$ rpki-client -vvvf r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/3136342e33372e3232392e302f32342d3234203d3e20313939373739.roa File: 3136342e33372e3232392e302f32342d3234203d3e20313939373739.roa (raw, json) Hash identifier: xU1Rwk79B/rfF8y/7+tN2bpSLrFvBKI80PPYAOj6jX8= Subject key identifier: EA:1C:80:8B:8B:BC:04:17:65:82:E9:E0:D4:B4:A0:E9:80:65:19:AC Certificate issuer: /CN=B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5 Certificate serial: 58530A696BE06830DFCD8ABE35478346815ABA21 Authority key identifier: B3:54:D3:28:CB:BF:D1:EF:3C:D2:92:68:A2:3B:0F:CC:60:E3:A2:C5 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.cer Subject info access: rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/3136342e33372e3232392e302f32342d3234203d3e20313939373739.roa Signing time: Mon 12 Oct 2026 00:02:09 +0000 ROA not before: Sun 11 Oct 2026 23:57:09 +0000 ROA not after: Mon 11 Oct 2027 00:02:09 +0000 asID: 199779 IP address blocks: 164.37.229.0/24 maxlen: 24 Validation: OK Signature path: rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.crl rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.mft rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.cer rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/D0A516B50426202A424F0EBFCB7D2BD4F744F964.crl rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/D0A516B50426202A424F0EBFCB7D2BD4F744F964.mft rsync://rpki.ripe.net/repository/DEFAULT/0KUWtQQmICpCTw6_y30r1PdE-WQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 18 Oct 2026 22:29:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 58:53:0a:69:6b:e0:68:30:df:cd:8a:be:35:47:83:46:81:5a:ba:21 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5 Validity Not Before: Oct 11 23:57:09 2026 GMT Not After : Oct 11 00:02:09 2027 GMT Subject: CN=EA1C808B8BBC04176582E9E0D4B4A0E9806519AC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:48:4e:39:42:5a:2b:3e:5f:a0:e5:89:63:a7: 78:5a:aa:d5:5f:5f:31:0f:88:89:4f:fc:0d:60:49: 1d:94:71:1f:d0:7a:81:e9:16:ee:49:cc:10:d1:92: ec:1e:aa:ab:b9:6e:6a:70:69:f7:58:fd:31:47:f0: 78:4b:5e:6b:2f:62:78:98:49:1c:bd:c2:1f:9e:cb: fa:40:31:67:d7:77:4f:1c:5f:fe:9f:c6:9e:17:f7: 9e:4c:55:6e:d6:55:24:db:c0:80:6a:a3:8a:a8:a4: ca:0e:93:8d:76:ed:70:0e:b9:5b:d5:08:91:ad:03: 06:f0:04:fb:1c:99:b3:3a:c7:c2:3b:ea:70:ae:52: 09:c2:e3:d8:7c:74:14:e6:86:73:80:38:70:bd:48: 2c:cd:00:b0:54:d7:0c:bc:13:bf:36:dc:7a:0f:c1: d0:ee:5a:3e:13:8b:48:28:8f:a8:4f:58:7a:e6:0e: db:e7:cd:ed:2d:0b:38:03:aa:1d:c2:2f:7b:b8:71: 21:72:77:6d:26:0e:ca:e7:c1:89:b9:99:3f:ff:2c: 50:4d:49:72:75:5b:29:0b:4d:a6:b3:55:b9:a0:60: 3e:8b:dc:0c:92:c0:90:67:e2:97:d1:c0:31:1d:0c: 54:7d:e2:41:b4:34:1a:34:ab:75:cd:ce:3c:dd:70: 2f:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:1C:80:8B:8B:BC:04:17:65:82:E9:E0:D4:B4:A0:E9:80:65:19:AC X509v3 Authority Key Identifier: keyid:B3:54:D3:28:CB:BF:D1:EF:3C:D2:92:68:A2:3B:0F:CC:60:E3:A2:C5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.cer Subject Information Access: Signed Object - URI:rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/3136342e33372e3232392e302f32342d3234203d3e20313939373739.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 164.37.229.0/24 Signature Algorithm: sha256WithRSAEncryption 45:64:1a:d8:75:11:96:c2:a3:86:89:42:6e:af:43:d3:f2:fe: ca:8d:31:46:4a:25:3d:33:13:e7:0a:3f:cd:3c:7c:24:c5:5d: 74:8a:d5:51:05:73:71:52:8e:fe:d8:b6:52:68:54:d1:39:c6: 10:2b:09:f1:15:f7:c6:34:b2:3b:3e:3c:21:21:97:32:5a:e4: 3e:70:49:ed:ce:73:64:4b:df:f1:c2:4c:27:d7:e1:d7:64:6c: f4:89:54:65:c5:69:6b:03:af:24:87:5e:4d:80:fa:1b:66:5b: 92:0c:26:45:f6:e9:aa:74:4d:d1:0f:c8:a5:17:93:00:7d:3c: 0d:21:c9:9d:52:ba:bd:87:57:4c:f1:c4:38:42:8e:86:23:f5: 3b:d8:74:5a:d2:e8:a1:08:54:b7:31:4d:31:d1:41:1b:10:ab: 01:80:8e:14:85:1b:fb:42:28:c7:c0:63:f8:bd:a5:86:8f:14: d7:ae:36:ff:eb:8e:82:0d:1d:ac:0f:9b:ac:d6:28:fa:ca:52: 58:4f:0f:a6:14:b8:e8:97:52:19:ad:da:de:ca:b5:88:65:d0: 25:ac:f7:fe:1c:85:63:57:d8:e9:07:a5:75:93:76:cc:d4:ce: 9b:ad:34:81:cb:ad:b2:78:19:92:72:b6:fb:b9:a3:02:c6:c4: d3:3e:8d:b3 -----BEGIN CERTIFICATE----- MIIFWjCCBEKgAwIBAgIUWFMKaWvgaDDfzYq+NUeDRoFauiEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjM1NEQzMjhDQkJGRDFFRjNDRDI5MjY4QTIzQjBGQ0M2 MEUzQTJDNTAeFw0yNjEwMTEyMzU3MDlaFw0yNzEwMTEwMDAyMDlaMDMxMTAvBgNV BAMTKEVBMUM4MDhCOEJCQzA0MTc2NTgyRTlFMEQ0QjRBMEU5ODA2NTE5QUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCESE45QlorPl+g5Yljp3haqtVf XzEPiIlP/A1gSR2UcR/QeoHpFu5JzBDRkuweqqu5bmpwafdY/TFH8HhLXmsvYniY SRy9wh+ey/pAMWfXd08cX/6fxp4X955MVW7WVSTbwIBqo4qopMoOk4127XAOuVvV CJGtAwbwBPscmbM6x8I76nCuUgnC49h8dBTmhnOAOHC9SCzNALBU1wy8E7823HoP wdDuWj4Ti0goj6hPWHrmDtvnze0tCzgDqh3CL3u4cSFyd20mDsrnwYm5mT//LFBN SXJ1WykLTaazVbmgYD6L3AySwJBn4pfRwDEdDFR94kG0NBo0q3XNzjzdcC8JAgMB AAGjggJkMIICYDAdBgNVHQ4EFgQU6hyAi4u8BBdlgung1LSg6YBlGawwHwYDVR0j BBgwFoAUs1TTKMu/0e880pJoojsPzGDjosUwDgYDVR0PAQH/BAQDAgeAMIGIBgNV HR8EgYAwfjB8oHqgeIZ2cnN5bmM6Ly9yLm1hZ2VsbGFuLmlweG8uY29tL3JlcG8v YTAzNzViMzktZjk0OS00Y2I1LWI1MTktZjk0MDA4YjE2NTRjLTAvMC9CMzU0RDMy OENCQkZEMUVGM0NEMjkyNjhBMjNCMEZDQzYwRTNBMkM1LmNybDCBngYIKwYBBQUH AQEEgZEwgY4wgYsGCCsGAQUFBzAChn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5y aXBlLm5ldC9yZXBvc2l0b3J5LzYxNzA4YTZiLTZjM2EtNDBhMC1hMzAyLTU5NWVj YzE3ODQ4Yy8wL0IzNTREMzI4Q0JCRkQxRUYzQ0QyOTI2OEEyM0IwRkNDNjBFM0Ey QzUuY2VyMIGmBggrBgEFBQcBCwSBmTCBljCBkwYIKwYBBQUHMAuGgYZyc3luYzov L3IubWFnZWxsYW4uaXB4by5jb20vcmVwby9hMDM3NWIzOS1mOTQ5LTRjYjUtYjUx OS1mOTQwMDhiMTY1NGMtMC8wLzMxMzYzNDJlMzMzNzJlMzIzMjM5MmUzMDJmMzIz NDJkMzIzNDIwM2QzZTIwMzEzOTM5MzczNzM5LnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQApCXlMA0GCSqG SIb3DQEBCwUAA4IBAQBFZBrYdRGWwqOGiUJur0PT8v7KjTFGSiU9MxPnCj/NPHwk xV10itVRBXNxUo7+2LZSaFTROcYQKwnxFffGNLI7PjwhIZcyWuQ+cEntznNkS9/x wkwn1+HXZGz0iVRlxWlrA68kh15NgPobZluSDCZF9umqdE3RD8ilF5MAfTwNIcmd Urq9h1dM8cQ4Qo6GI/U72HRa0uihCFS3MU0x0UEbEKsBgI4UhRv7QijHwGP4vaWG jxTXrjb/646CDR2sD5us1ij6ylJYTw+mFLjol1IZrdreyrWIZdAlrPf+HIVjV9jp B6V1k3bM1M6brTSBy62yeBmScrb7uaMCxsTTPo2z -----END CERTIFICATE-----Generated at Sun Oct 18 08:23:52 2026 by rpki-client