$ rpki-client -vvvf r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/3136342e33372e3233342e302f32342d3234203d3e20323139303233.roa File: 3136342e33372e3233342e302f32342d3234203d3e20323139303233.roa (raw, json) Hash identifier: iXG+p+vISkkVxlYL802V9WfQZiAcxdqiQT8ClLMvAQk= Subject key identifier: BF:41:83:99:CE:CE:30:C9:F1:75:48:0C:BE:DE:FB:31:CA:9D:7A:14 Certificate issuer: /CN=B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5 Certificate serial: 7A8CDA95CF57DE2E4B9EBF74268B3E7ACB01AA47 Authority key identifier: B3:54:D3:28:CB:BF:D1:EF:3C:D2:92:68:A2:3B:0F:CC:60:E3:A2:C5 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.cer Subject info access: rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/3136342e33372e3233342e302f32342d3234203d3e20323139303233.roa Signing time: Fri 21 Aug 2026 06:39:41 +0000 ROA not before: Fri 21 Aug 2026 06:34:41 +0000 ROA not after: Fri 20 Aug 2027 06:39:41 +0000 asID: 219023 IP address blocks: 164.37.234.0/24 maxlen: 24 Validation: OK Signature path: rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.crl rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.mft rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.cer rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/D0A516B50426202A424F0EBFCB7D2BD4F744F964.crl rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/D0A516B50426202A424F0EBFCB7D2BD4F744F964.mft rsync://rpki.ripe.net/repository/DEFAULT/0KUWtQQmICpCTw6_y30r1PdE-WQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 03 Sep 2026 18:02:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7a:8c:da:95:cf:57:de:2e:4b:9e:bf:74:26:8b:3e:7a:cb:01:aa:47 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5 Validity Not Before: Aug 21 06:34:41 2026 GMT Not After : Aug 20 06:39:41 2027 GMT Subject: CN=BF418399CECE30C9F175480CBEDEFB31CA9D7A14 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:12:ca:2d:b8:57:b8:1c:55:ca:f7:7d:34:84: 98:ae:ad:93:ad:70:d2:67:4a:7a:35:d5:3e:39:58: dc:24:cf:8e:0f:37:16:ad:6b:ec:21:d2:26:9a:fc: 6e:4e:b4:9c:19:3e:ad:17:44:be:4d:ec:3c:8e:4f: c5:1b:37:fb:f2:bb:93:29:bc:2a:e3:c4:4d:45:6c: e5:9d:ca:cd:38:0a:02:08:25:ae:8f:ca:14:09:d3: 27:9f:3c:3f:f1:8f:05:60:c5:da:54:8b:ce:f3:98: 69:46:b7:62:5f:e5:64:98:ef:8b:15:17:cf:e2:bd: d0:6a:5b:1a:b9:9a:ca:b0:72:24:7b:6f:8e:78:ec: 6f:a0:65:f4:ff:3c:4d:94:82:cd:0c:0d:78:ba:d8: f0:25:68:74:75:1b:49:d9:85:76:8f:9a:0b:d2:66: 97:d4:b0:21:c5:0d:1e:94:df:95:f5:b3:58:35:1a: 57:6e:6a:e8:fa:e5:a4:7f:13:13:39:e4:2a:d9:55: 0c:34:d6:c8:28:3b:60:a6:f2:60:9c:e7:d7:5a:f5: fa:fd:9f:d4:37:39:d5:66:e2:1e:a3:d5:91:78:33: 70:85:01:48:98:7f:01:7f:1e:d3:58:63:55:98:bd: a4:80:87:f0:6a:b3:61:81:6f:65:09:8a:ec:ef:7d: 3f:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:41:83:99:CE:CE:30:C9:F1:75:48:0C:BE:DE:FB:31:CA:9D:7A:14 X509v3 Authority Key Identifier: keyid:B3:54:D3:28:CB:BF:D1:EF:3C:D2:92:68:A2:3B:0F:CC:60:E3:A2:C5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.cer Subject Information Access: Signed Object - URI:rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/3136342e33372e3233342e302f32342d3234203d3e20323139303233.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 164.37.234.0/24 Signature Algorithm: sha256WithRSAEncryption 11:62:2b:18:cd:ff:3a:e5:f5:8f:b2:94:16:f7:71:82:f6:10: fb:96:7c:4e:f1:1a:90:c3:fa:63:2e:29:c1:f5:dc:49:19:81: 94:ea:13:3b:86:08:5d:6e:14:ca:67:a3:22:bd:ca:f9:18:b8: c4:d2:3a:08:c1:81:a7:f4:d6:17:d8:f6:e3:25:7c:b6:e1:94: 1a:15:5e:71:e9:86:c4:55:a9:d0:41:89:a8:4f:17:4e:6b:ca: 36:94:d6:ea:fc:22:d6:40:dd:f6:bd:17:78:19:91:95:d7:ae: c5:48:21:b2:16:a0:03:75:dc:96:2f:34:8b:1e:a2:32:8d:7c: 50:67:79:38:5c:4c:72:7e:86:71:15:cd:60:2d:24:ce:4f:08: 4a:97:a4:b4:b3:16:f9:c5:b7:dc:63:90:a9:a3:14:82:0f:2f: 25:3f:2a:99:70:e0:98:06:c0:45:d2:93:ad:79:0c:42:54:00: 06:bc:e0:ab:c4:e1:3b:1e:fd:b4:96:a3:01:7f:83:85:62:22: 45:c3:ae:f7:74:9a:80:77:c2:45:d4:87:b3:d4:6b:eb:34:39: 78:29:31:08:ae:9c:26:19:d4:09:33:12:17:7b:5d:f8:d4:80: e1:42:c2:01:63:49:7e:58:0f:50:b3:ba:45:c8:88:7d:e4:21: a6:55:84:91 -----BEGIN CERTIFICATE----- MIIFWjCCBEKgAwIBAgIUeozalc9X3i5Lnr90Jos+essBqkcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjM1NEQzMjhDQkJGRDFFRjNDRDI5MjY4QTIzQjBGQ0M2 MEUzQTJDNTAeFw0yNjA4MjEwNjM0NDFaFw0yNzA4MjAwNjM5NDFaMDMxMTAvBgNV BAMTKEJGNDE4Mzk5Q0VDRTMwQzlGMTc1NDgwQ0JFREVGQjMxQ0E5RDdBMTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCgEsotuFe4HFXK9300hJiurZOt cNJnSno11T45WNwkz44PNxata+wh0iaa/G5OtJwZPq0XRL5N7DyOT8UbN/vyu5Mp vCrjxE1FbOWdys04CgIIJa6PyhQJ0yefPD/xjwVgxdpUi87zmGlGt2Jf5WSY74sV F8/ivdBqWxq5msqwciR7b4547G+gZfT/PE2Ugs0MDXi62PAlaHR1G0nZhXaPmgvS ZpfUsCHFDR6U35X1s1g1Glduauj65aR/ExM55CrZVQw01sgoO2Cm8mCc59da9fr9 n9Q3OdVm4h6j1ZF4M3CFAUiYfwF/HtNYY1WYvaSAh/Bqs2GBb2UJiuzvfT/LAgMB AAGjggJkMIICYDAdBgNVHQ4EFgQUv0GDmc7OMMnxdUgMvt77McqdehQwHwYDVR0j BBgwFoAUs1TTKMu/0e880pJoojsPzGDjosUwDgYDVR0PAQH/BAQDAgeAMIGIBgNV HR8EgYAwfjB8oHqgeIZ2cnN5bmM6Ly9yLm1hZ2VsbGFuLmlweG8uY29tL3JlcG8v YTAzNzViMzktZjk0OS00Y2I1LWI1MTktZjk0MDA4YjE2NTRjLTAvMC9CMzU0RDMy OENCQkZEMUVGM0NEMjkyNjhBMjNCMEZDQzYwRTNBMkM1LmNybDCBngYIKwYBBQUH AQEEgZEwgY4wgYsGCCsGAQUFBzAChn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5y aXBlLm5ldC9yZXBvc2l0b3J5LzYxNzA4YTZiLTZjM2EtNDBhMC1hMzAyLTU5NWVj YzE3ODQ4Yy8wL0IzNTREMzI4Q0JCRkQxRUYzQ0QyOTI2OEEyM0IwRkNDNjBFM0Ey QzUuY2VyMIGmBggrBgEFBQcBCwSBmTCBljCBkwYIKwYBBQUHMAuGgYZyc3luYzov L3IubWFnZWxsYW4uaXB4by5jb20vcmVwby9hMDM3NWIzOS1mOTQ5LTRjYjUtYjUx OS1mOTQwMDhiMTY1NGMtMC8wLzMxMzYzNDJlMzMzNzJlMzIzMzM0MmUzMDJmMzIz NDJkMzIzNDIwM2QzZTIwMzIzMTM5MzAzMjMzLnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQApCXqMA0GCSqG SIb3DQEBCwUAA4IBAQARYisYzf865fWPspQW93GC9hD7lnxO8RqQw/pjLinB9dxJ GYGU6hM7hghdbhTKZ6Mivcr5GLjE0joIwYGn9NYX2PbjJXy24ZQaFV5x6YbEVanQ QYmoTxdOa8o2lNbq/CLWQN32vRd4GZGV167FSCGyFqADddyWLzSLHqIyjXxQZ3k4 XExyfoZxFc1gLSTOTwhKl6S0sxb5xbfcY5CpoxSCDy8lPyqZcOCYBsBF0pOteQxC VAAGvOCrxOE7Hv20lqMBf4OFYiJFw673dJqAd8JF1Iez1GvrNDl4KTEIrpwmGdQJ MxIXe1341IDhQsIBY0l+WA9Qs7pFyIh95CGmVYSR -----END CERTIFICATE-----Generated at Thu Sep 3 08:28:58 2026 by rpki-client