$ rpki-client -vvvf r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/3136342e33372e3230312e302f32342d3234203d3e2039333034.roa File: 3136342e33372e3230312e302f32342d3234203d3e2039333034.roa (raw, json) Hash identifier: U+o72Rol9xcRHTAEpSQ/xJ6LG4+JVFTP1E19k1chkSE= Subject key identifier: FA:1E:FC:73:4A:BE:95:BD:C6:41:F2:19:2E:0C:87:91:56:EF:C2:55 Certificate issuer: /CN=B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5 Certificate serial: 44B31A01C6300FA44B7CC7F275EE954659FA35AA Authority key identifier: B3:54:D3:28:CB:BF:D1:EF:3C:D2:92:68:A2:3B:0F:CC:60:E3:A2:C5 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.cer Subject info access: rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/3136342e33372e3230312e302f32342d3234203d3e2039333034.roa Signing time: Mon 12 Oct 2026 00:02:10 +0000 ROA not before: Sun 11 Oct 2026 23:57:10 +0000 ROA not after: Mon 11 Oct 2027 00:02:10 +0000 asID: 9304 IP address blocks: 164.37.201.0/24 maxlen: 24 Validation: OK Signature path: rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.crl rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.mft rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.cer rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/D0A516B50426202A424F0EBFCB7D2BD4F744F964.crl rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/D0A516B50426202A424F0EBFCB7D2BD4F744F964.mft rsync://rpki.ripe.net/repository/DEFAULT/0KUWtQQmICpCTw6_y30r1PdE-WQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 18 Oct 2026 22:29:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 44:b3:1a:01:c6:30:0f:a4:4b:7c:c7:f2:75:ee:95:46:59:fa:35:aa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5 Validity Not Before: Oct 11 23:57:10 2026 GMT Not After : Oct 11 00:02:10 2027 GMT Subject: CN=FA1EFC734ABE95BDC641F2192E0C879156EFC255 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:80:95:89:5a:66:3c:cb:c7:3e:50:0e:87:9d: 3d:1d:06:35:65:ba:3e:66:26:a4:eb:9e:c4:a3:5e: 18:2c:3b:97:1e:19:46:6f:66:45:1b:44:40:4d:55: 74:e8:78:38:6d:17:70:10:f5:28:18:db:0d:34:92: 4d:d9:1f:71:f1:fc:ad:94:5b:85:b6:67:82:99:45: e0:66:81:f7:d7:c0:36:23:5c:89:a6:57:3f:35:73: e1:a9:ff:1a:e0:6d:23:ef:72:82:66:1e:24:13:bb: 5a:b3:fb:59:c9:77:8f:f7:20:d0:7d:77:0d:5c:af: 79:34:93:ed:f6:05:88:f2:de:87:0b:46:ad:74:8a: 40:d4:fc:2f:9b:16:d7:b7:bb:05:07:fb:51:20:cd: 34:6d:b7:68:d3:0d:8f:fb:bd:88:58:4e:1e:57:a1: c0:13:48:ff:7f:77:ba:b4:ce:0b:d4:74:eb:19:b6: 86:4e:ef:0f:cf:2f:07:1d:82:b9:fe:a4:3a:a1:06: b7:b6:fe:ac:93:63:b1:72:e8:4b:e8:0a:ec:86:30: 0c:4f:b0:a0:7c:c8:ee:22:70:e4:7c:2a:e1:e5:44: 21:a6:6a:d1:5e:d1:c0:05:fe:54:2f:ab:1e:3d:d0: a5:31:cb:b7:05:67:fd:e4:14:bf:e7:47:67:20:db: e9:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:1E:FC:73:4A:BE:95:BD:C6:41:F2:19:2E:0C:87:91:56:EF:C2:55 X509v3 Authority Key Identifier: keyid:B3:54:D3:28:CB:BF:D1:EF:3C:D2:92:68:A2:3B:0F:CC:60:E3:A2:C5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.cer Subject Information Access: Signed Object - URI:rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/3136342e33372e3230312e302f32342d3234203d3e2039333034.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 164.37.201.0/24 Signature Algorithm: sha256WithRSAEncryption 2d:f7:b7:a9:82:92:0d:1f:f7:07:31:1f:ff:cb:c0:a2:01:16: 95:d8:71:10:8a:75:04:a3:b4:01:ef:e6:a6:0e:1e:16:f9:af: 39:95:b9:46:10:17:80:6d:ce:cc:f2:d4:6f:1d:24:d8:b1:cd: 8f:80:94:69:88:87:5e:41:b2:01:bb:70:80:3b:37:2d:1c:d8: 45:92:cf:b3:87:0f:cb:65:68:b9:fd:d3:2d:bf:8a:19:d1:40: 2f:48:50:ba:4a:c4:08:20:28:69:77:2b:a4:6a:3d:c9:aa:9c: 24:d3:7b:8a:3c:79:34:15:87:97:92:5a:e2:2a:a5:52:30:a3: 85:ec:6b:bc:db:9f:c6:a0:1a:b6:78:a5:e4:27:cb:3a:4f:30: 50:f1:69:12:05:b1:18:b6:5a:35:14:23:75:b3:c7:60:57:04: 8e:e4:5c:8e:d9:05:25:93:73:61:3c:1e:5e:82:04:71:8b:d4: 1a:ce:f8:a4:41:14:51:ca:d1:43:3e:13:da:5f:eb:68:83:35: 8d:ec:38:72:af:11:7d:30:cc:ec:c9:f7:b9:dd:c8:b2:dd:25: 14:de:06:e7:19:65:c6:a1:64:a8:37:90:66:66:de:c0:33:cc: da:63:e8:be:ee:ca:15:49:ca:ad:ea:b8:76:5a:cc:54:a8:64: 5f:63:2a:f4 -----BEGIN CERTIFICATE----- MIIFVjCCBD6gAwIBAgIURLMaAcYwD6RLfMfyde6VRln6NaowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjM1NEQzMjhDQkJGRDFFRjNDRDI5MjY4QTIzQjBGQ0M2 MEUzQTJDNTAeFw0yNjEwMTEyMzU3MTBaFw0yNzEwMTEwMDAyMTBaMDMxMTAvBgNV BAMTKEZBMUVGQzczNEFCRTk1QkRDNjQxRjIxOTJFMEM4NzkxNTZFRkMyNTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDCgJWJWmY8y8c+UA6HnT0dBjVl uj5mJqTrnsSjXhgsO5ceGUZvZkUbREBNVXToeDhtF3AQ9SgY2w00kk3ZH3Hx/K2U W4W2Z4KZReBmgffXwDYjXImmVz81c+Gp/xrgbSPvcoJmHiQTu1qz+1nJd4/3INB9 dw1cr3k0k+32BYjy3ocLRq10ikDU/C+bFte3uwUH+1EgzTRtt2jTDY/7vYhYTh5X ocATSP9/d7q0zgvUdOsZtoZO7w/PLwcdgrn+pDqhBre2/qyTY7Fy6EvoCuyGMAxP sKB8yO4icOR8KuHlRCGmatFe0cAF/lQvqx490KUxy7cFZ/3kFL/nR2cg2+k3AgMB AAGjggJgMIICXDAdBgNVHQ4EFgQU+h78c0q+lb3GQfIZLgyHkVbvwlUwHwYDVR0j BBgwFoAUs1TTKMu/0e880pJoojsPzGDjosUwDgYDVR0PAQH/BAQDAgeAMIGIBgNV HR8EgYAwfjB8oHqgeIZ2cnN5bmM6Ly9yLm1hZ2VsbGFuLmlweG8uY29tL3JlcG8v YTAzNzViMzktZjk0OS00Y2I1LWI1MTktZjk0MDA4YjE2NTRjLTAvMC9CMzU0RDMy OENCQkZEMUVGM0NEMjkyNjhBMjNCMEZDQzYwRTNBMkM1LmNybDCBngYIKwYBBQUH AQEEgZEwgY4wgYsGCCsGAQUFBzAChn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5y aXBlLm5ldC9yZXBvc2l0b3J5LzYxNzA4YTZiLTZjM2EtNDBhMC1hMzAyLTU5NWVj YzE3ODQ4Yy8wL0IzNTREMzI4Q0JCRkQxRUYzQ0QyOTI2OEEyM0IwRkNDNjBFM0Ey QzUuY2VyMIGiBggrBgEFBQcBCwSBlTCBkjCBjwYIKwYBBQUHMAuGgYJyc3luYzov L3IubWFnZWxsYW4uaXB4by5jb20vcmVwby9hMDM3NWIzOS1mOTQ5LTRjYjUtYjUx OS1mOTQwMDhiMTY1NGMtMC8wLzMxMzYzNDJlMzMzNzJlMzIzMDMxMmUzMDJmMzIz NDJkMzIzNDIwM2QzZTIwMzkzMzMwMzQucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYB BQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBACkJckwDQYJKoZIhvcN AQELBQADggEBAC33t6mCkg0f9wcxH//LwKIBFpXYcRCKdQSjtAHv5qYOHhb5rzmV uUYQF4Btzszy1G8dJNixzY+AlGmIh15BsgG7cIA7Ny0c2EWSz7OHD8tlaLn90y2/ ihnRQC9IULpKxAggKGl3K6RqPcmqnCTTe4o8eTQVh5eSWuIqpVIwo4Xsa7zbn8ag GrZ4peQnyzpPMFDxaRIFsRi2WjUUI3Wzx2BXBI7kXI7ZBSWTc2E8Hl6CBHGL1BrO +KRBFFHK0UM+E9pf62iDNY3sOHKvEX0wzOzJ97ndyLLdJRTeBucZZcahZKg3kGZm 3sAzzNpj6L7uyhVJyq3quHZazFSoZF9jKvQ= -----END CERTIFICATE-----Generated at Sun Oct 18 07:29:41 2026 by rpki-client