$ rpki-client -vvvf r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/3136342e33372e3231372e302f32342d3234203d3e2039333034.roa File: 3136342e33372e3231372e302f32342d3234203d3e2039333034.roa (raw, json) Hash identifier: AbpTzZmNwr+YtCVCEFvw4jxAMov3AEG9NeUVdwZGCEk= Subject key identifier: 16:2D:E7:B0:E4:D9:55:22:0C:93:56:01:79:EE:84:41:BD:63:B1:15 Certificate issuer: /CN=B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5 Certificate serial: 6ADB2D693DA058D8BCE83025793921918811E04E Authority key identifier: B3:54:D3:28:CB:BF:D1:EF:3C:D2:92:68:A2:3B:0F:CC:60:E3:A2:C5 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.cer Subject info access: rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/3136342e33372e3231372e302f32342d3234203d3e2039333034.roa Signing time: Mon 12 Oct 2026 00:02:09 +0000 ROA not before: Sun 11 Oct 2026 23:57:09 +0000 ROA not after: Mon 11 Oct 2027 00:02:09 +0000 asID: 9304 IP address blocks: 164.37.217.0/24 maxlen: 24 Validation: OK Signature path: rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.crl rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.mft rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.cer rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/D0A516B50426202A424F0EBFCB7D2BD4F744F964.crl rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/D0A516B50426202A424F0EBFCB7D2BD4F744F964.mft rsync://rpki.ripe.net/repository/DEFAULT/0KUWtQQmICpCTw6_y30r1PdE-WQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 18 Oct 2026 22:29:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6a:db:2d:69:3d:a0:58:d8:bc:e8:30:25:79:39:21:91:88:11:e0:4e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5 Validity Not Before: Oct 11 23:57:09 2026 GMT Not After : Oct 11 00:02:09 2027 GMT Subject: CN=162DE7B0E4D955220C93560179EE8441BD63B115 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:ba:95:57:67:71:cf:1a:8b:56:54:6c:d4:86: ff:be:fd:4d:07:d7:10:e1:b3:28:ba:5f:c5:f5:04: 13:33:ab:ae:b4:25:34:dd:0d:83:48:97:22:a3:66: 53:2d:89:61:74:4c:cc:d4:53:35:a6:d8:87:86:2b: ae:3a:6f:2a:33:88:0a:a3:c5:8f:97:dd:36:0c:e1: ae:a3:7a:39:6e:ad:ff:6a:9d:a6:ca:2e:a5:00:62: bd:37:1a:9b:1a:01:9d:6e:9c:f4:00:d1:65:0a:5e: d2:74:98:25:19:2a:31:89:1f:28:81:15:fd:cb:85: 5b:fb:0d:f2:e4:bf:06:20:54:5d:e8:dd:c8:0c:56: 30:23:a4:e5:1b:07:7f:c1:23:56:1b:f5:5c:8b:c7: 90:0a:e7:a1:1c:8c:7e:68:65:c1:32:4c:1e:db:e4: 94:ab:38:f8:4c:33:b2:dc:08:8b:63:fb:40:58:2d: 90:70:5f:71:1f:70:6c:1f:c0:88:fc:47:6f:4a:b2: 7b:bb:87:a9:7a:10:04:c1:83:88:7b:25:42:06:0f: 72:2d:23:4a:b0:24:5e:e0:9f:cc:cd:3d:1a:ca:4c: a7:6a:b2:1a:15:80:97:38:a8:f4:2a:9b:96:0b:50: 96:e8:f4:94:0b:d2:7b:a5:3a:2c:c6:08:f7:e0:5b: 91:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:2D:E7:B0:E4:D9:55:22:0C:93:56:01:79:EE:84:41:BD:63:B1:15 X509v3 Authority Key Identifier: keyid:B3:54:D3:28:CB:BF:D1:EF:3C:D2:92:68:A2:3B:0F:CC:60:E3:A2:C5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.cer Subject Information Access: Signed Object - URI:rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/3136342e33372e3231372e302f32342d3234203d3e2039333034.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 164.37.217.0/24 Signature Algorithm: sha256WithRSAEncryption 85:63:98:8d:b3:71:20:ed:8f:42:10:f3:65:85:43:17:b4:91: 42:95:4a:83:3b:4b:c4:09:3b:a4:6e:c9:00:60:ba:03:0f:48: 95:c1:98:1b:3a:da:1c:9d:c3:2d:5d:bb:9f:c9:5a:b2:fe:6c: 64:15:ac:51:71:32:ed:4f:ca:47:09:17:77:3c:d8:7a:a7:7c: f2:a5:9a:76:92:e9:ce:af:f1:ae:1e:b8:f1:ba:71:48:49:61: 89:c2:db:fd:92:88:6d:79:d1:b5:9c:c9:c2:97:e4:55:bb:f1: 6c:2e:4c:45:11:91:51:53:0f:44:cc:11:c4:3b:a3:3e:87:6c: 59:40:d0:9c:ed:97:2a:98:36:a2:cd:fe:b6:36:ec:7b:08:fe: f9:18:b1:ba:d9:21:0a:56:1c:5d:a6:71:ed:33:db:5e:09:a2: af:4a:5d:2a:3f:0f:85:0a:a1:f6:e9:e8:2c:af:4a:17:f6:ad: d5:2d:59:03:20:ad:f2:0d:9f:ab:de:a9:a3:24:84:76:45:c0: 12:0d:eb:b0:5d:bb:df:dd:76:53:e3:89:9f:a0:ee:b8:29:65: 51:aa:d4:9e:5e:51:a0:52:09:a4:07:50:11:4b:8e:02:14:5e: 3a:61:e7:77:f5:0e:22:c9:64:8a:4c:e3:65:6f:b9:43:e8:eb: 0c:16:18:8f -----BEGIN CERTIFICATE----- MIIFVjCCBD6gAwIBAgIUatstaT2gWNi86DAleTkhkYgR4E4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjM1NEQzMjhDQkJGRDFFRjNDRDI5MjY4QTIzQjBGQ0M2 MEUzQTJDNTAeFw0yNjEwMTEyMzU3MDlaFw0yNzEwMTEwMDAyMDlaMDMxMTAvBgNV BAMTKDE2MkRFN0IwRTREOTU1MjIwQzkzNTYwMTc5RUU4NDQxQkQ2M0IxMTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCaupVXZ3HPGotWVGzUhv++/U0H 1xDhsyi6X8X1BBMzq660JTTdDYNIlyKjZlMtiWF0TMzUUzWm2IeGK646byoziAqj xY+X3TYM4a6jejlurf9qnabKLqUAYr03GpsaAZ1unPQA0WUKXtJ0mCUZKjGJHyiB Ff3LhVv7DfLkvwYgVF3o3cgMVjAjpOUbB3/BI1Yb9VyLx5AK56EcjH5oZcEyTB7b 5JSrOPhMM7LcCItj+0BYLZBwX3EfcGwfwIj8R29Ksnu7h6l6EATBg4h7JUIGD3It I0qwJF7gn8zNPRrKTKdqshoVgJc4qPQqm5YLUJbo9JQL0nulOizGCPfgW5GTAgMB AAGjggJgMIICXDAdBgNVHQ4EFgQUFi3nsOTZVSIMk1YBee6EQb1jsRUwHwYDVR0j BBgwFoAUs1TTKMu/0e880pJoojsPzGDjosUwDgYDVR0PAQH/BAQDAgeAMIGIBgNV HR8EgYAwfjB8oHqgeIZ2cnN5bmM6Ly9yLm1hZ2VsbGFuLmlweG8uY29tL3JlcG8v YTAzNzViMzktZjk0OS00Y2I1LWI1MTktZjk0MDA4YjE2NTRjLTAvMC9CMzU0RDMy OENCQkZEMUVGM0NEMjkyNjhBMjNCMEZDQzYwRTNBMkM1LmNybDCBngYIKwYBBQUH AQEEgZEwgY4wgYsGCCsGAQUFBzAChn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5y aXBlLm5ldC9yZXBvc2l0b3J5LzYxNzA4YTZiLTZjM2EtNDBhMC1hMzAyLTU5NWVj YzE3ODQ4Yy8wL0IzNTREMzI4Q0JCRkQxRUYzQ0QyOTI2OEEyM0IwRkNDNjBFM0Ey QzUuY2VyMIGiBggrBgEFBQcBCwSBlTCBkjCBjwYIKwYBBQUHMAuGgYJyc3luYzov L3IubWFnZWxsYW4uaXB4by5jb20vcmVwby9hMDM3NWIzOS1mOTQ5LTRjYjUtYjUx OS1mOTQwMDhiMTY1NGMtMC8wLzMxMzYzNDJlMzMzNzJlMzIzMTM3MmUzMDJmMzIz NDJkMzIzNDIwM2QzZTIwMzkzMzMwMzQucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYB BQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBACkJdkwDQYJKoZIhvcN AQELBQADggEBAIVjmI2zcSDtj0IQ82WFQxe0kUKVSoM7S8QJO6RuyQBgugMPSJXB mBs62hydwy1du5/JWrL+bGQVrFFxMu1PykcJF3c82HqnfPKlmnaS6c6v8a4euPG6 cUhJYYnC2/2SiG150bWcycKX5FW78WwuTEURkVFTD0TMEcQ7oz6HbFlA0JztlyqY NqLN/rY27HsI/vkYsbrZIQpWHF2mce0z214Joq9KXSo/D4UKofbp6CyvShf2rdUt WQMgrfINn6veqaMkhHZFwBIN67Bdu9/ddlPjiZ+g7rgpZVGq1J5eUaBSCaQHUBFL jgIUXjph53f1DiLJZIpM42VvuUPo6wwWGI8= -----END CERTIFICATE-----Generated at Sun Oct 18 07:29:40 2026 by rpki-client