$ rpki-client -vvvf r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/3136342e33372e3233342e302f32342d3234203d3e2039303039.roa File: 3136342e33372e3233342e302f32342d3234203d3e2039303039.roa (raw, json) Hash identifier: zzulXpAfYgXsJ29yHYNrcQOB128nDJeDXKMxOwjaV5Q= Subject key identifier: B5:4B:B3:0A:1C:F4:02:B3:77:89:C5:7D:E6:42:F2:9C:D5:18:31:2D Certificate issuer: /CN=B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5 Certificate serial: 265DA76479757CCAD0B5CEDD9F70E08E8CEA5E5B Authority key identifier: B3:54:D3:28:CB:BF:D1:EF:3C:D2:92:68:A2:3B:0F:CC:60:E3:A2:C5 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.cer Subject info access: rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/3136342e33372e3233342e302f32342d3234203d3e2039303039.roa Signing time: Mon 12 Oct 2026 00:02:10 +0000 ROA not before: Sun 11 Oct 2026 23:57:10 +0000 ROA not after: Mon 11 Oct 2027 00:02:10 +0000 asID: 9009 IP address blocks: 164.37.234.0/24 maxlen: 24 Validation: OK Signature path: rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.crl rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.mft rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.cer rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/D0A516B50426202A424F0EBFCB7D2BD4F744F964.crl rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/D0A516B50426202A424F0EBFCB7D2BD4F744F964.mft rsync://rpki.ripe.net/repository/DEFAULT/0KUWtQQmICpCTw6_y30r1PdE-WQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 19 Oct 2026 02:51:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 26:5d:a7:64:79:75:7c:ca:d0:b5:ce:dd:9f:70:e0:8e:8c:ea:5e:5b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5 Validity Not Before: Oct 11 23:57:10 2026 GMT Not After : Oct 11 00:02:10 2027 GMT Subject: CN=B54BB30A1CF402B37789C57DE642F29CD518312D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:08:84:2c:bb:d5:fc:5c:ff:0b:9e:83:d4:cf: 2e:eb:21:4e:6e:ac:23:ce:a1:70:0c:dd:68:24:7b: f1:b9:cd:f1:2f:73:bc:d8:f3:07:e7:6a:cc:e9:4e: e1:fe:d8:4a:75:dc:94:e1:96:fe:a8:59:0f:fa:e5: 19:eb:bd:81:6a:12:76:47:79:ac:f9:65:a5:54:63: 83:c9:ca:15:ba:ff:13:6f:c6:83:2e:ac:a4:af:4f: aa:a1:4b:ae:dc:db:33:1e:7d:56:a7:b1:56:5f:ac: 83:39:4b:c3:08:31:31:0e:dc:d5:bd:2b:82:3d:5a: fd:cf:9a:12:51:87:bf:87:04:18:ef:ab:00:e6:97: ea:55:eb:7f:c8:bf:39:fe:b4:fc:03:e5:aa:c8:d6: 06:73:f0:9f:00:1e:bb:de:7d:11:11:ab:65:52:a9: 9e:fd:4f:eb:49:af:a8:2a:09:d6:67:6a:92:a3:6f: 80:67:7a:df:8e:74:39:ff:d6:86:c5:c6:66:68:9c: 45:88:ca:15:66:d8:bf:b4:bf:fd:08:3a:85:ed:b2: ff:4c:d6:de:dc:fe:ae:f1:d5:2e:1c:ca:32:7c:0b: 20:f1:c9:08:47:5d:1d:ff:16:e9:af:6b:5d:a9:bd: f9:19:17:54:58:33:12:34:1c:3e:95:2e:8c:f7:2f: 7f:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:4B:B3:0A:1C:F4:02:B3:77:89:C5:7D:E6:42:F2:9C:D5:18:31:2D X509v3 Authority Key Identifier: keyid:B3:54:D3:28:CB:BF:D1:EF:3C:D2:92:68:A2:3B:0F:CC:60:E3:A2:C5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.cer Subject Information Access: Signed Object - URI:rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/3136342e33372e3233342e302f32342d3234203d3e2039303039.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 164.37.234.0/24 Signature Algorithm: sha256WithRSAEncryption 2e:f6:f1:54:28:33:76:25:a6:88:2b:f6:cc:20:67:7f:89:29: 9f:ec:42:03:0d:66:cd:bb:0b:8b:e0:b7:4c:9c:f0:ec:cf:51: a5:0c:62:0e:3c:e9:84:8d:61:75:46:32:3c:3b:89:4c:f0:d7: 72:5f:9f:b7:db:20:70:d4:bd:c3:ab:6d:5b:1f:b7:0b:e5:b3: f3:a0:90:36:c2:0b:ce:f7:0e:f9:89:6c:8b:48:f8:31:0c:9e: fe:11:71:a1:88:a1:4f:30:da:45:76:0b:79:12:17:b6:0e:3d: a2:25:72:6f:08:00:0d:6c:43:42:14:d4:34:42:7b:7c:9c:55: 1c:c0:e6:bd:87:b0:12:2a:3e:f8:08:9f:8b:97:78:26:d0:48: 4e:21:69:96:83:8d:87:c7:fb:09:85:57:64:0a:61:ff:3d:24: 1e:df:c7:46:c7:e6:e4:31:f5:e5:b7:c9:fe:06:fa:b1:e9:1d: 51:10:05:55:68:f7:33:81:28:76:b5:96:1a:9b:22:10:3c:ef: 26:09:98:66:4c:be:b4:7e:4f:9b:37:94:aa:fa:f1:5a:4e:37: fa:ee:41:f0:a8:cf:0f:6a:f9:9e:1d:32:21:0a:e8:d2:6c:f0: 44:f1:08:a4:c0:d8:01:45:fe:64:e9:94:8f:d6:ba:d8:72:1c: 7a:d0:66:61 -----BEGIN CERTIFICATE----- MIIFVjCCBD6gAwIBAgIUJl2nZHl1fMrQtc7dn3DgjozqXlswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjM1NEQzMjhDQkJGRDFFRjNDRDI5MjY4QTIzQjBGQ0M2 MEUzQTJDNTAeFw0yNjEwMTEyMzU3MTBaFw0yNzEwMTEwMDAyMTBaMDMxMTAvBgNV BAMTKEI1NEJCMzBBMUNGNDAyQjM3Nzg5QzU3REU2NDJGMjlDRDUxODMxMkQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDDCIQsu9X8XP8LnoPUzy7rIU5u rCPOoXAM3Wgke/G5zfEvc7zY8wfnaszpTuH+2Ep13JThlv6oWQ/65RnrvYFqEnZH eaz5ZaVUY4PJyhW6/xNvxoMurKSvT6qhS67c2zMefVansVZfrIM5S8MIMTEO3NW9 K4I9Wv3PmhJRh7+HBBjvqwDml+pV63/Ivzn+tPwD5arI1gZz8J8AHrvefRERq2VS qZ79T+tJr6gqCdZnapKjb4Bnet+OdDn/1obFxmZonEWIyhVm2L+0v/0IOoXtsv9M 1t7c/q7x1S4cyjJ8CyDxyQhHXR3/Fumva12pvfkZF1RYMxI0HD6VLoz3L39DAgMB AAGjggJgMIICXDAdBgNVHQ4EFgQUtUuzChz0ArN3icV95kLynNUYMS0wHwYDVR0j BBgwFoAUs1TTKMu/0e880pJoojsPzGDjosUwDgYDVR0PAQH/BAQDAgeAMIGIBgNV HR8EgYAwfjB8oHqgeIZ2cnN5bmM6Ly9yLm1hZ2VsbGFuLmlweG8uY29tL3JlcG8v YTAzNzViMzktZjk0OS00Y2I1LWI1MTktZjk0MDA4YjE2NTRjLTAvMC9CMzU0RDMy OENCQkZEMUVGM0NEMjkyNjhBMjNCMEZDQzYwRTNBMkM1LmNybDCBngYIKwYBBQUH AQEEgZEwgY4wgYsGCCsGAQUFBzAChn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5y aXBlLm5ldC9yZXBvc2l0b3J5LzYxNzA4YTZiLTZjM2EtNDBhMC1hMzAyLTU5NWVj YzE3ODQ4Yy8wL0IzNTREMzI4Q0JCRkQxRUYzQ0QyOTI2OEEyM0IwRkNDNjBFM0Ey QzUuY2VyMIGiBggrBgEFBQcBCwSBlTCBkjCBjwYIKwYBBQUHMAuGgYJyc3luYzov L3IubWFnZWxsYW4uaXB4by5jb20vcmVwby9hMDM3NWIzOS1mOTQ5LTRjYjUtYjUx OS1mOTQwMDhiMTY1NGMtMC8wLzMxMzYzNDJlMzMzNzJlMzIzMzM0MmUzMDJmMzIz NDJkMzIzNDIwM2QzZTIwMzkzMDMwMzkucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYB BQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBACkJeowDQYJKoZIhvcN AQELBQADggEBAC728VQoM3Ylpogr9swgZ3+JKZ/sQgMNZs27C4vgt0yc8OzPUaUM Yg486YSNYXVGMjw7iUzw13Jfn7fbIHDUvcOrbVsftwvls/OgkDbCC873DvmJbItI +DEMnv4RcaGIoU8w2kV2C3kSF7YOPaIlcm8IAA1sQ0IU1DRCe3ycVRzA5r2HsBIq PvgIn4uXeCbQSE4haZaDjYfH+wmFV2QKYf89JB7fx0bH5uQx9eW3yf4G+rHpHVEQ BVVo9zOBKHa1lhqbIhA87yYJmGZMvrR+T5s3lKr68VpON/ruQfCozw9q+Z4dMiEK 6NJs8ETxCKTA2AFF/mTplI/WuthyHHrQZmE= -----END CERTIFICATE-----Generated at Sun Oct 18 20:59:35 2026 by rpki-client