$ rpki-client -vvf r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/3136342e33372e3232302e302f32342d3234203d3e20343032323231.roa File: 3136342e33372e3232302e302f32342d3234203d3e20343032323231.roa (raw, json) Hash identifier: Jw43VfsRtKr3yw/B4wn4bJNr2iTSUv1DJfxB02JGmAg= Subject key identifier: 73:9F:43:4E:01:F0:30:52:63:9A:0E:FB:13:5E:00:9B:61:CD:F4:F0 Certificate issuer: /CN=B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5 Certificate serial: 075B9D1E567DE55857AD3F7E55D24375800980CD Authority key identifier: B3:54:D3:28:CB:BF:D1:EF:3C:D2:92:68:A2:3B:0F:CC:60:E3:A2:C5 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.cer Subject info access: rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/3136342e33372e3232302e302f32342d3234203d3e20343032323231.roa Signing time: Sun 28 Jun 2026 12:15:14 +0000 ROA not before: Sun 28 Jun 2026 12:10:14 +0000 ROA not after: Sun 27 Jun 2027 12:15:14 +0000 asID: 402221 IP address blocks: 164.37.220.0/24 maxlen: 24 Validation: OK Signature path: rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.crl rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.mft rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.cer rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/D0A516B50426202A424F0EBFCB7D2BD4F744F964.crl rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/D0A516B50426202A424F0EBFCB7D2BD4F744F964.mft rsync://rpki.ripe.net/repository/DEFAULT/0KUWtQQmICpCTw6_y30r1PdE-WQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 07 Jul 2026 09:45:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 07:5b:9d:1e:56:7d:e5:58:57:ad:3f:7e:55:d2:43:75:80:09:80:cd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5 Validity Not Before: Jun 28 12:10:14 2026 GMT Not After : Jun 27 12:15:14 2027 GMT Subject: CN=739F434E01F03052639A0EFB135E009B61CDF4F0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:60:c5:a5:48:66:c2:0e:4b:20:b5:9c:f9:e8: 61:e2:f2:6e:ca:fd:b3:d9:e0:64:c1:13:ca:44:d8: 48:d4:9b:ca:9c:dc:c0:9a:3e:a3:02:97:f1:ad:3f: 2c:54:e1:02:1c:9d:25:2e:47:a6:54:4d:6a:04:e0: 97:64:97:e9:23:7d:e0:68:d2:f9:b4:9e:8d:f1:cf: 5e:d3:5c:b8:2b:08:a3:97:3a:2b:6e:0a:79:72:4d: 26:aa:cb:c2:b5:b8:fd:9c:2e:60:6d:73:6c:f9:b1: 17:3d:8a:a0:62:b1:51:b8:1e:5f:8b:19:4e:5d:e8: 21:4b:ca:d1:f3:90:ff:0d:6b:bb:94:40:22:b5:fb: 4a:63:b3:d8:ab:46:e7:eb:bc:56:07:76:70:82:f7: b6:88:b4:0f:d7:31:58:a6:79:b2:35:a2:f5:c4:cd: 58:88:0c:5d:ca:50:ba:6c:6e:0a:6c:ae:ca:0a:77: 10:10:1b:d8:36:ba:3f:a6:fb:c5:83:8e:e9:0b:25: 56:a6:3f:a2:58:e7:88:44:e6:11:1a:7e:c0:ee:c8: 99:ce:64:bc:a0:9c:21:a5:7e:a1:55:d3:bf:78:3f: eb:4f:69:fd:98:40:5a:63:89:f6:c3:24:bc:30:92: 17:aa:93:02:80:a3:78:1f:1e:f8:20:8e:7d:3a:44: 7c:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:9F:43:4E:01:F0:30:52:63:9A:0E:FB:13:5E:00:9B:61:CD:F4:F0 X509v3 Authority Key Identifier: keyid:B3:54:D3:28:CB:BF:D1:EF:3C:D2:92:68:A2:3B:0F:CC:60:E3:A2:C5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.cer Subject Information Access: Signed Object - URI:rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/3136342e33372e3232302e302f32342d3234203d3e20343032323231.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 164.37.220.0/24 Signature Algorithm: sha256WithRSAEncryption 78:51:df:4f:66:13:0f:83:f6:8e:4f:a2:c9:67:40:64:05:37: 2b:fa:7f:24:b0:fe:30:80:68:48:31:af:0b:1f:3e:75:fe:ce: 1e:11:47:b2:eb:81:b8:29:ca:1f:00:f4:4e:cf:00:aa:4a:ea: 4c:93:87:ee:13:75:ea:e7:ba:13:ee:b4:1f:b6:c6:d5:8e:f0: c4:b4:30:86:8e:59:1b:39:0c:82:36:f0:2d:0b:0b:d3:d6:d4: 06:9d:19:b9:fc:46:53:fa:7a:11:f0:12:d4:22:cf:39:b6:e3: f4:05:b7:ad:7d:5b:10:cd:33:2a:02:ff:a5:9e:82:18:7b:68: 7a:a6:d0:9e:4c:61:97:e1:41:85:ea:d1:bf:af:e3:f5:9d:b8: 95:3b:d8:6a:ed:7a:33:00:40:5c:79:f5:a6:2f:d6:68:ca:fe: b2:22:48:b3:79:87:4f:9b:6d:ea:f4:31:a1:fb:0e:f2:6c:26: 40:b3:9f:06:6b:3b:a6:40:e6:46:69:7f:14:56:a0:1a:ad:70: 48:1e:14:4a:cd:f2:f7:c6:16:7d:df:3f:26:f5:9a:d1:9c:54: 06:53:64:31:ae:8b:17:03:ad:53:c2:b1:9e:8b:bf:d5:db:72: 2b:cd:49:d1:88:30:f7:7b:94:e9:14:ba:a3:b9:47:3c:11:bd: 0e:b3:20:d8 -----BEGIN CERTIFICATE----- MIIFWjCCBEKgAwIBAgIUB1udHlZ95VhXrT9+VdJDdYAJgM0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjM1NEQzMjhDQkJGRDFFRjNDRDI5MjY4QTIzQjBGQ0M2 MEUzQTJDNTAeFw0yNjA2MjgxMjEwMTRaFw0yNzA2MjcxMjE1MTRaMDMxMTAvBgNV BAMTKDczOUY0MzRFMDFGMDMwNTI2MzlBMEVGQjEzNUUwMDlCNjFDREY0RjAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+YMWlSGbCDksgtZz56GHi8m7K /bPZ4GTBE8pE2EjUm8qc3MCaPqMCl/GtPyxU4QIcnSUuR6ZUTWoE4Jdkl+kjfeBo 0vm0no3xz17TXLgrCKOXOituCnlyTSaqy8K1uP2cLmBtc2z5sRc9iqBisVG4Hl+L GU5d6CFLytHzkP8Na7uUQCK1+0pjs9irRufrvFYHdnCC97aItA/XMVimebI1ovXE zViIDF3KULpsbgpsrsoKdxAQG9g2uj+m+8WDjukLJVamP6JY54hE5hEafsDuyJnO ZLygnCGlfqFV0794P+tPaf2YQFpjifbDJLwwkheqkwKAo3gfHvggjn06RHybAgMB AAGjggJkMIICYDAdBgNVHQ4EFgQUc59DTgHwMFJjmg77E14Am2HN9PAwHwYDVR0j BBgwFoAUs1TTKMu/0e880pJoojsPzGDjosUwDgYDVR0PAQH/BAQDAgeAMIGIBgNV HR8EgYAwfjB8oHqgeIZ2cnN5bmM6Ly9yLm1hZ2VsbGFuLmlweG8uY29tL3JlcG8v YTAzNzViMzktZjk0OS00Y2I1LWI1MTktZjk0MDA4YjE2NTRjLTAvMC9CMzU0RDMy OENCQkZEMUVGM0NEMjkyNjhBMjNCMEZDQzYwRTNBMkM1LmNybDCBngYIKwYBBQUH AQEEgZEwgY4wgYsGCCsGAQUFBzAChn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5y aXBlLm5ldC9yZXBvc2l0b3J5LzYxNzA4YTZiLTZjM2EtNDBhMC1hMzAyLTU5NWVj YzE3ODQ4Yy8wL0IzNTREMzI4Q0JCRkQxRUYzQ0QyOTI2OEEyM0IwRkNDNjBFM0Ey QzUuY2VyMIGmBggrBgEFBQcBCwSBmTCBljCBkwYIKwYBBQUHMAuGgYZyc3luYzov L3IubWFnZWxsYW4uaXB4by5jb20vcmVwby9hMDM3NWIzOS1mOTQ5LTRjYjUtYjUx OS1mOTQwMDhiMTY1NGMtMC8wLzMxMzYzNDJlMzMzNzJlMzIzMjMwMmUzMDJmMzIz NDJkMzIzNDIwM2QzZTIwMzQzMDMyMzIzMjMxLnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQApCXcMA0GCSqG SIb3DQEBCwUAA4IBAQB4Ud9PZhMPg/aOT6LJZ0BkBTcr+n8ksP4wgGhIMa8LHz51 /s4eEUey64G4KcofAPROzwCqSupMk4fuE3Xq57oT7rQftsbVjvDEtDCGjlkbOQyC NvAtCwvT1tQGnRm5/EZT+noR8BLUIs85tuP0BbetfVsQzTMqAv+lnoIYe2h6ptCe TGGX4UGF6tG/r+P1nbiVO9hq7XozAEBcefWmL9Zoyv6yIkizeYdPm23q9DGh+w7y bCZAs58GazumQOZGaX8UVqAarXBIHhRKzfL3xhZ93z8m9ZrRnFQGU2QxrosXA61T wrGei7/V23IrzUnRiDD3e5TpFLqjuUc8Eb0OsyDY -----END CERTIFICATE-----Generated at Mon Jul 6 22:11:51 2026 by rpki-client