$ rpki-client -vvvf r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/3136342e33372e3230392e302f32342d3234203d3e203332303432.roa File: 3136342e33372e3230392e302f32342d3234203d3e203332303432.roa (raw, json) Hash identifier: J9x7xoe3Oi4DsF16/ksMdxshZz6mgw+kRJMPe2hw9GI= Subject key identifier: 64:5A:7D:65:D6:F8:AC:F2:C9:24:29:CD:7C:EB:54:8E:9C:58:02:6E Certificate issuer: /CN=B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5 Certificate serial: 23E8EBC2FC788A99C1F7194F09295A3484D5F561 Authority key identifier: B3:54:D3:28:CB:BF:D1:EF:3C:D2:92:68:A2:3B:0F:CC:60:E3:A2:C5 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.cer Subject info access: rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/3136342e33372e3230392e302f32342d3234203d3e203332303432.roa Signing time: Mon 12 Oct 2026 00:02:08 +0000 ROA not before: Sun 11 Oct 2026 23:57:08 +0000 ROA not after: Mon 11 Oct 2027 00:02:08 +0000 asID: 32042 IP address blocks: 164.37.209.0/24 maxlen: 24 Validation: OK Signature path: rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.crl rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.mft rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.cer rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/D0A516B50426202A424F0EBFCB7D2BD4F744F964.crl rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/D0A516B50426202A424F0EBFCB7D2BD4F744F964.mft rsync://rpki.ripe.net/repository/DEFAULT/0KUWtQQmICpCTw6_y30r1PdE-WQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 15 Oct 2026 23:00:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 23:e8:eb:c2:fc:78:8a:99:c1:f7:19:4f:09:29:5a:34:84:d5:f5:61 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5 Validity Not Before: Oct 11 23:57:08 2026 GMT Not After : Oct 11 00:02:08 2027 GMT Subject: CN=645A7D65D6F8ACF2C92429CD7CEB548E9C58026E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:29:78:c3:7d:a2:b1:20:6f:73:21:c1:0b:75: 8d:67:f5:6a:c2:05:ef:98:c5:36:f0:3a:7f:5e:80: cd:34:a6:e9:38:66:55:f5:fd:65:b3:e6:17:ac:25: 1c:90:c6:09:58:64:6d:55:8e:e3:6b:3d:c4:25:0d: ce:30:16:33:4e:77:bc:8f:04:58:e9:cb:bc:ed:d8: 39:25:f0:1a:a3:9b:0f:d3:36:b1:a4:f7:cd:73:3a: c2:f9:10:1f:5c:63:05:ba:9e:25:05:71:22:6d:b9: f4:24:04:e0:7b:dd:6e:74:92:d2:f2:69:e7:4f:35: fd:31:e4:8b:c4:56:06:9c:ee:58:50:00:aa:6a:a4: 84:37:61:ad:0c:1c:54:3a:e2:6b:ca:d7:fc:01:4d: 3d:a8:af:b0:10:79:bd:9a:f1:64:6f:4f:03:ad:9b: c4:e2:46:37:e9:3d:e6:57:9c:26:ee:22:5f:1d:a3: 3b:c8:68:71:1e:1c:d8:9b:49:d2:9a:1e:f0:af:bd: 8e:b2:57:a0:1a:51:56:cb:06:e8:e8:0f:09:3b:12: e6:45:eb:9f:e7:75:05:32:d8:78:ac:f5:6a:fd:8c: 48:57:ae:f0:d5:cc:01:29:ba:e7:ca:06:6b:3a:a9: b8:94:7d:14:3a:a3:6e:07:6f:12:52:b8:ea:12:08: 48:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:5A:7D:65:D6:F8:AC:F2:C9:24:29:CD:7C:EB:54:8E:9C:58:02:6E X509v3 Authority Key Identifier: keyid:B3:54:D3:28:CB:BF:D1:EF:3C:D2:92:68:A2:3B:0F:CC:60:E3:A2:C5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.cer Subject Information Access: Signed Object - URI:rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/3136342e33372e3230392e302f32342d3234203d3e203332303432.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 164.37.209.0/24 Signature Algorithm: sha256WithRSAEncryption a9:30:ab:88:7f:8c:93:3b:53:7c:88:c8:ad:b3:59:c0:70:77: 15:39:d9:d5:af:3c:a2:a7:0a:08:ef:75:0a:72:58:84:0e:02: 91:c0:4f:c0:8e:8d:ee:6b:bc:f8:1d:19:22:2f:fb:2c:23:75: 69:67:19:28:fe:63:44:34:7c:e5:ea:3a:15:bd:bf:c9:dd:60: 21:91:a7:ab:89:9a:5b:41:9e:49:d0:e1:0b:62:1e:5b:6b:8b: 1e:ab:80:d5:a1:94:45:6b:c8:56:79:2f:d0:f5:ee:a5:bb:7d: 25:1b:e4:0e:6d:b5:51:67:30:a9:64:81:d6:94:fa:36:41:0a: 2b:27:ab:31:b2:70:04:e5:61:bd:0a:85:4c:7a:88:a1:4c:4f: 93:a5:5b:93:c1:75:65:d3:39:2e:0f:e6:fe:4b:fe:e1:88:9a: 02:42:f0:45:04:e8:e6:85:fd:b5:a8:0d:58:0a:04:35:74:df: a8:d8:cf:ac:6f:c7:bf:09:44:68:78:54:b2:d5:dc:f4:47:1e: b9:d6:6c:0e:3c:b8:5e:6a:7f:d0:ef:89:ac:13:df:5b:f1:30: 09:a4:03:48:75:bb:a0:a9:76:34:ad:57:3f:5c:5a:22:e7:39: d2:44:ab:40:a7:75:b5:cf:ed:3f:ca:c8:74:4d:bd:2f:3e:1a: c2:58:b6:c5 -----BEGIN CERTIFICATE----- MIIFWDCCBECgAwIBAgIUI+jrwvx4ipnB9xlPCSlaNITV9WEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjM1NEQzMjhDQkJGRDFFRjNDRDI5MjY4QTIzQjBGQ0M2 MEUzQTJDNTAeFw0yNjEwMTEyMzU3MDhaFw0yNzEwMTEwMDAyMDhaMDMxMTAvBgNV BAMTKDY0NUE3RDY1RDZGOEFDRjJDOTI0MjlDRDdDRUI1NDhFOUM1ODAyNkUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9KXjDfaKxIG9zIcELdY1n9WrC Be+YxTbwOn9egM00puk4ZlX1/WWz5hesJRyQxglYZG1VjuNrPcQlDc4wFjNOd7yP BFjpy7zt2Dkl8Bqjmw/TNrGk981zOsL5EB9cYwW6niUFcSJtufQkBOB73W50ktLy aedPNf0x5IvEVgac7lhQAKpqpIQ3Ya0MHFQ64mvK1/wBTT2or7AQeb2a8WRvTwOt m8TiRjfpPeZXnCbuIl8dozvIaHEeHNibSdKaHvCvvY6yV6AaUVbLBujoDwk7EuZF 65/ndQUy2His9Wr9jEhXrvDVzAEpuufKBms6qbiUfRQ6o24HbxJSuOoSCEjBAgMB AAGjggJiMIICXjAdBgNVHQ4EFgQUZFp9Zdb4rPLJJCnNfOtUjpxYAm4wHwYDVR0j BBgwFoAUs1TTKMu/0e880pJoojsPzGDjosUwDgYDVR0PAQH/BAQDAgeAMIGIBgNV HR8EgYAwfjB8oHqgeIZ2cnN5bmM6Ly9yLm1hZ2VsbGFuLmlweG8uY29tL3JlcG8v YTAzNzViMzktZjk0OS00Y2I1LWI1MTktZjk0MDA4YjE2NTRjLTAvMC9CMzU0RDMy OENCQkZEMUVGM0NEMjkyNjhBMjNCMEZDQzYwRTNBMkM1LmNybDCBngYIKwYBBQUH AQEEgZEwgY4wgYsGCCsGAQUFBzAChn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5y aXBlLm5ldC9yZXBvc2l0b3J5LzYxNzA4YTZiLTZjM2EtNDBhMC1hMzAyLTU5NWVj YzE3ODQ4Yy8wL0IzNTREMzI4Q0JCRkQxRUYzQ0QyOTI2OEEyM0IwRkNDNjBFM0Ey QzUuY2VyMIGkBggrBgEFBQcBCwSBlzCBlDCBkQYIKwYBBQUHMAuGgYRyc3luYzov L3IubWFnZWxsYW4uaXB4by5jb20vcmVwby9hMDM3NWIzOS1mOTQ5LTRjYjUtYjUx OS1mOTQwMDhiMTY1NGMtMC8wLzMxMzYzNDJlMzMzNzJlMzIzMDM5MmUzMDJmMzIz NDJkMzIzNDIwM2QzZTIwMzMzMjMwMzQzMi5yb2EwGAYDVR0gAQH/BA4wDDAKBggr BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAKQl0TANBgkqhkiG 9w0BAQsFAAOCAQEAqTCriH+MkztTfIjIrbNZwHB3FTnZ1a88oqcKCO91CnJYhA4C kcBPwI6N7mu8+B0ZIi/7LCN1aWcZKP5jRDR85eo6Fb2/yd1gIZGnq4maW0GeSdDh C2IeW2uLHquA1aGURWvIVnkv0PXupbt9JRvkDm21UWcwqWSB1pT6NkEKKyerMbJw BOVhvQqFTHqIoUxPk6Vbk8F1ZdM5Lg/m/kv+4YiaAkLwRQTo5oX9tagNWAoENXTf qNjPrG/HvwlEaHhUstXc9EceudZsDjy4Xmp/0O+JrBPfW/EwCaQDSHW7oKl2NK1X P1xaIuc50kSrQKd1tc/tP8rIdE29Lz4awli2xQ== -----END CERTIFICATE-----Generated at Thu Oct 15 05:37:39 2026 by rpki-client