$ rpki-client -vvvf r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/3136342e33372e3233362e302f32342d3234203d3e20323037323637.roa File: 3136342e33372e3233362e302f32342d3234203d3e20323037323637.roa (raw, json) Hash identifier: hMo/CXM8rS3ALtrUXuwR60OxqdWQbPVdETlQ4E6tTZE= Subject key identifier: 78:BB:F1:8D:B5:D1:34:44:40:26:C6:50:C0:01:51:05:39:97:08:B5 Certificate issuer: /CN=B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5 Certificate serial: 5BC1AB0E056042A42EB592A4A003E0077196D656 Authority key identifier: B3:54:D3:28:CB:BF:D1:EF:3C:D2:92:68:A2:3B:0F:CC:60:E3:A2:C5 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.cer Subject info access: rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/3136342e33372e3233362e302f32342d3234203d3e20323037323637.roa Signing time: Mon 12 Oct 2026 00:02:08 +0000 ROA not before: Sun 11 Oct 2026 23:57:08 +0000 ROA not after: Mon 11 Oct 2027 00:02:08 +0000 asID: 207267 IP address blocks: 164.37.236.0/24 maxlen: 24 Validation: OK Signature path: rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.crl rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.mft rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.cer rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/D0A516B50426202A424F0EBFCB7D2BD4F744F964.crl rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/D0A516B50426202A424F0EBFCB7D2BD4F744F964.mft rsync://rpki.ripe.net/repository/DEFAULT/0KUWtQQmICpCTw6_y30r1PdE-WQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Oct 2026 16:36:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5b:c1:ab:0e:05:60:42:a4:2e:b5:92:a4:a0:03:e0:07:71:96:d6:56 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5 Validity Not Before: Oct 11 23:57:08 2026 GMT Not After : Oct 11 00:02:08 2027 GMT Subject: CN=78BBF18DB5D134444026C650C0015105399708B5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:55:ca:d5:fa:4d:b7:92:df:b5:e2:2e:f5:8e: 2d:3b:09:b2:1b:ef:86:2a:b1:a4:fe:64:ec:26:9b: 4d:b8:bf:71:2f:f2:71:b3:fd:56:1c:45:cb:af:6b: 6f:00:aa:f6:eb:db:b8:c7:2c:81:24:ab:3a:68:ab: bc:48:06:0f:f1:84:0c:74:c4:48:1c:9f:7c:be:4d: e2:9b:54:06:0a:00:4d:bf:4b:0f:f5:53:c2:02:05: dd:46:01:95:dd:93:56:fb:5d:d9:7e:48:03:22:ff: 90:cb:d2:a7:3d:ba:d1:f5:df:3b:a4:d7:12:d5:a6: c3:5e:61:df:11:48:39:94:2c:40:af:7b:a4:3f:49: f9:b0:1c:e8:67:02:39:27:97:bf:35:f7:50:99:12: 5d:e7:33:15:03:3f:3d:7e:ac:8a:09:de:87:cd:bd: 6d:48:66:90:83:6e:ac:b7:83:2c:4d:e5:a8:84:70: 5f:22:4e:09:d0:57:7e:ee:97:fe:b1:32:9e:c9:05: d8:b9:6c:4e:21:f0:cd:4e:bf:c5:af:df:18:4e:08: cb:b4:1a:28:af:82:e0:ca:fa:cc:33:6f:fd:39:9c: 15:75:12:4f:6a:e9:0a:73:0e:0a:23:86:7e:2f:63: e3:a2:ee:be:94:c0:d5:99:ca:84:b9:8e:56:60:2a: e6:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:BB:F1:8D:B5:D1:34:44:40:26:C6:50:C0:01:51:05:39:97:08:B5 X509v3 Authority Key Identifier: keyid:B3:54:D3:28:CB:BF:D1:EF:3C:D2:92:68:A2:3B:0F:CC:60:E3:A2:C5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.cer Subject Information Access: Signed Object - URI:rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/3136342e33372e3233362e302f32342d3234203d3e20323037323637.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 164.37.236.0/24 Signature Algorithm: sha256WithRSAEncryption 5a:2f:0f:70:24:d8:7a:0b:7c:7c:3a:18:75:77:44:f7:e2:0b: bd:a3:ad:a0:e0:4e:b5:55:bb:e2:36:78:8b:3c:6d:44:95:5c: 44:1a:a6:9b:31:dc:01:01:f4:37:6b:9c:60:38:db:9f:bc:41: be:4d:14:44:87:ce:17:cc:e9:7c:d4:6d:4c:7c:00:08:7a:7d: 5c:72:a9:30:7e:33:13:4b:ea:c9:c7:5e:0e:2c:5a:9f:3f:41: 82:ce:97:9e:a0:d7:32:02:d9:4b:25:ac:5b:a6:b3:54:b4:bc: c0:6b:47:22:da:ff:8a:79:b6:e2:89:31:a3:55:b6:e5:80:55: 41:c3:54:73:aa:c7:a2:e4:30:fb:0a:bf:b8:ea:dd:ff:e4:b0: 55:70:17:4b:34:8d:dc:4f:d7:c1:a5:56:46:c0:27:52:42:4e: c2:86:ea:78:1b:28:bd:91:67:98:2d:80:1b:24:9d:78:90:b9: 60:f9:1b:b5:2b:63:ac:d9:88:0d:12:e4:36:cc:90:46:2f:d3: 2e:3f:0b:9c:a9:ad:0b:1a:13:d0:ad:f5:1e:59:05:44:af:3f: 9a:1e:16:f7:c3:62:41:bf:ca:99:98:41:fa:79:33:c6:7d:9a: 64:a5:8f:1c:e7:64:95:99:b3:99:8c:29:e5:cf:5a:72:72:b2: 68:b2:79:83 -----BEGIN CERTIFICATE----- MIIFWjCCBEKgAwIBAgIUW8GrDgVgQqQutZKkoAPgB3GW1lYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjM1NEQzMjhDQkJGRDFFRjNDRDI5MjY4QTIzQjBGQ0M2 MEUzQTJDNTAeFw0yNjEwMTEyMzU3MDhaFw0yNzEwMTEwMDAyMDhaMDMxMTAvBgNV BAMTKDc4QkJGMThEQjVEMTM0NDQ0MDI2QzY1MEMwMDE1MTA1Mzk5NzA4QjUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDkVcrV+k23kt+14i71ji07CbIb 74YqsaT+ZOwmm024v3Ev8nGz/VYcRcuva28Aqvbr27jHLIEkqzpoq7xIBg/xhAx0 xEgcn3y+TeKbVAYKAE2/Sw/1U8ICBd1GAZXdk1b7Xdl+SAMi/5DL0qc9utH13zuk 1xLVpsNeYd8RSDmULECve6Q/SfmwHOhnAjknl78191CZEl3nMxUDPz1+rIoJ3ofN vW1IZpCDbqy3gyxN5aiEcF8iTgnQV37ul/6xMp7JBdi5bE4h8M1Ov8Wv3xhOCMu0 GiivguDK+swzb/05nBV1Ek9q6QpzDgojhn4vY+Oi7r6UwNWZyoS5jlZgKub7AgMB AAGjggJkMIICYDAdBgNVHQ4EFgQUeLvxjbXRNERAJsZQwAFRBTmXCLUwHwYDVR0j BBgwFoAUs1TTKMu/0e880pJoojsPzGDjosUwDgYDVR0PAQH/BAQDAgeAMIGIBgNV HR8EgYAwfjB8oHqgeIZ2cnN5bmM6Ly9yLm1hZ2VsbGFuLmlweG8uY29tL3JlcG8v YTAzNzViMzktZjk0OS00Y2I1LWI1MTktZjk0MDA4YjE2NTRjLTAvMC9CMzU0RDMy OENCQkZEMUVGM0NEMjkyNjhBMjNCMEZDQzYwRTNBMkM1LmNybDCBngYIKwYBBQUH AQEEgZEwgY4wgYsGCCsGAQUFBzAChn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5y aXBlLm5ldC9yZXBvc2l0b3J5LzYxNzA4YTZiLTZjM2EtNDBhMC1hMzAyLTU5NWVj YzE3ODQ4Yy8wL0IzNTREMzI4Q0JCRkQxRUYzQ0QyOTI2OEEyM0IwRkNDNjBFM0Ey QzUuY2VyMIGmBggrBgEFBQcBCwSBmTCBljCBkwYIKwYBBQUHMAuGgYZyc3luYzov L3IubWFnZWxsYW4uaXB4by5jb20vcmVwby9hMDM3NWIzOS1mOTQ5LTRjYjUtYjUx OS1mOTQwMDhiMTY1NGMtMC8wLzMxMzYzNDJlMzMzNzJlMzIzMzM2MmUzMDJmMzIz NDJkMzIzNDIwM2QzZTIwMzIzMDM3MzIzNjM3LnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQApCXsMA0GCSqG SIb3DQEBCwUAA4IBAQBaLw9wJNh6C3x8Ohh1d0T34gu9o62g4E61VbviNniLPG1E lVxEGqabMdwBAfQ3a5xgONufvEG+TRREh84XzOl81G1MfAAIen1ccqkwfjMTS+rJ x14OLFqfP0GCzpeeoNcyAtlLJaxbprNUtLzAa0ci2v+KebbiiTGjVbblgFVBw1Rz qsei5DD7Cr+46t3/5LBVcBdLNI3cT9fBpVZGwCdSQk7Chup4Gyi9kWeYLYAbJJ14 kLlg+Ru1K2Os2YgNEuQ2zJBGL9MuPwucqa0LGhPQrfUeWQVErz+aHhb3w2JBv8qZ mEH6eTPGfZpkpY8c52SVmbOZjCnlz1pycrJosnmD -----END CERTIFICATE-----Generated at Tue Oct 20 08:54:55 2026 by rpki-client