$ rpki-client -vvvf r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/3136342e33372e3139322e302f32342d3234203d3e20323139323333.roa File: 3136342e33372e3139322e302f32342d3234203d3e20323139323333.roa (raw, json) Hash identifier: ZfkHQ/RUlURuOvTD8I8R2+Y+0grk1YMk8gjrI4mCJW4= Subject key identifier: A6:91:6F:C8:34:05:F1:66:BD:D2:15:5E:FF:8E:BF:B0:AA:B6:84:25 Certificate issuer: /CN=B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5 Certificate serial: 7BC1ADB08486A1B46C52FB666A10AEEE557D8699 Authority key identifier: B3:54:D3:28:CB:BF:D1:EF:3C:D2:92:68:A2:3B:0F:CC:60:E3:A2:C5 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.cer Subject info access: rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/3136342e33372e3139322e302f32342d3234203d3e20323139323333.roa Signing time: Thu 13 Aug 2026 12:14:59 +0000 ROA not before: Thu 13 Aug 2026 12:09:59 +0000 ROA not after: Thu 12 Aug 2027 12:14:59 +0000 asID: 219233 IP address blocks: 164.37.192.0/24 maxlen: 24 Validation: OK Signature path: rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.crl rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.mft rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.cer rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/D0A516B50426202A424F0EBFCB7D2BD4F744F964.crl rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/D0A516B50426202A424F0EBFCB7D2BD4F744F964.mft rsync://rpki.ripe.net/repository/DEFAULT/0KUWtQQmICpCTw6_y30r1PdE-WQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 03 Sep 2026 18:02:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7b:c1:ad:b0:84:86:a1:b4:6c:52:fb:66:6a:10:ae:ee:55:7d:86:99 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5 Validity Not Before: Aug 13 12:09:59 2026 GMT Not After : Aug 12 12:14:59 2027 GMT Subject: CN=A6916FC83405F166BDD2155EFF8EBFB0AAB68425 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:ea:1e:a1:0c:28:da:86:7e:6a:28:78:a1:f2: 1c:e4:ee:fd:2d:61:90:eb:fc:18:44:6e:cd:6a:85: 36:f5:1b:50:de:6d:96:b9:03:2d:05:4f:f7:54:a8: d1:de:59:3f:06:48:25:50:47:4e:d1:16:27:d2:a2: 56:b6:70:27:17:e1:8f:39:ed:3f:bd:0a:c8:70:08: 95:0a:9d:29:bc:5e:36:1c:3e:94:1e:df:af:b9:9e: 71:9a:aa:66:c1:2d:bc:65:7b:1e:24:03:b9:50:61: 17:d4:32:d7:76:e3:2c:fb:45:14:b0:6b:90:d5:1f: ba:48:34:6c:87:c8:41:6e:7a:97:73:83:71:83:fe: 6c:a3:2a:2f:b3:be:ba:34:9e:5d:b0:02:6e:e8:48: 52:c6:84:3a:fb:e3:5f:39:68:61:5c:b7:69:1c:61: 0f:44:a6:d8:12:2b:ee:55:6b:b9:0c:3f:8d:68:17: fa:d3:86:40:4e:8c:c2:29:be:55:d1:24:88:d7:33: f5:1a:e6:26:e0:d6:f3:b6:f6:7c:13:ad:63:85:22: a1:bc:2b:98:4b:5e:6d:c3:19:c5:a7:a3:23:2d:28: e2:94:33:d1:42:b9:fd:63:e8:d9:ba:a8:c9:62:a4: 85:0b:a4:87:3f:40:93:5c:47:06:9f:1d:3f:c5:13: 02:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:91:6F:C8:34:05:F1:66:BD:D2:15:5E:FF:8E:BF:B0:AA:B6:84:25 X509v3 Authority Key Identifier: keyid:B3:54:D3:28:CB:BF:D1:EF:3C:D2:92:68:A2:3B:0F:CC:60:E3:A2:C5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.cer Subject Information Access: Signed Object - URI:rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/3136342e33372e3139322e302f32342d3234203d3e20323139323333.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 164.37.192.0/24 Signature Algorithm: sha256WithRSAEncryption 54:5b:24:7f:1d:6b:39:b6:55:95:96:fb:95:79:da:4c:7c:11: 36:21:0c:ed:83:64:4b:88:d6:07:0c:e2:95:bd:2b:d7:b2:8d: f7:21:ae:05:5d:9f:26:58:56:4f:d8:3c:55:66:77:43:1b:a7: 0e:8f:cd:26:a7:c7:64:ec:4d:12:8c:19:96:22:3a:a2:c3:49: c2:c9:28:f7:da:4e:34:4e:14:f7:63:e6:0a:3c:df:b5:96:76: 87:bd:bf:30:89:de:c5:99:57:a0:bf:a2:49:a4:f4:d7:67:e3: be:f4:fd:67:ae:0d:1d:5f:43:fe:2b:06:4c:5c:48:2b:9a:fc: bb:7f:35:da:d3:71:0e:07:29:4c:26:8a:bc:0f:fc:6b:c2:f5: ad:2a:46:e5:40:ba:24:2a:41:c2:fe:dc:e6:60:ab:4a:e9:1d: ce:4f:38:e9:94:71:bc:48:1f:e7:ce:49:4b:28:98:9a:84:96: e2:34:9d:1c:2e:19:22:be:2a:4f:a7:78:c5:69:b6:5f:27:88: 50:3e:c6:2a:1a:9c:38:47:d9:e8:55:99:c6:b0:be:56:8d:0d: e9:5f:20:e8:1c:1a:98:c0:a7:77:8e:d5:e2:4c:04:b0:1b:4f: 4c:08:63:c2:c2:ae:da:b0:35:52:84:e6:94:f7:d8:fe:d9:4b: 45:81:04:e1 -----BEGIN CERTIFICATE----- MIIFWjCCBEKgAwIBAgIUe8GtsISGobRsUvtmahCu7lV9hpkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjM1NEQzMjhDQkJGRDFFRjNDRDI5MjY4QTIzQjBGQ0M2 MEUzQTJDNTAeFw0yNjA4MTMxMjA5NTlaFw0yNzA4MTIxMjE0NTlaMDMxMTAvBgNV BAMTKEE2OTE2RkM4MzQwNUYxNjZCREQyMTU1RUZGOEVCRkIwQUFCNjg0MjUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCH6h6hDCjahn5qKHih8hzk7v0t YZDr/BhEbs1qhTb1G1DebZa5Ay0FT/dUqNHeWT8GSCVQR07RFifSola2cCcX4Y85 7T+9CshwCJUKnSm8XjYcPpQe36+5nnGaqmbBLbxlex4kA7lQYRfUMtd24yz7RRSw a5DVH7pINGyHyEFuepdzg3GD/myjKi+zvro0nl2wAm7oSFLGhDr74185aGFct2kc YQ9EptgSK+5Va7kMP41oF/rThkBOjMIpvlXRJIjXM/Ua5ibg1vO29nwTrWOFIqG8 K5hLXm3DGcWnoyMtKOKUM9FCuf1j6Nm6qMlipIULpIc/QJNcRwafHT/FEwJdAgMB AAGjggJkMIICYDAdBgNVHQ4EFgQUppFvyDQF8Wa90hVe/46/sKq2hCUwHwYDVR0j BBgwFoAUs1TTKMu/0e880pJoojsPzGDjosUwDgYDVR0PAQH/BAQDAgeAMIGIBgNV HR8EgYAwfjB8oHqgeIZ2cnN5bmM6Ly9yLm1hZ2VsbGFuLmlweG8uY29tL3JlcG8v YTAzNzViMzktZjk0OS00Y2I1LWI1MTktZjk0MDA4YjE2NTRjLTAvMC9CMzU0RDMy OENCQkZEMUVGM0NEMjkyNjhBMjNCMEZDQzYwRTNBMkM1LmNybDCBngYIKwYBBQUH AQEEgZEwgY4wgYsGCCsGAQUFBzAChn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5y aXBlLm5ldC9yZXBvc2l0b3J5LzYxNzA4YTZiLTZjM2EtNDBhMC1hMzAyLTU5NWVj YzE3ODQ4Yy8wL0IzNTREMzI4Q0JCRkQxRUYzQ0QyOTI2OEEyM0IwRkNDNjBFM0Ey QzUuY2VyMIGmBggrBgEFBQcBCwSBmTCBljCBkwYIKwYBBQUHMAuGgYZyc3luYzov L3IubWFnZWxsYW4uaXB4by5jb20vcmVwby9hMDM3NWIzOS1mOTQ5LTRjYjUtYjUx OS1mOTQwMDhiMTY1NGMtMC8wLzMxMzYzNDJlMzMzNzJlMzEzOTMyMmUzMDJmMzIz NDJkMzIzNDIwM2QzZTIwMzIzMTM5MzIzMzMzLnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQApCXAMA0GCSqG SIb3DQEBCwUAA4IBAQBUWyR/HWs5tlWVlvuVedpMfBE2IQztg2RLiNYHDOKVvSvX so33Ia4FXZ8mWFZP2DxVZndDG6cOj80mp8dk7E0SjBmWIjqiw0nCySj32k40ThT3 Y+YKPN+1lnaHvb8wid7FmVegv6JJpPTXZ+O+9P1nrg0dX0P+KwZMXEgrmvy7fzXa 03EOBylMJoq8D/xrwvWtKkblQLokKkHC/tzmYKtK6R3OTzjplHG8SB/nzklLKJia hJbiNJ0cLhkivipPp3jFabZfJ4hQPsYqGpw4R9noVZnGsL5WjQ3pXyDoHBqYwKd3 jtXiTASwG09MCGPCwq7asDVShOaU99j+2UtFgQTh -----END CERTIFICATE-----Generated at Thu Sep 3 10:58:52 2026 by rpki-client