$ rpki-client -vvvf r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/3136342e33372e3233392e302f32342d3234203d3e20313532313739.roa File: 3136342e33372e3233392e302f32342d3234203d3e20313532313739.roa (raw, json) Hash identifier: WlgwJu6Swrq8gbdqn9pb4gysCHmWWNsGEMsoep8em04= Subject key identifier: 69:AD:B7:07:AC:AF:8D:54:A9:05:C4:77:C1:03:41:A5:8D:1F:3D:8A Certificate issuer: /CN=B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5 Certificate serial: 428596E67B5C27070FDFE22E7914C3D01DF67F06 Authority key identifier: B3:54:D3:28:CB:BF:D1:EF:3C:D2:92:68:A2:3B:0F:CC:60:E3:A2:C5 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.cer Subject info access: rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/3136342e33372e3233392e302f32342d3234203d3e20313532313739.roa Signing time: Mon 12 Oct 2026 00:02:09 +0000 ROA not before: Sun 11 Oct 2026 23:57:09 +0000 ROA not after: Mon 11 Oct 2027 00:02:09 +0000 asID: 152179 IP address blocks: 164.37.239.0/24 maxlen: 24 Validation: OK Signature path: rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.crl rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.mft rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.cer rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/D0A516B50426202A424F0EBFCB7D2BD4F744F964.crl rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/D0A516B50426202A424F0EBFCB7D2BD4F744F964.mft rsync://rpki.ripe.net/repository/DEFAULT/0KUWtQQmICpCTw6_y30r1PdE-WQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Oct 2026 14:28:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 42:85:96:e6:7b:5c:27:07:0f:df:e2:2e:79:14:c3:d0:1d:f6:7f:06 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5 Validity Not Before: Oct 11 23:57:09 2026 GMT Not After : Oct 11 00:02:09 2027 GMT Subject: CN=69ADB707ACAF8D54A905C477C10341A58D1F3D8A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:2a:66:bb:af:28:ff:a9:d0:45:b2:e8:a2:d5: 2b:14:30:24:79:9d:11:ce:b0:36:08:c6:46:ee:a9: ff:26:49:b0:b5:46:43:a8:da:d4:35:db:2d:ce:19: 2a:b9:7c:71:a1:30:10:9d:54:71:1a:1e:9c:25:be: f3:9f:f7:7e:30:bc:98:f5:8a:3e:4c:f9:f1:ef:08: a7:c7:03:42:c4:94:64:f7:4e:68:c0:bf:49:bf:ce: 26:da:b0:82:8c:ef:ac:d3:78:f3:d5:1e:34:9b:7b: 46:b5:ee:b3:e1:6b:5b:99:58:39:e5:92:4d:22:87: 30:6b:65:ac:11:84:f9:42:b7:d7:4a:67:6a:e8:67: 97:19:c6:ee:55:0d:a0:9f:d1:1f:5a:39:e8:34:7f: 4f:df:9e:f7:27:7a:65:da:49:7e:55:22:c3:88:fe: cf:f5:14:7f:fd:da:2d:1b:4e:63:56:a1:f6:69:99: f9:e8:65:2f:65:14:9e:b7:05:d4:aa:3b:d3:d1:13: 5c:47:36:4f:92:13:a4:95:5f:a2:f0:af:6b:96:7b: de:6c:15:70:42:c8:c3:48:b4:32:cc:21:a4:f5:b3: 7e:fa:c6:d0:ac:71:55:13:4e:d8:db:10:31:bd:d4: 26:13:47:9e:fe:77:d7:d3:24:8c:a0:29:15:e7:a8: 07:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:AD:B7:07:AC:AF:8D:54:A9:05:C4:77:C1:03:41:A5:8D:1F:3D:8A X509v3 Authority Key Identifier: keyid:B3:54:D3:28:CB:BF:D1:EF:3C:D2:92:68:A2:3B:0F:CC:60:E3:A2:C5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.cer Subject Information Access: Signed Object - URI:rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/3136342e33372e3233392e302f32342d3234203d3e20313532313739.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 164.37.239.0/24 Signature Algorithm: sha256WithRSAEncryption a1:52:09:c5:71:56:57:a0:2e:85:c9:1d:f2:22:4d:25:65:eb: fa:b5:72:98:50:8b:a5:1e:f8:ee:e3:c5:bf:e0:4e:2d:dd:a1: 4d:85:c6:c0:bb:a9:7e:15:a9:d3:06:9a:f0:e7:fc:74:38:48: e5:b0:3c:b5:a0:93:2a:eb:1e:79:72:13:d1:b8:db:6b:30:21: be:cb:b3:84:11:83:25:2d:2e:02:7a:ee:23:a5:52:ae:eb:53: 74:97:95:99:71:30:84:7a:dd:0d:21:72:45:77:35:92:a4:36: 2f:83:46:a6:f1:fa:f5:6b:ae:b2:0d:a5:bf:ae:74:af:bb:03: 46:b5:fd:90:05:f4:99:83:75:30:cc:48:8b:57:98:b2:df:f2: 5f:a9:1d:f0:c8:dd:b9:31:41:74:9c:35:39:64:c2:62:46:01: d3:9a:22:19:75:cb:d4:14:0a:f9:74:6d:d9:cb:a4:ba:e8:45: da:f6:e0:ab:1d:a5:67:b7:b3:65:5d:2b:a9:b5:90:58:a4:fe: a1:6d:f4:0c:f5:64:45:5a:6e:52:33:1c:a2:39:91:5a:4f:3e: 07:99:56:36:a1:eb:08:ea:c8:8b:ad:aa:7c:a4:08:7f:d4:11: 93:8f:8a:eb:8f:e6:b7:6f:4e:f2:73:5c:3b:1c:28:0e:a7:bb: 20:a7:7b:d7 -----BEGIN CERTIFICATE----- MIIFWjCCBEKgAwIBAgIUQoWW5ntcJwcP3+IueRTD0B32fwYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjM1NEQzMjhDQkJGRDFFRjNDRDI5MjY4QTIzQjBGQ0M2 MEUzQTJDNTAeFw0yNjEwMTEyMzU3MDlaFw0yNzEwMTEwMDAyMDlaMDMxMTAvBgNV BAMTKDY5QURCNzA3QUNBRjhENTRBOTA1QzQ3N0MxMDM0MUE1OEQxRjNEOEEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDdKma7ryj/qdBFsuii1SsUMCR5 nRHOsDYIxkbuqf8mSbC1RkOo2tQ12y3OGSq5fHGhMBCdVHEaHpwlvvOf934wvJj1 ij5M+fHvCKfHA0LElGT3TmjAv0m/zibasIKM76zTePPVHjSbe0a17rPha1uZWDnl kk0ihzBrZawRhPlCt9dKZ2roZ5cZxu5VDaCf0R9aOeg0f0/fnvcnemXaSX5VIsOI /s/1FH/92i0bTmNWofZpmfnoZS9lFJ63BdSqO9PRE1xHNk+SE6SVX6Lwr2uWe95s FXBCyMNItDLMIaT1s376xtCscVUTTtjbEDG91CYTR57+d9fTJIygKRXnqAdNAgMB AAGjggJkMIICYDAdBgNVHQ4EFgQUaa23B6yvjVSpBcR3wQNBpY0fPYowHwYDVR0j BBgwFoAUs1TTKMu/0e880pJoojsPzGDjosUwDgYDVR0PAQH/BAQDAgeAMIGIBgNV HR8EgYAwfjB8oHqgeIZ2cnN5bmM6Ly9yLm1hZ2VsbGFuLmlweG8uY29tL3JlcG8v YTAzNzViMzktZjk0OS00Y2I1LWI1MTktZjk0MDA4YjE2NTRjLTAvMC9CMzU0RDMy OENCQkZEMUVGM0NEMjkyNjhBMjNCMEZDQzYwRTNBMkM1LmNybDCBngYIKwYBBQUH AQEEgZEwgY4wgYsGCCsGAQUFBzAChn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5y aXBlLm5ldC9yZXBvc2l0b3J5LzYxNzA4YTZiLTZjM2EtNDBhMC1hMzAyLTU5NWVj YzE3ODQ4Yy8wL0IzNTREMzI4Q0JCRkQxRUYzQ0QyOTI2OEEyM0IwRkNDNjBFM0Ey QzUuY2VyMIGmBggrBgEFBQcBCwSBmTCBljCBkwYIKwYBBQUHMAuGgYZyc3luYzov L3IubWFnZWxsYW4uaXB4by5jb20vcmVwby9hMDM3NWIzOS1mOTQ5LTRjYjUtYjUx OS1mOTQwMDhiMTY1NGMtMC8wLzMxMzYzNDJlMzMzNzJlMzIzMzM5MmUzMDJmMzIz NDJkMzIzNDIwM2QzZTIwMzEzNTMyMzEzNzM5LnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQApCXvMA0GCSqG SIb3DQEBCwUAA4IBAQChUgnFcVZXoC6FyR3yIk0lZev6tXKYUIulHvju48W/4E4t 3aFNhcbAu6l+FanTBprw5/x0OEjlsDy1oJMq6x55chPRuNtrMCG+y7OEEYMlLS4C eu4jpVKu61N0l5WZcTCEet0NIXJFdzWSpDYvg0am8fr1a66yDaW/rnSvuwNGtf2Q BfSZg3UwzEiLV5iy3/JfqR3wyN25MUF0nDU5ZMJiRgHTmiIZdcvUFAr5dG3Zy6S6 6EXa9uCrHaVnt7NlXSuptZBYpP6hbfQM9WRFWm5SMxyiOZFaTz4HmVY2oesI6siL rap8pAh/1BGTj4rrj+a3b07yc1w7HCgOp7sgp3vX -----END CERTIFICATE-----Generated at Mon Oct 19 20:34:45 2026 by rpki-client