon 12 Oct 2026 00:02:08 +0000 ROA not before: Sun 11 Oct 2026 23:57:08 +0000 ROA not after: Mon 11 Oct 2027 00:02:08 +0000 asID: 212238 IP address blocks: 164.37.226.0/24 maxlen: 24 Validation: OK Signature path: rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.crl rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.mft rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.cer rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/D0A516B50426202A424F0EBFCB7D2BD4F744F964.crl rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/D0A516B50426202A424F0EBFCB7D2BD4F744F964.mft rsync://rpki.ripe.net/repository/DEFAULT/0KUWtQQmICpCTw6_y30r1PdE-WQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Oct 2026 16:36:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 44:98:55:e2:62:e5:78:72:85:d4:f2:e5:da:52:94:c6:6b:fb:8b:24 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5 Validity Not Before: Oct 11 23:57:08 2026 GMT Not After : Oct 11 00:02:08 2027 GMT Subject: CN=425243F1CBF1A6EF65567B62986742F5A5C6D52A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:85:89:4a:77:77:4d:b9:33:28:6c:c6:c8:67: db:80:47:7e:64:83:ce:66:40:79:85:b2:79:c0:c1: ae:73:a2:3e:97:fc:5b:85:e1:7f:55:ce:a3:af:7b: 6d:3b:70:88:6d:c6:74:d5:84:18:54:bd:21:7f:b6: 10:d4:6e:f2:48:e9:a1:af:75:5b:f6:0d:f3:e2:e9: 3f:6c:20:99:eb:3c:41:69:6b:39:96:87:7b:60:b2: 9e:bc:a0:f5:a5:94:6c:45:a1:4e:1d:de:76:91:c3: b8:3e:0a:27:38:74:59:66:a0:6a:e2:52:51:ac:87: b0:84:6f:bc:67:dc:f4:76:58:4e:38:49:d1:6c:b9: 5a:a3:e1:dd:0e:05:ae:94:56:50:e3:fc:59:30:48: 07:05:df:20:1a:2d:ca:57:8e:fd:3a:a1:03:3c:17: 01:48:d4:5b:6b:0f:63:74:10:ba:15:44:78:64:a7: 09:1e:31:e3:ae:c8:5f:da:d6:c5:6f:99:64:c4:60: d9:07:c1:16:63:f1:d7:23:a0:97:82:71:ac:55:cd: 06:de:52:3f:d2:cb:07:10:3a:2d:1b:be:99:32:93: 4c:4f:14:40:a8:ee:3b:2c:39:d5:8c:d0:0f:8a:83: 3e:a4:3a:95:3c:73:d2:f3:3a:02:35:35:39:b7:d4: f5:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:52:43:F1:CB:F1:A6:EF:65:56:7B:62:98:67:42:F5:A5:C6:D5:2A X509v3 Authority Key Identifier: keyid:B3:54:D3:28:CB:BF:D1:EF:3C:D2:92:68:A2:3B:0F:CC:60:E3:A2:C5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.cer Subject Information Access: Signed Object - URI:rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/3136342e33372e3232362e302f32342d3234203d3e20323132323338.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 164.37.226.0/24 Signature Algorithm: sha256WithRSAEncryption 57:9c:d1:2c:df:f9:8f:84:14:92:72:b8:d9:46:94:63:88:c1: 75:63:a7:11:dc:c0:1a:a6:c6:32:bf:48:93:c0:84:bc:2d:c7: e7:d2:cb:92:7a:e5:d1:3a:af:2b:ff:8d:9e:62:18:42:9e:3b: bd:da:33:17:15:bb:79:0e:86:59:47:ab:48:12:22:61:25:b8: 76:6e:e4:fb:78:8a:ba:60:04:8c:51:f6:e9:b9:04:19:93:2c: 86:30:d7:e5:15:b3:52:f3:2e:b5:f0:37:fe:38:cd:94:b4:2e: 63:25:2b:70:fc:83:71:c9:6e:4e:f2:57:f0:6a:02:10:9d:f3: e1:4b:f6:0a:c5:6a:84:3b:e9:01:ec:15:0d:ad:69:6e:dd:2b: ed:b4:8a:37:bd:f5:6d:87:34:3b:ce:4a:9b:02:e1:ec:f6:4c: 99:b2:cc:56:f5:76:65:e3:a6:6b:19:15:10:fe:24:ef:6f:fe: 5f:b3:f1:ee:c4:3d:41:a9:18:83:4e:49:16:4c:e7:91:99:f6: a0:a5:c8:fa:a1:ac:1e:a7:b1:fb:a6:ba:ef:99:87:4e:fc:09: 4d:a8:12:b3:31:cc:bc:7f:e5:c6:35:74:5f:9d:75:94:bf:f8: 76:8e:15:5f:3c:44:4a:16:4a:cd:ab:e4:f7:bc:15:51:85:b4: 64:a8:e7:70 -----BEGIN CERTIFICATE----- MIIFWjCCBEKgAwIBAgIURJhV4mLleHKF1PLl2lKUxmv7iyQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjM1NEQzMjhDQkJGRDFFRjNDRDI5MjY4QTIzQjBGQ0M2 MEUzQTJDNTAeFw0yNjEwMTEyMzU3MDhaFw0yNzEwMTEwMDAyMDhaMDMxMTAvBgNV BAMTKDQyNTI0M0YxQ0JGMUE2RUY2NTU2N0I2Mjk4Njc0MkY1QTVDNkQ1MkEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDKhYlKd3dNuTMobMbIZ9uAR35k g85mQHmFsnnAwa5zoj6X/FuF4X9VzqOve207cIhtxnTVhBhUvSF/thDUbvJI6aGv dVv2DfPi6T9sIJnrPEFpazmWh3tgsp68oPWllGxFoU4d3naRw7g+Cic4dFlmoGri UlGsh7CEb7xn3PR2WE44SdFsuVqj4d0OBa6UVlDj/FkwSAcF3yAaLcpXjv06oQM8 FwFI1FtrD2N0ELoVRHhkpwkeMeOuyF/a1sVvmWTEYNkHwRZj8dcjoJeCcaxVzQbe Uj/SywcQOi0bvpkyk0xPFECo7jssOdWM0A+Kgz6kOpU8c9LzOgI1NTm31PUfAgMB AAGjggJkMIICYDAdBgNVHQ4EFgQUQlJD8cvxpu9lVntimGdC9aXG1SowHwYDVR0j BBgwFoAUs1TTKMu/0e880pJoojsPzGDjosUwDgYDVR0PAQH/BAQDAgeAMIGIBgNV HR8EgYAwfjB8oHqgeIZ2cnN5bmM6Ly9yLm1hZ2VsbGFuLmlweG8uY29tL3JlcG8v YTAzNzViMzktZjk0OS00Y2I1LWI1MTktZjk0MDA4YjE2NTRjLTAvMC9CMzU0RDMy OENCQkZEMUVGM0NEMjkyNjhBMjNCMEZDQzYwRTNBMkM1LmNybDCBngYIKwYBBQUH AQEEgZEwgY4wgYsGCCsGAQUFBzAChn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5y aXBlLm5ldC9yZXBvc2l0b3J5LzYxNzA4YTZiLTZjM2EtNDBhMC1hMzAyLTU5NWVj YzE3ODQ4Yy8wL0IzNTREMzI4Q0JCRkQxRUYzQ0QyOTI2OEEyM0IwRkNDNjBFM0Ey QzUuY2VyMIGmBggrBgEFBQcBCwSBmTCBljCBkwYIKwYBBQUHMAuGgYZyc3luYzov L3IubWFnZWxsYW4uaXB4by5jb20vcmVwby9hMDM3NWIzOS1mOTQ5LTRjYjUtYjUx OS1mOTQwMDhiMTY1NGMtMC8wLzMxMzYzNDJlMzMzNzJlMzIzMjM2MmUzMDJmMzIz NDJkMzIzNDIwM2QzZTIwMzIzMTMyMzIzMzM4LnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQApCXiMA0GCSqG SIb3DQEBCwUAA4IBAQBXnNEs3/mPhBSScrjZRpRjiMF1Y6cR3MAapsYyv0iTwIS8 Lcfn0suSeuXROq8r/42eYhhCnju92jMXFbt5DoZZR6tIEiJhJbh2buT7eIq6YASM UfbpuQQZkyyGMNflFbNS8y618Df+OM2UtC5jJStw/INxyW5O8lfwagIQnfPhS/YK xWqEO+kB7BUNrWlu3SvttIo3vfVthzQ7zkqbAuHs9kyZssxW9XZl46ZrGRUQ/iTv b/5fs/HuxD1BqRiDTkkWTOeRmfagpcj6oawep7H7prrvmYdO/AlNqBKzMcy8f+XG NXRfnXWUv/h2jhVfPERKFkrNq+T3vBVRhbRkqOdw -----END CERTIFICATE-----Generated at Tue Oct 20 09:00:22 2026 by rpki-client