$ rpki-client -vvvf r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/3136342e33372e3231392e302f32342d3234203d3e2039333034.roa File: 3136342e33372e3231392e302f32342d3234203d3e2039333034.roa (raw, json) Hash identifier: Zy/BaUXZAF2xZxLv/8LOWrivH/01xiQ5AttzNzAK2oM= Subject key identifier: 99:50:4A:A5:1B:9E:42:AC:77:04:FC:85:AF:7D:41:90:E2:26:FE:3E Certificate issuer: /CN=B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5 Certificate serial: 0AD6C6DAC186EAC5D8887BEE423579A098B8F876 Authority key identifier: B3:54:D3:28:CB:BF:D1:EF:3C:D2:92:68:A2:3B:0F:CC:60:E3:A2:C5 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.cer Subject info access: rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/3136342e33372e3231392e302f32342d3234203d3e2039333034.roa Signing time: Mon 12 Oct 2026 00:02:11 +0000 ROA not before: Sun 11 Oct 2026 23:57:11 +0000 ROA not after: Mon 11 Oct 2027 00:02:11 +0000 asID: 9304 IP address blocks: 164.37.219.0/24 maxlen: 24 Validation: OK Signature path: rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.crl rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.mft rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.cer rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/D0A516B50426202A424F0EBFCB7D2BD4F744F964.crl rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/D0A516B50426202A424F0EBFCB7D2BD4F744F964.mft rsync://rpki.ripe.net/repository/DEFAULT/0KUWtQQmICpCTw6_y30r1PdE-WQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 18 Oct 2026 22:29:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0a:d6:c6:da:c1:86:ea:c5:d8:88:7b:ee:42:35:79:a0:98:b8:f8:76 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5 Validity Not Before: Oct 11 23:57:11 2026 GMT Not After : Oct 11 00:02:11 2027 GMT Subject: CN=99504AA51B9E42AC7704FC85AF7D4190E226FE3E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:d8:b0:72:98:1e:c5:0c:b7:54:b3:bc:98:56: 91:01:0c:35:79:ce:c5:72:9f:ee:ff:1c:00:5c:09: b5:1b:2e:4d:57:ea:4b:f6:31:c2:19:d3:cc:33:5e: 75:f8:33:b8:64:47:d9:72:ca:78:e5:8f:d4:76:83: b4:6e:14:fc:24:87:fe:ad:1b:ce:e7:85:39:be:f2: 38:f4:85:d6:8a:fe:e3:61:32:2c:eb:49:79:42:e8: 8c:d2:10:2e:51:81:26:d2:db:31:7f:0a:55:2f:45: aa:a2:48:b7:a9:f3:21:53:81:c9:41:f3:0f:a3:6b: ed:64:35:94:69:d8:4a:e8:85:3c:56:bc:58:78:ea: 83:d4:88:21:00:3f:40:0b:dd:a7:7d:4f:d9:38:8d: db:22:a2:34:58:0e:1b:4f:7d:a8:0f:ac:43:ac:e3: 58:11:d8:19:46:fe:ab:72:5e:e8:12:10:ea:47:0f: 0c:94:1d:71:56:59:bd:c5:4c:0d:7b:aa:e3:29:5c: 5b:5c:f3:ef:a2:b0:88:94:d7:93:02:50:44:6d:ea: f9:55:dc:f4:f9:87:aa:ee:41:c4:66:74:96:97:9c: 93:be:51:08:ca:b1:0f:f5:39:7c:9d:79:b2:49:77: 4e:0d:15:7c:fb:a8:42:a7:c2:00:80:77:7c:33:9f: c6:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:50:4A:A5:1B:9E:42:AC:77:04:FC:85:AF:7D:41:90:E2:26:FE:3E X509v3 Authority Key Identifier: keyid:B3:54:D3:28:CB:BF:D1:EF:3C:D2:92:68:A2:3B:0F:CC:60:E3:A2:C5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.cer Subject Information Access: Signed Object - URI:rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/3136342e33372e3231392e302f32342d3234203d3e2039333034.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 164.37.219.0/24 Signature Algorithm: sha256WithRSAEncryption 52:43:9f:e7:c8:6b:56:64:93:d1:ed:d6:9a:e1:23:ed:f0:3f: 9f:fa:2d:34:56:97:36:f9:3e:85:cf:1f:9d:20:3a:65:30:70: 83:89:f8:92:4e:18:a6:56:0b:35:7a:fa:53:5c:18:35:f8:39: 88:4d:72:e8:f3:8c:0f:d5:be:3d:99:dd:c3:f7:e6:c6:9d:24: 8e:52:e7:dd:4d:b7:1d:62:e9:8e:8d:2c:dd:a7:66:fe:57:93: e9:be:de:1f:b6:84:1a:e7:a9:25:82:ea:c4:7e:f2:77:c5:dc: 49:1b:1d:6e:a1:c1:55:24:3b:53:8f:ba:b7:52:35:2b:21:db: f3:ba:a2:31:55:ba:bf:19:80:3c:b5:16:a7:b3:b2:ec:24:ef: 76:63:10:7a:be:d0:90:93:b1:6b:b3:bc:e8:da:0f:9d:a9:2f: c4:b7:4f:54:81:66:ed:33:48:12:81:e0:39:a1:35:f3:5f:88: 60:33:df:00:40:2f:38:b6:54:6c:a1:05:f0:60:8f:b9:e3:6b: 4b:e1:23:b6:50:25:ae:04:4f:0a:1f:ed:bb:40:43:00:00:f5: b4:fc:9b:f2:64:90:d8:7d:4d:58:38:dd:23:f7:55:37:51:33: ab:98:53:ca:cd:60:0b:92:92:5c:f8:38:6a:f2:d4:0d:40:da: a6:d6:17:d2 -----BEGIN CERTIFICATE----- MIIFVjCCBD6gAwIBAgIUCtbG2sGG6sXYiHvuQjV5oJi4+HYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjM1NEQzMjhDQkJGRDFFRjNDRDI5MjY4QTIzQjBGQ0M2 MEUzQTJDNTAeFw0yNjEwMTEyMzU3MTFaFw0yNzEwMTEwMDAyMTFaMDMxMTAvBgNV BAMTKDk5NTA0QUE1MUI5RTQyQUM3NzA0RkM4NUFGN0Q0MTkwRTIyNkZFM0UwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+2LBymB7FDLdUs7yYVpEBDDV5 zsVyn+7/HABcCbUbLk1X6kv2McIZ08wzXnX4M7hkR9lyynjlj9R2g7RuFPwkh/6t G87nhTm+8jj0hdaK/uNhMizrSXlC6IzSEC5RgSbS2zF/ClUvRaqiSLep8yFTgclB 8w+ja+1kNZRp2ErohTxWvFh46oPUiCEAP0AL3ad9T9k4jdsiojRYDhtPfagPrEOs 41gR2BlG/qtyXugSEOpHDwyUHXFWWb3FTA17quMpXFtc8++isIiU15MCUERt6vlV 3PT5h6ruQcRmdJaXnJO+UQjKsQ/1OXydebJJd04NFXz7qEKnwgCAd3wzn8YxAgMB AAGjggJgMIICXDAdBgNVHQ4EFgQUmVBKpRueQqx3BPyFr31BkOIm/j4wHwYDVR0j BBgwFoAUs1TTKMu/0e880pJoojsPzGDjosUwDgYDVR0PAQH/BAQDAgeAMIGIBgNV HR8EgYAwfjB8oHqgeIZ2cnN5bmM6Ly9yLm1hZ2VsbGFuLmlweG8uY29tL3JlcG8v YTAzNzViMzktZjk0OS00Y2I1LWI1MTktZjk0MDA4YjE2NTRjLTAvMC9CMzU0RDMy OENCQkZEMUVGM0NEMjkyNjhBMjNCMEZDQzYwRTNBMkM1LmNybDCBngYIKwYBBQUH AQEEgZEwgY4wgYsGCCsGAQUFBzAChn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5y aXBlLm5ldC9yZXBvc2l0b3J5LzYxNzA4YTZiLTZjM2EtNDBhMC1hMzAyLTU5NWVj YzE3ODQ4Yy8wL0IzNTREMzI4Q0JCRkQxRUYzQ0QyOTI2OEEyM0IwRkNDNjBFM0Ey QzUuY2VyMIGiBggrBgEFBQcBCwSBlTCBkjCBjwYIKwYBBQUHMAuGgYJyc3luYzov L3IubWFnZWxsYW4uaXB4by5jb20vcmVwby9hMDM3NWIzOS1mOTQ5LTRjYjUtYjUx OS1mOTQwMDhiMTY1NGMtMC8wLzMxMzYzNDJlMzMzNzJlMzIzMTM5MmUzMDJmMzIz NDJkMzIzNDIwM2QzZTIwMzkzMzMwMzQucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYB BQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBACkJdswDQYJKoZIhvcN AQELBQADggEBAFJDn+fIa1Zkk9Ht1prhI+3wP5/6LTRWlzb5PoXPH50gOmUwcIOJ +JJOGKZWCzV6+lNcGDX4OYhNcujzjA/Vvj2Z3cP35sadJI5S591Ntx1i6Y6NLN2n Zv5Xk+m+3h+2hBrnqSWC6sR+8nfF3EkbHW6hwVUkO1OPurdSNSsh2/O6ojFVur8Z gDy1Fqezsuwk73ZjEHq+0JCTsWuzvOjaD52pL8S3T1SBZu0zSBKB4DmhNfNfiGAz 3wBALzi2VGyhBfBgj7nja0vhI7ZQJa4ETwof7btAQwAA9bT8m/JkkNh9TVg43SP3 VTdRM6uYU8rNYAuSklz4OGry1A1A2qbWF9I= -----END CERTIFICATE-----Generated at Sun Oct 18 07:29:33 2026 by rpki-client