$ rpki-client -vvvf r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/3136342e33372e3230322e302f32342d3234203d3e20313938353636.roa File: 3136342e33372e3230322e302f32342d3234203d3e20313938353636.roa (raw, json) Hash identifier: QXs+4bhGqqeFdQ2tjUFGIzg8Cst7cRhW2milmQ07GnI= Subject key identifier: 6A:9A:FC:30:F6:2D:73:D7:41:DB:21:6D:02:9D:A7:12:E5:D5:81:51 Certificate issuer: /CN=B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5 Certificate serial: 67185BB9D1880AB2971F4E0C80ACE53756698866 Authority key identifier: B3:54:D3:28:CB:BF:D1:EF:3C:D2:92:68:A2:3B:0F:CC:60:E3:A2:C5 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.cer Subject info access: rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/3136342e33372e3230322e302f32342d3234203d3e20313938353636.roa Signing time: Mon 17 Aug 2026 17:03:52 +0000 ROA not before: Mon 17 Aug 2026 16:58:52 +0000 ROA not after: Mon 16 Aug 2027 17:03:52 +0000 asID: 198566 IP address blocks: 164.37.202.0/24 maxlen: 24 Validation: OK Signature path: rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.crl rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.mft rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.cer rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/D0A516B50426202A424F0EBFCB7D2BD4F744F964.crl rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/D0A516B50426202A424F0EBFCB7D2BD4F744F964.mft rsync://rpki.ripe.net/repository/DEFAULT/0KUWtQQmICpCTw6_y30r1PdE-WQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 03 Sep 2026 18:02:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 67:18:5b:b9:d1:88:0a:b2:97:1f:4e:0c:80:ac:e5:37:56:69:88:66 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5 Validity Not Before: Aug 17 16:58:52 2026 GMT Not After : Aug 16 17:03:52 2027 GMT Subject: CN=6A9AFC30F62D73D741DB216D029DA712E5D58151 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:19:e5:80:d8:3f:37:9a:66:1e:89:f1:21:22: 4d:66:b6:03:64:64:14:bf:a0:91:7d:63:c7:3f:ea: 2d:37:10:c5:b5:9d:7e:0c:b0:fe:a5:35:63:56:a1: bd:5a:6f:e4:c6:ca:6b:92:26:85:bf:b8:12:be:ca: 3b:71:ff:81:36:59:29:69:fe:e1:0f:75:7d:45:6c: 70:bb:ca:24:db:06:f6:c5:8b:75:5b:cb:4a:d1:68: 19:07:13:a1:bc:19:f5:d9:c7:fa:a0:36:8c:73:7f: d2:36:6a:d2:9a:76:72:c3:5a:bd:84:df:d8:4b:57: 87:46:09:bc:3e:f0:eb:55:4b:b5:dc:5d:1d:7e:1b: d0:7a:5b:d7:b9:26:3a:77:9b:d3:3e:bd:8b:c1:76: 80:26:91:e7:96:0f:30:48:a1:00:cd:93:2b:b6:98: ba:0f:99:31:f9:b1:10:86:0d:18:e2:94:1c:8e:dc: 3f:fd:89:56:00:a0:3f:19:3f:b3:0d:fd:e1:0a:ec: fa:c2:0d:07:f5:5d:6e:5d:9e:7f:b8:63:25:a8:e2: fc:aa:65:2b:ea:71:93:f5:19:25:35:2d:38:d3:3f: 72:e5:17:36:e7:e2:5b:b8:c3:19:a4:4d:85:6d:a4: c7:16:f4:80:7e:77:88:64:57:8b:b9:ff:5f:6f:71: 10:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:9A:FC:30:F6:2D:73:D7:41:DB:21:6D:02:9D:A7:12:E5:D5:81:51 X509v3 Authority Key Identifier: keyid:B3:54:D3:28:CB:BF:D1:EF:3C:D2:92:68:A2:3B:0F:CC:60:E3:A2:C5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.cer Subject Information Access: Signed Object - URI:rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/3136342e33372e3230322e302f32342d3234203d3e20313938353636.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 164.37.202.0/24 Signature Algorithm: sha256WithRSAEncryption 60:37:84:2e:22:50:ee:7b:d7:65:df:b9:6d:57:59:54:79:ea: a6:70:c9:82:69:31:a2:59:cd:86:96:18:f0:b5:6e:5f:54:7f: 2a:32:ae:d5:41:c7:65:a4:8c:dd:3f:11:a4:09:c5:cd:90:98: 29:84:1e:90:9a:3d:a1:9e:db:a1:03:c0:fd:43:ad:d1:b3:95: 71:f5:ae:de:7f:ce:94:ca:58:e3:c3:e2:cd:f0:1b:3d:25:ca: f6:ce:49:78:88:59:c0:51:de:eb:c6:eb:d1:f6:16:25:4a:0e: 44:c9:b1:28:d1:5c:b5:af:74:60:56:ce:3c:15:31:e0:52:fc: ea:d2:d4:b0:af:d4:d3:cd:4d:06:7c:1c:f1:de:5e:bd:78:c4: a5:f5:ea:23:88:f5:cc:0d:df:19:41:65:d2:ad:b3:e3:6c:9b: b0:e6:b8:00:90:a1:3c:65:83:06:ae:95:cd:52:a5:cc:a6:26: 84:c2:19:4b:c5:c4:d0:a1:2f:68:ea:2e:b5:a6:e5:8e:3f:7c: a5:21:a2:0b:7f:d8:26:b9:72:2b:2f:a8:3c:54:74:be:1c:15: 06:bc:87:7b:18:f9:0c:fb:dd:bf:6c:0f:66:18:9f:b5:17:2c: 29:44:65:3e:e7:3f:4d:fd:98:ab:db:83:62:06:95:b3:2e:22: 18:a8:f7:85 -----BEGIN CERTIFICATE----- MIIFWjCCBEKgAwIBAgIUZxhbudGICrKXH04MgKzlN1ZpiGYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjM1NEQzMjhDQkJGRDFFRjNDRDI5MjY4QTIzQjBGQ0M2 MEUzQTJDNTAeFw0yNjA4MTcxNjU4NTJaFw0yNzA4MTYxNzAzNTJaMDMxMTAvBgNV BAMTKDZBOUFGQzMwRjYyRDczRDc0MURCMjE2RDAyOURBNzEyRTVENTgxNTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCyGeWA2D83mmYeifEhIk1mtgNk ZBS/oJF9Y8c/6i03EMW1nX4MsP6lNWNWob1ab+TGymuSJoW/uBK+yjtx/4E2WSlp /uEPdX1FbHC7yiTbBvbFi3Vby0rRaBkHE6G8GfXZx/qgNoxzf9I2atKadnLDWr2E 39hLV4dGCbw+8OtVS7XcXR1+G9B6W9e5Jjp3m9M+vYvBdoAmkeeWDzBIoQDNkyu2 mLoPmTH5sRCGDRjilByO3D/9iVYAoD8ZP7MN/eEK7PrCDQf1XW5dnn+4YyWo4vyq ZSvqcZP1GSU1LTjTP3LlFzbn4lu4wxmkTYVtpMcW9IB+d4hkV4u5/19vcRDbAgMB AAGjggJkMIICYDAdBgNVHQ4EFgQUapr8MPYtc9dB2yFtAp2nEuXVgVEwHwYDVR0j BBgwFoAUs1TTKMu/0e880pJoojsPzGDjosUwDgYDVR0PAQH/BAQDAgeAMIGIBgNV HR8EgYAwfjB8oHqgeIZ2cnN5bmM6Ly9yLm1hZ2VsbGFuLmlweG8uY29tL3JlcG8v YTAzNzViMzktZjk0OS00Y2I1LWI1MTktZjk0MDA4YjE2NTRjLTAvMC9CMzU0RDMy OENCQkZEMUVGM0NEMjkyNjhBMjNCMEZDQzYwRTNBMkM1LmNybDCBngYIKwYBBQUH AQEEgZEwgY4wgYsGCCsGAQUFBzAChn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5y aXBlLm5ldC9yZXBvc2l0b3J5LzYxNzA4YTZiLTZjM2EtNDBhMC1hMzAyLTU5NWVj YzE3ODQ4Yy8wL0IzNTREMzI4Q0JCRkQxRUYzQ0QyOTI2OEEyM0IwRkNDNjBFM0Ey QzUuY2VyMIGmBggrBgEFBQcBCwSBmTCBljCBkwYIKwYBBQUHMAuGgYZyc3luYzov L3IubWFnZWxsYW4uaXB4by5jb20vcmVwby9hMDM3NWIzOS1mOTQ5LTRjYjUtYjUx OS1mOTQwMDhiMTY1NGMtMC8wLzMxMzYzNDJlMzMzNzJlMzIzMDMyMmUzMDJmMzIz NDJkMzIzNDIwM2QzZTIwMzEzOTM4MzUzNjM2LnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQApCXKMA0GCSqG SIb3DQEBCwUAA4IBAQBgN4QuIlDue9dl37ltV1lUeeqmcMmCaTGiWc2GlhjwtW5f VH8qMq7VQcdlpIzdPxGkCcXNkJgphB6Qmj2hntuhA8D9Q63Rs5Vx9a7ef86Uyljj w+LN8Bs9Jcr2zkl4iFnAUd7rxuvR9hYlSg5EybEo0Vy1r3RgVs48FTHgUvzq0tSw r9TTzU0GfBzx3l69eMSl9eojiPXMDd8ZQWXSrbPjbJuw5rgAkKE8ZYMGrpXNUqXM piaEwhlLxcTQoS9o6i61puWOP3ylIaILf9gmuXIrL6g8VHS+HBUGvId7GPkM+92/ bA9mGJ+1FywpRGU+5z9N/Zir24NiBpWzLiIYqPeF -----END CERTIFICATE-----Generated at Thu Sep 3 09:21:38 2026 by rpki-client