$ rpki-client -vvvf r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/3136342e33372e3233352e302f32342d3234203d3e2039333034.roa File: 3136342e33372e3233352e302f32342d3234203d3e2039333034.roa (raw, json) Hash identifier: OOZ4Bvz5WD+j4dSuWA0rxTFn6nsbeL9bTVUpPR/ulRA= Subject key identifier: 05:E4:22:E2:28:82:0B:B9:52:1A:7B:A4:45:4D:46:01:5B:46:67:06 Certificate issuer: /CN=B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5 Certificate serial: 2D0116E234A31CD68B1534608C98AD0BDD1CF96B Authority key identifier: B3:54:D3:28:CB:BF:D1:EF:3C:D2:92:68:A2:3B:0F:CC:60:E3:A2:C5 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.cer Subject info access: rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/3136342e33372e3233352e302f32342d3234203d3e2039333034.roa Signing time: Sun 23 Aug 2026 08:34:11 +0000 ROA not before: Sun 23 Aug 2026 08:29:11 +0000 ROA not after: Sun 22 Aug 2027 08:34:11 +0000 asID: 9304 IP address blocks: 164.37.235.0/24 maxlen: 24 Validation: OK Signature path: rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.crl rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.mft rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.cer rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/D0A516B50426202A424F0EBFCB7D2BD4F744F964.crl rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/D0A516B50426202A424F0EBFCB7D2BD4F744F964.mft rsync://rpki.ripe.net/repository/DEFAULT/0KUWtQQmICpCTw6_y30r1PdE-WQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 01 Sep 2026 21:38:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2d:01:16:e2:34:a3:1c:d6:8b:15:34:60:8c:98:ad:0b:dd:1c:f9:6b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5 Validity Not Before: Aug 23 08:29:11 2026 GMT Not After : Aug 22 08:34:11 2027 GMT Subject: CN=05E422E228820BB9521A7BA4454D46015B466706 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:1b:b9:6e:63:bf:29:6e:1b:10:16:57:2c:8b: 3a:85:13:6f:b0:d7:d8:b1:9e:f6:00:d3:73:35:2a: 34:5e:03:77:05:76:67:c5:11:fc:c8:39:12:4b:f2: 0c:77:6b:f6:b5:87:f8:d4:73:2c:6c:ac:89:cc:c0: f7:5e:14:12:9d:a4:97:c2:e4:f6:df:93:ed:00:08: ef:5a:5d:48:3f:19:2d:d9:36:4e:a1:51:28:9c:32: 86:24:0c:73:83:4d:69:bd:84:71:99:07:8f:ab:19: 86:7e:a7:7d:4c:79:58:14:e7:e4:37:c7:59:cb:f1: fa:ca:a2:58:07:72:c6:b0:a0:e1:f7:8d:5a:a5:02: 88:04:a4:ca:ce:7b:1a:71:9f:52:e2:4a:3d:82:20: d2:85:c2:25:6b:3e:3e:19:be:c2:cf:0a:d7:7a:c9: b0:e5:49:9c:89:d4:d0:29:d3:c6:28:9c:17:61:a9: 32:de:7c:27:01:62:71:ac:e8:f0:12:50:07:d5:1a: 09:8c:9a:89:40:c5:85:dc:5c:e7:a5:1d:69:a3:b5: 0b:c8:82:ca:df:82:d9:ba:73:9a:20:fa:75:6b:77: b5:9b:6a:d2:6d:47:50:ff:35:66:ef:ea:92:83:e6: 03:f7:37:f9:d7:9a:7f:84:62:c0:8a:61:80:f6:1c: fa:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:E4:22:E2:28:82:0B:B9:52:1A:7B:A4:45:4D:46:01:5B:46:67:06 X509v3 Authority Key Identifier: keyid:B3:54:D3:28:CB:BF:D1:EF:3C:D2:92:68:A2:3B:0F:CC:60:E3:A2:C5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.cer Subject Information Access: Signed Object - URI:rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/3136342e33372e3233352e302f32342d3234203d3e2039333034.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 164.37.235.0/24 Signature Algorithm: sha256WithRSAEncryption 09:7f:71:88:88:c5:a4:ee:ce:30:1c:67:e3:01:ab:1c:5c:00: a4:32:9f:29:5f:e1:fe:5b:bc:ee:86:4e:0d:ca:a8:e0:21:6b: 2f:19:d9:2e:f9:fe:37:b4:2e:a2:1f:23:66:f9:6e:ea:72:1f: 60:ee:2a:2e:b9:4d:9c:00:46:5a:5f:f9:f6:1c:4f:2f:7d:e7: 8e:b1:00:da:f4:b9:3c:5e:25:1f:88:c1:38:4d:e3:bf:89:ea: 7f:03:a8:62:28:5b:7e:cc:91:d8:8e:09:c5:ef:20:22:71:11: d7:72:9b:d1:ee:74:cf:a1:50:d3:1f:b4:4e:f4:a7:1c:78:43: 98:9c:0d:8c:1c:84:ea:d3:17:c1:64:5d:8e:20:6a:a5:9d:ac: 1c:9c:90:7a:f8:b1:7f:4d:33:21:30:48:ff:f7:3e:7d:b8:8a: 8a:68:30:d5:8b:fc:15:7a:b7:6c:e5:6f:d1:f2:9a:a7:dc:83: 83:70:7b:e0:88:99:c1:06:0e:81:67:06:a2:1d:61:d7:15:86: 78:8e:93:d9:a2:e5:fd:3c:58:f3:48:eb:ba:2e:01:ba:b9:82: da:7e:49:64:37:77:70:d3:df:1d:ec:ec:1a:d4:78:4e:b1:41: 64:b5:02:b0:20:33:38:b3:dc:0e:73:15:28:c7:85:c8:37:40: 96:f7:f0:a4 -----BEGIN CERTIFICATE----- MIIFVjCCBD6gAwIBAgIULQEW4jSjHNaLFTRgjJitC90c+WswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjM1NEQzMjhDQkJGRDFFRjNDRDI5MjY4QTIzQjBGQ0M2 MEUzQTJDNTAeFw0yNjA4MjMwODI5MTFaFw0yNzA4MjIwODM0MTFaMDMxMTAvBgNV BAMTKDA1RTQyMkUyMjg4MjBCQjk1MjFBN0JBNDQ1NEQ0NjAxNUI0NjY3MDYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDBG7luY78pbhsQFlcsizqFE2+w 19ixnvYA03M1KjReA3cFdmfFEfzIORJL8gx3a/a1h/jUcyxsrInMwPdeFBKdpJfC 5Pbfk+0ACO9aXUg/GS3ZNk6hUSicMoYkDHODTWm9hHGZB4+rGYZ+p31MeVgU5+Q3 x1nL8frKolgHcsawoOH3jVqlAogEpMrOexpxn1LiSj2CINKFwiVrPj4ZvsLPCtd6 ybDlSZyJ1NAp08YonBdhqTLefCcBYnGs6PASUAfVGgmMmolAxYXcXOelHWmjtQvI gsrfgtm6c5og+nVrd7WbatJtR1D/NWbv6pKD5gP3N/nXmn+EYsCKYYD2HPqpAgMB AAGjggJgMIICXDAdBgNVHQ4EFgQUBeQi4iiCC7lSGnukRU1GAVtGZwYwHwYDVR0j BBgwFoAUs1TTKMu/0e880pJoojsPzGDjosUwDgYDVR0PAQH/BAQDAgeAMIGIBgNV HR8EgYAwfjB8oHqgeIZ2cnN5bmM6Ly9yLm1hZ2VsbGFuLmlweG8uY29tL3JlcG8v YTAzNzViMzktZjk0OS00Y2I1LWI1MTktZjk0MDA4YjE2NTRjLTAvMC9CMzU0RDMy OENCQkZEMUVGM0NEMjkyNjhBMjNCMEZDQzYwRTNBMkM1LmNybDCBngYIKwYBBQUH AQEEgZEwgY4wgYsGCCsGAQUFBzAChn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5y aXBlLm5ldC9yZXBvc2l0b3J5LzYxNzA4YTZiLTZjM2EtNDBhMC1hMzAyLTU5NWVj YzE3ODQ4Yy8wL0IzNTREMzI4Q0JCRkQxRUYzQ0QyOTI2OEEyM0IwRkNDNjBFM0Ey QzUuY2VyMIGiBggrBgEFBQcBCwSBlTCBkjCBjwYIKwYBBQUHMAuGgYJyc3luYzov L3IubWFnZWxsYW4uaXB4by5jb20vcmVwby9hMDM3NWIzOS1mOTQ5LTRjYjUtYjUx OS1mOTQwMDhiMTY1NGMtMC8wLzMxMzYzNDJlMzMzNzJlMzIzMzM1MmUzMDJmMzIz NDJkMzIzNDIwM2QzZTIwMzkzMzMwMzQucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYB BQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBACkJeswDQYJKoZIhvcN AQELBQADggEBAAl/cYiIxaTuzjAcZ+MBqxxcAKQynylf4f5bvO6GTg3KqOAhay8Z 2S75/je0LqIfI2b5bupyH2DuKi65TZwARlpf+fYcTy99546xANr0uTxeJR+IwThN 47+J6n8DqGIoW37MkdiOCcXvICJxEddym9HudM+hUNMftE70pxx4Q5icDYwchOrT F8FkXY4gaqWdrByckHr4sX9NMyEwSP/3Pn24iopoMNWL/BV6t2zlb9Hymqfcg4Nw e+CImcEGDoFnBqIdYdcVhniOk9mi5f08WPNI67ouAbq5gtp+SWQ3d3DT3x3s7BrU eE6xQWS1ArAgMziz3A5zFSjHhcg3QJb38KQ= -----END CERTIFICATE-----Generated at Tue Sep 1 02:08:53 2026 by rpki-client