$ rpki-client -vvvf r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/3136342e33372e3230332e302f32342d3234203d3e203133353337.roa File: 3136342e33372e3230332e302f32342d3234203d3e203133353337.roa (raw, json) Hash identifier: sI5IcsULxg4O/pWAPtjRjYglOYUSDQPyQr1bQsvkUWo= Subject key identifier: 7C:CC:B8:08:E8:29:CE:B7:7C:FF:FB:E0:2B:68:7E:BF:A8:DF:68:07 Certificate issuer: /CN=B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5 Certificate serial: 3BA78310E86886C082BE1B2ACF3F720BB3B393C0 Authority key identifier: B3:54:D3:28:CB:BF:D1:EF:3C:D2:92:68:A2:3B:0F:CC:60:E3:A2:C5 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.cer Subject info access: rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/3136342e33372e3230332e302f32342d3234203d3e203133353337.roa Signing time: Mon 17 Aug 2026 08:21:51 +0000 ROA not before: Mon 17 Aug 2026 08:16:51 +0000 ROA not after: Mon 16 Aug 2027 08:21:51 +0000 asID: 13537 IP address blocks: 164.37.203.0/24 maxlen: 24 Validation: OK Signature path: rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.crl rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.mft rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.cer rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/D0A516B50426202A424F0EBFCB7D2BD4F744F964.crl rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/D0A516B50426202A424F0EBFCB7D2BD4F744F964.mft rsync://rpki.ripe.net/repository/DEFAULT/0KUWtQQmICpCTw6_y30r1PdE-WQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 03 Sep 2026 18:02:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3b:a7:83:10:e8:68:86:c0:82:be:1b:2a:cf:3f:72:0b:b3:b3:93:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5 Validity Not Before: Aug 17 08:16:51 2026 GMT Not After : Aug 16 08:21:51 2027 GMT Subject: CN=7CCCB808E829CEB77CFFFBE02B687EBFA8DF6807 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:af:88:cc:49:e3:95:63:3a:11:a2:01:2d:56: 0d:38:ba:6d:3d:71:78:76:a4:f9:37:53:e5:7a:4e: cd:27:22:95:56:7f:6e:fa:9f:08:67:b5:4f:39:23: 07:ff:82:15:a0:a8:6a:c1:c6:9c:47:64:24:a8:00: fa:2c:a8:48:e6:ce:d0:32:3c:ab:1b:61:18:e8:28: 35:21:11:7b:55:44:4b:30:17:8b:e4:e1:b7:4f:7f: db:c1:5d:c9:51:18:b5:d7:0f:b7:e9:45:10:9a:cc: 16:ac:78:07:db:a3:ec:b5:cf:95:f8:7d:44:24:1b: 23:c1:91:c1:47:18:14:4c:d8:b2:d6:40:1d:15:d0: bb:0e:40:4a:8c:60:09:96:dc:33:ca:45:4d:b9:f3: 55:ed:7c:34:01:12:16:e2:68:36:0c:1e:bd:50:fa: 45:33:a7:86:1f:18:4c:75:9a:56:5c:55:6d:bd:9a: f9:42:e9:7e:b4:6c:3c:c3:79:4c:17:d9:fb:8a:cc: ab:91:66:f3:21:dd:2b:fa:c4:f0:90:de:36:b8:32: fa:2e:6e:fa:19:c4:8b:9a:de:45:77:60:f2:92:fc: 30:8c:dd:d1:ba:57:c2:44:10:b8:99:15:00:6b:19: 9a:65:c0:81:8c:8d:cd:5e:81:cd:a5:cd:cd:d4:6a: b7:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:CC:B8:08:E8:29:CE:B7:7C:FF:FB:E0:2B:68:7E:BF:A8:DF:68:07 X509v3 Authority Key Identifier: keyid:B3:54:D3:28:CB:BF:D1:EF:3C:D2:92:68:A2:3B:0F:CC:60:E3:A2:C5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.cer Subject Information Access: Signed Object - URI:rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/3136342e33372e3230332e302f32342d3234203d3e203133353337.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 164.37.203.0/24 Signature Algorithm: sha256WithRSAEncryption 5a:ec:bc:22:de:6c:de:ab:e7:be:17:84:0b:64:9d:af:3b:a5: 1e:36:c9:87:7f:35:e8:04:4d:23:59:cd:17:e4:ca:5d:9c:cd: c7:b1:68:fb:29:cd:fd:55:d5:bd:94:81:9e:59:33:e2:be:84: f5:5f:99:9e:4f:c5:36:11:25:c2:b5:c7:3c:22:f1:cc:4a:47: 13:32:4e:61:fa:94:92:37:52:ae:23:b6:86:15:b9:85:a0:2f: af:a5:4b:64:f9:a2:98:bc:5b:5c:98:27:12:ae:32:be:f6:b6: d3:e5:c7:7d:8e:3f:29:cc:1c:f6:75:a9:68:d6:c5:41:1e:9b: db:b4:c4:66:48:8b:54:9d:d7:75:a1:d3:b8:fc:20:ca:1d:b9: 29:63:03:fc:1d:03:9d:35:c8:af:0e:3f:d5:89:ce:6e:2c:a3: 18:41:8a:1f:31:77:6f:9e:4a:e0:0e:5e:62:62:97:aa:61:db: da:82:a6:da:88:9d:ab:d9:4a:53:ef:df:9e:e7:af:0d:a3:27: f4:3c:62:45:53:47:ec:47:51:95:cc:bf:39:f3:7a:80:fe:bb: b1:57:b0:9a:bf:ec:5e:87:6b:d8:37:8d:86:9e:95:68:c3:ab: 45:12:0b:df:e8:85:9c:ef:1b:61:cb:46:48:84:6a:77:6d:93: 23:f3:e3:f4 -----BEGIN CERTIFICATE----- MIIFWDCCBECgAwIBAgIUO6eDEOhohsCCvhsqzz9yC7Ozk8AwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjM1NEQzMjhDQkJGRDFFRjNDRDI5MjY4QTIzQjBGQ0M2 MEUzQTJDNTAeFw0yNjA4MTcwODE2NTFaFw0yNzA4MTYwODIxNTFaMDMxMTAvBgNV BAMTKDdDQ0NCODA4RTgyOUNFQjc3Q0ZGRkJFMDJCNjg3RUJGQThERjY4MDcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDNr4jMSeOVYzoRogEtVg04um09 cXh2pPk3U+V6Ts0nIpVWf276nwhntU85Iwf/ghWgqGrBxpxHZCSoAPosqEjmztAy PKsbYRjoKDUhEXtVREswF4vk4bdPf9vBXclRGLXXD7fpRRCazBaseAfbo+y1z5X4 fUQkGyPBkcFHGBRM2LLWQB0V0LsOQEqMYAmW3DPKRU2581XtfDQBEhbiaDYMHr1Q +kUzp4YfGEx1mlZcVW29mvlC6X60bDzDeUwX2fuKzKuRZvMh3Sv6xPCQ3ja4Mvou bvoZxIua3kV3YPKS/DCM3dG6V8JEELiZFQBrGZplwIGMjc1egc2lzc3UardfAgMB AAGjggJiMIICXjAdBgNVHQ4EFgQUfMy4COgpzrd8//vgK2h+v6jfaAcwHwYDVR0j BBgwFoAUs1TTKMu/0e880pJoojsPzGDjosUwDgYDVR0PAQH/BAQDAgeAMIGIBgNV HR8EgYAwfjB8oHqgeIZ2cnN5bmM6Ly9yLm1hZ2VsbGFuLmlweG8uY29tL3JlcG8v YTAzNzViMzktZjk0OS00Y2I1LWI1MTktZjk0MDA4YjE2NTRjLTAvMC9CMzU0RDMy OENCQkZEMUVGM0NEMjkyNjhBMjNCMEZDQzYwRTNBMkM1LmNybDCBngYIKwYBBQUH AQEEgZEwgY4wgYsGCCsGAQUFBzAChn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5y aXBlLm5ldC9yZXBvc2l0b3J5LzYxNzA4YTZiLTZjM2EtNDBhMC1hMzAyLTU5NWVj YzE3ODQ4Yy8wL0IzNTREMzI4Q0JCRkQxRUYzQ0QyOTI2OEEyM0IwRkNDNjBFM0Ey QzUuY2VyMIGkBggrBgEFBQcBCwSBlzCBlDCBkQYIKwYBBQUHMAuGgYRyc3luYzov L3IubWFnZWxsYW4uaXB4by5jb20vcmVwby9hMDM3NWIzOS1mOTQ5LTRjYjUtYjUx OS1mOTQwMDhiMTY1NGMtMC8wLzMxMzYzNDJlMzMzNzJlMzIzMDMzMmUzMDJmMzIz NDJkMzIzNDIwM2QzZTIwMzEzMzM1MzMzNy5yb2EwGAYDVR0gAQH/BA4wDDAKBggr BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAKQlyzANBgkqhkiG 9w0BAQsFAAOCAQEAWuy8It5s3qvnvheEC2SdrzulHjbJh3816ARNI1nNF+TKXZzN x7Fo+ynN/VXVvZSBnlkz4r6E9V+Znk/FNhElwrXHPCLxzEpHEzJOYfqUkjdSriO2 hhW5haAvr6VLZPmimLxbXJgnEq4yvva20+XHfY4/Kcwc9nWpaNbFQR6b27TEZkiL VJ3XdaHTuPwgyh25KWMD/B0DnTXIrw4/1YnObiyjGEGKHzF3b55K4A5eYmKXqmHb 2oKm2oidq9lKU+/fnuevDaMn9DxiRVNH7EdRlcy/OfN6gP67sVewmr/sXodr2DeN hp6VaMOrRRIL3+iFnO8bYctGSIRqd22TI/Pj9A== -----END CERTIFICATE-----Generated at Thu Sep 3 08:28:59 2026 by rpki-client