$ rpki-client -vvvf r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/3136342e33372e3231352e302f32342d3234203d3e2039333034.roa File: 3136342e33372e3231352e302f32342d3234203d3e2039333034.roa (raw, json) Hash identifier: XkQxbFrCeOrTdcieR5YXDE3xEMCK4P+zGXsD/tAVNOk= Subject key identifier: 66:7F:29:58:78:90:53:34:22:00:32:27:3F:24:5D:2A:3E:86:3F:B1 Certificate issuer: /CN=B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5 Certificate serial: 50E9CB8243B26A59EADDECB72E48D604FA23C056 Authority key identifier: B3:54:D3:28:CB:BF:D1:EF:3C:D2:92:68:A2:3B:0F:CC:60:E3:A2:C5 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.cer Subject info access: rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/3136342e33372e3231352e302f32342d3234203d3e2039333034.roa Signing time: Mon 12 Oct 2026 00:02:09 +0000 ROA not before: Sun 11 Oct 2026 23:57:09 +0000 ROA not after: Mon 11 Oct 2027 00:02:09 +0000 asID: 9304 IP address blocks: 164.37.215.0/24 maxlen: 24 Validation: OK Signature path: rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.crl rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.mft rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.cer rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/D0A516B50426202A424F0EBFCB7D2BD4F744F964.crl rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/D0A516B50426202A424F0EBFCB7D2BD4F744F964.mft rsync://rpki.ripe.net/repository/DEFAULT/0KUWtQQmICpCTw6_y30r1PdE-WQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 18 Oct 2026 22:29:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 50:e9:cb:82:43:b2:6a:59:ea:dd:ec:b7:2e:48:d6:04:fa:23:c0:56 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5 Validity Not Before: Oct 11 23:57:09 2026 GMT Not After : Oct 11 00:02:09 2027 GMT Subject: CN=667F295878905334220032273F245D2A3E863FB1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:05:18:46:4d:6e:a8:f8:88:81:30:37:73:49: a3:20:49:46:5f:c1:12:0e:17:69:39:ac:a9:a3:49: be:e7:6b:dd:72:58:75:8c:a7:df:96:c9:9e:bc:16: 3b:48:53:f7:0c:a9:52:44:fd:dc:5d:d9:f4:ac:dd: de:a2:03:d6:8b:dd:d0:66:29:b2:06:27:24:a3:1e: ba:88:89:a5:d8:1c:ed:b6:f7:5d:07:ce:5a:d9:af: a9:c7:62:30:a4:ed:0b:4d:0a:fb:74:1e:fc:2b:69: 74:bc:75:ce:ef:32:aa:08:9f:d3:ff:f5:52:57:1b: ff:a8:f8:5d:a5:89:0d:54:53:da:d9:ac:b6:8e:a0: b2:11:41:7d:f1:7e:f5:8a:da:cb:46:0c:55:58:c6: 13:d9:21:b4:d3:c3:47:c9:12:84:11:1d:45:78:08: de:81:4a:7d:bf:54:e6:f4:50:6d:44:ac:e4:48:c3: de:7d:24:1d:25:16:28:ca:74:36:e7:b5:da:85:ce: 26:9d:aa:92:cb:f1:e4:a6:32:a0:15:39:32:7a:7b: de:9c:33:17:88:a9:39:aa:8d:eb:9a:c2:78:18:df: 13:bf:e9:01:93:fe:70:0d:11:3c:c0:2a:9e:88:f0: 1a:e2:ca:00:32:3e:3a:f7:80:bb:e9:32:65:d9:77: b1:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:7F:29:58:78:90:53:34:22:00:32:27:3F:24:5D:2A:3E:86:3F:B1 X509v3 Authority Key Identifier: keyid:B3:54:D3:28:CB:BF:D1:EF:3C:D2:92:68:A2:3B:0F:CC:60:E3:A2:C5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.cer Subject Information Access: Signed Object - URI:rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/3136342e33372e3231352e302f32342d3234203d3e2039333034.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 164.37.215.0/24 Signature Algorithm: sha256WithRSAEncryption 99:e8:e2:f6:c1:0f:7f:5c:3d:cd:96:11:61:aa:4d:2c:21:88: 6b:4c:08:7f:91:f5:5f:3e:3b:42:66:7b:49:24:9e:5d:17:59: 9b:18:fa:fa:06:2b:4c:1d:f4:95:00:b1:b4:0c:75:ec:92:a9: 27:5c:e2:7b:fb:35:75:8d:f0:20:91:74:bc:7d:31:2f:ac:ba: 97:00:c0:55:ac:5a:48:b8:e9:08:15:05:5d:13:b6:f5:ee:3b: 99:89:34:c2:65:51:01:51:ea:2b:f5:b4:56:29:08:66:d6:63: 0a:87:39:bd:57:c0:8b:d1:ea:81:27:c6:55:e0:f8:87:34:8f: f8:31:5f:13:5b:a2:4b:b4:5e:ba:59:e0:9b:ca:8a:bd:35:9b: 51:e3:38:27:68:27:5b:64:e9:b5:10:2e:f9:4b:9a:a5:a6:23: 88:1c:16:18:c8:7f:6d:ae:8f:62:90:a4:ed:85:58:76:ff:65: 42:00:20:e9:f6:be:d3:e1:24:19:b0:80:6b:62:84:d5:05:69: 00:f8:1e:12:fe:db:5d:2d:71:7e:47:0d:42:50:de:fd:3c:8a: d7:70:58:5e:0f:d3:42:a6:91:6b:44:6d:f5:db:8f:90:c5:6b: 85:44:2b:d9:25:8f:4c:5d:0b:ce:63:89:0b:01:c3:5c:e3:2e: 9d:d9:b6:d9 -----BEGIN CERTIFICATE----- MIIFVjCCBD6gAwIBAgIUUOnLgkOyalnq3ey3LkjWBPojwFYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjM1NEQzMjhDQkJGRDFFRjNDRDI5MjY4QTIzQjBGQ0M2 MEUzQTJDNTAeFw0yNjEwMTEyMzU3MDlaFw0yNzEwMTEwMDAyMDlaMDMxMTAvBgNV BAMTKDY2N0YyOTU4Nzg5MDUzMzQyMjAwMzIyNzNGMjQ1RDJBM0U4NjNGQjEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2BRhGTW6o+IiBMDdzSaMgSUZf wRIOF2k5rKmjSb7na91yWHWMp9+WyZ68FjtIU/cMqVJE/dxd2fSs3d6iA9aL3dBm KbIGJySjHrqIiaXYHO22910HzlrZr6nHYjCk7QtNCvt0HvwraXS8dc7vMqoIn9P/ 9VJXG/+o+F2liQ1UU9rZrLaOoLIRQX3xfvWK2stGDFVYxhPZIbTTw0fJEoQRHUV4 CN6BSn2/VOb0UG1ErORIw959JB0lFijKdDbntdqFziadqpLL8eSmMqAVOTJ6e96c MxeIqTmqjeuawngY3xO/6QGT/nANETzAKp6I8BriygAyPjr3gLvpMmXZd7F5AgMB AAGjggJgMIICXDAdBgNVHQ4EFgQUZn8pWHiQUzQiADInPyRdKj6GP7EwHwYDVR0j BBgwFoAUs1TTKMu/0e880pJoojsPzGDjosUwDgYDVR0PAQH/BAQDAgeAMIGIBgNV HR8EgYAwfjB8oHqgeIZ2cnN5bmM6Ly9yLm1hZ2VsbGFuLmlweG8uY29tL3JlcG8v YTAzNzViMzktZjk0OS00Y2I1LWI1MTktZjk0MDA4YjE2NTRjLTAvMC9CMzU0RDMy OENCQkZEMUVGM0NEMjkyNjhBMjNCMEZDQzYwRTNBMkM1LmNybDCBngYIKwYBBQUH AQEEgZEwgY4wgYsGCCsGAQUFBzAChn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5y aXBlLm5ldC9yZXBvc2l0b3J5LzYxNzA4YTZiLTZjM2EtNDBhMC1hMzAyLTU5NWVj YzE3ODQ4Yy8wL0IzNTREMzI4Q0JCRkQxRUYzQ0QyOTI2OEEyM0IwRkNDNjBFM0Ey QzUuY2VyMIGiBggrBgEFBQcBCwSBlTCBkjCBjwYIKwYBBQUHMAuGgYJyc3luYzov L3IubWFnZWxsYW4uaXB4by5jb20vcmVwby9hMDM3NWIzOS1mOTQ5LTRjYjUtYjUx OS1mOTQwMDhiMTY1NGMtMC8wLzMxMzYzNDJlMzMzNzJlMzIzMTM1MmUzMDJmMzIz NDJkMzIzNDIwM2QzZTIwMzkzMzMwMzQucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYB BQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBACkJdcwDQYJKoZIhvcN AQELBQADggEBAJno4vbBD39cPc2WEWGqTSwhiGtMCH+R9V8+O0Jme0kknl0XWZsY +voGK0wd9JUAsbQMdeySqSdc4nv7NXWN8CCRdLx9MS+supcAwFWsWki46QgVBV0T tvXuO5mJNMJlUQFR6iv1tFYpCGbWYwqHOb1XwIvR6oEnxlXg+Ic0j/gxXxNboku0 XrpZ4JvKir01m1HjOCdoJ1tk6bUQLvlLmqWmI4gcFhjIf22uj2KQpO2FWHb/ZUIA IOn2vtPhJBmwgGtihNUFaQD4HhL+210tcX5HDUJQ3v08itdwWF4P00KmkWtEbfXb j5DFa4VEK9klj0xdC85jiQsBw1zjLp3Zttk= -----END CERTIFICATE-----Generated at Sun Oct 18 07:29:47 2026 by rpki-client