$ rpki-client -vvvf r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/3136342e33372e3230372e302f32342d3234203d3e20313532363938.roa File: 3136342e33372e3230372e302f32342d3234203d3e20313532363938.roa (raw, json) Hash identifier: 4lEOctLf9SF8jQIYPc/DoUviJOl88TyU/hthQnp9rNo= Subject key identifier: D1:EB:47:83:2B:AD:76:3D:DF:C6:B7:E4:AA:28:94:EC:B2:27:2E:C2 Certificate issuer: /CN=B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5 Certificate serial: 09D4B16E4E442EE77184560DA08DE834398C41E2 Authority key identifier: B3:54:D3:28:CB:BF:D1:EF:3C:D2:92:68:A2:3B:0F:CC:60:E3:A2:C5 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.cer Subject info access: rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/3136342e33372e3230372e302f32342d3234203d3e20313532363938.roa Signing time: Wed 19 Aug 2026 12:38:11 +0000 ROA not before: Wed 19 Aug 2026 12:33:11 +0000 ROA not after: Wed 18 Aug 2027 12:38:11 +0000 asID: 152698 IP address blocks: 164.37.207.0/24 maxlen: 24 Validation: OK Signature path: rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.crl rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.mft rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.cer rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/D0A516B50426202A424F0EBFCB7D2BD4F744F964.crl rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/D0A516B50426202A424F0EBFCB7D2BD4F744F964.mft rsync://rpki.ripe.net/repository/DEFAULT/0KUWtQQmICpCTw6_y30r1PdE-WQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 27 Aug 2026 14:17:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 09:d4:b1:6e:4e:44:2e:e7:71:84:56:0d:a0:8d:e8:34:39:8c:41:e2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5 Validity Not Before: Aug 19 12:33:11 2026 GMT Not After : Aug 18 12:38:11 2027 GMT Subject: CN=D1EB47832BAD763DDFC6B7E4AA2894ECB2272EC2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:bc:30:fb:df:71:3b:bb:d5:4f:9c:f4:24:e8: a0:5f:36:e7:f2:a6:91:78:b5:79:62:37:71:0e:7b: 41:df:59:29:1f:a2:82:35:e7:17:31:0b:76:a0:63: ee:08:f9:ab:79:bf:0a:63:78:a8:6c:b9:80:90:9a: cb:c6:07:16:7b:fb:d1:a2:f0:5d:8f:3b:68:71:94: 34:86:11:c7:b0:c2:3c:0b:56:64:21:85:59:c1:35: 5e:71:32:8d:22:c0:38:f4:47:6f:90:f8:ea:ca:fb: 14:7d:ff:a8:86:0d:26:e5:a1:a4:66:18:bd:af:ec: 35:a3:f4:81:b0:6b:3d:dc:bd:1f:7b:93:91:14:41: 95:42:dc:09:8a:39:f5:dc:36:3f:ee:e6:27:32:f9: e8:c2:b5:e5:4e:1c:c0:0a:b2:fb:21:c5:0b:2a:cd: f7:32:67:c5:f4:e9:9f:0a:1d:ff:94:d3:4f:80:55: ce:cf:9b:3f:04:9a:55:be:6e:4a:41:8f:fc:78:9c: fb:9b:a4:14:cc:16:74:9e:7b:c2:68:8a:59:df:f0: db:1c:0f:d1:89:42:86:d6:fc:fb:23:8f:63:b1:10: dc:db:82:7c:b8:2e:a2:88:53:0c:5b:bd:ee:d0:5c: ff:2b:a5:1c:33:01:07:e9:60:91:c5:b0:16:c4:b4: b8:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:EB:47:83:2B:AD:76:3D:DF:C6:B7:E4:AA:28:94:EC:B2:27:2E:C2 X509v3 Authority Key Identifier: keyid:B3:54:D3:28:CB:BF:D1:EF:3C:D2:92:68:A2:3B:0F:CC:60:E3:A2:C5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.cer Subject Information Access: Signed Object - URI:rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/3136342e33372e3230372e302f32342d3234203d3e20313532363938.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 164.37.207.0/24 Signature Algorithm: sha256WithRSAEncryption ad:d9:d9:f5:27:11:97:47:a1:15:fa:87:35:9a:b1:b1:29:f5: d1:78:d5:b8:5c:d8:06:94:67:9a:4d:db:54:11:bd:bd:61:4a: 6e:b9:d4:25:e4:fe:6f:a6:79:97:0b:3b:ee:5a:5e:cd:49:33: 3f:59:ef:8e:76:08:28:5f:49:9d:16:61:24:bc:d3:2e:eb:23: 0d:e1:9e:dc:a8:54:4b:be:f0:43:1a:80:e2:07:97:05:5e:3d: 79:2e:50:9f:b1:4a:60:87:a1:bb:4a:22:e8:33:f8:68:54:06: b6:9e:0f:ff:36:ce:c5:50:7a:ea:70:77:0e:4b:2d:3f:7d:be: e8:48:28:07:30:5e:6c:92:3b:ef:59:3a:6c:10:0d:fe:4c:7f: ac:d6:ed:0d:70:f1:5f:93:77:3f:b0:18:fb:a7:3c:dd:7f:b2: 49:e5:11:e9:96:68:c1:2e:70:cc:dc:de:69:21:10:c2:f8:2d: 77:ef:13:23:d8:bf:3f:e2:9d:43:81:40:0a:de:38:2e:d0:8d: 9b:6e:e0:9e:de:14:57:2b:0a:6b:18:43:6e:08:b5:6a:f9:ee: 62:24:c1:81:36:d9:ba:e2:3e:e4:20:51:be:10:d8:d2:a6:23: 36:61:16:6a:dd:6a:4e:ca:fe:49:3f:5e:dc:a3:75:09:6d:99: 59:9a:cb:44 -----BEGIN CERTIFICATE----- MIIFWjCCBEKgAwIBAgIUCdSxbk5ELudxhFYNoI3oNDmMQeIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjM1NEQzMjhDQkJGRDFFRjNDRDI5MjY4QTIzQjBGQ0M2 MEUzQTJDNTAeFw0yNjA4MTkxMjMzMTFaFw0yNzA4MTgxMjM4MTFaMDMxMTAvBgNV BAMTKEQxRUI0NzgzMkJBRDc2M0RERkM2QjdFNEFBMjg5NEVDQjIyNzJFQzIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDKvDD733E7u9VPnPQk6KBfNufy ppF4tXliN3EOe0HfWSkfooI15xcxC3agY+4I+at5vwpjeKhsuYCQmsvGBxZ7+9Gi 8F2PO2hxlDSGEcewwjwLVmQhhVnBNV5xMo0iwDj0R2+Q+OrK+xR9/6iGDSbloaRm GL2v7DWj9IGwaz3cvR97k5EUQZVC3AmKOfXcNj/u5icy+ejCteVOHMAKsvshxQsq zfcyZ8X06Z8KHf+U00+AVc7Pmz8EmlW+bkpBj/x4nPubpBTMFnSee8Joilnf8Nsc D9GJQobW/Psjj2OxENzbgny4LqKIUwxbve7QXP8rpRwzAQfpYJHFsBbEtLhTAgMB AAGjggJkMIICYDAdBgNVHQ4EFgQU0etHgyutdj3fxrfkqiiU7LInLsIwHwYDVR0j BBgwFoAUs1TTKMu/0e880pJoojsPzGDjosUwDgYDVR0PAQH/BAQDAgeAMIGIBgNV HR8EgYAwfjB8oHqgeIZ2cnN5bmM6Ly9yLm1hZ2VsbGFuLmlweG8uY29tL3JlcG8v YTAzNzViMzktZjk0OS00Y2I1LWI1MTktZjk0MDA4YjE2NTRjLTAvMC9CMzU0RDMy OENCQkZEMUVGM0NEMjkyNjhBMjNCMEZDQzYwRTNBMkM1LmNybDCBngYIKwYBBQUH AQEEgZEwgY4wgYsGCCsGAQUFBzAChn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5y aXBlLm5ldC9yZXBvc2l0b3J5LzYxNzA4YTZiLTZjM2EtNDBhMC1hMzAyLTU5NWVj YzE3ODQ4Yy8wL0IzNTREMzI4Q0JCRkQxRUYzQ0QyOTI2OEEyM0IwRkNDNjBFM0Ey QzUuY2VyMIGmBggrBgEFBQcBCwSBmTCBljCBkwYIKwYBBQUHMAuGgYZyc3luYzov L3IubWFnZWxsYW4uaXB4by5jb20vcmVwby9hMDM3NWIzOS1mOTQ5LTRjYjUtYjUx OS1mOTQwMDhiMTY1NGMtMC8wLzMxMzYzNDJlMzMzNzJlMzIzMDM3MmUzMDJmMzIz NDJkMzIzNDIwM2QzZTIwMzEzNTMyMzYzOTM4LnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQApCXPMA0GCSqG SIb3DQEBCwUAA4IBAQCt2dn1JxGXR6EV+oc1mrGxKfXReNW4XNgGlGeaTdtUEb29 YUpuudQl5P5vpnmXCzvuWl7NSTM/We+OdggoX0mdFmEkvNMu6yMN4Z7cqFRLvvBD GoDiB5cFXj15LlCfsUpgh6G7SiLoM/hoVAa2ng//Ns7FUHrqcHcOSy0/fb7oSCgH MF5skjvvWTpsEA3+TH+s1u0NcPFfk3c/sBj7pzzdf7JJ5RHplmjBLnDM3N5pIRDC +C137xMj2L8/4p1DgUAK3jgu0I2bbuCe3hRXKwprGENuCLVq+e5iJMGBNtm64j7k IFG+ENjSpiM2YRZq3WpOyv5JP17co3UJbZlZmstE -----END CERTIFICATE-----Generated at Wed Aug 26 18:56:19 2026 by rpki-client