$ rpki-client -vvvf r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/3136342e33372e3233372e302f32342d3234203d3e203432393534.roa File: 3136342e33372e3233372e302f32342d3234203d3e203432393534.roa (raw, json) Hash identifier: gHw7toOstccHw9URe/M2FSYFQoeMXd15Bm2JC8hOqVs= Subject key identifier: A1:C1:6F:EB:DD:3C:2C:E6:49:5B:91:74:04:A6:33:28:0E:77:D8:3E Certificate issuer: /CN=B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5 Certificate serial: 5D8C4B1EA8CE5430D3A25DD5B5F7952DB57E81F4 Authority key identifier: B3:54:D3:28:CB:BF:D1:EF:3C:D2:92:68:A2:3B:0F:CC:60:E3:A2:C5 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.cer Subject info access: rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/3136342e33372e3233372e302f32342d3234203d3e203432393534.roa Signing time: Mon 12 Oct 2026 00:02:10 +0000 ROA not before: Sun 11 Oct 2026 23:57:10 +0000 ROA not after: Mon 11 Oct 2027 00:02:10 +0000 asID: 42954 IP address blocks: 164.37.237.0/24 maxlen: 24 Validation: OK Signature path: rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.crl rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.mft rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.cer rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/D0A516B50426202A424F0EBFCB7D2BD4F744F964.crl rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/D0A516B50426202A424F0EBFCB7D2BD4F744F964.mft rsync://rpki.ripe.net/repository/DEFAULT/0KUWtQQmICpCTw6_y30r1PdE-WQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Oct 2026 16:36:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5d:8c:4b:1e:a8:ce:54:30:d3:a2:5d:d5:b5:f7:95:2d:b5:7e:81:f4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5 Validity Not Before: Oct 11 23:57:10 2026 GMT Not After : Oct 11 00:02:10 2027 GMT Subject: CN=A1C16FEBDD3C2CE6495B917404A633280E77D83E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:53:92:8d:ba:1c:da:83:f8:eb:d4:72:34:5c: 6a:b0:d6:e8:27:0e:55:fe:39:c3:82:d1:dc:cc:ea: 2f:e5:33:17:1b:2d:ca:ca:84:91:b1:75:81:69:49: 0b:f2:c3:7e:d5:e3:ab:f8:6c:02:42:66:ac:a5:a0: 0a:08:c5:4d:1d:cc:2e:1f:83:7c:53:ac:cc:3b:bf: 87:4e:f7:85:e8:3b:e8:78:af:86:a2:dd:54:ef:b7: 77:3d:cd:fd:d1:be:5c:b2:a9:6b:12:48:9e:17:50: 78:8a:2e:25:ae:92:1e:2c:ed:98:9a:1b:68:80:89: 77:bf:2e:87:ed:a5:19:c6:fb:ae:7a:21:7d:8a:57: cb:c8:76:3b:fa:fe:6e:35:a2:de:ab:cd:9e:1e:59: 85:07:34:d6:a1:c6:24:6a:b7:69:89:e2:f4:89:50: 0c:a5:f4:3e:39:7f:1c:22:57:d2:9a:7a:2f:ea:0e: 8e:9c:42:03:ef:64:26:8d:5b:e3:4c:f9:5a:5e:25: e0:57:60:b9:d9:40:ef:0f:e4:13:a7:7e:19:81:3f: 65:be:a8:dd:6d:77:e5:bc:97:10:f4:34:5c:2d:e5: 6d:bc:c3:8c:5e:79:9b:92:84:1e:43:e5:5a:d6:ed: 16:c6:58:26:3f:c9:d9:17:15:71:35:d9:00:eb:4e: c7:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:C1:6F:EB:DD:3C:2C:E6:49:5B:91:74:04:A6:33:28:0E:77:D8:3E X509v3 Authority Key Identifier: keyid:B3:54:D3:28:CB:BF:D1:EF:3C:D2:92:68:A2:3B:0F:CC:60:E3:A2:C5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.cer Subject Information Access: Signed Object - URI:rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/3136342e33372e3233372e302f32342d3234203d3e203432393534.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 164.37.237.0/24 Signature Algorithm: sha256WithRSAEncryption 28:86:da:84:32:f6:3c:23:fc:cf:6e:7c:ac:2c:ec:9b:ea:04: d3:d3:c0:fa:4b:2c:fa:04:d9:1c:ea:ed:d6:3d:43:e4:5a:dc: 89:fd:61:ea:5d:fe:d1:13:fb:3c:fb:4d:3a:37:dc:11:d1:38: fd:2c:4f:d4:1f:4b:f6:13:69:99:39:28:d0:8d:3d:d7:44:7f: 7d:2a:c0:50:5d:5b:63:86:3c:37:6c:71:f5:98:34:8e:a2:96: 81:a3:b9:3f:a7:1a:bb:69:0b:d4:ae:d6:05:cb:13:b7:b1:e2: 36:12:87:f9:26:c2:4d:f3:4d:aa:99:e6:ee:56:32:5b:ea:cf: 5a:6b:af:d9:ba:97:81:bb:81:ff:9f:7f:b1:a3:c8:f3:d8:23: 86:16:93:c3:be:cc:c3:75:fe:ff:ce:89:62:c5:9d:c0:f0:81: b0:0e:33:36:f4:b1:4f:51:03:ec:28:18:39:21:32:67:5a:1d: 62:33:9d:0a:a1:b8:8d:40:1d:3c:ce:60:bc:b5:2d:36:0b:59: da:05:d2:d0:b9:f2:cc:74:af:60:9e:6e:5e:2c:42:2d:c1:2d: b3:49:4e:6e:c3:de:e5:82:e6:7e:d2:86:2a:18:55:05:a2:39: 63:93:97:87:4a:a4:c3:db:ce:d3:1e:0e:a4:6d:9a:e4:f5:88: 9b:25:35:cd -----BEGIN CERTIFICATE----- MIIFWDCCBECgAwIBAgIUXYxLHqjOVDDTol3VtfeVLbV+gfQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjM1NEQzMjhDQkJGRDFFRjNDRDI5MjY4QTIzQjBGQ0M2 MEUzQTJDNTAeFw0yNjEwMTEyMzU3MTBaFw0yNzEwMTEwMDAyMTBaMDMxMTAvBgNV BAMTKEExQzE2RkVCREQzQzJDRTY0OTVCOTE3NDA0QTYzMzI4MEU3N0Q4M0UwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCwU5KNuhzag/jr1HI0XGqw1ugn DlX+OcOC0dzM6i/lMxcbLcrKhJGxdYFpSQvyw37V46v4bAJCZqyloAoIxU0dzC4f g3xTrMw7v4dO94XoO+h4r4ai3VTvt3c9zf3RvlyyqWsSSJ4XUHiKLiWukh4s7Zia G2iAiXe/LoftpRnG+656IX2KV8vIdjv6/m41ot6rzZ4eWYUHNNahxiRqt2mJ4vSJ UAyl9D45fxwiV9Kaei/qDo6cQgPvZCaNW+NM+VpeJeBXYLnZQO8P5BOnfhmBP2W+ qN1td+W8lxD0NFwt5W28w4xeeZuShB5D5VrW7RbGWCY/ydkXFXE12QDrTscxAgMB AAGjggJiMIICXjAdBgNVHQ4EFgQUocFv6908LOZJW5F0BKYzKA532D4wHwYDVR0j BBgwFoAUs1TTKMu/0e880pJoojsPzGDjosUwDgYDVR0PAQH/BAQDAgeAMIGIBgNV HR8EgYAwfjB8oHqgeIZ2cnN5bmM6Ly9yLm1hZ2VsbGFuLmlweG8uY29tL3JlcG8v YTAzNzViMzktZjk0OS00Y2I1LWI1MTktZjk0MDA4YjE2NTRjLTAvMC9CMzU0RDMy OENCQkZEMUVGM0NEMjkyNjhBMjNCMEZDQzYwRTNBMkM1LmNybDCBngYIKwYBBQUH AQEEgZEwgY4wgYsGCCsGAQUFBzAChn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5y aXBlLm5ldC9yZXBvc2l0b3J5LzYxNzA4YTZiLTZjM2EtNDBhMC1hMzAyLTU5NWVj YzE3ODQ4Yy8wL0IzNTREMzI4Q0JCRkQxRUYzQ0QyOTI2OEEyM0IwRkNDNjBFM0Ey QzUuY2VyMIGkBggrBgEFBQcBCwSBlzCBlDCBkQYIKwYBBQUHMAuGgYRyc3luYzov L3IubWFnZWxsYW4uaXB4by5jb20vcmVwby9hMDM3NWIzOS1mOTQ5LTRjYjUtYjUx OS1mOTQwMDhiMTY1NGMtMC8wLzMxMzYzNDJlMzMzNzJlMzIzMzM3MmUzMDJmMzIz NDJkMzIzNDIwM2QzZTIwMzQzMjM5MzUzNC5yb2EwGAYDVR0gAQH/BA4wDDAKBggr BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAKQl7TANBgkqhkiG 9w0BAQsFAAOCAQEAKIbahDL2PCP8z258rCzsm+oE09PA+kss+gTZHOrt1j1D5Frc if1h6l3+0RP7PPtNOjfcEdE4/SxP1B9L9hNpmTko0I0910R/fSrAUF1bY4Y8N2xx 9Zg0jqKWgaO5P6cau2kL1K7WBcsTt7HiNhKH+SbCTfNNqpnm7lYyW+rPWmuv2bqX gbuB/59/saPI89gjhhaTw77Mw3X+/86JYsWdwPCBsA4zNvSxT1ED7CgYOSEyZ1od YjOdCqG4jUAdPM5gvLUtNgtZ2gXS0LnyzHSvYJ5uXixCLcEts0lObsPe5YLmftKG KhhVBaI5Y5OXh0qkw9vO0x4OpG2a5PWImyU1zQ== -----END CERTIFICATE-----Generated at Tue Oct 20 03:43:44 2026 by rpki-client