$ rpki-client -vvvf r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/3136342e33372e3139352e302f32342d3234203d3e20343031333632.roa File: 3136342e33372e3139352e302f32342d3234203d3e20343031333632.roa (raw, json) Hash identifier: eNzyAV3JBhbRwh446UfJXKEENy7zWwKw+oeUttTVehg= Subject key identifier: 05:A0:64:44:D4:77:C8:99:B1:2D:33:FA:A6:F5:05:99:4A:E4:D9:34 Certificate issuer: /CN=B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5 Certificate serial: 65613E342A457135F2F6CD5BA101896D17A445FD Authority key identifier: B3:54:D3:28:CB:BF:D1:EF:3C:D2:92:68:A2:3B:0F:CC:60:E3:A2:C5 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.cer Subject info access: rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/3136342e33372e3139352e302f32342d3234203d3e20343031333632.roa Signing time: Tue 11 Aug 2026 07:31:59 +0000 ROA not before: Tue 11 Aug 2026 07:26:59 +0000 ROA not after: Tue 10 Aug 2027 07:31:59 +0000 asID: 401362 IP address blocks: 164.37.195.0/24 maxlen: 24 Validation: OK Signature path: rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.crl rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.mft rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.cer rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/D0A516B50426202A424F0EBFCB7D2BD4F744F964.crl rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/D0A516B50426202A424F0EBFCB7D2BD4F744F964.mft rsync://rpki.ripe.net/repository/DEFAULT/0KUWtQQmICpCTw6_y30r1PdE-WQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 03 Sep 2026 18:02:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 65:61:3e:34:2a:45:71:35:f2:f6:cd:5b:a1:01:89:6d:17:a4:45:fd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5 Validity Not Before: Aug 11 07:26:59 2026 GMT Not After : Aug 10 07:31:59 2027 GMT Subject: CN=05A06444D477C899B12D33FAA6F505994AE4D934 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:91:bb:5f:d2:85:73:21:2f:b9:de:67:0b:00: 0e:cb:f4:f9:c9:86:a1:61:db:a6:51:56:60:4d:61: 82:24:34:1e:d3:28:ce:83:55:bc:30:aa:55:9a:7c: 5c:5d:55:86:40:f0:29:9a:e0:a3:fa:d8:c9:67:9f: 8f:03:d9:be:56:c0:37:66:e1:76:e8:03:72:a9:38: bd:89:bb:cb:1e:c9:5e:5e:9b:b5:cb:e0:82:48:43: fc:10:59:84:4c:09:f6:38:ce:97:4d:61:9a:3b:3a: 51:6e:60:e0:95:09:55:5a:0b:32:58:83:68:c7:1e: 4f:6c:3d:1c:be:36:ca:b5:fd:b3:2f:96:5e:70:f4: 52:fc:f6:2f:c3:d2:97:1e:85:e1:10:3d:d8:a1:5c: cb:d5:0c:fb:b2:3c:6a:59:cf:83:8a:de:ae:f5:a2: 2d:be:05:83:d4:28:f3:78:b0:74:91:d1:4e:bd:96: af:fe:f1:da:d5:8a:fc:02:17:7e:1c:35:72:68:97: d1:1f:ca:73:ed:47:3d:a3:e0:e2:0f:4d:09:1d:07: 46:6c:59:c6:ba:f1:fb:d2:6b:0d:04:b5:35:c7:65: 3d:78:fb:94:c8:e7:ed:e6:22:1f:67:0e:ce:42:c6: f6:7c:d6:8f:0d:ba:0c:a1:ce:5a:cb:98:e8:2e:68: a1:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:A0:64:44:D4:77:C8:99:B1:2D:33:FA:A6:F5:05:99:4A:E4:D9:34 X509v3 Authority Key Identifier: keyid:B3:54:D3:28:CB:BF:D1:EF:3C:D2:92:68:A2:3B:0F:CC:60:E3:A2:C5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.cer Subject Information Access: Signed Object - URI:rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/3136342e33372e3139352e302f32342d3234203d3e20343031333632.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 164.37.195.0/24 Signature Algorithm: sha256WithRSAEncryption a5:16:a5:75:32:b6:eb:da:fd:61:ca:8b:76:24:b7:26:eb:2e: ce:ec:d4:57:8c:0c:bb:37:a6:cc:4e:01:21:b8:05:d0:a0:3f: e7:e4:75:bd:e7:cc:80:5c:78:b5:cb:9e:97:0f:92:8e:29:c3: 71:a6:cb:ea:3b:2e:43:ed:8a:17:08:4c:6c:bb:b1:b1:69:ae: d9:f8:ea:71:7f:f0:8f:74:d0:aa:05:68:f0:0d:c4:eb:d0:dc: ad:b6:df:56:fc:1c:9c:76:fe:c7:ca:9f:67:dd:25:33:c5:5e: ce:9a:32:ff:c8:0d:ab:95:cd:54:95:6c:89:8d:15:46:fa:5b: 22:b8:0b:a5:0d:c3:eb:e3:f9:de:11:29:10:69:5e:bf:3a:28: 17:97:80:f5:f9:e2:07:31:a2:4f:27:c1:22:95:a2:d5:c3:d9: 97:d7:15:f5:64:f3:89:b2:42:d2:73:cc:d7:a7:db:09:88:a9: c5:ee:db:a6:30:47:06:e9:ce:b4:2d:8d:a0:a2:44:b4:37:c8: bb:74:50:d2:50:ea:16:ba:60:bb:72:0d:37:3b:9d:da:4b:ee: 2f:f3:9a:ac:fc:cb:47:cd:7f:4f:c1:c4:5b:47:90:6b:0b:be: 6f:6a:4d:9f:c6:f4:7c:23:ec:39:74:30:97:71:ef:56:38:74: 70:85:f1:72 -----BEGIN CERTIFICATE----- MIIFWjCCBEKgAwIBAgIUZWE+NCpFcTXy9s1boQGJbRekRf0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjM1NEQzMjhDQkJGRDFFRjNDRDI5MjY4QTIzQjBGQ0M2 MEUzQTJDNTAeFw0yNjA4MTEwNzI2NTlaFw0yNzA4MTAwNzMxNTlaMDMxMTAvBgNV BAMTKDA1QTA2NDQ0RDQ3N0M4OTlCMTJEMzNGQUE2RjUwNTk5NEFFNEQ5MzQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCykbtf0oVzIS+53mcLAA7L9PnJ hqFh26ZRVmBNYYIkNB7TKM6DVbwwqlWafFxdVYZA8Cma4KP62Mlnn48D2b5WwDdm 4XboA3KpOL2Ju8seyV5em7XL4IJIQ/wQWYRMCfY4zpdNYZo7OlFuYOCVCVVaCzJY g2jHHk9sPRy+Nsq1/bMvll5w9FL89i/D0pceheEQPdihXMvVDPuyPGpZz4OK3q71 oi2+BYPUKPN4sHSR0U69lq/+8drVivwCF34cNXJol9EfynPtRz2j4OIPTQkdB0Zs Wca68fvSaw0EtTXHZT14+5TI5+3mIh9nDs5CxvZ81o8NugyhzlrLmOguaKFLAgMB AAGjggJkMIICYDAdBgNVHQ4EFgQUBaBkRNR3yJmxLTP6pvUFmUrk2TQwHwYDVR0j BBgwFoAUs1TTKMu/0e880pJoojsPzGDjosUwDgYDVR0PAQH/BAQDAgeAMIGIBgNV HR8EgYAwfjB8oHqgeIZ2cnN5bmM6Ly9yLm1hZ2VsbGFuLmlweG8uY29tL3JlcG8v YTAzNzViMzktZjk0OS00Y2I1LWI1MTktZjk0MDA4YjE2NTRjLTAvMC9CMzU0RDMy OENCQkZEMUVGM0NEMjkyNjhBMjNCMEZDQzYwRTNBMkM1LmNybDCBngYIKwYBBQUH AQEEgZEwgY4wgYsGCCsGAQUFBzAChn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5y aXBlLm5ldC9yZXBvc2l0b3J5LzYxNzA4YTZiLTZjM2EtNDBhMC1hMzAyLTU5NWVj YzE3ODQ4Yy8wL0IzNTREMzI4Q0JCRkQxRUYzQ0QyOTI2OEEyM0IwRkNDNjBFM0Ey QzUuY2VyMIGmBggrBgEFBQcBCwSBmTCBljCBkwYIKwYBBQUHMAuGgYZyc3luYzov L3IubWFnZWxsYW4uaXB4by5jb20vcmVwby9hMDM3NWIzOS1mOTQ5LTRjYjUtYjUx OS1mOTQwMDhiMTY1NGMtMC8wLzMxMzYzNDJlMzMzNzJlMzEzOTM1MmUzMDJmMzIz NDJkMzIzNDIwM2QzZTIwMzQzMDMxMzMzNjMyLnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQApCXDMA0GCSqG SIb3DQEBCwUAA4IBAQClFqV1Mrbr2v1hyot2JLcm6y7O7NRXjAy7N6bMTgEhuAXQ oD/n5HW958yAXHi1y56XD5KOKcNxpsvqOy5D7YoXCExsu7Gxaa7Z+Opxf/CPdNCq BWjwDcTr0Nyttt9W/Bycdv7Hyp9n3SUzxV7OmjL/yA2rlc1UlWyJjRVG+lsiuAul DcPr4/neESkQaV6/OigXl4D1+eIHMaJPJ8EilaLVw9mX1xX1ZPOJskLSc8zXp9sJ iKnF7tumMEcG6c60LY2gokS0N8i7dFDSUOoWumC7cg03O53aS+4v85qs/MtHzX9P wcRbR5BrC75vak2fxvR8I+w5dDCXce9WOHRwhfFy -----END CERTIFICATE-----Generated at Thu Sep 3 09:22:01 2026 by rpki-client