$ rpki-client -vvvf r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/3136342e33372e3139382e302f32332d3234203d3e203136353039.roa File: 3136342e33372e3139382e302f32332d3234203d3e203136353039.roa (raw, json) Hash identifier: pKnSIUVpI7angxZnmI/SIYEqN1EaOwbz7tN8JF6KlYE= Subject key identifier: 14:2E:BD:CC:D0:40:B9:09:F4:13:C2:DC:A9:6E:AC:ED:FE:2D:C1:22 Certificate issuer: /CN=B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5 Certificate serial: 69C68D288C8F5895CAFF5702721CB1EF3144D9B2 Authority key identifier: B3:54:D3:28:CB:BF:D1:EF:3C:D2:92:68:A2:3B:0F:CC:60:E3:A2:C5 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.cer Subject info access: rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/3136342e33372e3139382e302f32332d3234203d3e203136353039.roa Signing time: Mon 12 Oct 2026 00:02:08 +0000 ROA not before: Sun 11 Oct 2026 23:57:08 +0000 ROA not after: Mon 11 Oct 2027 00:02:08 +0000 asID: 16509 IP address blocks: 164.37.198.0/23 maxlen: 24 Validation: OK Signature path: rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.crl rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.mft rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.cer rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/D0A516B50426202A424F0EBFCB7D2BD4F744F964.crl rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/D0A516B50426202A424F0EBFCB7D2BD4F744F964.mft rsync://rpki.ripe.net/repository/DEFAULT/0KUWtQQmICpCTw6_y30r1PdE-WQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Oct 2026 20:00:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 69:c6:8d:28:8c:8f:58:95:ca:ff:57:02:72:1c:b1:ef:31:44:d9:b2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5 Validity Not Before: Oct 11 23:57:08 2026 GMT Not After : Oct 11 00:02:08 2027 GMT Subject: CN=142EBDCCD040B909F413C2DCA96EACEDFE2DC122 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:d9:0d:d1:43:73:e1:34:76:ff:92:85:3d:d0: a7:dc:b9:b4:1b:70:ec:7e:9e:5f:6f:67:9b:24:cc: 49:cf:8b:3e:c8:7a:1a:7c:9e:be:e3:34:d2:47:d1: 0c:9e:c0:ad:8b:2b:d2:49:6f:4a:af:82:34:ee:29: 51:2b:1f:bb:b6:36:f5:e9:f9:5c:50:a8:0d:1a:a4: 0f:fc:9d:10:76:f6:1b:6b:10:4b:31:df:a4:78:e9: 1e:0e:00:75:eb:4d:0b:4b:86:da:23:6e:18:41:56: 28:05:32:f0:64:b7:e3:3f:d2:64:e9:c1:e6:78:2f: e1:df:2b:3a:24:ea:d1:14:81:6f:8a:32:f0:90:78: 41:6b:f4:74:d1:69:c8:a5:c6:89:34:bd:f8:71:87: 5b:49:f1:1a:e0:d0:19:47:9c:9a:be:f5:ab:46:0d: 4f:41:aa:d9:f2:c1:a3:a6:1d:07:14:dd:ba:a6:c7: 5d:0b:e7:29:be:e8:5c:c1:db:c0:99:07:a9:a5:4f: 2f:98:ce:72:0d:e1:a1:e5:42:25:44:07:76:89:26: 34:3d:7a:e8:0b:16:2e:11:b7:0f:30:90:ca:f0:e2: 6b:7d:4f:2b:b5:ab:ad:54:a6:ae:7c:76:ff:26:61: ed:a0:77:5b:e0:11:52:c6:f4:ec:a6:95:88:47:de: e7:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:2E:BD:CC:D0:40:B9:09:F4:13:C2:DC:A9:6E:AC:ED:FE:2D:C1:22 X509v3 Authority Key Identifier: keyid:B3:54:D3:28:CB:BF:D1:EF:3C:D2:92:68:A2:3B:0F:CC:60:E3:A2:C5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.cer Subject Information Access: Signed Object - URI:rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/3136342e33372e3139382e302f32332d3234203d3e203136353039.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 164.37.198.0/23 Signature Algorithm: sha256WithRSAEncryption 90:6b:1e:d6:be:47:0e:c1:f0:79:60:23:7d:29:3d:4e:53:8c: 64:2b:cb:41:01:3a:e9:7b:83:fe:f2:a1:65:e7:2c:b2:f6:7c: 73:b3:f4:55:a6:c4:27:66:79:86:90:c8:b1:d5:e6:ff:b9:6c: 29:a1:5e:63:6a:2a:d1:7a:11:b7:81:5c:bd:4f:f5:40:dc:72: 38:e6:2c:cc:70:4b:d6:c5:bd:44:25:83:81:26:6d:50:86:30: eb:06:79:2b:50:5e:03:7e:f9:1e:dc:74:9b:34:17:bd:52:db: 7e:de:81:9d:57:a3:54:66:b0:13:89:47:88:63:5c:b5:72:02: 0a:e5:ea:9f:d6:33:93:02:1b:67:dc:9c:c3:4d:4b:76:df:d9: a5:82:81:82:16:16:f3:17:d8:5c:f7:0f:69:5c:9f:6b:e1:bc: b7:5f:e1:97:fa:55:22:35:bd:81:bb:8f:4a:86:18:66:67:93: ca:66:e9:5d:07:c7:0b:c7:c8:ec:c1:db:50:f2:a3:90:1c:63: ab:b7:d5:19:e8:b1:1c:2a:b2:86:d6:16:b9:1a:b1:ee:46:74: 57:7d:f4:80:8e:22:47:0e:f8:9b:99:ee:98:ec:a0:ba:ef:9d: c4:e4:a4:2d:32:06:0a:5d:0e:18:6a:34:43:27:d4:88:58:a1: 06:bc:0e:a3 -----BEGIN CERTIFICATE----- MIIFWDCCBECgAwIBAgIUacaNKIyPWJXK/1cCchyx7zFE2bIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjM1NEQzMjhDQkJGRDFFRjNDRDI5MjY4QTIzQjBGQ0M2 MEUzQTJDNTAeFw0yNjEwMTEyMzU3MDhaFw0yNzEwMTEwMDAyMDhaMDMxMTAvBgNV BAMTKDE0MkVCRENDRDA0MEI5MDlGNDEzQzJEQ0E5NkVBQ0VERkUyREMxMjIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDB2Q3RQ3PhNHb/koU90KfcubQb cOx+nl9vZ5skzEnPiz7Iehp8nr7jNNJH0QyewK2LK9JJb0qvgjTuKVErH7u2NvXp +VxQqA0apA/8nRB29htrEEsx36R46R4OAHXrTQtLhtojbhhBVigFMvBkt+M/0mTp weZ4L+HfKzok6tEUgW+KMvCQeEFr9HTRacilxok0vfhxh1tJ8Rrg0BlHnJq+9atG DU9BqtnywaOmHQcU3bqmx10L5ym+6FzB28CZB6mlTy+YznIN4aHlQiVEB3aJJjQ9 eugLFi4Rtw8wkMrw4mt9Tyu1q61Upq58dv8mYe2gd1vgEVLG9OymlYhH3ucnAgMB AAGjggJiMIICXjAdBgNVHQ4EFgQUFC69zNBAuQn0E8LcqW6s7f4twSIwHwYDVR0j BBgwFoAUs1TTKMu/0e880pJoojsPzGDjosUwDgYDVR0PAQH/BAQDAgeAMIGIBgNV HR8EgYAwfjB8oHqgeIZ2cnN5bmM6Ly9yLm1hZ2VsbGFuLmlweG8uY29tL3JlcG8v YTAzNzViMzktZjk0OS00Y2I1LWI1MTktZjk0MDA4YjE2NTRjLTAvMC9CMzU0RDMy OENCQkZEMUVGM0NEMjkyNjhBMjNCMEZDQzYwRTNBMkM1LmNybDCBngYIKwYBBQUH AQEEgZEwgY4wgYsGCCsGAQUFBzAChn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5y aXBlLm5ldC9yZXBvc2l0b3J5LzYxNzA4YTZiLTZjM2EtNDBhMC1hMzAyLTU5NWVj YzE3ODQ4Yy8wL0IzNTREMzI4Q0JCRkQxRUYzQ0QyOTI2OEEyM0IwRkNDNjBFM0Ey QzUuY2VyMIGkBggrBgEFBQcBCwSBlzCBlDCBkQYIKwYBBQUHMAuGgYRyc3luYzov L3IubWFnZWxsYW4uaXB4by5jb20vcmVwby9hMDM3NWIzOS1mOTQ5LTRjYjUtYjUx OS1mOTQwMDhiMTY1NGMtMC8wLzMxMzYzNDJlMzMzNzJlMzEzOTM4MmUzMDJmMzIz MzJkMzIzNDIwM2QzZTIwMzEzNjM1MzAzOS5yb2EwGAYDVR0gAQH/BA4wDDAKBggr BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAaQlxjANBgkqhkiG 9w0BAQsFAAOCAQEAkGse1r5HDsHweWAjfSk9TlOMZCvLQQE66XuD/vKhZecssvZ8 c7P0VabEJ2Z5hpDIsdXm/7lsKaFeY2oq0XoRt4FcvU/1QNxyOOYszHBL1sW9RCWD gSZtUIYw6wZ5K1BeA375Htx0mzQXvVLbft6BnVejVGawE4lHiGNctXICCuXqn9Yz kwIbZ9ycw01Ldt/ZpYKBghYW8xfYXPcPaVyfa+G8t1/hl/pVIjW9gbuPSoYYZmeT ymbpXQfHC8fI7MHbUPKjkBxjq7fVGeixHCqyhtYWuRqx7kZ0V330gI4iRw74m5nu mOyguu+dxOSkLTIGCl0OGGo0QyfUiFihBrwOow== -----END CERTIFICATE-----Generated at Tue Oct 27 05:08:54 2026 by rpki-client