$ rpki-client -vvf r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/3136342e33372e3234302e302f32302d3234203d3e203436343530.roa File: 3136342e33372e3234302e302f32302d3234203d3e203436343530.roa (raw, json) Hash identifier: E4lFsK9ErDxWc/otrHVjmUq4NDogHm8Vl1fgPlAZSLI= Subject key identifier: 55:8F:3B:D8:75:18:08:04:4D:11:8C:B4:A3:C0:C1:DE:20:2F:AA:DC Certificate issuer: /CN=B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5 Certificate serial: 5D4108C1F97887638C8CEF206778F31ADCA75FB4 Authority key identifier: B3:54:D3:28:CB:BF:D1:EF:3C:D2:92:68:A2:3B:0F:CC:60:E3:A2:C5 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.cer Subject info access: rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/3136342e33372e3234302e302f32302d3234203d3e203436343530.roa Signing time: Tue 28 Jul 2026 12:18:14 +0000 ROA not before: Tue 28 Jul 2026 12:13:14 +0000 ROA not after: Tue 27 Jul 2027 12:18:14 +0000 asID: 46450 IP address blocks: 164.37.240.0/20 maxlen: 24 Validation: OK Signature path: rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.crl rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.mft rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.cer rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/D0A516B50426202A424F0EBFCB7D2BD4F744F964.crl rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/D0A516B50426202A424F0EBFCB7D2BD4F744F964.mft rsync://rpki.ripe.net/repository/DEFAULT/0KUWtQQmICpCTw6_y30r1PdE-WQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 30 Jul 2026 06:14:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5d:41:08:c1:f9:78:87:63:8c:8c:ef:20:67:78:f3:1a:dc:a7:5f:b4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5 Validity Not Before: Jul 28 12:13:14 2026 GMT Not After : Jul 27 12:18:14 2027 GMT Subject: CN=558F3BD8751808044D118CB4A3C0C1DE202FAADC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:59:71:57:d1:d4:23:da:c7:f1:92:20:1b:2c: cc:52:1f:a6:9d:b6:fb:f2:af:d9:5c:2b:51:ee:82: 17:c8:cf:41:1c:68:59:13:32:59:16:96:04:d3:bd: e2:82:69:4f:9a:f2:c7:6f:a8:ef:a2:08:43:94:d2: a9:ae:cf:76:9b:1e:48:47:42:a5:4a:86:09:fe:66: e7:42:0e:c9:03:50:4f:95:c6:74:65:e1:74:1b:71: 34:15:d7:16:9c:3a:c5:8a:a0:de:8a:ac:e5:c5:65: 47:9f:63:e2:26:a8:c9:b9:6d:b2:8f:c4:ad:be:05: a7:a6:48:0b:33:0f:67:0f:d8:32:be:31:5a:06:bf: da:fc:f1:db:5a:6d:62:a7:94:9d:57:1c:0b:b1:48: 6f:f8:cd:a2:65:87:22:60:e2:64:2f:2b:15:72:3e: 5d:38:9b:43:c1:a9:52:34:0c:7e:69:0e:e0:1e:f9: 65:3f:b9:93:82:00:1a:4b:c5:05:83:18:74:f5:57: f4:96:b0:c9:bb:cc:e8:20:85:0d:2a:12:22:ee:8f: 03:c4:88:2a:76:ef:d8:ba:42:d6:f0:36:cc:fc:3b: 8e:13:c0:93:a2:63:9d:34:81:13:6f:e6:eb:e8:30: 26:bb:e1:17:a8:ae:5e:44:70:5d:8d:6f:5b:af:15: 6e:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:8F:3B:D8:75:18:08:04:4D:11:8C:B4:A3:C0:C1:DE:20:2F:AA:DC X509v3 Authority Key Identifier: keyid:B3:54:D3:28:CB:BF:D1:EF:3C:D2:92:68:A2:3B:0F:CC:60:E3:A2:C5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.cer Subject Information Access: Signed Object - URI:rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/3136342e33372e3234302e302f32302d3234203d3e203436343530.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 164.37.240.0/20 Signature Algorithm: sha256WithRSAEncryption 8d:a8:cc:39:37:81:a5:9c:56:7b:fe:6d:02:22:d9:6f:1b:ae: 8a:aa:9a:ae:aa:5e:b7:33:e0:78:d2:dd:b3:05:13:76:c5:1c: 37:0a:23:27:e9:7b:c5:13:31:80:32:a1:a3:2a:21:cf:84:04: 0a:48:c0:72:eb:2e:15:b4:8e:ce:d6:8e:b6:fe:15:e1:71:ab: 70:be:d6:68:d1:7f:e7:13:df:cf:c4:00:91:02:47:bd:b3:0d: a2:13:43:f7:03:eb:14:3d:ce:a3:14:41:9b:ad:fd:37:fe:7c: 9f:ab:22:86:6f:4e:80:3b:ee:2f:5f:93:01:e7:7e:22:1e:05: 7c:f8:ce:33:a2:b5:7d:e4:42:b3:76:37:a9:b1:9e:25:c3:c2: 43:7f:3f:0e:e0:3e:ca:7e:db:4d:97:23:42:67:cd:4f:83:18: 35:02:4d:ef:2e:74:56:19:03:4f:02:97:4d:7e:4f:b0:4b:af: 4c:32:5b:07:92:22:5f:78:e8:b7:5f:7f:e8:cf:a6:83:6e:8c: ed:3c:8f:52:d1:b2:c7:63:76:9d:6d:8e:36:af:b5:6a:a4:0e: e7:be:2d:d4:31:d0:5a:4a:ab:68:b8:9c:ca:5b:51:94:38:94: fd:03:f2:93:d2:ec:ae:66:8f:ae:47:4b:93:c8:80:83:e0:5a: a5:94:09:38 -----BEGIN CERTIFICATE----- MIIFWDCCBECgAwIBAgIUXUEIwfl4h2OMjO8gZ3jzGtynX7QwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjM1NEQzMjhDQkJGRDFFRjNDRDI5MjY4QTIzQjBGQ0M2 MEUzQTJDNTAeFw0yNjA3MjgxMjEzMTRaFw0yNzA3MjcxMjE4MTRaMDMxMTAvBgNV BAMTKDU1OEYzQkQ4NzUxODA4MDQ0RDExOENCNEEzQzBDMURFMjAyRkFBREMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDcWXFX0dQj2sfxkiAbLMxSH6ad tvvyr9lcK1HughfIz0EcaFkTMlkWlgTTveKCaU+a8sdvqO+iCEOU0qmuz3abHkhH QqVKhgn+ZudCDskDUE+VxnRl4XQbcTQV1xacOsWKoN6KrOXFZUefY+ImqMm5bbKP xK2+BaemSAszD2cP2DK+MVoGv9r88dtabWKnlJ1XHAuxSG/4zaJlhyJg4mQvKxVy Pl04m0PBqVI0DH5pDuAe+WU/uZOCABpLxQWDGHT1V/SWsMm7zOgghQ0qEiLujwPE iCp279i6QtbwNsz8O44TwJOiY500gRNv5uvoMCa74Reorl5EcF2Nb1uvFW4hAgMB AAGjggJiMIICXjAdBgNVHQ4EFgQUVY872HUYCARNEYy0o8DB3iAvqtwwHwYDVR0j BBgwFoAUs1TTKMu/0e880pJoojsPzGDjosUwDgYDVR0PAQH/BAQDAgeAMIGIBgNV HR8EgYAwfjB8oHqgeIZ2cnN5bmM6Ly9yLm1hZ2VsbGFuLmlweG8uY29tL3JlcG8v YTAzNzViMzktZjk0OS00Y2I1LWI1MTktZjk0MDA4YjE2NTRjLTAvMC9CMzU0RDMy OENCQkZEMUVGM0NEMjkyNjhBMjNCMEZDQzYwRTNBMkM1LmNybDCBngYIKwYBBQUH AQEEgZEwgY4wgYsGCCsGAQUFBzAChn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5y aXBlLm5ldC9yZXBvc2l0b3J5LzYxNzA4YTZiLTZjM2EtNDBhMC1hMzAyLTU5NWVj YzE3ODQ4Yy8wL0IzNTREMzI4Q0JCRkQxRUYzQ0QyOTI2OEEyM0IwRkNDNjBFM0Ey QzUuY2VyMIGkBggrBgEFBQcBCwSBlzCBlDCBkQYIKwYBBQUHMAuGgYRyc3luYzov L3IubWFnZWxsYW4uaXB4by5jb20vcmVwby9hMDM3NWIzOS1mOTQ5LTRjYjUtYjUx OS1mOTQwMDhiMTY1NGMtMC8wLzMxMzYzNDJlMzMzNzJlMzIzNDMwMmUzMDJmMzIz MDJkMzIzNDIwM2QzZTIwMzQzNjM0MzUzMC5yb2EwGAYDVR0gAQH/BA4wDDAKBggr BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEBKQl8DANBgkqhkiG 9w0BAQsFAAOCAQEAjajMOTeBpZxWe/5tAiLZbxuuiqqarqpetzPgeNLdswUTdsUc NwojJ+l7xRMxgDKhoyohz4QECkjAcusuFbSOztaOtv4V4XGrcL7WaNF/5xPfz8QA kQJHvbMNohND9wPrFD3OoxRBm639N/58n6sihm9OgDvuL1+TAed+Ih4FfPjOM6K1 feRCs3Y3qbGeJcPCQ38/DuA+yn7bTZcjQmfNT4MYNQJN7y50VhkDTwKXTX5PsEuv TDJbB5IiX3jot19/6M+mg26M7TyPUtGyx2N2nW2ONq+1aqQO574t1DHQWkqraLic yltRlDiU/QPyk9LsrmaPrkdLk8iAg+BapZQJOA== -----END CERTIFICATE-----Generated at Wed Jul 29 19:47:16 2026 by rpki-client