$ rpki-client -vvf r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/3136342e33372e3139382e302f32332d3234203d3e20383334.roa File: 3136342e33372e3139382e302f32332d3234203d3e20383334.roa (raw, json) Hash identifier: IE9t+hZI+uHm1z9C+IM7zYJDJd21j3xxJwXkg4xMqRg= Subject key identifier: 75:9B:23:37:AD:2A:5E:E8:AD:BA:8C:FA:EF:3D:4E:2B:7A:11:F4:BD Certificate issuer: /CN=B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5 Certificate serial: 687A254FE8482C386B9B3BB3293D2674714B1C70 Authority key identifier: B3:54:D3:28:CB:BF:D1:EF:3C:D2:92:68:A2:3B:0F:CC:60:E3:A2:C5 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.cer Subject info access: rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/3136342e33372e3139382e302f32332d3234203d3e20383334.roa Signing time: Mon 10 Aug 2026 04:50:35 +0000 ROA not before: Mon 10 Aug 2026 04:45:35 +0000 ROA not after: Mon 09 Aug 2027 04:50:35 +0000 asID: 834 IP address blocks: 164.37.198.0/23 maxlen: 24 Validation: OK Signature path: rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.crl rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.mft rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.cer rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/D0A516B50426202A424F0EBFCB7D2BD4F744F964.crl rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/D0A516B50426202A424F0EBFCB7D2BD4F744F964.mft rsync://rpki.ripe.net/repository/DEFAULT/0KUWtQQmICpCTw6_y30r1PdE-WQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 14 Aug 2026 06:28:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 68:7a:25:4f:e8:48:2c:38:6b:9b:3b:b3:29:3d:26:74:71:4b:1c:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5 Validity Not Before: Aug 10 04:45:35 2026 GMT Not After : Aug 9 04:50:35 2027 GMT Subject: CN=759B2337AD2A5EE8ADBA8CFAEF3D4E2B7A11F4BD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:2b:4c:83:b1:ef:ac:c4:fe:6b:8f:d9:4f:71: 5e:d1:10:d4:86:97:38:84:2e:2a:cc:cc:dc:bd:17: 11:a3:44:b6:a2:1a:c0:85:65:bf:f9:08:28:d7:68: 33:cc:66:d2:6a:2f:22:0f:97:94:53:4a:af:64:72: e7:7a:0b:47:d4:76:13:97:77:85:22:66:79:09:a2: 08:d3:d6:04:92:a6:32:b8:4f:3b:73:67:ed:31:fb: 6c:6c:58:24:f5:8b:20:6e:99:90:58:cf:26:bf:29: 31:7d:c3:96:53:10:c0:e6:b6:13:21:b2:41:49:1e: 5a:0f:9b:be:75:c3:a1:ca:c3:05:6e:4f:c6:4f:9c: 20:26:a5:d5:16:1a:da:87:c8:67:c7:c1:60:36:a5: 32:7c:ed:ab:40:a5:6a:7e:5e:1a:3d:28:92:87:ed: 62:24:8d:20:8c:c7:c5:f9:1a:9a:55:30:5c:57:4c: b0:4b:1b:02:5c:82:b1:eb:19:c2:5b:2c:d6:f2:0e: 02:7b:cb:b7:3c:2d:93:f0:4d:14:ba:2c:16:27:2e: 86:93:52:86:79:2c:cd:9a:84:0e:51:e9:98:34:ee: 1f:21:35:d8:46:ac:1d:33:97:21:ad:1c:7f:20:45: f9:63:b9:bd:4a:90:0b:26:88:b0:eb:f6:8e:fb:31: af:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:9B:23:37:AD:2A:5E:E8:AD:BA:8C:FA:EF:3D:4E:2B:7A:11:F4:BD X509v3 Authority Key Identifier: keyid:B3:54:D3:28:CB:BF:D1:EF:3C:D2:92:68:A2:3B:0F:CC:60:E3:A2:C5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.cer Subject Information Access: Signed Object - URI:rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/3136342e33372e3139382e302f32332d3234203d3e20383334.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 164.37.198.0/23 Signature Algorithm: sha256WithRSAEncryption 90:a5:9e:95:72:df:9f:6c:38:7e:4a:66:53:92:77:fa:05:5b: bd:62:f1:64:ef:57:d1:96:94:ef:a2:99:0b:e9:4e:d7:bb:ff: 6c:a4:c4:c5:df:89:ab:2c:41:3a:25:04:24:6d:f9:5d:34:7b: 17:d1:78:d6:68:a8:a3:4f:8c:58:da:5e:2d:17:a4:4b:b9:d1: 03:e9:4e:d3:67:45:d2:54:5d:a3:0c:5a:19:4e:a8:91:bb:4c: 9c:b6:95:c3:d2:39:c8:2f:3d:aa:92:12:e7:48:80:1a:54:aa: a6:1b:1b:f3:e0:fa:f7:7a:cd:0e:3b:23:ab:2f:c0:14:b6:1b: 5f:55:5f:7c:71:b6:54:3d:7b:61:a8:6f:69:2a:a9:96:9f:76: c8:00:ec:de:35:e2:da:14:f1:82:fe:77:13:5b:ef:3e:b0:7b: cc:77:c0:da:87:3b:1a:a3:4c:c5:19:86:55:e8:7b:1b:8d:38: 2b:78:c7:41:bf:37:8b:2c:0e:cc:24:66:49:1b:18:dd:87:30: 4f:36:9d:a8:51:58:6e:31:56:68:58:c2:62:03:da:cd:99:2e: 62:53:00:01:3e:68:10:77:9c:9f:b8:d2:91:ca:8d:81:93:e0: b9:c4:85:04:ed:12:67:f9:a3:d5:dc:37:95:cc:20:e9:e1:57: 97:5a:1a:47 -----BEGIN CERTIFICATE----- MIIFVDCCBDygAwIBAgIUaHolT+hILDhrmzuzKT0mdHFLHHAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjM1NEQzMjhDQkJGRDFFRjNDRDI5MjY4QTIzQjBGQ0M2 MEUzQTJDNTAeFw0yNjA4MTAwNDQ1MzVaFw0yNzA4MDkwNDUwMzVaMDMxMTAvBgNV BAMTKDc1OUIyMzM3QUQyQTVFRThBREJBOENGQUVGM0Q0RTJCN0ExMUY0QkQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCtK0yDse+sxP5rj9lPcV7RENSG lziELirMzNy9FxGjRLaiGsCFZb/5CCjXaDPMZtJqLyIPl5RTSq9kcud6C0fUdhOX d4UiZnkJogjT1gSSpjK4TztzZ+0x+2xsWCT1iyBumZBYzya/KTF9w5ZTEMDmthMh skFJHloPm751w6HKwwVuT8ZPnCAmpdUWGtqHyGfHwWA2pTJ87atApWp+Xho9KJKH 7WIkjSCMx8X5GppVMFxXTLBLGwJcgrHrGcJbLNbyDgJ7y7c8LZPwTRS6LBYnLoaT UoZ5LM2ahA5R6Zg07h8hNdhGrB0zlyGtHH8gRfljub1KkAsmiLDr9o77Ma+nAgMB AAGjggJeMIICWjAdBgNVHQ4EFgQUdZsjN60qXuituoz67z1OK3oR9L0wHwYDVR0j BBgwFoAUs1TTKMu/0e880pJoojsPzGDjosUwDgYDVR0PAQH/BAQDAgeAMIGIBgNV HR8EgYAwfjB8oHqgeIZ2cnN5bmM6Ly9yLm1hZ2VsbGFuLmlweG8uY29tL3JlcG8v YTAzNzViMzktZjk0OS00Y2I1LWI1MTktZjk0MDA4YjE2NTRjLTAvMC9CMzU0RDMy OENCQkZEMUVGM0NEMjkyNjhBMjNCMEZDQzYwRTNBMkM1LmNybDCBngYIKwYBBQUH AQEEgZEwgY4wgYsGCCsGAQUFBzAChn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5y aXBlLm5ldC9yZXBvc2l0b3J5LzYxNzA4YTZiLTZjM2EtNDBhMC1hMzAyLTU5NWVj YzE3ODQ4Yy8wL0IzNTREMzI4Q0JCRkQxRUYzQ0QyOTI2OEEyM0IwRkNDNjBFM0Ey QzUuY2VyMIGgBggrBgEFBQcBCwSBkzCBkDCBjQYIKwYBBQUHMAuGgYByc3luYzov L3IubWFnZWxsYW4uaXB4by5jb20vcmVwby9hMDM3NWIzOS1mOTQ5LTRjYjUtYjUx OS1mOTQwMDhiMTY1NGMtMC8wLzMxMzYzNDJlMzMzNzJlMzEzOTM4MmUzMDJmMzIz MzJkMzIzNDIwM2QzZTIwMzgzMzM0LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBpCXGMA0GCSqGSIb3DQEB CwUAA4IBAQCQpZ6Vct+fbDh+SmZTknf6BVu9YvFk71fRlpTvopkL6U7Xu/9spMTF 34mrLEE6JQQkbfldNHsX0XjWaKijT4xY2l4tF6RLudED6U7TZ0XSVF2jDFoZTqiR u0yctpXD0jnILz2qkhLnSIAaVKqmGxvz4Pr3es0OOyOrL8AUthtfVV98cbZUPXth qG9pKqmWn3bIAOzeNeLaFPGC/ncTW+8+sHvMd8Dahzsao0zFGYZV6HsbjTgreMdB vzeLLA7MJGZJGxjdhzBPNp2oUVhuMVZoWMJiA9rNmS5iUwABPmgQd5yfuNKRyo2B k+C5xIUE7RJn+aPV3DeVzCDp4VeXWhpH -----END CERTIFICATE-----Generated at Thu Aug 13 12:19:44 2026 by rpki-client