$ rpki-client -vvvf r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/3136342e33372e3233312e302f32342d3234203d3e20313532383638.roa File: 3136342e33372e3233312e302f32342d3234203d3e20313532383638.roa (raw, json) Hash identifier: U3g7qxrWSnW+SYa3Ce3ZrM0gSworFmnW1YGUj+aNrYw= Subject key identifier: 79:1E:14:9C:3D:68:7D:53:CB:70:80:35:F9:E7:8D:8E:52:03:B3:04 Certificate issuer: /CN=B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5 Certificate serial: 0E30D937C53798FAE4C2971F2A3556E51A5EE246 Authority key identifier: B3:54:D3:28:CB:BF:D1:EF:3C:D2:92:68:A2:3B:0F:CC:60:E3:A2:C5 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.cer Subject info access: rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/3136342e33372e3233312e302f32342d3234203d3e20313532383638.roa Signing time: Mon 12 Oct 2026 00:02:07 +0000 ROA not before: Sun 11 Oct 2026 23:57:07 +0000 ROA not after: Mon 11 Oct 2027 00:02:07 +0000 asID: 152868 IP address blocks: 164.37.231.0/24 maxlen: 24 Validation: OK Signature path: rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.crl rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.mft rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.cer rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/D0A516B50426202A424F0EBFCB7D2BD4F744F964.crl rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/D0A516B50426202A424F0EBFCB7D2BD4F744F964.mft rsync://rpki.ripe.net/repository/DEFAULT/0KUWtQQmICpCTw6_y30r1PdE-WQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 24 Oct 2026 21:53:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0e:30:d9:37:c5:37:98:fa:e4:c2:97:1f:2a:35:56:e5:1a:5e:e2:46 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5 Validity Not Before: Oct 11 23:57:07 2026 GMT Not After : Oct 11 00:02:07 2027 GMT Subject: CN=791E149C3D687D53CB708035F9E78D8E5203B304 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f7:e6:c6:f0:d6:3b:d1:ba:94:86:c9:4c:24:a4: 0f:94:39:8b:5b:af:d3:d2:b1:e3:3a:5f:89:8d:a9: 35:cd:25:d5:aa:dc:76:c3:0b:7e:b1:db:b8:e7:a8: ee:b1:54:50:05:1a:89:c0:6d:f5:a1:6c:44:9b:9a: b0:8d:ee:38:f0:23:c0:d7:cd:12:61:86:be:67:83: 89:07:70:e4:0d:c8:9d:5d:d9:8c:57:21:55:47:00: dd:6a:a7:bd:fd:4a:35:fd:f7:3a:f2:0d:b7:e2:68: 2b:61:be:63:7d:ba:b9:e1:eb:24:14:c8:28:f6:ba: 05:c5:14:47:8d:40:cb:a5:37:d9:4d:74:e1:f3:92: 20:99:37:e4:5b:68:9b:e5:47:4f:4e:27:a0:7a:cd: 24:57:f6:14:d4:2b:1b:4a:d3:27:83:9c:f3:73:61: dd:d9:24:fc:3d:a6:93:59:16:a7:e2:d3:40:31:db: 03:15:85:85:05:d3:33:cc:ff:00:b1:be:2b:40:f1: 9c:30:1f:7a:22:1e:e8:7c:0a:5e:56:c8:17:43:90: e6:c3:b8:be:8e:10:6e:f4:f5:59:45:f9:86:a3:a6: 7e:2d:79:eb:c0:a3:73:78:9d:74:46:27:9b:57:b7: 23:bd:88:3c:87:ae:34:39:38:1b:b1:7a:0b:d7:16: 93:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:1E:14:9C:3D:68:7D:53:CB:70:80:35:F9:E7:8D:8E:52:03:B3:04 X509v3 Authority Key Identifier: keyid:B3:54:D3:28:CB:BF:D1:EF:3C:D2:92:68:A2:3B:0F:CC:60:E3:A2:C5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.cer Subject Information Access: Signed Object - URI:rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/3136342e33372e3233312e302f32342d3234203d3e20313532383638.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 164.37.231.0/24 Signature Algorithm: sha256WithRSAEncryption 84:f1:9e:23:a9:f9:29:dc:4b:68:0a:65:82:8f:f8:a9:ef:5c: 65:83:a9:50:20:ee:8a:26:6a:fe:70:4c:a2:a3:11:7f:e7:6c: fc:a8:1a:07:5a:f3:f0:fe:bd:21:74:86:74:a2:f4:5c:de:a7: bd:77:cf:b7:f1:46:c1:49:e8:af:c6:27:91:b1:49:32:a9:d5: b5:f7:1e:7c:d3:99:87:e8:cc:c9:7c:41:0c:cb:c0:cf:3d:32: b1:60:25:3a:74:33:e7:ea:94:96:8b:3c:6a:cc:07:d6:a6:1c: 5a:71:23:c1:de:6f:1a:39:34:d4:fa:64:63:7f:4e:0c:78:5d: ac:e2:51:43:72:2d:2f:21:ed:72:cc:e7:7f:51:44:8d:24:91: 13:03:c1:73:ca:03:ce:ac:cb:e7:15:0d:35:71:4b:10:b8:88: 4c:a0:6d:a9:bb:28:96:d4:c8:95:ce:8a:64:56:a5:6e:d1:f8: 79:18:67:01:25:03:63:f6:bb:cb:6a:f4:6e:1f:16:34:e0:33: c1:6d:39:7c:cf:01:82:a2:98:71:db:6c:6d:d8:e5:92:e9:04: 12:91:3c:1f:44:27:44:6d:b4:05:cd:15:69:8c:03:b4:3c:75: 04:6a:43:63:30:17:06:b8:b8:94:73:06:f9:dd:98:ce:8f:ea: 92:46:fb:8e -----BEGIN CERTIFICATE----- MIIFWjCCBEKgAwIBAgIUDjDZN8U3mPrkwpcfKjVW5Rpe4kYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjM1NEQzMjhDQkJGRDFFRjNDRDI5MjY4QTIzQjBGQ0M2 MEUzQTJDNTAeFw0yNjEwMTEyMzU3MDdaFw0yNzEwMTEwMDAyMDdaMDMxMTAvBgNV BAMTKDc5MUUxNDlDM0Q2ODdENTNDQjcwODAzNUY5RTc4RDhFNTIwM0IzMDQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD35sbw1jvRupSGyUwkpA+UOYtb r9PSseM6X4mNqTXNJdWq3HbDC36x27jnqO6xVFAFGonAbfWhbESbmrCN7jjwI8DX zRJhhr5ng4kHcOQNyJ1d2YxXIVVHAN1qp739SjX99zryDbfiaCthvmN9urnh6yQU yCj2ugXFFEeNQMulN9lNdOHzkiCZN+RbaJvlR09OJ6B6zSRX9hTUKxtK0yeDnPNz Yd3ZJPw9ppNZFqfi00Ax2wMVhYUF0zPM/wCxvitA8ZwwH3oiHuh8Cl5WyBdDkObD uL6OEG709VlF+Yajpn4teevAo3N4nXRGJ5tXtyO9iDyHrjQ5OBuxegvXFpMjAgMB AAGjggJkMIICYDAdBgNVHQ4EFgQUeR4UnD1ofVPLcIA1+eeNjlIDswQwHwYDVR0j BBgwFoAUs1TTKMu/0e880pJoojsPzGDjosUwDgYDVR0PAQH/BAQDAgeAMIGIBgNV HR8EgYAwfjB8oHqgeIZ2cnN5bmM6Ly9yLm1hZ2VsbGFuLmlweG8uY29tL3JlcG8v YTAzNzViMzktZjk0OS00Y2I1LWI1MTktZjk0MDA4YjE2NTRjLTAvMC9CMzU0RDMy OENCQkZEMUVGM0NEMjkyNjhBMjNCMEZDQzYwRTNBMkM1LmNybDCBngYIKwYBBQUH AQEEgZEwgY4wgYsGCCsGAQUFBzAChn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5y aXBlLm5ldC9yZXBvc2l0b3J5LzYxNzA4YTZiLTZjM2EtNDBhMC1hMzAyLTU5NWVj YzE3ODQ4Yy8wL0IzNTREMzI4Q0JCRkQxRUYzQ0QyOTI2OEEyM0IwRkNDNjBFM0Ey QzUuY2VyMIGmBggrBgEFBQcBCwSBmTCBljCBkwYIKwYBBQUHMAuGgYZyc3luYzov L3IubWFnZWxsYW4uaXB4by5jb20vcmVwby9hMDM3NWIzOS1mOTQ5LTRjYjUtYjUx OS1mOTQwMDhiMTY1NGMtMC8wLzMxMzYzNDJlMzMzNzJlMzIzMzMxMmUzMDJmMzIz NDJkMzIzNDIwM2QzZTIwMzEzNTMyMzgzNjM4LnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQApCXnMA0GCSqG SIb3DQEBCwUAA4IBAQCE8Z4jqfkp3EtoCmWCj/ip71xlg6lQIO6KJmr+cEyioxF/ 52z8qBoHWvPw/r0hdIZ0ovRc3qe9d8+38UbBSeivxieRsUkyqdW19x5805mH6MzJ fEEMy8DPPTKxYCU6dDPn6pSWizxqzAfWphxacSPB3m8aOTTU+mRjf04MeF2s4lFD ci0vIe1yzOd/UUSNJJETA8FzygPOrMvnFQ01cUsQuIhMoG2puyiW1MiVzopkVqVu 0fh5GGcBJQNj9rvLavRuHxY04DPBbTl8zwGCophx22xt2OWS6QQSkTwfRCdEbbQF zRVpjAO0PHUEakNjMBcGuLiUcwb53ZjOj+qSRvuO -----END CERTIFICATE-----Generated at Sat Oct 24 11:06:08 2026 by rpki-client