$ rpki-client -vvvf r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/3136342e33372e3233352e302f32342d3234203d3e2039333034.roa File: 3136342e33372e3233352e302f32342d3234203d3e2039333034.roa (raw, json) Hash identifier: dQ656+BjtjvjKAwjZYLH0K0z2Cgbgd4J0DsaZ0WS88k= Subject key identifier: F8:F4:39:08:F8:E8:05:C5:8A:E5:3A:2A:2F:B1:AD:D1:EF:2D:FA:A7 Certificate issuer: /CN=B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5 Certificate serial: 29FE5EA7CBDBFF8643B559A9C1F8178DF5AEE11F Authority key identifier: B3:54:D3:28:CB:BF:D1:EF:3C:D2:92:68:A2:3B:0F:CC:60:E3:A2:C5 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.cer Subject info access: rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/3136342e33372e3233352e302f32342d3234203d3e2039333034.roa Signing time: Mon 12 Oct 2026 00:02:09 +0000 ROA not before: Sun 11 Oct 2026 23:57:09 +0000 ROA not after: Mon 11 Oct 2027 00:02:09 +0000 asID: 9304 IP address blocks: 164.37.235.0/24 maxlen: 24 Validation: OK Signature path: rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.crl rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.mft rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.cer rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/D0A516B50426202A424F0EBFCB7D2BD4F744F964.crl rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/D0A516B50426202A424F0EBFCB7D2BD4F744F964.mft rsync://rpki.ripe.net/repository/DEFAULT/0KUWtQQmICpCTw6_y30r1PdE-WQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 18 Oct 2026 05:00:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 29:fe:5e:a7:cb:db:ff:86:43:b5:59:a9:c1:f8:17:8d:f5:ae:e1:1f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5 Validity Not Before: Oct 11 23:57:09 2026 GMT Not After : Oct 11 00:02:09 2027 GMT Subject: CN=F8F43908F8E805C58AE53A2A2FB1ADD1EF2DFAA7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:52:6f:fe:c6:92:83:6c:08:92:2b:0c:1c:eb: a1:96:8e:78:2e:62:5e:17:de:ac:8f:96:5c:e4:d6: 2f:0c:6d:b4:db:f8:12:d4:d9:28:55:8d:cf:96:98: 83:e0:b0:fe:14:f5:e9:05:91:a0:f4:f6:90:93:cf: a4:ca:a5:97:31:c2:d2:2d:b2:62:90:45:15:a6:0f: 72:8d:3a:9d:06:36:10:5a:5e:80:60:ac:44:7b:e2: fe:12:33:51:ee:19:a0:47:88:93:fd:3a:5b:b2:fa: 67:a9:d3:70:7a:40:1e:02:62:c3:4c:ad:91:42:8d: 7d:a3:49:64:c7:3d:9b:c9:17:04:16:42:30:fd:1e: 25:8a:22:5b:f1:32:18:6d:a7:db:4f:00:31:f3:82: 2a:fc:1f:bc:f0:36:c7:53:b1:85:ba:b0:77:dd:61: 58:c2:a6:9f:c8:e3:7d:bf:cc:d5:55:79:25:63:72: 5c:cd:ea:4a:c0:53:2b:e5:ab:3b:72:e6:c7:a3:18: dd:82:4b:99:32:1d:18:18:07:f3:c9:47:88:33:3f: 72:30:a4:17:d1:33:ed:87:97:a0:5d:88:1b:80:fe: 20:f1:ea:df:87:73:fd:cb:1f:0a:a3:d9:b5:f2:8b: 5a:c3:4f:35:6e:a9:e8:43:f3:86:e0:e1:b3:6f:2e: 77:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:F4:39:08:F8:E8:05:C5:8A:E5:3A:2A:2F:B1:AD:D1:EF:2D:FA:A7 X509v3 Authority Key Identifier: keyid:B3:54:D3:28:CB:BF:D1:EF:3C:D2:92:68:A2:3B:0F:CC:60:E3:A2:C5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.cer Subject Information Access: Signed Object - URI:rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/3136342e33372e3233352e302f32342d3234203d3e2039333034.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 164.37.235.0/24 Signature Algorithm: sha256WithRSAEncryption 41:a9:8a:01:62:89:b5:4b:1c:6b:13:71:b5:ed:40:4e:2e:c4: f9:61:bd:60:a6:60:19:ea:7b:8b:ef:72:e1:22:ed:4d:1c:fa: ae:7d:9c:eb:b5:7e:67:e8:05:2c:46:a1:cb:59:74:71:2e:a2: 14:80:69:5f:bb:4a:dd:b5:69:85:00:13:5b:28:e5:a2:4a:b0: 60:ed:3c:50:9b:84:ea:c1:cd:25:3e:4a:d3:51:2f:46:2a:e0: 2a:a4:62:b6:d0:e6:84:90:07:dd:55:16:f4:51:75:d9:49:0c: 45:7a:f8:f3:cf:6b:07:c0:f6:54:f5:35:c1:6d:98:74:ce:6f: 26:a0:08:20:b3:d6:d1:78:e4:3f:c2:42:7e:cc:98:68:1c:56: ef:94:c8:0d:8e:2d:68:84:88:e5:6a:9a:d9:0c:40:12:e1:d6: eb:53:f5:86:6d:86:43:79:65:e3:7d:a9:75:f3:05:2b:a6:a6: 49:aa:df:d6:75:03:cf:2e:bc:a0:0b:f2:09:91:a2:ce:6e:95: 42:4f:e4:be:04:d1:74:bd:e4:0b:82:db:3c:7b:f0:ad:fb:14: e1:d8:d4:48:ff:e7:5f:9c:18:6e:4c:91:f3:30:10:0b:a0:5c: b6:f1:81:4e:35:94:e8:b7:fc:3d:e6:1e:3f:3e:31:0d:4b:b3: 0f:40:df:39 -----BEGIN CERTIFICATE----- MIIFVjCCBD6gAwIBAgIUKf5ep8vb/4ZDtVmpwfgXjfWu4R8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjM1NEQzMjhDQkJGRDFFRjNDRDI5MjY4QTIzQjBGQ0M2 MEUzQTJDNTAeFw0yNjEwMTEyMzU3MDlaFw0yNzEwMTEwMDAyMDlaMDMxMTAvBgNV BAMTKEY4RjQzOTA4RjhFODA1QzU4QUU1M0EyQTJGQjFBREQxRUYyREZBQTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCaUm/+xpKDbAiSKwwc66GWjngu Yl4X3qyPllzk1i8MbbTb+BLU2ShVjc+WmIPgsP4U9ekFkaD09pCTz6TKpZcxwtIt smKQRRWmD3KNOp0GNhBaXoBgrER74v4SM1HuGaBHiJP9Oluy+mep03B6QB4CYsNM rZFCjX2jSWTHPZvJFwQWQjD9HiWKIlvxMhhtp9tPADHzgir8H7zwNsdTsYW6sHfd YVjCpp/I432/zNVVeSVjclzN6krAUyvlqzty5sejGN2CS5kyHRgYB/PJR4gzP3Iw pBfRM+2Hl6BdiBuA/iDx6t+Hc/3LHwqj2bXyi1rDTzVuqehD84bg4bNvLnc9AgMB AAGjggJgMIICXDAdBgNVHQ4EFgQU+PQ5CPjoBcWK5ToqL7Gt0e8t+qcwHwYDVR0j BBgwFoAUs1TTKMu/0e880pJoojsPzGDjosUwDgYDVR0PAQH/BAQDAgeAMIGIBgNV HR8EgYAwfjB8oHqgeIZ2cnN5bmM6Ly9yLm1hZ2VsbGFuLmlweG8uY29tL3JlcG8v YTAzNzViMzktZjk0OS00Y2I1LWI1MTktZjk0MDA4YjE2NTRjLTAvMC9CMzU0RDMy OENCQkZEMUVGM0NEMjkyNjhBMjNCMEZDQzYwRTNBMkM1LmNybDCBngYIKwYBBQUH AQEEgZEwgY4wgYsGCCsGAQUFBzAChn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5y aXBlLm5ldC9yZXBvc2l0b3J5LzYxNzA4YTZiLTZjM2EtNDBhMC1hMzAyLTU5NWVj YzE3ODQ4Yy8wL0IzNTREMzI4Q0JCRkQxRUYzQ0QyOTI2OEEyM0IwRkNDNjBFM0Ey QzUuY2VyMIGiBggrBgEFBQcBCwSBlTCBkjCBjwYIKwYBBQUHMAuGgYJyc3luYzov L3IubWFnZWxsYW4uaXB4by5jb20vcmVwby9hMDM3NWIzOS1mOTQ5LTRjYjUtYjUx OS1mOTQwMDhiMTY1NGMtMC8wLzMxMzYzNDJlMzMzNzJlMzIzMzM1MmUzMDJmMzIz NDJkMzIzNDIwM2QzZTIwMzkzMzMwMzQucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYB BQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBACkJeswDQYJKoZIhvcN AQELBQADggEBAEGpigFiibVLHGsTcbXtQE4uxPlhvWCmYBnqe4vvcuEi7U0c+q59 nOu1fmfoBSxGoctZdHEuohSAaV+7St21aYUAE1so5aJKsGDtPFCbhOrBzSU+StNR L0Yq4CqkYrbQ5oSQB91VFvRRddlJDEV6+PPPawfA9lT1NcFtmHTObyagCCCz1tF4 5D/CQn7MmGgcVu+UyA2OLWiEiOVqmtkMQBLh1utT9YZthkN5ZeN9qXXzBSumpkmq 39Z1A88uvKAL8gmRos5ulUJP5L4E0XS95AuC2zx78K37FOHY1Ej/51+cGG5MkfMw EAugXLbxgU41lOi3/D3mHj8+MQ1Lsw9A3zk= -----END CERTIFICATE-----Generated at Sat Oct 17 12:57:28 2026 by rpki-client