$ rpki-client -vvvf r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/3136342e33372e3233332e302f32342d3234203d3e203134363138.roa File: 3136342e33372e3233332e302f32342d3234203d3e203134363138.roa (raw, json) Hash identifier: Dl78xLWZaj7Cj6PLX+qsVJbv/jhhFbLa7+fvniI2tfM= Subject key identifier: 3B:ED:D0:0F:83:5D:FE:60:11:7E:E3:02:FE:DD:D0:EF:90:EB:C5:E9 Certificate issuer: /CN=B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5 Certificate serial: 07B567230541FAD2AE7A31B8F9095FEB4DC71EA3 Authority key identifier: B3:54:D3:28:CB:BF:D1:EF:3C:D2:92:68:A2:3B:0F:CC:60:E3:A2:C5 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.cer Subject info access: rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/3136342e33372e3233332e302f32342d3234203d3e203134363138.roa Signing time: Mon 12 Oct 2026 00:02:10 +0000 ROA not before: Sun 11 Oct 2026 23:57:10 +0000 ROA not after: Mon 11 Oct 2027 00:02:10 +0000 asID: 14618 IP address blocks: 164.37.233.0/24 maxlen: 24 Validation: OK Signature path: rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.crl rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.mft rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.cer rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/D0A516B50426202A424F0EBFCB7D2BD4F744F964.crl rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/D0A516B50426202A424F0EBFCB7D2BD4F744F964.mft rsync://rpki.ripe.net/repository/DEFAULT/0KUWtQQmICpCTw6_y30r1PdE-WQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Oct 2026 16:36:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 07:b5:67:23:05:41:fa:d2:ae:7a:31:b8:f9:09:5f:eb:4d:c7:1e:a3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5 Validity Not Before: Oct 11 23:57:10 2026 GMT Not After : Oct 11 00:02:10 2027 GMT Subject: CN=3BEDD00F835DFE60117EE302FEDDD0EF90EBC5E9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ee:c9:c4:62:b0:4b:8a:51:ca:69:94:60:cb:76: 36:bb:a1:c9:f5:14:4f:f4:64:01:2e:fc:2a:be:90: 37:84:ce:71:31:df:36:0b:9a:b7:af:f3:af:3b:b0: 41:4c:97:08:f2:2c:85:e2:b7:6a:3d:87:3a:cf:80: 0b:33:8c:f3:69:c0:ad:ba:64:7f:fb:f3:43:b8:34: dd:24:e9:33:d3:0f:a8:7b:8d:95:fa:f0:7b:24:a4: 48:05:26:e5:78:9e:e0:a4:39:18:5a:86:ee:ba:12: f6:d1:89:13:ba:81:53:5a:44:8a:8d:f4:85:2e:c0: 90:9d:59:dd:ba:06:ce:96:a0:72:d1:dc:88:20:60: 03:e4:e0:db:a1:de:53:bd:7b:8a:07:d8:89:8f:76: 45:0f:f6:64:79:2a:9f:70:10:b1:8f:96:71:79:5e: d6:25:da:8f:a5:0a:5b:64:cd:6b:1b:1e:fa:f8:01: 3e:89:d8:ae:25:d7:5e:e2:cb:72:e1:e0:63:b5:6e: ea:92:71:7b:21:99:7c:09:0d:46:b8:05:57:6c:c1: 11:64:09:8c:80:2b:d1:98:8f:5b:c6:9d:4a:6c:f3: 4f:e1:e1:12:11:f0:dc:d9:fe:9d:7d:de:3c:81:57: a5:a3:69:3b:3b:8b:af:9d:1a:0a:58:95:76:37:05: 19:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:ED:D0:0F:83:5D:FE:60:11:7E:E3:02:FE:DD:D0:EF:90:EB:C5:E9 X509v3 Authority Key Identifier: keyid:B3:54:D3:28:CB:BF:D1:EF:3C:D2:92:68:A2:3B:0F:CC:60:E3:A2:C5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.cer Subject Information Access: Signed Object - URI:rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/3136342e33372e3233332e302f32342d3234203d3e203134363138.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 164.37.233.0/24 Signature Algorithm: sha256WithRSAEncryption 08:8b:4c:58:65:9c:c4:92:f0:4e:34:3f:97:84:b1:0e:ca:cd: 52:34:35:64:a2:bd:44:92:36:93:e1:af:a3:b5:b9:32:0d:a7: e4:b7:58:aa:03:95:ac:a0:2b:0e:60:70:27:6f:cc:52:24:08: e3:95:19:df:0b:a1:c1:08:ba:6d:d1:97:6f:fe:03:0b:66:c7: fc:39:78:88:88:7f:58:ba:24:b9:70:f8:d3:7f:72:c7:73:66: 34:35:76:58:1e:5b:91:76:4b:57:a6:b0:e3:28:e3:d4:79:99: 10:95:3c:0a:91:17:7d:f5:54:0e:af:53:14:d8:41:0a:ef:f8: ed:0e:b3:e6:a8:90:de:ff:d2:15:73:4a:1b:4b:c5:b5:05:f9: 4f:a5:59:48:41:8d:b9:b5:55:80:15:38:91:f5:c9:c0:2f:c3: d4:39:c1:a8:7d:a3:5d:e3:7c:11:fd:df:8f:72:77:eb:be:24: 34:8c:63:f5:bf:e8:8b:d3:e9:f7:68:59:6a:94:6b:c4:1a:f7: 47:53:63:ef:89:85:b6:e5:43:46:28:d1:e5:72:93:e1:03:a2: 9f:c8:02:dd:ed:6d:65:df:80:74:f6:4f:c4:a2:39:d6:bf:47: 97:58:83:fe:bf:bb:d7:9a:a3:1c:fd:ba:33:c5:ac:5f:bf:66: 48:8c:d4:a8 -----BEGIN CERTIFICATE----- MIIFWDCCBECgAwIBAgIUB7VnIwVB+tKuejG4+Qlf603HHqMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjM1NEQzMjhDQkJGRDFFRjNDRDI5MjY4QTIzQjBGQ0M2 MEUzQTJDNTAeFw0yNjEwMTEyMzU3MTBaFw0yNzEwMTEwMDAyMTBaMDMxMTAvBgNV BAMTKDNCRUREMDBGODM1REZFNjAxMTdFRTMwMkZFREREMEVGOTBFQkM1RTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDuycRisEuKUcpplGDLdja7ocn1 FE/0ZAEu/Cq+kDeEznEx3zYLmrev8687sEFMlwjyLIXit2o9hzrPgAszjPNpwK26 ZH/780O4NN0k6TPTD6h7jZX68HskpEgFJuV4nuCkORhahu66EvbRiRO6gVNaRIqN 9IUuwJCdWd26Bs6WoHLR3IggYAPk4Nuh3lO9e4oH2ImPdkUP9mR5Kp9wELGPlnF5 XtYl2o+lCltkzWsbHvr4AT6J2K4l117iy3Lh4GO1buqScXshmXwJDUa4BVdswRFk CYyAK9GYj1vGnUps80/h4RIR8NzZ/p193jyBV6WjaTs7i6+dGgpYlXY3BRmvAgMB AAGjggJiMIICXjAdBgNVHQ4EFgQUO+3QD4Nd/mARfuMC/t3Q75DrxekwHwYDVR0j BBgwFoAUs1TTKMu/0e880pJoojsPzGDjosUwDgYDVR0PAQH/BAQDAgeAMIGIBgNV HR8EgYAwfjB8oHqgeIZ2cnN5bmM6Ly9yLm1hZ2VsbGFuLmlweG8uY29tL3JlcG8v YTAzNzViMzktZjk0OS00Y2I1LWI1MTktZjk0MDA4YjE2NTRjLTAvMC9CMzU0RDMy OENCQkZEMUVGM0NEMjkyNjhBMjNCMEZDQzYwRTNBMkM1LmNybDCBngYIKwYBBQUH AQEEgZEwgY4wgYsGCCsGAQUFBzAChn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5y aXBlLm5ldC9yZXBvc2l0b3J5LzYxNzA4YTZiLTZjM2EtNDBhMC1hMzAyLTU5NWVj YzE3ODQ4Yy8wL0IzNTREMzI4Q0JCRkQxRUYzQ0QyOTI2OEEyM0IwRkNDNjBFM0Ey QzUuY2VyMIGkBggrBgEFBQcBCwSBlzCBlDCBkQYIKwYBBQUHMAuGgYRyc3luYzov L3IubWFnZWxsYW4uaXB4by5jb20vcmVwby9hMDM3NWIzOS1mOTQ5LTRjYjUtYjUx OS1mOTQwMDhiMTY1NGMtMC8wLzMxMzYzNDJlMzMzNzJlMzIzMzMzMmUzMDJmMzIz NDJkMzIzNDIwM2QzZTIwMzEzNDM2MzEzOC5yb2EwGAYDVR0gAQH/BA4wDDAKBggr BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAKQl6TANBgkqhkiG 9w0BAQsFAAOCAQEACItMWGWcxJLwTjQ/l4SxDsrNUjQ1ZKK9RJI2k+Gvo7W5Mg2n 5LdYqgOVrKArDmBwJ2/MUiQI45UZ3wuhwQi6bdGXb/4DC2bH/Dl4iIh/WLokuXD4 039yx3NmNDV2WB5bkXZLV6aw4yjj1HmZEJU8CpEXffVUDq9TFNhBCu/47Q6z5qiQ 3v/SFXNKG0vFtQX5T6VZSEGNubVVgBU4kfXJwC/D1DnBqH2jXeN8Ef3fj3J3674k NIxj9b/oi9Pp92hZapRrxBr3R1Nj74mFtuVDRijR5XKT4QOin8gC3e1tZd+AdPZP xKI51r9Hl1iD/r+715qjHP26M8WsX79mSIzUqA== -----END CERTIFICATE-----Generated at Tue Oct 20 09:00:22 2026 by rpki-client