$ rpki-client -vvvf r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/3136342e33372e3233332e302f32342d3234203d3e203136353039.roa File: 3136342e33372e3233332e302f32342d3234203d3e203136353039.roa (raw, json) Hash identifier: 3CWx9HY0/6CXmCP0GxpU/vVGEYr7cU4KtZlcTZng0bA= Subject key identifier: DD:6B:23:5D:F4:1E:47:DC:E2:05:AF:AC:63:59:AE:FE:9E:A4:9E:67 Certificate issuer: /CN=B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5 Certificate serial: 6007551F5CE9C1F299F805EA00A7EFEB905A3CF5 Authority key identifier: B3:54:D3:28:CB:BF:D1:EF:3C:D2:92:68:A2:3B:0F:CC:60:E3:A2:C5 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.cer Subject info access: rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/3136342e33372e3233332e302f32342d3234203d3e203136353039.roa Signing time: Mon 12 Oct 2026 00:02:10 +0000 ROA not before: Sun 11 Oct 2026 23:57:10 +0000 ROA not after: Mon 11 Oct 2027 00:02:10 +0000 asID: 16509 IP address blocks: 164.37.233.0/24 maxlen: 24 Validation: OK Signature path: rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.crl rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.mft rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.cer rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/D0A516B50426202A424F0EBFCB7D2BD4F744F964.crl rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/D0A516B50426202A424F0EBFCB7D2BD4F744F964.mft rsync://rpki.ripe.net/repository/DEFAULT/0KUWtQQmICpCTw6_y30r1PdE-WQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 19 Oct 2026 19:02:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 60:07:55:1f:5c:e9:c1:f2:99:f8:05:ea:00:a7:ef:eb:90:5a:3c:f5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5 Validity Not Before: Oct 11 23:57:10 2026 GMT Not After : Oct 11 00:02:10 2027 GMT Subject: CN=DD6B235DF41E47DCE205AFAC6359AEFE9EA49E67 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:aa:a9:01:34:3e:59:dd:94:32:de:1d:c7:66: c1:7b:97:37:09:7a:e2:ad:7a:99:2e:0e:a6:3b:7e: c6:4f:dc:2a:9e:37:9f:24:12:d6:46:95:e0:9d:c2: c8:ad:cf:18:e9:18:2f:03:74:34:aa:d6:96:42:1b: 71:0c:95:08:4b:e2:db:00:44:63:d2:f6:9b:f9:a4: 56:8f:ad:97:e6:28:33:58:cf:85:32:aa:2b:2a:9f: 2f:df:59:4d:04:6a:ef:69:bf:7b:03:81:4a:a2:cd: 9b:26:8a:c1:6d:bc:14:5e:b4:07:4a:92:90:33:a7: 1c:70:ec:cd:92:da:52:6e:14:e0:66:fa:a8:82:1d: bf:72:37:56:c6:40:bc:a7:54:bd:98:02:e7:f5:05: c8:47:b0:fd:2b:f8:a6:0d:40:18:5d:a4:dc:36:fc: bf:e6:c2:70:bf:d1:08:61:90:b4:43:2e:15:0c:d0: b8:01:b2:9c:17:a5:d2:82:96:cf:80:bf:7b:df:cb: 5f:47:37:9b:f7:67:fb:3e:50:ba:75:14:3b:a9:af: 09:8e:bf:a1:0e:f5:19:22:38:c9:50:00:6b:1b:f9: 29:de:e1:6f:0e:f6:03:4c:58:c2:a6:1d:33:f1:bc: 4d:81:2f:41:7b:0f:07:6a:0b:e6:e0:ba:25:ec:48: c5:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:6B:23:5D:F4:1E:47:DC:E2:05:AF:AC:63:59:AE:FE:9E:A4:9E:67 X509v3 Authority Key Identifier: keyid:B3:54:D3:28:CB:BF:D1:EF:3C:D2:92:68:A2:3B:0F:CC:60:E3:A2:C5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.cer Subject Information Access: Signed Object - URI:rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/3136342e33372e3233332e302f32342d3234203d3e203136353039.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 164.37.233.0/24 Signature Algorithm: sha256WithRSAEncryption 7e:42:83:2d:aa:8e:b6:8d:14:64:62:74:24:b4:a2:ca:35:f8: 23:63:04:f3:68:f7:9b:4f:f9:1c:85:41:f2:d9:02:23:a9:06: ea:3e:26:ef:76:38:d0:a3:2c:54:43:4f:32:1b:4b:1e:dc:be: b1:d7:26:7b:89:2d:f6:e5:f8:1a:23:2d:d0:8f:63:95:d0:bb: 8c:39:cf:22:9c:99:ee:56:39:53:c1:87:f4:3a:d3:6a:b4:9e: b1:19:9d:0f:5c:96:0a:86:d8:0e:3b:9f:2e:19:d8:ab:62:6d: 7f:ec:89:6a:56:ac:f2:8d:3f:73:d5:7b:82:db:2b:2a:8b:b7: 63:fc:eb:7f:8b:62:62:04:96:20:03:2e:7d:e2:e8:03:de:50: 6b:cc:e7:54:3b:1b:2a:d7:0c:35:72:05:6f:da:a4:aa:9f:49: f6:69:08:0e:bb:7f:69:f1:52:49:e0:52:53:8f:05:6f:97:76: 41:7a:81:bc:7f:9e:68:15:85:7d:f1:8d:6a:ac:d5:62:fc:80: b6:f2:af:00:41:e9:29:72:6f:ab:ed:f1:e8:3e:19:a9:45:7a: 41:68:f3:bb:52:e8:38:b2:1f:99:63:d0:52:09:f4:ac:cc:a4: b8:98:ab:c1:e5:a4:1a:39:59:3c:3e:1b:34:fa:71:17:27:ae: f9:02:da:28 -----BEGIN CERTIFICATE----- MIIFWDCCBECgAwIBAgIUYAdVH1zpwfKZ+AXqAKfv65BaPPUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjM1NEQzMjhDQkJGRDFFRjNDRDI5MjY4QTIzQjBGQ0M2 MEUzQTJDNTAeFw0yNjEwMTEyMzU3MTBaFw0yNzEwMTEwMDAyMTBaMDMxMTAvBgNV BAMTKERENkIyMzVERjQxRTQ3RENFMjA1QUZBQzYzNTlBRUZFOUVBNDlFNjcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCSqqkBND5Z3ZQy3h3HZsF7lzcJ euKtepkuDqY7fsZP3CqeN58kEtZGleCdwsitzxjpGC8DdDSq1pZCG3EMlQhL4tsA RGPS9pv5pFaPrZfmKDNYz4Uyqisqny/fWU0Eau9pv3sDgUqizZsmisFtvBRetAdK kpAzpxxw7M2S2lJuFOBm+qiCHb9yN1bGQLynVL2YAuf1BchHsP0r+KYNQBhdpNw2 /L/mwnC/0QhhkLRDLhUM0LgBspwXpdKCls+Av3vfy19HN5v3Z/s+ULp1FDuprwmO v6EO9RkiOMlQAGsb+Sne4W8O9gNMWMKmHTPxvE2BL0F7DwdqC+bguiXsSMXXAgMB AAGjggJiMIICXjAdBgNVHQ4EFgQU3WsjXfQeR9ziBa+sY1mu/p6knmcwHwYDVR0j BBgwFoAUs1TTKMu/0e880pJoojsPzGDjosUwDgYDVR0PAQH/BAQDAgeAMIGIBgNV HR8EgYAwfjB8oHqgeIZ2cnN5bmM6Ly9yLm1hZ2VsbGFuLmlweG8uY29tL3JlcG8v YTAzNzViMzktZjk0OS00Y2I1LWI1MTktZjk0MDA4YjE2NTRjLTAvMC9CMzU0RDMy OENCQkZEMUVGM0NEMjkyNjhBMjNCMEZDQzYwRTNBMkM1LmNybDCBngYIKwYBBQUH AQEEgZEwgY4wgYsGCCsGAQUFBzAChn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5y aXBlLm5ldC9yZXBvc2l0b3J5LzYxNzA4YTZiLTZjM2EtNDBhMC1hMzAyLTU5NWVj YzE3ODQ4Yy8wL0IzNTREMzI4Q0JCRkQxRUYzQ0QyOTI2OEEyM0IwRkNDNjBFM0Ey QzUuY2VyMIGkBggrBgEFBQcBCwSBlzCBlDCBkQYIKwYBBQUHMAuGgYRyc3luYzov L3IubWFnZWxsYW4uaXB4by5jb20vcmVwby9hMDM3NWIzOS1mOTQ5LTRjYjUtYjUx OS1mOTQwMDhiMTY1NGMtMC8wLzMxMzYzNDJlMzMzNzJlMzIzMzMzMmUzMDJmMzIz NDJkMzIzNDIwM2QzZTIwMzEzNjM1MzAzOS5yb2EwGAYDVR0gAQH/BA4wDDAKBggr BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAKQl6TANBgkqhkiG 9w0BAQsFAAOCAQEAfkKDLaqOto0UZGJ0JLSiyjX4I2ME82j3m0/5HIVB8tkCI6kG 6j4m73Y40KMsVENPMhtLHty+sdcme4kt9uX4GiMt0I9jldC7jDnPIpyZ7lY5U8GH 9DrTarSesRmdD1yWCobYDjufLhnYq2Jtf+yJalas8o0/c9V7gtsrKou3Y/zrf4ti YgSWIAMufeLoA95Qa8znVDsbKtcMNXIFb9qkqp9J9mkIDrt/afFSSeBSU48Fb5d2 QXqBvH+eaBWFffGNaqzVYvyAtvKvAEHpKXJvq+3x6D4ZqUV6QWjzu1LoOLIfmWPQ Ugn0rMykuJirweWkGjlZPD4bNPpxFyeu+QLaKA== -----END CERTIFICATE-----Generated at Mon Oct 19 04:55:27 2026 by rpki-client