$ rpki-client -vvvf r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/3136342e33372e3233392e302f32342d3234203d3e20313938353636.roa File: 3136342e33372e3233392e302f32342d3234203d3e20313938353636.roa (raw, json) Hash identifier: NQ+4IIGCs83SZb/XyCyhrxv0TwBtKPywFA2Yio9zaow= Subject key identifier: 83:F9:42:2A:AB:1E:36:87:5A:C8:A7:E2:D5:CA:1E:83:89:07:C3:DC Certificate issuer: /CN=B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5 Certificate serial: 10D203440D5B869186EC54C872966377C6171FD7 Authority key identifier: B3:54:D3:28:CB:BF:D1:EF:3C:D2:92:68:A2:3B:0F:CC:60:E3:A2:C5 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.cer Subject info access: rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/3136342e33372e3233392e302f32342d3234203d3e20313938353636.roa Signing time: Mon 17 Aug 2026 17:30:02 +0000 ROA not before: Mon 17 Aug 2026 17:25:02 +0000 ROA not after: Mon 16 Aug 2027 17:30:02 +0000 asID: 198566 IP address blocks: 164.37.239.0/24 maxlen: 24 Validation: OK Signature path: rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.crl rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.mft rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.cer rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/D0A516B50426202A424F0EBFCB7D2BD4F744F964.crl rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/D0A516B50426202A424F0EBFCB7D2BD4F744F964.mft rsync://rpki.ripe.net/repository/DEFAULT/0KUWtQQmICpCTw6_y30r1PdE-WQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 03 Sep 2026 18:02:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10:d2:03:44:0d:5b:86:91:86:ec:54:c8:72:96:63:77:c6:17:1f:d7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5 Validity Not Before: Aug 17 17:25:02 2026 GMT Not After : Aug 16 17:30:02 2027 GMT Subject: CN=83F9422AAB1E36875AC8A7E2D5CA1E838907C3DC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:4f:eb:1e:de:7a:5d:00:b1:8e:cf:94:83:73: 96:5d:6f:8b:54:c2:ee:70:b6:24:eb:7d:34:91:62: fd:62:ab:27:78:e0:02:0e:19:e0:05:a8:f2:5a:da: 4d:43:1b:3b:72:a4:81:79:42:03:60:84:e5:d8:9d: dc:a9:67:ff:72:0b:c4:d5:8a:1c:70:e2:46:24:98: f2:00:78:d3:6b:da:47:c2:b5:e9:29:c5:23:00:85: 6a:6e:a8:0d:d3:d8:c6:08:70:ce:98:a7:3a:bd:ad: 7e:d7:fa:41:2d:a3:65:3b:53:d3:18:e9:1c:c0:73: 8d:12:25:25:71:c8:f5:81:5e:5c:0c:d8:c2:1e:9f: 2f:72:c3:4d:c9:9c:45:04:01:06:fc:9f:15:f4:b3: e2:3b:ad:48:d3:25:d7:5d:14:5d:78:ec:cf:63:71: 75:6a:38:bd:dd:02:7e:2c:6d:94:57:36:d7:4a:f0: 53:1d:ca:63:08:31:02:6a:57:1b:ad:30:f8:70:ed: b1:70:eb:21:c4:e0:d6:c1:49:e2:8c:58:6b:53:69: d9:52:49:7e:75:46:e5:74:9f:d2:43:8c:83:ee:04: 1f:99:3e:7c:c3:eb:fd:1f:e5:9b:06:d2:46:ed:5d: 92:ec:30:6b:7f:fb:92:16:8a:d9:34:b2:2b:09:9f: 82:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:F9:42:2A:AB:1E:36:87:5A:C8:A7:E2:D5:CA:1E:83:89:07:C3:DC X509v3 Authority Key Identifier: keyid:B3:54:D3:28:CB:BF:D1:EF:3C:D2:92:68:A2:3B:0F:CC:60:E3:A2:C5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.cer Subject Information Access: Signed Object - URI:rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/3136342e33372e3233392e302f32342d3234203d3e20313938353636.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 164.37.239.0/24 Signature Algorithm: sha256WithRSAEncryption 27:79:a0:9a:3c:f0:5b:16:94:f1:e3:10:c4:cb:84:fb:58:9a: 06:5d:d9:95:e7:25:eb:50:28:aa:3c:aa:c3:77:06:7b:6b:0a: 44:5e:33:c6:d7:8a:d0:2c:5c:cb:4a:75:d3:9f:e8:d8:41:5c: c9:b8:7f:25:23:00:18:55:06:5f:58:94:e0:ad:81:28:4f:4f: 6a:74:66:64:d6:0b:08:c7:15:53:d6:db:56:1a:f7:d1:40:5c: e6:56:a8:53:d8:53:b9:2c:e8:46:db:d4:36:3d:fe:03:d7:a3: 88:c7:33:9f:81:00:5f:59:50:14:16:ad:a7:87:43:9c:42:21: 82:65:4c:3a:df:6f:87:b9:b4:4b:3a:6a:a0:52:2d:91:d5:df: d5:bb:7c:fd:01:52:0d:64:c3:06:3d:c7:03:c6:c5:f3:4c:08: e7:fc:05:b4:e2:41:d7:b7:cb:cf:23:e8:ba:c1:f8:57:40:f5: ec:78:c5:91:60:d8:76:92:0d:e9:62:cc:3c:e6:24:1d:66:89: 21:60:81:30:d5:d8:63:63:8a:64:83:b9:fa:d8:15:83:24:31: e1:65:60:7e:d9:c2:15:fe:51:f5:6f:0f:94:78:7f:e6:2c:e6: 09:72:da:20:f0:91:30:7b:7d:5a:f9:2e:88:59:b6:48:1c:bb: fa:a5:f4:b7 -----BEGIN CERTIFICATE----- MIIFWjCCBEKgAwIBAgIUENIDRA1bhpGG7FTIcpZjd8YXH9cwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjM1NEQzMjhDQkJGRDFFRjNDRDI5MjY4QTIzQjBGQ0M2 MEUzQTJDNTAeFw0yNjA4MTcxNzI1MDJaFw0yNzA4MTYxNzMwMDJaMDMxMTAvBgNV BAMTKDgzRjk0MjJBQUIxRTM2ODc1QUM4QTdFMkQ1Q0ExRTgzODkwN0MzREMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCxT+se3npdALGOz5SDc5Zdb4tU wu5wtiTrfTSRYv1iqyd44AIOGeAFqPJa2k1DGztypIF5QgNghOXYndypZ/9yC8TV ihxw4kYkmPIAeNNr2kfCtekpxSMAhWpuqA3T2MYIcM6Ypzq9rX7X+kEto2U7U9MY 6RzAc40SJSVxyPWBXlwM2MIeny9yw03JnEUEAQb8nxX0s+I7rUjTJdddFF147M9j cXVqOL3dAn4sbZRXNtdK8FMdymMIMQJqVxutMPhw7bFw6yHE4NbBSeKMWGtTadlS SX51RuV0n9JDjIPuBB+ZPnzD6/0f5ZsG0kbtXZLsMGt/+5IWitk0sisJn4IJAgMB AAGjggJkMIICYDAdBgNVHQ4EFgQUg/lCKqseNodayKfi1coeg4kHw9wwHwYDVR0j BBgwFoAUs1TTKMu/0e880pJoojsPzGDjosUwDgYDVR0PAQH/BAQDAgeAMIGIBgNV HR8EgYAwfjB8oHqgeIZ2cnN5bmM6Ly9yLm1hZ2VsbGFuLmlweG8uY29tL3JlcG8v YTAzNzViMzktZjk0OS00Y2I1LWI1MTktZjk0MDA4YjE2NTRjLTAvMC9CMzU0RDMy OENCQkZEMUVGM0NEMjkyNjhBMjNCMEZDQzYwRTNBMkM1LmNybDCBngYIKwYBBQUH AQEEgZEwgY4wgYsGCCsGAQUFBzAChn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5y aXBlLm5ldC9yZXBvc2l0b3J5LzYxNzA4YTZiLTZjM2EtNDBhMC1hMzAyLTU5NWVj YzE3ODQ4Yy8wL0IzNTREMzI4Q0JCRkQxRUYzQ0QyOTI2OEEyM0IwRkNDNjBFM0Ey QzUuY2VyMIGmBggrBgEFBQcBCwSBmTCBljCBkwYIKwYBBQUHMAuGgYZyc3luYzov L3IubWFnZWxsYW4uaXB4by5jb20vcmVwby9hMDM3NWIzOS1mOTQ5LTRjYjUtYjUx OS1mOTQwMDhiMTY1NGMtMC8wLzMxMzYzNDJlMzMzNzJlMzIzMzM5MmUzMDJmMzIz NDJkMzIzNDIwM2QzZTIwMzEzOTM4MzUzNjM2LnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQApCXvMA0GCSqG SIb3DQEBCwUAA4IBAQAneaCaPPBbFpTx4xDEy4T7WJoGXdmV5yXrUCiqPKrDdwZ7 awpEXjPG14rQLFzLSnXTn+jYQVzJuH8lIwAYVQZfWJTgrYEoT09qdGZk1gsIxxVT 1ttWGvfRQFzmVqhT2FO5LOhG29Q2Pf4D16OIxzOfgQBfWVAUFq2nh0OcQiGCZUw6 32+HubRLOmqgUi2R1d/Vu3z9AVINZMMGPccDxsXzTAjn/AW04kHXt8vPI+i6wfhX QPXseMWRYNh2kg3pYsw85iQdZokhYIEw1dhjY4pkg7n62BWDJDHhZWB+2cIV/lH1 bw+UeH/mLOYJctog8JEwe31a+S6IWbZIHLv6pfS3 -----END CERTIFICATE-----Generated at Thu Sep 3 08:29:03 2026 by rpki-client