$ rpki-client -vvvf r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/3136342e33372e3231342e302f32342d3234203d3e2039333034.roa File: 3136342e33372e3231342e302f32342d3234203d3e2039333034.roa (raw, json) Hash identifier: RKdORv3M7ZKG1ShXjO2z6cUo+XVoJi6od9u5bRW16BI= Subject key identifier: 76:48:0B:A3:C0:F0:55:0C:99:E0:C2:8D:58:8A:60:A3:8E:D5:8E:01 Certificate issuer: /CN=B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5 Certificate serial: 20BBD368E0C115BA464F0E606C9A852B37E60BC0 Authority key identifier: B3:54:D3:28:CB:BF:D1:EF:3C:D2:92:68:A2:3B:0F:CC:60:E3:A2:C5 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.cer Subject info access: rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/3136342e33372e3231342e302f32342d3234203d3e2039333034.roa Signing time: Mon 12 Oct 2026 00:02:11 +0000 ROA not before: Sun 11 Oct 2026 23:57:11 +0000 ROA not after: Mon 11 Oct 2027 00:02:11 +0000 asID: 9304 IP address blocks: 164.37.214.0/24 maxlen: 24 Validation: OK Signature path: rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.crl rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.mft rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.cer rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/D0A516B50426202A424F0EBFCB7D2BD4F744F964.crl rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/D0A516B50426202A424F0EBFCB7D2BD4F744F964.mft rsync://rpki.ripe.net/repository/DEFAULT/0KUWtQQmICpCTw6_y30r1PdE-WQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 18 Oct 2026 22:29:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 20:bb:d3:68:e0:c1:15:ba:46:4f:0e:60:6c:9a:85:2b:37:e6:0b:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5 Validity Not Before: Oct 11 23:57:11 2026 GMT Not After : Oct 11 00:02:11 2027 GMT Subject: CN=76480BA3C0F0550C99E0C28D588A60A38ED58E01 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:9b:b5:4f:6e:9d:7d:44:e2:8a:aa:2a:eb:d0: f1:eb:82:69:87:52:b5:77:3a:b9:ea:aa:28:8f:34: 34:19:58:1b:8f:95:13:28:9d:80:61:03:3c:da:88: 0c:7c:40:3d:10:08:90:fb:90:f2:a0:49:8e:34:ab: be:58:97:c8:aa:4e:af:30:3b:5d:9d:74:83:d9:1f: 35:bc:9b:24:fd:95:02:24:c1:ae:54:0a:37:0b:f1: 2b:38:7a:00:c0:36:bb:74:4a:82:18:a0:4b:4c:51: fe:10:fd:fe:80:73:b7:6a:96:e9:58:b9:54:4d:87: 9c:e4:25:c0:87:d5:db:7a:19:39:7c:72:4d:00:af: 00:72:05:52:7e:be:6d:c8:77:ce:5b:75:4f:b7:a3: 22:3e:f3:ae:6a:7c:dc:5a:c3:0a:50:bb:b2:72:4b: 3e:d9:ad:3b:99:3b:63:3b:90:c3:d4:5c:e8:46:3a: f6:4f:f9:09:cf:e8:09:e0:35:d7:40:d1:50:92:11: 45:f5:3f:fc:4e:c3:a1:c5:4d:8d:3e:82:f3:d5:d7: 4c:f0:96:9e:47:52:5c:97:05:9b:07:6d:7e:f9:17: ac:9f:d6:31:18:ac:8d:34:c3:7b:0e:24:c0:a9:e0: 32:6f:00:a8:2a:89:4c:7d:2b:f2:81:05:be:c8:bc: 16:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:48:0B:A3:C0:F0:55:0C:99:E0:C2:8D:58:8A:60:A3:8E:D5:8E:01 X509v3 Authority Key Identifier: keyid:B3:54:D3:28:CB:BF:D1:EF:3C:D2:92:68:A2:3B:0F:CC:60:E3:A2:C5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.cer Subject Information Access: Signed Object - URI:rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/3136342e33372e3231342e302f32342d3234203d3e2039333034.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 164.37.214.0/24 Signature Algorithm: sha256WithRSAEncryption 95:a5:ae:d1:42:6b:b0:45:7f:85:8a:24:e8:e8:ff:73:33:38: 0a:a1:e7:a7:c9:b0:6e:b1:19:6a:dd:ac:4f:a3:a4:b2:ad:85: 55:ff:0e:36:f4:aa:96:df:d8:72:85:1b:e1:de:ff:54:0b:03: 06:54:ae:d0:a9:c6:59:5e:17:5e:8a:85:b6:aa:73:99:78:41: da:d4:fd:da:3e:2a:90:92:2d:d5:16:07:12:80:3a:c9:35:92: 23:de:5c:a3:3f:6e:3e:b1:77:1c:ef:f1:64:85:1b:cb:4e:d4: 85:1b:39:fe:20:f9:bb:01:24:b7:54:53:13:2d:e1:60:09:de: 7e:83:4d:64:8d:8f:46:4b:b4:65:d3:5f:f1:a4:21:b6:92:4c: b2:ac:c4:b2:51:c7:85:7b:3b:33:1f:2c:ed:97:aa:39:91:6a: 06:c6:40:bc:41:18:34:31:1e:bb:c9:75:e5:0b:e6:b0:66:14: 45:7d:dc:19:b4:e6:63:10:23:c2:ab:79:2d:a7:7b:4e:85:e0: 38:b6:05:9c:e7:71:2e:6f:df:7b:3f:fc:43:c1:e7:13:c7:b8: 6c:5f:2b:ec:67:9f:1f:0c:18:f8:35:d6:37:20:4d:78:c1:71: ff:11:22:02:79:40:f6:a8:85:0e:3e:36:51:2e:96:7b:c5:82: 48:d2:50:46 -----BEGIN CERTIFICATE----- MIIFVjCCBD6gAwIBAgIUILvTaODBFbpGTw5gbJqFKzfmC8AwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjM1NEQzMjhDQkJGRDFFRjNDRDI5MjY4QTIzQjBGQ0M2 MEUzQTJDNTAeFw0yNjEwMTEyMzU3MTFaFw0yNzEwMTEwMDAyMTFaMDMxMTAvBgNV BAMTKDc2NDgwQkEzQzBGMDU1MEM5OUUwQzI4RDU4OEE2MEEzOEVENThFMDEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDqm7VPbp19ROKKqirr0PHrgmmH UrV3OrnqqiiPNDQZWBuPlRMonYBhAzzaiAx8QD0QCJD7kPKgSY40q75Yl8iqTq8w O12ddIPZHzW8myT9lQIkwa5UCjcL8Ss4egDANrt0SoIYoEtMUf4Q/f6Ac7dqlulY uVRNh5zkJcCH1dt6GTl8ck0ArwByBVJ+vm3Id85bdU+3oyI+865qfNxawwpQu7Jy Sz7ZrTuZO2M7kMPUXOhGOvZP+QnP6AngNddA0VCSEUX1P/xOw6HFTY0+gvPV10zw lp5HUlyXBZsHbX75F6yf1jEYrI00w3sOJMCp4DJvAKgqiUx9K/KBBb7IvBZfAgMB AAGjggJgMIICXDAdBgNVHQ4EFgQUdkgLo8DwVQyZ4MKNWIpgo47VjgEwHwYDVR0j BBgwFoAUs1TTKMu/0e880pJoojsPzGDjosUwDgYDVR0PAQH/BAQDAgeAMIGIBgNV HR8EgYAwfjB8oHqgeIZ2cnN5bmM6Ly9yLm1hZ2VsbGFuLmlweG8uY29tL3JlcG8v YTAzNzViMzktZjk0OS00Y2I1LWI1MTktZjk0MDA4YjE2NTRjLTAvMC9CMzU0RDMy OENCQkZEMUVGM0NEMjkyNjhBMjNCMEZDQzYwRTNBMkM1LmNybDCBngYIKwYBBQUH AQEEgZEwgY4wgYsGCCsGAQUFBzAChn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5y aXBlLm5ldC9yZXBvc2l0b3J5LzYxNzA4YTZiLTZjM2EtNDBhMC1hMzAyLTU5NWVj YzE3ODQ4Yy8wL0IzNTREMzI4Q0JCRkQxRUYzQ0QyOTI2OEEyM0IwRkNDNjBFM0Ey QzUuY2VyMIGiBggrBgEFBQcBCwSBlTCBkjCBjwYIKwYBBQUHMAuGgYJyc3luYzov L3IubWFnZWxsYW4uaXB4by5jb20vcmVwby9hMDM3NWIzOS1mOTQ5LTRjYjUtYjUx OS1mOTQwMDhiMTY1NGMtMC8wLzMxMzYzNDJlMzMzNzJlMzIzMTM0MmUzMDJmMzIz NDJkMzIzNDIwM2QzZTIwMzkzMzMwMzQucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYB BQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBACkJdYwDQYJKoZIhvcN AQELBQADggEBAJWlrtFCa7BFf4WKJOjo/3MzOAqh56fJsG6xGWrdrE+jpLKthVX/ Djb0qpbf2HKFG+He/1QLAwZUrtCpxlleF16Khbaqc5l4QdrU/do+KpCSLdUWBxKA Osk1kiPeXKM/bj6xdxzv8WSFG8tO1IUbOf4g+bsBJLdUUxMt4WAJ3n6DTWSNj0ZL tGXTX/GkIbaSTLKsxLJRx4V7OzMfLO2XqjmRagbGQLxBGDQxHrvJdeUL5rBmFEV9 3Bm05mMQI8KreS2ne06F4Di2BZzncS5v33s//EPB5xPHuGxfK+xnnx8MGPg11jcg TXjBcf8RIgJ5QPaohQ4+NlEulnvFgkjSUEY= -----END CERTIFICATE-----Generated at Sun Oct 18 07:25:28 2026 by rpki-client