$ rpki-client -vvvf r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/3136342e33372e3232352e302f32342d3234203d3e20343032363634.roa File: 3136342e33372e3232352e302f32342d3234203d3e20343032363634.roa (raw, json) Hash identifier: +uMnfXNwds41ICKpYwD9ZBF6/d8MMxgIPqyPoZJN48k= Subject key identifier: EA:24:80:6C:81:CC:AF:DE:FB:08:FA:3F:7A:A5:D7:A0:AF:5B:B9:39 Certificate issuer: /CN=B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5 Certificate serial: 100859D23FE6D04B761C3506CAAFB7AD249E04E5 Authority key identifier: B3:54:D3:28:CB:BF:D1:EF:3C:D2:92:68:A2:3B:0F:CC:60:E3:A2:C5 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.cer Subject info access: rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/3136342e33372e3232352e302f32342d3234203d3e20343032363634.roa Signing time: Fri 07 Aug 2026 10:10:56 +0000 ROA not before: Fri 07 Aug 2026 10:05:56 +0000 ROA not after: Fri 06 Aug 2027 10:10:56 +0000 asID: 402664 IP address blocks: 164.37.225.0/24 maxlen: 24 Validation: OK Signature path: rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.crl rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.mft rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.cer rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/D0A516B50426202A424F0EBFCB7D2BD4F744F964.crl rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/D0A516B50426202A424F0EBFCB7D2BD4F744F964.mft rsync://rpki.ripe.net/repository/DEFAULT/0KUWtQQmICpCTw6_y30r1PdE-WQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 03 Sep 2026 18:02:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10:08:59:d2:3f:e6:d0:4b:76:1c:35:06:ca:af:b7:ad:24:9e:04:e5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5 Validity Not Before: Aug 7 10:05:56 2026 GMT Not After : Aug 6 10:10:56 2027 GMT Subject: CN=EA24806C81CCAFDEFB08FA3F7AA5D7A0AF5BB939 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:b2:d9:0e:e1:0e:97:3b:73:90:a8:62:b2:0b: 98:16:31:f0:53:c1:6b:4d:42:a1:95:55:16:80:d6: cf:e2:25:fa:bb:34:4c:5c:e3:54:d5:bc:9e:09:73: 1b:c4:9b:27:19:63:64:60:3c:1f:fd:3f:f5:63:f2: cf:59:ef:28:9f:fc:ea:53:02:75:9a:5f:ce:03:13: 2f:f1:00:33:d4:04:c4:e5:0c:bb:3f:c0:4a:83:b4: 51:8b:be:9c:47:db:24:2e:c3:08:47:69:44:29:6e: ae:90:41:aa:6e:7e:3e:1b:f0:16:e7:6b:56:f2:75: 4f:af:c4:c9:55:37:1c:3c:23:06:af:7c:6d:01:6d: df:fc:03:c3:26:5d:7f:63:ce:3c:d4:ab:5b:a3:1e: 72:4c:19:56:df:a0:16:e2:aa:ba:85:0b:57:a0:6c: 01:32:59:16:5f:2b:ea:ff:35:30:06:ce:28:e3:35: 28:f6:47:45:c8:c0:6a:c9:7b:2c:8c:6f:e9:04:ad: 2c:7e:8a:57:8f:53:cb:ab:e9:b0:6b:ad:55:b5:7b: 8d:96:e1:a3:c7:12:d8:2a:9f:d1:98:4b:c3:84:36: 99:e3:1b:c1:e8:fa:89:ef:f8:fa:ba:c4:63:b2:6e: cb:77:5c:4f:80:55:17:c2:ef:30:5a:84:85:7b:85: 29:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:24:80:6C:81:CC:AF:DE:FB:08:FA:3F:7A:A5:D7:A0:AF:5B:B9:39 X509v3 Authority Key Identifier: keyid:B3:54:D3:28:CB:BF:D1:EF:3C:D2:92:68:A2:3B:0F:CC:60:E3:A2:C5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.cer Subject Information Access: Signed Object - URI:rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/3136342e33372e3232352e302f32342d3234203d3e20343032363634.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 164.37.225.0/24 Signature Algorithm: sha256WithRSAEncryption 97:6a:c0:0b:3b:12:27:aa:95:ca:16:28:f6:93:29:c3:ab:f9: d9:49:3c:6e:96:46:18:c2:56:7e:0b:a2:29:1b:1a:cb:be:f5: b9:81:85:85:00:77:f1:b9:97:c8:cd:62:12:cc:fc:a1:dc:69: 8d:e7:3e:08:cb:76:ad:22:5a:d2:03:ec:00:b3:74:49:90:16: 26:31:80:1e:e9:cb:c6:ff:82:23:6b:c9:60:62:c9:95:3e:b8: 07:ed:81:69:78:63:23:e2:ee:e5:d4:7d:0f:0f:be:98:91:6d: 2a:31:86:50:7d:21:00:30:3b:9d:52:28:c0:33:89:e9:76:f6: e9:74:29:2d:69:9f:e9:74:b6:f8:65:bf:19:41:0f:8d:7d:17: 25:2c:5d:35:91:7b:42:ed:f5:b3:26:0f:ff:b1:64:23:7f:6e: 9c:bd:8f:0e:c3:8e:ff:47:eb:c0:bd:ed:cc:67:a2:c8:e8:aa: a8:a8:66:fa:5d:63:ec:6c:25:ea:c5:e0:7f:8f:26:e2:41:37: 50:86:a0:0d:c7:1d:82:c4:0c:1f:1d:d3:c3:ff:b8:aa:d3:d1: fb:46:d5:5f:e6:13:1a:a1:c2:be:ef:80:0f:1e:27:5c:b9:74: 71:9e:31:ea:46:9f:7a:b4:12:53:d1:1a:e5:8e:50:58:f2:dc: 19:42:08:d3 -----BEGIN CERTIFICATE----- MIIFWjCCBEKgAwIBAgIUEAhZ0j/m0Et2HDUGyq+3rSSeBOUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjM1NEQzMjhDQkJGRDFFRjNDRDI5MjY4QTIzQjBGQ0M2 MEUzQTJDNTAeFw0yNjA4MDcxMDA1NTZaFw0yNzA4MDYxMDEwNTZaMDMxMTAvBgNV BAMTKEVBMjQ4MDZDODFDQ0FGREVGQjA4RkEzRjdBQTVEN0EwQUY1QkI5MzkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDfstkO4Q6XO3OQqGKyC5gWMfBT wWtNQqGVVRaA1s/iJfq7NExc41TVvJ4JcxvEmycZY2RgPB/9P/Vj8s9Z7yif/OpT AnWaX84DEy/xADPUBMTlDLs/wEqDtFGLvpxH2yQuwwhHaUQpbq6QQapufj4b8Bbn a1bydU+vxMlVNxw8IwavfG0Bbd/8A8MmXX9jzjzUq1ujHnJMGVbfoBbiqrqFC1eg bAEyWRZfK+r/NTAGzijjNSj2R0XIwGrJeyyMb+kErSx+ilePU8ur6bBrrVW1e42W 4aPHEtgqn9GYS8OENpnjG8Ho+onv+Pq6xGOybst3XE+AVRfC7zBahIV7hSmHAgMB AAGjggJkMIICYDAdBgNVHQ4EFgQU6iSAbIHMr977CPo/eqXXoK9buTkwHwYDVR0j BBgwFoAUs1TTKMu/0e880pJoojsPzGDjosUwDgYDVR0PAQH/BAQDAgeAMIGIBgNV HR8EgYAwfjB8oHqgeIZ2cnN5bmM6Ly9yLm1hZ2VsbGFuLmlweG8uY29tL3JlcG8v YTAzNzViMzktZjk0OS00Y2I1LWI1MTktZjk0MDA4YjE2NTRjLTAvMC9CMzU0RDMy OENCQkZEMUVGM0NEMjkyNjhBMjNCMEZDQzYwRTNBMkM1LmNybDCBngYIKwYBBQUH AQEEgZEwgY4wgYsGCCsGAQUFBzAChn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5y aXBlLm5ldC9yZXBvc2l0b3J5LzYxNzA4YTZiLTZjM2EtNDBhMC1hMzAyLTU5NWVj YzE3ODQ4Yy8wL0IzNTREMzI4Q0JCRkQxRUYzQ0QyOTI2OEEyM0IwRkNDNjBFM0Ey QzUuY2VyMIGmBggrBgEFBQcBCwSBmTCBljCBkwYIKwYBBQUHMAuGgYZyc3luYzov L3IubWFnZWxsYW4uaXB4by5jb20vcmVwby9hMDM3NWIzOS1mOTQ5LTRjYjUtYjUx OS1mOTQwMDhiMTY1NGMtMC8wLzMxMzYzNDJlMzMzNzJlMzIzMjM1MmUzMDJmMzIz NDJkMzIzNDIwM2QzZTIwMzQzMDMyMzYzNjM0LnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQApCXhMA0GCSqG SIb3DQEBCwUAA4IBAQCXasALOxInqpXKFij2kynDq/nZSTxulkYYwlZ+C6IpGxrL vvW5gYWFAHfxuZfIzWISzPyh3GmN5z4Iy3atIlrSA+wAs3RJkBYmMYAe6cvG/4Ij a8lgYsmVPrgH7YFpeGMj4u7l1H0PD76YkW0qMYZQfSEAMDudUijAM4npdvbpdCkt aZ/pdLb4Zb8ZQQ+NfRclLF01kXtC7fWzJg//sWQjf26cvY8Ow47/R+vAve3MZ6LI 6KqoqGb6XWPsbCXqxeB/jybiQTdQhqANxx2CxAwfHdPD/7iq09H7RtVf5hMaocK+ 74APHidcuXRxnjHqRp96tBJT0RrljlBY8twZQgjT -----END CERTIFICATE-----Generated at Thu Sep 3 09:21:40 2026 by rpki-client