$ rpki-client -vvf r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/3136342e33372e3231392e302f32342d3234203d3e20343032323231.roa File: 3136342e33372e3231392e302f32342d3234203d3e20343032323231.roa (raw, json) Hash identifier: xm8jPqjwvOkI2MoGLT7oHQWKi3Db1Q11SvOisAjI0ds= Subject key identifier: 16:D3:E2:32:49:10:E1:A8:FE:FA:6F:B1:82:FA:EF:91:FB:F5:04:49 Certificate issuer: /CN=B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5 Certificate serial: 6FF419E19F6F92450C4860182BBBF3BCF9C5B86F Authority key identifier: B3:54:D3:28:CB:BF:D1:EF:3C:D2:92:68:A2:3B:0F:CC:60:E3:A2:C5 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.cer Subject info access: rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/3136342e33372e3231392e302f32342d3234203d3e20343032323231.roa Signing time: Sun 28 Jun 2026 12:01:27 +0000 ROA not before: Sun 28 Jun 2026 11:56:27 +0000 ROA not after: Sun 27 Jun 2027 12:01:27 +0000 asID: 402221 IP address blocks: 164.37.219.0/24 maxlen: 24 Validation: OK Signature path: rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.crl rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.mft rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.cer rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/D0A516B50426202A424F0EBFCB7D2BD4F744F964.crl rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/D0A516B50426202A424F0EBFCB7D2BD4F744F964.mft rsync://rpki.ripe.net/repository/DEFAULT/0KUWtQQmICpCTw6_y30r1PdE-WQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 07 Jul 2026 09:45:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6f:f4:19:e1:9f:6f:92:45:0c:48:60:18:2b:bb:f3:bc:f9:c5:b8:6f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5 Validity Not Before: Jun 28 11:56:27 2026 GMT Not After : Jun 27 12:01:27 2027 GMT Subject: CN=16D3E2324910E1A8FEFA6FB182FAEF91FBF50449 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:b2:4b:ef:41:1f:2a:ab:39:22:76:e4:ae:ba: fb:57:d7:13:2f:f9:09:ea:66:b2:a8:14:fd:70:de: 25:5c:9d:af:01:f2:20:5f:0e:14:8e:6b:ef:b2:c0: 6a:b4:f3:c3:72:ac:f5:65:02:e7:a5:d3:02:22:2d: 5d:f5:6e:35:3d:bb:ba:e9:4b:ee:b2:12:04:bd:f5: 30:60:5d:90:72:5e:79:cc:6f:35:c1:85:15:bc:84: 26:39:a9:ed:6a:47:01:17:d2:22:b1:b8:ce:ac:9b: ab:07:45:8c:c6:64:88:00:65:3c:d8:ad:d4:f1:e4: 50:13:0e:46:87:74:26:32:17:64:cb:b7:98:b2:b5: f8:ea:be:75:3f:bf:93:ab:81:fd:1a:d5:83:49:9d: 7d:1d:ee:fa:88:03:5c:be:7e:05:26:81:7e:00:9d: bb:e6:62:ed:ed:b4:8d:6b:ab:b5:94:50:b8:33:bf: 77:59:43:d2:66:2f:7c:8d:16:92:a3:d6:3f:57:7a: d0:ce:08:1a:82:c2:a1:98:42:c1:f1:2f:40:d5:73: 2d:9c:cf:13:db:9b:c3:3c:8c:50:82:1b:2b:15:bf: 7c:a0:1d:7f:d3:dc:a8:03:74:f5:cc:ba:f3:97:88: ad:a4:c6:7b:61:86:04:22:9d:1a:18:39:30:12:6d: db:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:D3:E2:32:49:10:E1:A8:FE:FA:6F:B1:82:FA:EF:91:FB:F5:04:49 X509v3 Authority Key Identifier: keyid:B3:54:D3:28:CB:BF:D1:EF:3C:D2:92:68:A2:3B:0F:CC:60:E3:A2:C5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.cer Subject Information Access: Signed Object - URI:rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/3136342e33372e3231392e302f32342d3234203d3e20343032323231.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 164.37.219.0/24 Signature Algorithm: sha256WithRSAEncryption 5f:55:cf:7b:ea:21:eb:3d:ad:05:37:43:70:5f:00:f4:a6:68: 32:5e:74:41:4e:60:04:02:4f:2e:59:d0:27:ef:27:0c:f4:47: a0:a0:4a:5f:66:9f:7b:4c:25:08:7f:41:2c:41:6f:9e:8b:a9: 96:5a:b7:5a:62:48:83:73:7f:50:b1:97:b7:6e:c1:1b:4c:d7: 03:bd:8c:cf:bd:7f:7a:55:07:3e:8d:98:83:ad:39:cc:24:d0: a0:2b:27:44:d3:0d:38:0e:31:f5:e3:fa:ff:62:35:d1:a4:e8: 4a:d9:06:a3:77:e2:58:d1:35:b6:58:2e:67:82:48:bd:66:40: 4b:e4:48:aa:b8:88:b5:41:98:2c:10:a2:27:9b:2c:fc:3c:e3: ca:fb:8e:f5:5c:7d:f1:52:0a:08:0d:1b:aa:26:98:5b:8d:d3: 14:af:97:b9:dc:8b:39:d1:aa:a1:07:8f:59:c9:7c:d6:c3:c9: 08:83:00:0a:0e:b8:8b:51:54:fb:9d:72:16:31:44:39:24:05: f9:a2:91:f1:00:70:71:af:3f:72:bb:5a:08:06:70:ac:1d:e8: ed:6a:28:c6:a3:12:0c:4f:ad:78:34:23:7f:67:cb:cf:4e:13: 8d:ca:56:16:45:45:58:8b:79:b1:65:ff:15:5b:7d:bf:9e:6c: 0a:54:e1:87 -----BEGIN CERTIFICATE----- MIIFWjCCBEKgAwIBAgIUb/QZ4Z9vkkUMSGAYK7vzvPnFuG8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjM1NEQzMjhDQkJGRDFFRjNDRDI5MjY4QTIzQjBGQ0M2 MEUzQTJDNTAeFw0yNjA2MjgxMTU2MjdaFw0yNzA2MjcxMjAxMjdaMDMxMTAvBgNV BAMTKDE2RDNFMjMyNDkxMEUxQThGRUZBNkZCMTgyRkFFRjkxRkJGNTA0NDkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCfskvvQR8qqzkiduSuuvtX1xMv +QnqZrKoFP1w3iVcna8B8iBfDhSOa++ywGq088NyrPVlAuel0wIiLV31bjU9u7rp S+6yEgS99TBgXZByXnnMbzXBhRW8hCY5qe1qRwEX0iKxuM6sm6sHRYzGZIgAZTzY rdTx5FATDkaHdCYyF2TLt5iytfjqvnU/v5Orgf0a1YNJnX0d7vqIA1y+fgUmgX4A nbvmYu3ttI1rq7WUULgzv3dZQ9JmL3yNFpKj1j9XetDOCBqCwqGYQsHxL0DVcy2c zxPbm8M8jFCCGysVv3ygHX/T3KgDdPXMuvOXiK2kxnthhgQinRoYOTASbdv/AgMB AAGjggJkMIICYDAdBgNVHQ4EFgQUFtPiMkkQ4aj++m+xgvrvkfv1BEkwHwYDVR0j BBgwFoAUs1TTKMu/0e880pJoojsPzGDjosUwDgYDVR0PAQH/BAQDAgeAMIGIBgNV HR8EgYAwfjB8oHqgeIZ2cnN5bmM6Ly9yLm1hZ2VsbGFuLmlweG8uY29tL3JlcG8v YTAzNzViMzktZjk0OS00Y2I1LWI1MTktZjk0MDA4YjE2NTRjLTAvMC9CMzU0RDMy OENCQkZEMUVGM0NEMjkyNjhBMjNCMEZDQzYwRTNBMkM1LmNybDCBngYIKwYBBQUH AQEEgZEwgY4wgYsGCCsGAQUFBzAChn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5y aXBlLm5ldC9yZXBvc2l0b3J5LzYxNzA4YTZiLTZjM2EtNDBhMC1hMzAyLTU5NWVj YzE3ODQ4Yy8wL0IzNTREMzI4Q0JCRkQxRUYzQ0QyOTI2OEEyM0IwRkNDNjBFM0Ey QzUuY2VyMIGmBggrBgEFBQcBCwSBmTCBljCBkwYIKwYBBQUHMAuGgYZyc3luYzov L3IubWFnZWxsYW4uaXB4by5jb20vcmVwby9hMDM3NWIzOS1mOTQ5LTRjYjUtYjUx OS1mOTQwMDhiMTY1NGMtMC8wLzMxMzYzNDJlMzMzNzJlMzIzMTM5MmUzMDJmMzIz NDJkMzIzNDIwM2QzZTIwMzQzMDMyMzIzMjMxLnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQApCXbMA0GCSqG SIb3DQEBCwUAA4IBAQBfVc976iHrPa0FN0NwXwD0pmgyXnRBTmAEAk8uWdAn7ycM 9EegoEpfZp97TCUIf0EsQW+ei6mWWrdaYkiDc39QsZe3bsEbTNcDvYzPvX96VQc+ jZiDrTnMJNCgKydE0w04DjH14/r/YjXRpOhK2Qajd+JY0TW2WC5ngki9ZkBL5Eiq uIi1QZgsEKInmyz8POPK+471XH3xUgoIDRuqJphbjdMUr5e53Is50aqhB49ZyXzW w8kIgwAKDriLUVT7nXIWMUQ5JAX5opHxAHBxrz9yu1oIBnCsHejtaijGoxIMT614 NCN/Z8vPThONylYWRUVYi3mxZf8VW32/nmwKVOGH -----END CERTIFICATE-----Generated at Mon Jul 6 22:11:51 2026 by rpki-client