$ rpki-client -vvvf r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/3136342e33372e3139322e302f32342d3234203d3e20343031333632.roa File: 3136342e33372e3139322e302f32342d3234203d3e20343031333632.roa (raw, json) Hash identifier: dJbJkVQ9SNWekDZss1I9Y5W5ZwVyyrRyvddUcxgXm4Y= Subject key identifier: 45:84:16:52:60:0C:16:CB:58:4B:19:3C:4D:19:55:43:76:36:08:48 Certificate issuer: /CN=B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5 Certificate serial: 43928CCDF30CEACE8A8010E1FF271FA87137A206 Authority key identifier: B3:54:D3:28:CB:BF:D1:EF:3C:D2:92:68:A2:3B:0F:CC:60:E3:A2:C5 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.cer Subject info access: rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/3136342e33372e3139322e302f32342d3234203d3e20343031333632.roa Signing time: Tue 20 Oct 2026 07:41:21 +0000 ROA not before: Tue 20 Oct 2026 07:36:21 +0000 ROA not after: Tue 19 Oct 2027 07:41:21 +0000 asID: 401362 IP address blocks: 164.37.192.0/24 maxlen: 24 Validation: OK Signature path: rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.crl rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.mft rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.cer rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/D0A516B50426202A424F0EBFCB7D2BD4F744F964.crl rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/D0A516B50426202A424F0EBFCB7D2BD4F744F964.mft rsync://rpki.ripe.net/repository/DEFAULT/0KUWtQQmICpCTw6_y30r1PdE-WQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Oct 2026 17:04:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 43:92:8c:cd:f3:0c:ea:ce:8a:80:10:e1:ff:27:1f:a8:71:37:a2:06 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5 Validity Not Before: Oct 20 07:36:21 2026 GMT Not After : Oct 19 07:41:21 2027 GMT Subject: CN=45841652600C16CB584B193C4D19554376360848 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:7c:9a:f8:22:f0:ca:63:2a:e4:3e:0e:63:65: 23:e3:76:0a:e2:f3:ac:43:d6:2e:36:ab:3f:89:d4: 94:31:e7:22:d4:ef:4a:ee:94:b7:38:2b:62:e3:df: 21:32:01:dd:16:27:0d:dc:f3:40:05:d8:e1:8c:22: 81:ba:0e:62:56:8a:91:66:30:34:d8:7e:ee:55:0d: 39:70:d2:bc:67:f6:98:4f:17:0d:61:80:9d:36:83: f0:11:c4:7e:18:ab:20:f1:71:95:6f:90:9c:9b:85: 28:af:06:db:4d:5b:33:86:0e:41:14:68:41:57:fc: ae:c8:ef:e2:d8:84:65:96:c2:b7:0f:6f:1f:49:63: 71:73:bb:1b:b2:b4:da:6d:8c:32:bc:d4:ca:3a:5e: 62:86:0c:be:68:c0:4c:2c:d0:d9:cc:20:33:fc:49: bc:d8:12:74:7f:a2:99:5a:c4:33:45:8d:55:37:94: b8:5a:4e:68:af:53:42:1d:91:81:5d:35:f7:d9:e1: 2e:a7:3a:b5:97:59:3d:0b:c6:6b:14:13:ff:29:13: 14:f6:dd:ac:9f:a5:0e:d3:42:4f:39:b1:69:80:8f: 2a:6a:cb:e8:45:ae:6e:54:b8:f2:bc:c1:70:a8:7a: 60:d3:ea:09:90:20:f2:11:58:b7:2e:b3:63:01:bd: c1:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:84:16:52:60:0C:16:CB:58:4B:19:3C:4D:19:55:43:76:36:08:48 X509v3 Authority Key Identifier: keyid:B3:54:D3:28:CB:BF:D1:EF:3C:D2:92:68:A2:3B:0F:CC:60:E3:A2:C5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.cer Subject Information Access: Signed Object - URI:rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/3136342e33372e3139322e302f32342d3234203d3e20343031333632.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 164.37.192.0/24 Signature Algorithm: sha256WithRSAEncryption 23:ca:81:0a:86:e0:bd:04:11:b2:b0:f0:d2:c5:ed:3f:6a:ce: 56:7a:46:57:62:df:e4:54:f8:80:38:cd:b8:20:ae:dc:ca:86: af:64:84:e0:a9:1f:ec:5d:60:0c:f8:65:3b:d6:90:66:78:7c: 2c:ff:28:4a:c3:30:43:f5:bf:fe:3f:27:d3:0f:83:35:65:af: 62:1c:93:0a:88:1e:6f:f1:89:83:29:a9:37:0a:72:25:5d:c7: 2e:ed:31:46:64:da:f2:a1:52:38:98:fb:59:7c:4b:38:13:60: a9:4a:bc:02:73:f3:9f:81:d8:c0:49:c6:53:63:ea:b4:71:d8: ab:ab:ef:97:bc:8e:b9:42:a8:36:cc:2b:4c:1f:a4:29:62:94: 1a:3e:b4:57:d7:eb:10:e9:9e:54:75:09:97:ba:c5:e1:f7:62: 86:f4:5b:8a:89:9e:b7:8f:ff:be:bb:ac:7c:19:1a:66:0f:aa: 37:43:d6:54:44:30:f3:6f:15:b0:fd:76:a9:ea:0a:e2:f2:99: c8:fb:be:25:29:8b:23:3f:74:ed:f5:4d:d0:57:64:17:8d:61: c0:4d:b5:df:57:0f:ee:9e:bd:6e:3b:7e:31:5d:6f:1c:54:65: 50:a7:d5:ed:4a:7e:19:1d:24:65:6a:5b:71:29:4c:0b:31:12: d7:a2:9b:c8 -----BEGIN CERTIFICATE----- MIIFWjCCBEKgAwIBAgIUQ5KMzfMM6s6KgBDh/ycfqHE3ogYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjM1NEQzMjhDQkJGRDFFRjNDRDI5MjY4QTIzQjBGQ0M2 MEUzQTJDNTAeFw0yNjEwMjAwNzM2MjFaFw0yNzEwMTkwNzQxMjFaMDMxMTAvBgNV BAMTKDQ1ODQxNjUyNjAwQzE2Q0I1ODRCMTkzQzREMTk1NTQzNzYzNjA4NDgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDVfJr4IvDKYyrkPg5jZSPjdgri 86xD1i42qz+J1JQx5yLU70rulLc4K2Lj3yEyAd0WJw3c80AF2OGMIoG6DmJWipFm MDTYfu5VDTlw0rxn9phPFw1hgJ02g/ARxH4YqyDxcZVvkJybhSivBttNWzOGDkEU aEFX/K7I7+LYhGWWwrcPbx9JY3FzuxuytNptjDK81Mo6XmKGDL5owEws0NnMIDP8 SbzYEnR/oplaxDNFjVU3lLhaTmivU0IdkYFdNffZ4S6nOrWXWT0LxmsUE/8pExT2 3ayfpQ7TQk85sWmAjypqy+hFrm5UuPK8wXCoemDT6gmQIPIRWLcus2MBvcFzAgMB AAGjggJkMIICYDAdBgNVHQ4EFgQURYQWUmAMFstYSxk8TRlVQ3Y2CEgwHwYDVR0j BBgwFoAUs1TTKMu/0e880pJoojsPzGDjosUwDgYDVR0PAQH/BAQDAgeAMIGIBgNV HR8EgYAwfjB8oHqgeIZ2cnN5bmM6Ly9yLm1hZ2VsbGFuLmlweG8uY29tL3JlcG8v YTAzNzViMzktZjk0OS00Y2I1LWI1MTktZjk0MDA4YjE2NTRjLTAvMC9CMzU0RDMy OENCQkZEMUVGM0NEMjkyNjhBMjNCMEZDQzYwRTNBMkM1LmNybDCBngYIKwYBBQUH AQEEgZEwgY4wgYsGCCsGAQUFBzAChn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5y aXBlLm5ldC9yZXBvc2l0b3J5LzYxNzA4YTZiLTZjM2EtNDBhMC1hMzAyLTU5NWVj YzE3ODQ4Yy8wL0IzNTREMzI4Q0JCRkQxRUYzQ0QyOTI2OEEyM0IwRkNDNjBFM0Ey QzUuY2VyMIGmBggrBgEFBQcBCwSBmTCBljCBkwYIKwYBBQUHMAuGgYZyc3luYzov L3IubWFnZWxsYW4uaXB4by5jb20vcmVwby9hMDM3NWIzOS1mOTQ5LTRjYjUtYjUx OS1mOTQwMDhiMTY1NGMtMC8wLzMxMzYzNDJlMzMzNzJlMzEzOTMyMmUzMDJmMzIz NDJkMzIzNDIwM2QzZTIwMzQzMDMxMzMzNjMyLnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQApCXAMA0GCSqG SIb3DQEBCwUAA4IBAQAjyoEKhuC9BBGysPDSxe0/as5WekZXYt/kVPiAOM24IK7c yoavZITgqR/sXWAM+GU71pBmeHws/yhKwzBD9b/+PyfTD4M1Za9iHJMKiB5v8YmD Kak3CnIlXccu7TFGZNryoVI4mPtZfEs4E2CpSrwCc/OfgdjAScZTY+q0cdirq++X vI65Qqg2zCtMH6QpYpQaPrRX1+sQ6Z5UdQmXusXh92KG9FuKiZ63j/++u6x8GRpm D6o3Q9ZURDDzbxWw/Xap6gri8pnI+74lKYsjP3Tt9U3QV2QXjWHATbXfVw/unr1u O34xXW8cVGVQp9XtSn4ZHSRlaltxKUwLMRLXopvI -----END CERTIFICATE-----Generated at Sun Oct 25 07:57:33 2026 by rpki-client