$ rpki-client -vvvf r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/3136342e33372e3230342e302f32342d3234203d3e203235313938.roa File: 3136342e33372e3230342e302f32342d3234203d3e203235313938.roa (raw, json) Hash identifier: r+IUdONMFOwXitY1zHbP0RfOXpX07jWeArbwI3bMB0E= Subject key identifier: 34:C6:DE:CC:1C:42:AC:95:82:F3:66:2B:B5:50:8D:F5:E2:88:16:78 Certificate issuer: /CN=B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5 Certificate serial: 046FD513A65B1DE5EC6DEF03CD7841DAC90C188D Authority key identifier: B3:54:D3:28:CB:BF:D1:EF:3C:D2:92:68:A2:3B:0F:CC:60:E3:A2:C5 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.cer Subject info access: rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/3136342e33372e3230342e302f32342d3234203d3e203235313938.roa Signing time: Wed 26 Aug 2026 16:31:16 +0000 ROA not before: Wed 26 Aug 2026 16:26:16 +0000 ROA not after: Wed 25 Aug 2027 16:31:16 +0000 asID: 25198 IP address blocks: 164.37.204.0/24 maxlen: 24 Validation: OK Signature path: rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.crl rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.mft rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.cer rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/D0A516B50426202A424F0EBFCB7D2BD4F744F964.crl rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/D0A516B50426202A424F0EBFCB7D2BD4F744F964.mft rsync://rpki.ripe.net/repository/DEFAULT/0KUWtQQmICpCTw6_y30r1PdE-WQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 03 Sep 2026 18:02:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 04:6f:d5:13:a6:5b:1d:e5:ec:6d:ef:03:cd:78:41:da:c9:0c:18:8d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5 Validity Not Before: Aug 26 16:26:16 2026 GMT Not After : Aug 25 16:31:16 2027 GMT Subject: CN=34C6DECC1C42AC9582F3662BB5508DF5E2881678 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:87:f7:21:41:36:ed:1f:6a:c4:cf:69:ee:52: 0c:56:8d:ea:88:0b:d2:2e:e2:2b:e0:7a:56:98:62: 6a:04:cd:e5:38:13:f2:03:80:53:ab:66:be:28:97: 01:e7:86:b7:30:bd:6e:a2:8a:c8:ad:bf:68:f4:a7: 18:4f:8f:10:64:1f:a6:24:1c:04:f9:7e:8a:87:3e: eb:ce:c6:55:a8:a0:90:2a:33:97:95:00:82:cf:4b: a6:98:1f:87:61:8f:b9:2b:ed:b0:32:4c:0d:fb:e8: 4f:9d:53:f7:b7:c7:c0:03:3f:c5:bc:6e:2c:54:3f: b5:7b:26:a6:95:c2:2e:1a:df:14:bc:a3:8d:3a:b2: 7c:76:14:4b:e7:00:49:fe:2e:08:95:89:a5:2f:9d: dc:d9:15:87:7e:3a:6c:98:e2:b7:81:56:88:53:ed: 32:0e:d9:c0:c3:12:0d:ab:89:b9:53:26:26:5b:b9: 17:36:6c:b3:d6:15:b1:4b:a2:77:0b:ec:0a:76:5b: 3f:a5:f6:59:9e:22:5d:a2:72:15:dc:5f:26:90:9e: 96:0f:d6:1a:e4:fc:de:8e:5c:79:99:18:48:a4:fa: 67:45:c5:83:06:ed:3f:c0:05:24:1b:9d:bd:1d:66: b5:65:6b:cf:10:42:a4:fa:6f:74:05:91:78:f9:27: 28:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:C6:DE:CC:1C:42:AC:95:82:F3:66:2B:B5:50:8D:F5:E2:88:16:78 X509v3 Authority Key Identifier: keyid:B3:54:D3:28:CB:BF:D1:EF:3C:D2:92:68:A2:3B:0F:CC:60:E3:A2:C5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.cer Subject Information Access: Signed Object - URI:rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/3136342e33372e3230342e302f32342d3234203d3e203235313938.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 164.37.204.0/24 Signature Algorithm: sha256WithRSAEncryption 47:c7:a6:c6:09:9a:2a:0d:9c:c5:8a:28:0d:4c:8e:50:74:51: 9b:6c:47:e7:76:b8:3b:cd:6e:ed:2a:b7:9d:98:30:36:00:81: 19:7c:32:57:ee:4a:93:47:07:18:85:65:50:ac:a0:b8:6b:ac: 7e:c8:d6:77:81:d9:b5:c3:d3:e9:ab:fe:da:00:a1:13:f2:95: e2:73:8d:34:58:31:23:dd:d9:7e:d2:46:5a:75:b3:75:22:2b: ad:61:2a:d6:eb:12:d9:77:bf:5d:62:cf:45:5c:9f:38:d6:bf: 63:8c:d4:f0:18:78:59:a4:1c:bb:7b:26:e4:cd:f6:50:32:eb: b8:b5:d6:fb:5f:1d:c0:89:f9:60:53:32:06:72:86:38:b4:c2: 8f:39:f7:5a:35:d6:96:5e:44:5f:36:9c:9c:a5:ed:6c:61:6e: 75:70:6a:79:7a:30:a7:3f:df:fb:73:54:9b:e7:20:2b:6c:7d: 34:2e:f4:2e:9d:7f:84:7e:cd:04:de:b2:63:9d:e0:af:d1:d0: ed:a0:07:85:88:48:db:bc:e1:7a:c7:7a:5f:8f:c4:95:40:f7: 89:37:0e:89:02:69:e5:fd:2e:ab:7c:0c:b6:7a:5a:e0:53:df: 18:71:86:09:32:8b:45:a5:78:a1:57:22:05:1a:d9:48:32:c6: 94:1c:f0:cf -----BEGIN CERTIFICATE----- MIIFWDCCBECgAwIBAgIUBG/VE6ZbHeXsbe8DzXhB2skMGI0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjM1NEQzMjhDQkJGRDFFRjNDRDI5MjY4QTIzQjBGQ0M2 MEUzQTJDNTAeFw0yNjA4MjYxNjI2MTZaFw0yNzA4MjUxNjMxMTZaMDMxMTAvBgNV BAMTKDM0QzZERUNDMUM0MkFDOTU4MkYzNjYyQkI1NTA4REY1RTI4ODE2NzgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCdh/chQTbtH2rEz2nuUgxWjeqI C9Iu4ivgelaYYmoEzeU4E/IDgFOrZr4olwHnhrcwvW6iisitv2j0pxhPjxBkH6Yk HAT5foqHPuvOxlWooJAqM5eVAILPS6aYH4dhj7kr7bAyTA376E+dU/e3x8ADP8W8 bixUP7V7JqaVwi4a3xS8o406snx2FEvnAEn+LgiViaUvndzZFYd+OmyY4reBVohT 7TIO2cDDEg2riblTJiZbuRc2bLPWFbFLoncL7Ap2Wz+l9lmeIl2ichXcXyaQnpYP 1hrk/N6OXHmZGEik+mdFxYMG7T/ABSQbnb0dZrVla88QQqT6b3QFkXj5Jyh1AgMB AAGjggJiMIICXjAdBgNVHQ4EFgQUNMbezBxCrJWC82YrtVCN9eKIFngwHwYDVR0j BBgwFoAUs1TTKMu/0e880pJoojsPzGDjosUwDgYDVR0PAQH/BAQDAgeAMIGIBgNV HR8EgYAwfjB8oHqgeIZ2cnN5bmM6Ly9yLm1hZ2VsbGFuLmlweG8uY29tL3JlcG8v YTAzNzViMzktZjk0OS00Y2I1LWI1MTktZjk0MDA4YjE2NTRjLTAvMC9CMzU0RDMy OENCQkZEMUVGM0NEMjkyNjhBMjNCMEZDQzYwRTNBMkM1LmNybDCBngYIKwYBBQUH AQEEgZEwgY4wgYsGCCsGAQUFBzAChn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5y aXBlLm5ldC9yZXBvc2l0b3J5LzYxNzA4YTZiLTZjM2EtNDBhMC1hMzAyLTU5NWVj YzE3ODQ4Yy8wL0IzNTREMzI4Q0JCRkQxRUYzQ0QyOTI2OEEyM0IwRkNDNjBFM0Ey QzUuY2VyMIGkBggrBgEFBQcBCwSBlzCBlDCBkQYIKwYBBQUHMAuGgYRyc3luYzov L3IubWFnZWxsYW4uaXB4by5jb20vcmVwby9hMDM3NWIzOS1mOTQ5LTRjYjUtYjUx OS1mOTQwMDhiMTY1NGMtMC8wLzMxMzYzNDJlMzMzNzJlMzIzMDM0MmUzMDJmMzIz NDJkMzIzNDIwM2QzZTIwMzIzNTMxMzkzOC5yb2EwGAYDVR0gAQH/BA4wDDAKBggr BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAKQlzDANBgkqhkiG 9w0BAQsFAAOCAQEAR8emxgmaKg2cxYooDUyOUHRRm2xH53a4O81u7Sq3nZgwNgCB GXwyV+5Kk0cHGIVlUKyguGusfsjWd4HZtcPT6av+2gChE/KV4nONNFgxI93ZftJG WnWzdSIrrWEq1usS2Xe/XWLPRVyfONa/Y4zU8Bh4WaQcu3sm5M32UDLruLXW+18d wIn5YFMyBnKGOLTCjzn3WjXWll5EXzacnKXtbGFudXBqeXowpz/f+3NUm+cgK2x9 NC70Lp1/hH7NBN6yY53gr9HQ7aAHhYhI27zhesd6X4/ElUD3iTcOiQJp5f0uq3wM tnpa4FPfGHGGCTKLRaV4oVciBRrZSDLGlBzwzw== -----END CERTIFICATE-----Generated at Thu Sep 3 08:28:59 2026 by rpki-client