$ rpki-client -vvvf r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/3136342e33372e3230352e302f32342d3234203d3e203235313938.roa File: 3136342e33372e3230352e302f32342d3234203d3e203235313938.roa (raw, json) Hash identifier: p1G3KbCwqnXtvDVpYyoAzy3lXflVwBQDMjcxYNevlzc= Subject key identifier: 29:7E:2E:CB:8A:A9:86:20:5F:DB:A5:22:6A:30:40:95:65:E0:84:69 Certificate issuer: /CN=B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5 Certificate serial: 0E723B0ECFCCAD60E8AA10250FE972333713D2CD Authority key identifier: B3:54:D3:28:CB:BF:D1:EF:3C:D2:92:68:A2:3B:0F:CC:60:E3:A2:C5 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.cer Subject info access: rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/3136342e33372e3230352e302f32342d3234203d3e203235313938.roa Signing time: Thu 27 Aug 2026 16:52:51 +0000 ROA not before: Thu 27 Aug 2026 16:47:51 +0000 ROA not after: Thu 26 Aug 2027 16:52:51 +0000 asID: 25198 IP address blocks: 164.37.205.0/24 maxlen: 24 Validation: OK Signature path: rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.crl rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.mft rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.cer rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/D0A516B50426202A424F0EBFCB7D2BD4F744F964.crl rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/D0A516B50426202A424F0EBFCB7D2BD4F744F964.mft rsync://rpki.ripe.net/repository/DEFAULT/0KUWtQQmICpCTw6_y30r1PdE-WQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 03 Sep 2026 18:02:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0e:72:3b:0e:cf:cc:ad:60:e8:aa:10:25:0f:e9:72:33:37:13:d2:cd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5 Validity Not Before: Aug 27 16:47:51 2026 GMT Not After : Aug 26 16:52:51 2027 GMT Subject: CN=297E2ECB8AA986205FDBA5226A30409565E08469 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:72:55:72:e6:34:a0:63:cb:77:bb:92:ac:d9: f0:64:c5:f5:04:39:52:23:00:e5:04:7b:48:ae:0c: 3f:05:a3:6f:3a:a9:fa:68:47:5c:91:ae:a2:6f:22: e8:bb:b6:f0:ee:bf:8a:53:92:d4:04:3c:61:07:a8: 69:1e:6c:94:8a:5a:c0:d9:72:9d:8e:b5:f1:9a:25: 53:e7:7a:54:d2:8a:4c:bc:e6:b7:3b:72:7d:3c:86: 7a:e7:fa:87:d4:49:91:22:14:c0:5f:c2:8e:4b:70: 38:14:4c:c2:06:0c:b5:84:dd:b2:99:e5:e8:50:05: af:25:3b:5b:2f:5b:19:33:b8:94:6e:d7:9a:96:5f: f8:43:2c:61:b0:a9:1a:97:2d:eb:0e:ee:2b:07:c4: 3f:69:29:52:b4:57:e6:08:c6:8c:31:cb:20:22:72: f7:b9:b3:e6:96:f1:7d:cc:72:ce:5f:37:50:e2:da: 36:05:3d:9a:52:69:11:b0:30:33:9e:b6:83:3e:63: e1:97:29:66:c6:6b:4b:eb:93:59:5d:b5:53:9d:33: 88:60:e5:dc:61:e0:05:f7:aa:57:20:22:f0:b0:66: 4e:e3:bc:60:a4:cb:09:d4:4c:75:ef:54:9b:5b:09: a8:2d:ce:f2:87:09:7e:f4:fd:e8:ff:84:6d:b3:0e: 76:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:7E:2E:CB:8A:A9:86:20:5F:DB:A5:22:6A:30:40:95:65:E0:84:69 X509v3 Authority Key Identifier: keyid:B3:54:D3:28:CB:BF:D1:EF:3C:D2:92:68:A2:3B:0F:CC:60:E3:A2:C5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.cer Subject Information Access: Signed Object - URI:rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/3136342e33372e3230352e302f32342d3234203d3e203235313938.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 164.37.205.0/24 Signature Algorithm: sha256WithRSAEncryption 74:a3:08:19:92:43:10:4f:66:11:12:90:38:1a:25:a2:da:74: 98:54:eb:f4:ba:c2:69:a6:95:ae:62:53:bd:9a:96:ff:67:b7: e9:01:11:8a:62:c0:75:7a:08:4f:05:37:54:c0:80:e6:50:19: fe:bc:08:79:8e:b1:48:78:7e:d8:19:da:c3:25:c7:f0:49:9a: 1b:51:e4:77:12:8a:4b:9d:c9:75:2d:68:d7:df:c5:91:fa:05: fc:0f:5b:a4:3d:99:7e:9a:3d:19:70:4f:f8:08:f3:1f:18:13: 15:49:6d:29:33:78:23:e9:18:d3:2a:6c:eb:16:55:67:c6:e1: 61:79:ea:c5:54:87:d6:02:75:6e:bd:49:03:bb:97:eb:ef:95: c5:d7:23:49:ac:80:77:f6:13:1b:fc:ce:75:6a:f6:e9:ca:a0: c5:17:6d:c4:94:ee:93:88:d4:53:69:85:96:66:9b:dc:15:d4: b1:26:59:83:89:07:b0:62:fd:22:dd:8b:42:9f:33:7f:01:03: f4:19:90:92:d8:e1:01:a1:a1:9e:db:2c:a3:91:b2:cb:54:5d: 09:fd:9f:0f:80:64:ae:ae:5b:66:0a:54:b3:e3:e3:af:18:d8: 6d:e8:2d:1f:5d:86:a6:fe:1b:d7:b0:2a:35:29:45:78:c8:e9: ab:5d:38:ff -----BEGIN CERTIFICATE----- MIIFWDCCBECgAwIBAgIUDnI7Ds/MrWDoqhAlD+lyMzcT0s0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjM1NEQzMjhDQkJGRDFFRjNDRDI5MjY4QTIzQjBGQ0M2 MEUzQTJDNTAeFw0yNjA4MjcxNjQ3NTFaFw0yNzA4MjYxNjUyNTFaMDMxMTAvBgNV BAMTKDI5N0UyRUNCOEFBOTg2MjA1RkRCQTUyMjZBMzA0MDk1NjVFMDg0NjkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDGclVy5jSgY8t3u5Ks2fBkxfUE OVIjAOUEe0iuDD8Fo286qfpoR1yRrqJvIui7tvDuv4pTktQEPGEHqGkebJSKWsDZ cp2OtfGaJVPnelTSiky85rc7cn08hnrn+ofUSZEiFMBfwo5LcDgUTMIGDLWE3bKZ 5ehQBa8lO1svWxkzuJRu15qWX/hDLGGwqRqXLesO7isHxD9pKVK0V+YIxowxyyAi cve5s+aW8X3Mcs5fN1Di2jYFPZpSaRGwMDOetoM+Y+GXKWbGa0vrk1ldtVOdM4hg 5dxh4AX3qlcgIvCwZk7jvGCkywnUTHXvVJtbCagtzvKHCX70/ej/hG2zDnZTAgMB AAGjggJiMIICXjAdBgNVHQ4EFgQUKX4uy4qphiBf26UiajBAlWXghGkwHwYDVR0j BBgwFoAUs1TTKMu/0e880pJoojsPzGDjosUwDgYDVR0PAQH/BAQDAgeAMIGIBgNV HR8EgYAwfjB8oHqgeIZ2cnN5bmM6Ly9yLm1hZ2VsbGFuLmlweG8uY29tL3JlcG8v YTAzNzViMzktZjk0OS00Y2I1LWI1MTktZjk0MDA4YjE2NTRjLTAvMC9CMzU0RDMy OENCQkZEMUVGM0NEMjkyNjhBMjNCMEZDQzYwRTNBMkM1LmNybDCBngYIKwYBBQUH AQEEgZEwgY4wgYsGCCsGAQUFBzAChn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5y aXBlLm5ldC9yZXBvc2l0b3J5LzYxNzA4YTZiLTZjM2EtNDBhMC1hMzAyLTU5NWVj YzE3ODQ4Yy8wL0IzNTREMzI4Q0JCRkQxRUYzQ0QyOTI2OEEyM0IwRkNDNjBFM0Ey QzUuY2VyMIGkBggrBgEFBQcBCwSBlzCBlDCBkQYIKwYBBQUHMAuGgYRyc3luYzov L3IubWFnZWxsYW4uaXB4by5jb20vcmVwby9hMDM3NWIzOS1mOTQ5LTRjYjUtYjUx OS1mOTQwMDhiMTY1NGMtMC8wLzMxMzYzNDJlMzMzNzJlMzIzMDM1MmUzMDJmMzIz NDJkMzIzNDIwM2QzZTIwMzIzNTMxMzkzOC5yb2EwGAYDVR0gAQH/BA4wDDAKBggr BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAKQlzTANBgkqhkiG 9w0BAQsFAAOCAQEAdKMIGZJDEE9mERKQOBolotp0mFTr9LrCaaaVrmJTvZqW/2e3 6QERimLAdXoITwU3VMCA5lAZ/rwIeY6xSHh+2BnawyXH8EmaG1HkdxKKS53JdS1o 19/FkfoF/A9bpD2Zfpo9GXBP+AjzHxgTFUltKTN4I+kY0yps6xZVZ8bhYXnqxVSH 1gJ1br1JA7uX6++VxdcjSayAd/YTG/zOdWr26cqgxRdtxJTuk4jUU2mFlmab3BXU sSZZg4kHsGL9It2LQp8zfwED9BmQktjhAaGhntsso5Gyy1RdCf2fD4Bkrq5bZgpU s+PjrxjYbegtH12Gpv4b17AqNSlFeMjpq104/w== -----END CERTIFICATE-----Generated at Thu Sep 3 08:28:59 2026 by rpki-client