$ rpki-client -vvvf r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/3136342e33372e3233372e302f32342d3234203d3e203432393534.roa File: 3136342e33372e3233372e302f32342d3234203d3e203432393534.roa (raw, json) Hash identifier: oK5jGbwUkKsr74uo0n9Jd9QWP6+UYuOPYl74EN5K+CA= Subject key identifier: F4:0B:C9:5E:92:69:6D:DA:07:53:5C:26:16:06:89:9D:D5:3D:21:0D Certificate issuer: /CN=B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5 Certificate serial: 4CE937D5EECBFEACFF24810019D3B55B4CDD8D4B Authority key identifier: B3:54:D3:28:CB:BF:D1:EF:3C:D2:92:68:A2:3B:0F:CC:60:E3:A2:C5 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.cer Subject info access: rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/3136342e33372e3233372e302f32342d3234203d3e203432393534.roa Signing time: Tue 01 Sep 2026 06:00:19 +0000 ROA not before: Tue 01 Sep 2026 05:55:19 +0000 ROA not after: Tue 31 Aug 2027 06:00:19 +0000 asID: 42954 IP address blocks: 164.37.237.0/24 maxlen: 24 Validation: OK Signature path: rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.crl rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.mft rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.cer rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/D0A516B50426202A424F0EBFCB7D2BD4F744F964.crl rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/D0A516B50426202A424F0EBFCB7D2BD4F744F964.mft rsync://rpki.ripe.net/repository/DEFAULT/0KUWtQQmICpCTw6_y30r1PdE-WQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 03 Sep 2026 18:02:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4c:e9:37:d5:ee:cb:fe:ac:ff:24:81:00:19:d3:b5:5b:4c:dd:8d:4b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5 Validity Not Before: Sep 1 05:55:19 2026 GMT Not After : Aug 31 06:00:19 2027 GMT Subject: CN=F40BC95E92696DDA07535C261606899DD53D210D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:3e:fb:b3:dd:e2:96:0a:93:f2:01:78:f7:27: 71:c8:d9:5f:e4:3b:15:98:97:34:34:b4:36:d2:42: 21:e2:83:cf:44:0a:7f:da:1b:26:89:53:7f:cb:72: 36:45:da:84:58:ba:58:5f:3e:ca:03:f2:17:bf:4c: b4:d8:d5:4d:a9:c5:ea:da:81:d1:e5:7d:ab:81:c0: 6a:aa:68:b1:90:cf:17:4e:b9:98:e6:a2:ab:8a:de: 35:be:41:dc:1b:07:cb:2f:fb:3e:ba:7e:6f:35:38: 53:82:ac:f2:9b:f4:7e:ad:7e:5a:49:1d:49:55:7b: 43:a8:1e:e0:aa:db:66:c9:1f:6e:d7:5d:13:ce:2b: 04:fd:f5:ce:34:8f:f0:62:a9:3f:4f:d1:11:b3:2b: d1:60:a4:af:da:ec:00:c1:f2:d5:fe:2c:21:a7:ab: 2c:02:30:66:f6:3d:f5:3f:2a:57:39:5c:dd:75:90: 90:71:be:bd:d2:bd:75:c2:04:4d:c9:02:fd:25:4b: f8:f9:77:2e:a7:93:ce:a2:85:64:fa:5c:b3:fe:e3: 8e:b0:ca:23:4f:a8:20:3a:e3:b6:75:8d:c0:61:74: 2e:51:7b:af:a7:84:18:e8:27:20:43:97:f7:f1:e4: 57:9a:dc:aa:24:02:a4:67:21:ba:bc:c2:bf:b3:cc: b0:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:0B:C9:5E:92:69:6D:DA:07:53:5C:26:16:06:89:9D:D5:3D:21:0D X509v3 Authority Key Identifier: keyid:B3:54:D3:28:CB:BF:D1:EF:3C:D2:92:68:A2:3B:0F:CC:60:E3:A2:C5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.cer Subject Information Access: Signed Object - URI:rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/3136342e33372e3233372e302f32342d3234203d3e203432393534.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 164.37.237.0/24 Signature Algorithm: sha256WithRSAEncryption 22:d4:cc:a0:34:0e:4a:d1:bd:ca:a4:5e:63:62:9f:a3:90:d9: 1c:94:e4:30:43:80:bc:3a:98:6d:af:51:6c:41:91:45:a6:6d: f0:2a:38:0a:20:4d:80:ca:8f:f4:9a:d4:7d:74:df:9d:6f:a5: 19:00:2a:fc:28:d9:35:ff:dc:c5:c6:ce:fd:60:da:e2:4e:1d: b2:1a:87:87:a7:51:4a:1e:44:b0:45:60:69:01:12:50:cf:90: 30:9d:75:bd:ab:3c:a2:bb:c8:e3:92:8d:69:8e:99:19:87:eb: 74:1b:50:52:63:41:14:d6:27:ab:1c:a1:b4:ef:cd:2b:50:04: 4d:23:9f:bb:03:eb:94:13:cc:e1:e1:d9:30:5c:c9:a9:dd:9d: 51:fe:a8:1f:db:ab:e6:e1:5c:54:d4:6b:53:17:c1:38:83:19: 04:d6:13:06:14:04:11:84:8b:8a:0c:18:ae:cb:03:c9:7b:9c: a0:8f:fe:ff:be:7e:13:72:ec:72:41:3e:71:4f:e7:c4:8f:a3: a2:ed:19:da:a2:2c:34:9f:5e:38:23:86:5a:fc:95:7b:35:15: 10:85:9d:4d:78:27:d8:31:a4:d2:9a:4a:ad:9c:a0:6b:d9:41: ff:31:16:40:ae:25:1b:63:ec:d6:9e:be:c4:8f:82:eb:df:e4: 2a:8f:b0:94 -----BEGIN CERTIFICATE----- MIIFWDCCBECgAwIBAgIUTOk31e7L/qz/JIEAGdO1W0zdjUswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjM1NEQzMjhDQkJGRDFFRjNDRDI5MjY4QTIzQjBGQ0M2 MEUzQTJDNTAeFw0yNjA5MDEwNTU1MTlaFw0yNzA4MzEwNjAwMTlaMDMxMTAvBgNV BAMTKEY0MEJDOTVFOTI2OTZEREEwNzUzNUMyNjE2MDY4OTlERDUzRDIxMEQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCcPvuz3eKWCpPyAXj3J3HI2V/k OxWYlzQ0tDbSQiHig89ECn/aGyaJU3/LcjZF2oRYulhfPsoD8he/TLTY1U2pxera gdHlfauBwGqqaLGQzxdOuZjmoquK3jW+QdwbB8sv+z66fm81OFOCrPKb9H6tflpJ HUlVe0OoHuCq22bJH27XXRPOKwT99c40j/BiqT9P0RGzK9FgpK/a7ADB8tX+LCGn qywCMGb2PfU/Klc5XN11kJBxvr3SvXXCBE3JAv0lS/j5dy6nk86ihWT6XLP+446w yiNPqCA647Z1jcBhdC5Re6+nhBjoJyBDl/fx5Fea3KokAqRnIbq8wr+zzLCtAgMB AAGjggJiMIICXjAdBgNVHQ4EFgQU9AvJXpJpbdoHU1wmFgaJndU9IQ0wHwYDVR0j BBgwFoAUs1TTKMu/0e880pJoojsPzGDjosUwDgYDVR0PAQH/BAQDAgeAMIGIBgNV HR8EgYAwfjB8oHqgeIZ2cnN5bmM6Ly9yLm1hZ2VsbGFuLmlweG8uY29tL3JlcG8v YTAzNzViMzktZjk0OS00Y2I1LWI1MTktZjk0MDA4YjE2NTRjLTAvMC9CMzU0RDMy OENCQkZEMUVGM0NEMjkyNjhBMjNCMEZDQzYwRTNBMkM1LmNybDCBngYIKwYBBQUH AQEEgZEwgY4wgYsGCCsGAQUFBzAChn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5y aXBlLm5ldC9yZXBvc2l0b3J5LzYxNzA4YTZiLTZjM2EtNDBhMC1hMzAyLTU5NWVj YzE3ODQ4Yy8wL0IzNTREMzI4Q0JCRkQxRUYzQ0QyOTI2OEEyM0IwRkNDNjBFM0Ey QzUuY2VyMIGkBggrBgEFBQcBCwSBlzCBlDCBkQYIKwYBBQUHMAuGgYRyc3luYzov L3IubWFnZWxsYW4uaXB4by5jb20vcmVwby9hMDM3NWIzOS1mOTQ5LTRjYjUtYjUx OS1mOTQwMDhiMTY1NGMtMC8wLzMxMzYzNDJlMzMzNzJlMzIzMzM3MmUzMDJmMzIz NDJkMzIzNDIwM2QzZTIwMzQzMjM5MzUzNC5yb2EwGAYDVR0gAQH/BA4wDDAKBggr BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAKQl7TANBgkqhkiG 9w0BAQsFAAOCAQEAItTMoDQOStG9yqReY2Kfo5DZHJTkMEOAvDqYba9RbEGRRaZt 8Co4CiBNgMqP9JrUfXTfnW+lGQAq/CjZNf/cxcbO/WDa4k4dshqHh6dRSh5EsEVg aQESUM+QMJ11vas8orvI45KNaY6ZGYfrdBtQUmNBFNYnqxyhtO/NK1AETSOfuwPr lBPM4eHZMFzJqd2dUf6oH9ur5uFcVNRrUxfBOIMZBNYTBhQEEYSLigwYrssDyXuc oI/+/75+E3LsckE+cU/nxI+jou0Z2qIsNJ9eOCOGWvyVezUVEIWdTXgn2DGk0ppK rZyga9lB/zEWQK4lG2Ps1p6+xI+C69/kKo+wlA== -----END CERTIFICATE-----Generated at Thu Sep 3 08:29:00 2026 by rpki-client