$ rpki-client -vvvf r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/3136342e33372e3234302e302f32302d3234203d3e203436343530.roa File: 3136342e33372e3234302e302f32302d3234203d3e203436343530.roa (raw, json) Hash identifier: 8EG7WAPMPtZD2FG+guLw/KWE/3qOm0p+gEus2zhUwpc= Subject key identifier: BC:4E:0F:3B:39:9A:71:6F:57:B2:4A:B7:40:64:53:7A:7C:75:43:2C Certificate issuer: /CN=B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5 Certificate serial: 7BAC258CB01437DF0268FB171E9C7C5F6C007592 Authority key identifier: B3:54:D3:28:CB:BF:D1:EF:3C:D2:92:68:A2:3B:0F:CC:60:E3:A2:C5 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.cer Subject info access: rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/3136342e33372e3234302e302f32302d3234203d3e203436343530.roa Signing time: Mon 12 Oct 2026 00:02:07 +0000 ROA not before: Sun 11 Oct 2026 23:57:07 +0000 ROA not after: Mon 11 Oct 2027 00:02:07 +0000 asID: 46450 IP address blocks: 164.37.240.0/20 maxlen: 24 Validation: OK Signature path: rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.crl rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.mft rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.cer rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/D0A516B50426202A424F0EBFCB7D2BD4F744F964.crl rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/D0A516B50426202A424F0EBFCB7D2BD4F744F964.mft rsync://rpki.ripe.net/repository/DEFAULT/0KUWtQQmICpCTw6_y30r1PdE-WQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 19 Oct 2026 17:00:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7b:ac:25:8c:b0:14:37:df:02:68:fb:17:1e:9c:7c:5f:6c:00:75:92 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5 Validity Not Before: Oct 11 23:57:07 2026 GMT Not After : Oct 11 00:02:07 2027 GMT Subject: CN=BC4E0F3B399A716F57B24AB74064537A7C75432C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:0b:dc:f2:66:88:bb:d8:f6:8e:80:85:6b:d1: 67:32:6a:b1:1d:8e:5a:fd:6c:92:a6:61:22:af:68: 95:da:02:9a:3b:a3:ff:ff:1e:b1:c9:5d:ad:27:ae: 75:26:e9:c8:00:f7:af:50:58:23:1c:82:a5:7f:26: 5f:b0:d8:08:a3:66:ff:3b:71:94:37:f6:2a:18:06: eb:27:df:7c:c2:f2:8e:a7:65:9f:1a:ea:29:de:f8: ad:be:ff:5b:da:d0:8b:5f:92:11:ac:da:46:9b:17: 98:8c:e3:8a:02:f8:cf:18:f8:b3:58:f8:2d:82:70: c6:00:57:bf:c8:26:27:c2:8b:22:d9:b4:26:56:bd: ba:3e:13:b4:dd:04:41:d5:0c:4c:69:01:39:f6:61: cf:70:a6:ca:67:e7:4c:8f:21:97:c8:e1:b8:ef:1d: 03:d1:0e:7e:25:6a:c9:ad:e3:77:53:4f:09:c7:cf: e0:ee:ea:12:19:f8:c9:87:a4:0d:35:5d:1b:36:e9: 8d:fc:f1:5e:46:e4:64:1d:fa:6d:30:8a:5c:72:ba: 3a:26:79:fc:91:a1:fd:dd:f3:3b:1b:eb:8f:0e:9e: d1:26:b4:97:5e:e5:67:26:34:db:81:16:ad:48:ce: 9b:79:67:59:ef:4b:c5:a8:8a:2b:5b:39:11:e1:25: b7:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:4E:0F:3B:39:9A:71:6F:57:B2:4A:B7:40:64:53:7A:7C:75:43:2C X509v3 Authority Key Identifier: keyid:B3:54:D3:28:CB:BF:D1:EF:3C:D2:92:68:A2:3B:0F:CC:60:E3:A2:C5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.cer Subject Information Access: Signed Object - URI:rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/3136342e33372e3234302e302f32302d3234203d3e203436343530.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 164.37.240.0/20 Signature Algorithm: sha256WithRSAEncryption 10:5d:ee:8b:62:3c:a8:18:87:90:7b:ee:70:7b:f9:3b:a2:4e: 6f:29:99:87:eb:ae:35:9d:a5:ac:ed:41:e2:71:8f:ef:82:04: 12:b3:92:b0:ac:45:33:8c:1a:65:23:72:ec:62:e2:d6:f4:0e: 11:45:a6:96:86:f8:0c:a2:7f:1b:f7:6c:41:04:ad:b4:f4:22: 7f:5c:58:ff:2d:bb:ee:41:20:2e:c7:8f:a1:80:3c:c5:2b:16: 9f:7f:0f:89:d3:26:cc:17:00:41:f8:2b:aa:22:9a:94:f9:c5: 3d:0c:c7:c5:46:58:bf:63:08:53:7b:0e:5d:a8:b0:ae:0e:d5: 3f:93:f9:8d:6e:a2:04:44:d0:90:4a:b3:5d:e8:0e:31:77:9a: 7f:bb:c0:60:50:27:02:47:70:a7:62:38:64:10:c7:01:b9:ca: 8f:df:01:0e:ba:43:a1:03:b5:16:a0:1d:3c:85:16:9e:c2:f8: 53:f5:82:45:f5:df:12:66:e6:fc:4b:5f:42:6c:50:90:68:fe: 9f:f2:9d:41:14:5e:10:73:79:cc:db:83:04:c2:c5:33:55:96: 58:3a:e5:3b:01:33:36:2f:93:9e:a6:70:71:aa:89:28:54:72: a8:b1:bc:fb:6f:21:2f:79:9a:93:d2:58:ee:97:64:a5:88:69: a8:dd:76:60 -----BEGIN CERTIFICATE----- MIIFWDCCBECgAwIBAgIUe6wljLAUN98CaPsXHpx8X2wAdZIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjM1NEQzMjhDQkJGRDFFRjNDRDI5MjY4QTIzQjBGQ0M2 MEUzQTJDNTAeFw0yNjEwMTEyMzU3MDdaFw0yNzEwMTEwMDAyMDdaMDMxMTAvBgNV BAMTKEJDNEUwRjNCMzk5QTcxNkY1N0IyNEFCNzQwNjQ1MzdBN0M3NTQzMkMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDAC9zyZoi72PaOgIVr0WcyarEd jlr9bJKmYSKvaJXaApo7o///HrHJXa0nrnUm6cgA969QWCMcgqV/Jl+w2AijZv87 cZQ39ioYBusn33zC8o6nZZ8a6ine+K2+/1va0ItfkhGs2kabF5iM44oC+M8Y+LNY +C2CcMYAV7/IJifCiyLZtCZWvbo+E7TdBEHVDExpATn2Yc9wpspn50yPIZfI4bjv HQPRDn4lasmt43dTTwnHz+Du6hIZ+MmHpA01XRs26Y388V5G5GQd+m0wilxyujom efyRof3d8zsb648OntEmtJde5WcmNNuBFq1Izpt5Z1nvS8WoiitbORHhJbc7AgMB AAGjggJiMIICXjAdBgNVHQ4EFgQUvE4POzmacW9Xskq3QGRTenx1QywwHwYDVR0j BBgwFoAUs1TTKMu/0e880pJoojsPzGDjosUwDgYDVR0PAQH/BAQDAgeAMIGIBgNV HR8EgYAwfjB8oHqgeIZ2cnN5bmM6Ly9yLm1hZ2VsbGFuLmlweG8uY29tL3JlcG8v YTAzNzViMzktZjk0OS00Y2I1LWI1MTktZjk0MDA4YjE2NTRjLTAvMC9CMzU0RDMy OENCQkZEMUVGM0NEMjkyNjhBMjNCMEZDQzYwRTNBMkM1LmNybDCBngYIKwYBBQUH AQEEgZEwgY4wgYsGCCsGAQUFBzAChn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5y aXBlLm5ldC9yZXBvc2l0b3J5LzYxNzA4YTZiLTZjM2EtNDBhMC1hMzAyLTU5NWVj YzE3ODQ4Yy8wL0IzNTREMzI4Q0JCRkQxRUYzQ0QyOTI2OEEyM0IwRkNDNjBFM0Ey QzUuY2VyMIGkBggrBgEFBQcBCwSBlzCBlDCBkQYIKwYBBQUHMAuGgYRyc3luYzov L3IubWFnZWxsYW4uaXB4by5jb20vcmVwby9hMDM3NWIzOS1mOTQ5LTRjYjUtYjUx OS1mOTQwMDhiMTY1NGMtMC8wLzMxMzYzNDJlMzMzNzJlMzIzNDMwMmUzMDJmMzIz MDJkMzIzNDIwM2QzZTIwMzQzNjM0MzUzMC5yb2EwGAYDVR0gAQH/BA4wDDAKBggr BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEBKQl8DANBgkqhkiG 9w0BAQsFAAOCAQEAEF3ui2I8qBiHkHvucHv5O6JObymZh+uuNZ2lrO1B4nGP74IE ErOSsKxFM4waZSNy7GLi1vQOEUWmlob4DKJ/G/dsQQSttPQif1xY/y277kEgLseP oYA8xSsWn38PidMmzBcAQfgrqiKalPnFPQzHxUZYv2MIU3sOXaiwrg7VP5P5jW6i BETQkEqzXegOMXeaf7vAYFAnAkdwp2I4ZBDHAbnKj98BDrpDoQO1FqAdPIUWnsL4 U/WCRfXfEmbm/EtfQmxQkGj+n/KdQRReEHN5zNuDBMLFM1WWWDrlOwEzNi+TnqZw caqJKFRyqLG8+28hL3mak9JY7pdkpYhpqN12YA== -----END CERTIFICATE-----Generated at Mon Oct 19 04:27:27 2026 by rpki-client