$ rpki-client -vvvf r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/3136342e33372e3230302e302f32342d3234203d3e20313938353636.roa File: 3136342e33372e3230302e302f32342d3234203d3e20313938353636.roa (raw, json) Hash identifier: Om//o57EfrFLdMixYpivXDUqe5HMET8TsICjgVqdIlI= Subject key identifier: 2D:42:F9:EC:7F:A9:9D:7A:A8:4F:24:35:3D:0E:48:B2:58:90:49:81 Certificate issuer: /CN=B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5 Certificate serial: 383848E0F14FB07EE7B22400298F125AB6AF5ECC Authority key identifier: B3:54:D3:28:CB:BF:D1:EF:3C:D2:92:68:A2:3B:0F:CC:60:E3:A2:C5 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.cer Subject info access: rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/3136342e33372e3230302e302f32342d3234203d3e20313938353636.roa Signing time: Mon 17 Aug 2026 17:13:35 +0000 ROA not before: Mon 17 Aug 2026 17:08:35 +0000 ROA not after: Mon 16 Aug 2027 17:13:35 +0000 asID: 198566 IP address blocks: 164.37.200.0/24 maxlen: 24 Validation: OK Signature path: rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.crl rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.mft rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.cer rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/D0A516B50426202A424F0EBFCB7D2BD4F744F964.crl rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/D0A516B50426202A424F0EBFCB7D2BD4F744F964.mft rsync://rpki.ripe.net/repository/DEFAULT/0KUWtQQmICpCTw6_y30r1PdE-WQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 03 Sep 2026 18:02:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 38:38:48:e0:f1:4f:b0:7e:e7:b2:24:00:29:8f:12:5a:b6:af:5e:cc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5 Validity Not Before: Aug 17 17:08:35 2026 GMT Not After : Aug 16 17:13:35 2027 GMT Subject: CN=2D42F9EC7FA99D7AA84F24353D0E48B258904981 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:65:40:54:2c:2c:dd:cd:b1:90:52:87:d8:6f: c1:ae:58:dd:94:f8:62:f5:0f:51:57:16:84:a1:51: a6:1f:5b:eb:c0:84:18:5d:c2:c9:1d:2e:c2:a4:12: 4a:03:48:6f:60:37:4b:ee:01:e0:52:1e:f6:8e:92: 3c:42:d9:f3:3c:f5:d6:7c:20:59:cf:e2:0f:eb:f9: 75:47:f1:74:ef:8f:66:c7:be:8d:8b:22:48:0b:7b: ec:7f:e2:38:d9:49:a0:0f:fa:dc:bf:a8:f8:07:43: d5:c4:db:f7:88:bc:6d:9e:c6:44:a2:55:73:09:4d: 0e:16:70:47:b4:af:b6:0b:e2:e6:3a:f2:1d:7d:c3: ec:58:ce:33:06:1d:f2:62:3b:14:9e:cf:4d:44:1a: 75:b0:0a:cf:78:1b:59:c0:84:0a:90:8a:3c:cb:1a: e0:35:40:43:25:9d:79:38:e2:3d:b2:d2:98:98:5b: 72:3f:1c:68:b0:1d:8b:72:60:b7:3f:ab:ec:ec:54: ca:37:1d:70:c0:70:34:00:f2:1c:87:24:f2:c2:8c: 10:70:d0:f1:01:cc:c1:9f:2b:68:17:ca:06:da:41: 5b:53:30:97:ad:bc:12:51:2d:6e:30:4d:a6:7b:a5: 7d:1c:4d:3d:3e:9d:7f:cb:06:f2:d8:c7:d1:e1:3e: a3:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:42:F9:EC:7F:A9:9D:7A:A8:4F:24:35:3D:0E:48:B2:58:90:49:81 X509v3 Authority Key Identifier: keyid:B3:54:D3:28:CB:BF:D1:EF:3C:D2:92:68:A2:3B:0F:CC:60:E3:A2:C5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.cer Subject Information Access: Signed Object - URI:rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/3136342e33372e3230302e302f32342d3234203d3e20313938353636.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 164.37.200.0/24 Signature Algorithm: sha256WithRSAEncryption 77:54:37:35:cc:da:10:e5:ae:68:93:03:2e:de:18:43:99:9c: b3:2e:72:9c:a1:95:89:17:a6:87:4a:61:77:f1:c5:44:d4:07: 3e:2b:3a:78:7c:25:50:e1:98:72:f2:80:11:5f:09:38:cd:b0: 37:31:71:f8:de:ad:3d:f2:30:a9:15:87:7f:b2:d7:5e:8d:ac: d6:0d:01:db:1d:02:35:7a:3f:e7:dc:55:a4:08:3d:f4:67:cd: a6:2e:9a:45:08:b6:30:27:8d:d4:6b:f5:ef:a1:e5:1c:dd:60: 2e:e5:47:bd:28:8b:7e:67:1a:5d:12:3e:b8:75:dd:a3:11:9b: 17:0e:c5:85:a8:1a:02:8b:f8:f4:cf:05:2a:91:47:73:5b:ef: a7:7f:ef:02:dc:89:51:e0:c8:98:69:b8:dd:a5:02:a0:e7:6b: ec:3a:a7:cc:94:5a:1e:3c:1e:30:41:13:be:93:7f:1c:6d:d9: 14:c6:42:ca:a4:d3:2d:32:74:d4:eb:c3:97:38:e0:d9:fb:0e: ee:ec:06:4a:db:19:37:c7:82:80:11:55:74:93:77:96:f5:8c: 22:10:be:4c:76:7e:88:81:7a:e7:da:87:02:cd:4f:19:bf:14: 1f:85:28:be:3f:2e:6f:31:38:5d:d2:c4:23:2a:48:5a:4e:9f: bd:dd:01:b2 -----BEGIN CERTIFICATE----- MIIFWjCCBEKgAwIBAgIUODhI4PFPsH7nsiQAKY8SWravXswwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjM1NEQzMjhDQkJGRDFFRjNDRDI5MjY4QTIzQjBGQ0M2 MEUzQTJDNTAeFw0yNjA4MTcxNzA4MzVaFw0yNzA4MTYxNzEzMzVaMDMxMTAvBgNV BAMTKDJENDJGOUVDN0ZBOTlEN0FBODRGMjQzNTNEMEU0OEIyNTg5MDQ5ODEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDfZUBULCzdzbGQUofYb8GuWN2U +GL1D1FXFoShUaYfW+vAhBhdwskdLsKkEkoDSG9gN0vuAeBSHvaOkjxC2fM89dZ8 IFnP4g/r+XVH8XTvj2bHvo2LIkgLe+x/4jjZSaAP+ty/qPgHQ9XE2/eIvG2exkSi VXMJTQ4WcEe0r7YL4uY68h19w+xYzjMGHfJiOxSez01EGnWwCs94G1nAhAqQijzL GuA1QEMlnXk44j2y0piYW3I/HGiwHYtyYLc/q+zsVMo3HXDAcDQA8hyHJPLCjBBw 0PEBzMGfK2gXygbaQVtTMJetvBJRLW4wTaZ7pX0cTT0+nX/LBvLYx9HhPqO3AgMB AAGjggJkMIICYDAdBgNVHQ4EFgQULUL57H+pnXqoTyQ1PQ5IsliQSYEwHwYDVR0j BBgwFoAUs1TTKMu/0e880pJoojsPzGDjosUwDgYDVR0PAQH/BAQDAgeAMIGIBgNV HR8EgYAwfjB8oHqgeIZ2cnN5bmM6Ly9yLm1hZ2VsbGFuLmlweG8uY29tL3JlcG8v YTAzNzViMzktZjk0OS00Y2I1LWI1MTktZjk0MDA4YjE2NTRjLTAvMC9CMzU0RDMy OENCQkZEMUVGM0NEMjkyNjhBMjNCMEZDQzYwRTNBMkM1LmNybDCBngYIKwYBBQUH AQEEgZEwgY4wgYsGCCsGAQUFBzAChn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5y aXBlLm5ldC9yZXBvc2l0b3J5LzYxNzA4YTZiLTZjM2EtNDBhMC1hMzAyLTU5NWVj YzE3ODQ4Yy8wL0IzNTREMzI4Q0JCRkQxRUYzQ0QyOTI2OEEyM0IwRkNDNjBFM0Ey QzUuY2VyMIGmBggrBgEFBQcBCwSBmTCBljCBkwYIKwYBBQUHMAuGgYZyc3luYzov L3IubWFnZWxsYW4uaXB4by5jb20vcmVwby9hMDM3NWIzOS1mOTQ5LTRjYjUtYjUx OS1mOTQwMDhiMTY1NGMtMC8wLzMxMzYzNDJlMzMzNzJlMzIzMDMwMmUzMDJmMzIz NDJkMzIzNDIwM2QzZTIwMzEzOTM4MzUzNjM2LnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQApCXIMA0GCSqG SIb3DQEBCwUAA4IBAQB3VDc1zNoQ5a5okwMu3hhDmZyzLnKcoZWJF6aHSmF38cVE 1Ac+Kzp4fCVQ4Zhy8oARXwk4zbA3MXH43q098jCpFYd/stdejazWDQHbHQI1ej/n 3FWkCD30Z82mLppFCLYwJ43Ua/XvoeUc3WAu5Ue9KIt+ZxpdEj64dd2jEZsXDsWF qBoCi/j0zwUqkUdzW++nf+8C3IlR4MiYabjdpQKg52vsOqfMlFoePB4wQRO+k38c bdkUxkLKpNMtMnTU68OXOODZ+w7u7AZK2xk3x4KAEVV0k3eW9YwiEL5Mdn6IgXrn 2ocCzU8ZvxQfhSi+Py5vMThd0sQjKkhaTp+93QGy -----END CERTIFICATE-----Generated at Thu Sep 3 08:28:59 2026 by rpki-client