$ rpki-client -vvvf r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/3136342e33372e3232312e302f32342d3234203d3e2039333034.roa File: 3136342e33372e3232312e302f32342d3234203d3e2039333034.roa (raw, json) Hash identifier: P/GmD+rX4IpyOx9nEsfDCa9apVY2JqmEp+/vDNN0I7c= Subject key identifier: B3:4C:C3:BE:30:FF:9F:0A:F0:72:EE:44:02:01:62:56:D0:53:D2:F5 Certificate issuer: /CN=B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5 Certificate serial: 5A395593F0A11F8B1A7EC7699933EF0DDF0B96C8 Authority key identifier: B3:54:D3:28:CB:BF:D1:EF:3C:D2:92:68:A2:3B:0F:CC:60:E3:A2:C5 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.cer Subject info access: rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/3136342e33372e3232312e302f32342d3234203d3e2039333034.roa Signing time: Mon 12 Oct 2026 00:02:11 +0000 ROA not before: Sun 11 Oct 2026 23:57:11 +0000 ROA not after: Mon 11 Oct 2027 00:02:11 +0000 asID: 9304 IP address blocks: 164.37.221.0/24 maxlen: 24 Validation: OK Signature path: rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.crl rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.mft rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.cer rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/D0A516B50426202A424F0EBFCB7D2BD4F744F964.crl rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/D0A516B50426202A424F0EBFCB7D2BD4F744F964.mft rsync://rpki.ripe.net/repository/DEFAULT/0KUWtQQmICpCTw6_y30r1PdE-WQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 24 Oct 2026 21:53:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5a:39:55:93:f0:a1:1f:8b:1a:7e:c7:69:99:33:ef:0d:df:0b:96:c8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5 Validity Not Before: Oct 11 23:57:11 2026 GMT Not After : Oct 11 00:02:11 2027 GMT Subject: CN=B34CC3BE30FF9F0AF072EE4402016256D053D2F5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:67:b4:e7:68:2f:ee:7b:6d:71:ee:2c:5c:61: 9a:4c:04:3b:69:fa:c7:be:44:85:c0:fd:b4:e3:24: 41:95:1d:99:76:aa:8b:a1:6f:db:d1:64:18:07:31: 94:ee:82:74:cb:16:8e:2d:88:e8:f5:70:1a:20:ca: d6:8d:dd:b8:64:67:f8:4e:42:02:c1:79:9d:20:eb: 96:a3:26:90:46:e8:97:83:34:f2:fd:81:26:79:e7: ee:32:21:40:61:d9:81:a3:1e:b9:1d:e4:d0:20:aa: f8:59:2c:f8:34:f2:7e:2a:9f:36:71:75:9f:1b:4d: a0:f0:40:56:d4:bd:b0:76:e9:be:81:c3:0c:b4:86: a5:e6:40:f5:44:c9:59:8c:9b:92:38:b8:c3:0f:74: 07:65:0e:3e:5b:0e:96:86:6f:ce:9b:74:09:77:83: 20:2e:a3:79:fa:bb:69:d7:4b:43:68:30:6a:1f:1e: a7:49:8f:86:86:4e:92:18:f8:bb:6f:e0:64:4f:1d: 4b:07:b7:83:4f:ad:ab:8a:70:02:6a:97:f3:32:31: 86:bc:e1:50:e4:10:39:5b:53:84:92:81:ae:b6:20: 7b:48:f9:a6:1b:8d:2c:3c:86:6d:d9:43:58:e7:7e: a4:1e:d9:ce:0d:fd:18:97:ae:92:84:15:d4:2d:78: d6:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:4C:C3:BE:30:FF:9F:0A:F0:72:EE:44:02:01:62:56:D0:53:D2:F5 X509v3 Authority Key Identifier: keyid:B3:54:D3:28:CB:BF:D1:EF:3C:D2:92:68:A2:3B:0F:CC:60:E3:A2:C5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.cer Subject Information Access: Signed Object - URI:rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/3136342e33372e3232312e302f32342d3234203d3e2039333034.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 164.37.221.0/24 Signature Algorithm: sha256WithRSAEncryption 66:21:dd:60:52:b5:02:12:50:c3:5d:0d:1e:d1:3c:bd:9e:6e: 7f:8c:2c:5c:93:ef:5d:44:02:de:8e:c1:70:c8:01:d2:6b:f7: f3:84:30:3d:8a:22:80:64:3b:e2:a9:30:37:34:b3:6d:29:6b: 61:64:94:24:8c:38:d1:ea:66:31:f1:db:b3:7a:69:d6:05:20: 8e:e6:34:bc:51:b3:30:50:9e:50:90:5b:46:f6:d8:de:72:b6: df:59:d8:de:84:df:c7:76:7b:10:c6:44:7d:fb:d4:47:9e:2b: 93:3d:87:a1:9a:72:60:fe:31:8f:91:3c:9e:f9:8d:b7:3c:2c: 13:34:df:fe:fc:82:6e:58:15:62:54:7d:8a:4a:6f:95:09:de: 8c:dd:e6:21:71:0f:ca:f7:f3:cb:42:ff:e9:af:c4:69:1b:43: 94:25:78:e4:41:6f:5f:38:88:de:ee:d4:8f:d1:61:d9:08:cb: 9b:7f:f8:6f:f4:ea:d8:68:1e:cd:1a:76:f2:89:50:51:ba:6e: 48:82:62:21:31:a6:86:94:8b:05:f9:de:58:31:79:1a:10:d9: 0a:13:42:aa:fa:6f:d5:de:56:51:72:5e:dc:0b:64:d2:c4:04: 24:25:d4:73:57:ec:c3:40:16:a8:83:9c:11:68:58:21:ad:71: 33:50:7b:38 -----BEGIN CERTIFICATE----- MIIFVjCCBD6gAwIBAgIUWjlVk/ChH4safsdpmTPvDd8LlsgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjM1NEQzMjhDQkJGRDFFRjNDRDI5MjY4QTIzQjBGQ0M2 MEUzQTJDNTAeFw0yNjEwMTEyMzU3MTFaFw0yNzEwMTEwMDAyMTFaMDMxMTAvBgNV BAMTKEIzNENDM0JFMzBGRjlGMEFGMDcyRUU0NDAyMDE2MjU2RDA1M0QyRjUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCdZ7TnaC/ue21x7ixcYZpMBDtp +se+RIXA/bTjJEGVHZl2qouhb9vRZBgHMZTugnTLFo4tiOj1cBogytaN3bhkZ/hO QgLBeZ0g65ajJpBG6JeDNPL9gSZ55+4yIUBh2YGjHrkd5NAgqvhZLPg08n4qnzZx dZ8bTaDwQFbUvbB26b6Bwwy0hqXmQPVEyVmMm5I4uMMPdAdlDj5bDpaGb86bdAl3 gyAuo3n6u2nXS0NoMGofHqdJj4aGTpIY+Ltv4GRPHUsHt4NPrauKcAJql/MyMYa8 4VDkEDlbU4SSga62IHtI+aYbjSw8hm3ZQ1jnfqQe2c4N/RiXrpKEFdQteNZVAgMB AAGjggJgMIICXDAdBgNVHQ4EFgQUs0zDvjD/nwrwcu5EAgFiVtBT0vUwHwYDVR0j BBgwFoAUs1TTKMu/0e880pJoojsPzGDjosUwDgYDVR0PAQH/BAQDAgeAMIGIBgNV HR8EgYAwfjB8oHqgeIZ2cnN5bmM6Ly9yLm1hZ2VsbGFuLmlweG8uY29tL3JlcG8v YTAzNzViMzktZjk0OS00Y2I1LWI1MTktZjk0MDA4YjE2NTRjLTAvMC9CMzU0RDMy OENCQkZEMUVGM0NEMjkyNjhBMjNCMEZDQzYwRTNBMkM1LmNybDCBngYIKwYBBQUH AQEEgZEwgY4wgYsGCCsGAQUFBzAChn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5y aXBlLm5ldC9yZXBvc2l0b3J5LzYxNzA4YTZiLTZjM2EtNDBhMC1hMzAyLTU5NWVj YzE3ODQ4Yy8wL0IzNTREMzI4Q0JCRkQxRUYzQ0QyOTI2OEEyM0IwRkNDNjBFM0Ey QzUuY2VyMIGiBggrBgEFBQcBCwSBlTCBkjCBjwYIKwYBBQUHMAuGgYJyc3luYzov L3IubWFnZWxsYW4uaXB4by5jb20vcmVwby9hMDM3NWIzOS1mOTQ5LTRjYjUtYjUx OS1mOTQwMDhiMTY1NGMtMC8wLzMxMzYzNDJlMzMzNzJlMzIzMjMxMmUzMDJmMzIz NDJkMzIzNDIwM2QzZTIwMzkzMzMwMzQucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYB BQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBACkJd0wDQYJKoZIhvcN AQELBQADggEBAGYh3WBStQISUMNdDR7RPL2ebn+MLFyT711EAt6OwXDIAdJr9/OE MD2KIoBkO+KpMDc0s20pa2FklCSMONHqZjHx27N6adYFII7mNLxRszBQnlCQW0b2 2N5ytt9Z2N6E38d2exDGRH371EeeK5M9h6GacmD+MY+RPJ75jbc8LBM03/78gm5Y FWJUfYpKb5UJ3ozd5iFxD8r388tC/+mvxGkbQ5QleORBb184iN7u1I/RYdkIy5t/ +G/06thoHs0advKJUFG6bkiCYiExpoaUiwX53lgxeRoQ2QoTQqr6b9XeVlFyXtwL ZNLEBCQl1HNX7MNAFqiDnBFoWCGtcTNQezg= -----END CERTIFICATE-----Generated at Sat Oct 24 12:46:18 2026 by rpki-client