$ rpki-client -vvf r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/AS152698.roa File: AS152698.roa (raw, json) Hash identifier: k2I5kKzygpqS86YdRvrffdLDerN69H1fQPWWGP1DqQU= Subject key identifier: 61:D3:C6:77:1E:ED:14:14:03:BB:93:8F:5A:91:6E:5A:C2:FC:10:AC Certificate issuer: /CN=B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5 Certificate serial: 7434C2D5EED616D9337E992FAF38456C5633E2D7 Authority key identifier: B3:54:D3:28:CB:BF:D1:EF:3C:D2:92:68:A2:3B:0F:CC:60:E3:A2:C5 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.cer Subject info access: rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/AS152698.roa Signing time: Fri 10 Jul 2026 20:23:20 +0000 ROA not before: Fri 10 Jul 2026 20:18:20 +0000 ROA not after: Fri 09 Jul 2027 20:23:20 +0000 asID: 152698 IP address blocks: 164.37.199.0/24 maxlen: 24 Validation: OK Signature path: rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.crl rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.mft rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.cer rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/D0A516B50426202A424F0EBFCB7D2BD4F744F964.crl rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/D0A516B50426202A424F0EBFCB7D2BD4F744F964.mft rsync://rpki.ripe.net/repository/DEFAULT/0KUWtQQmICpCTw6_y30r1PdE-WQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 18 Jul 2026 15:41:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 74:34:c2:d5:ee:d6:16:d9:33:7e:99:2f:af:38:45:6c:56:33:e2:d7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5 Validity Not Before: Jul 10 20:18:20 2026 GMT Not After : Jul 9 20:23:20 2027 GMT Subject: CN=61D3C6771EED141403BB938F5A916E5AC2FC10AC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:40:b2:e5:ef:4a:6b:6b:99:6f:37:dc:92:c6: d7:bc:56:47:26:21:30:a8:a7:64:3f:2b:93:73:6b: 05:83:48:95:10:ef:26:c9:06:33:5b:04:df:f3:08: fa:c5:f4:87:dd:2d:67:09:39:c5:f3:d9:f3:d7:bc: 8f:8b:f2:ed:89:20:dc:c1:59:0c:50:c8:0e:ec:c8: 15:13:84:10:4b:d0:a7:05:90:bb:d7:c8:9d:af:5f: 6a:8a:de:53:17:6a:b7:72:38:a2:78:10:38:15:d8: aa:e3:68:b5:4c:03:0f:45:01:20:92:d4:0a:02:28: e8:93:ea:21:57:d2:86:d8:44:16:e3:03:f7:65:c4: 61:f2:4c:bd:2c:ab:bb:42:dd:27:05:53:15:ca:1c: 13:83:8c:11:5a:5c:28:45:a1:9a:5b:9c:54:22:3f: 4e:e3:04:a7:98:5d:c6:00:b7:0a:5f:4b:8e:af:64: 32:c4:9a:58:44:54:82:bd:4d:78:29:92:fd:ce:f7: b3:69:be:ce:12:39:46:3e:ff:81:aa:3f:7f:85:90: 0d:d7:e6:23:dd:8c:5b:33:ae:5b:14:cd:ef:ed:4b: ad:e0:28:95:51:75:3d:56:48:4a:92:24:57:5d:94: dd:1b:1a:0f:e3:f3:18:60:68:bf:32:21:82:19:68: af:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:D3:C6:77:1E:ED:14:14:03:BB:93:8F:5A:91:6E:5A:C2:FC:10:AC X509v3 Authority Key Identifier: keyid:B3:54:D3:28:CB:BF:D1:EF:3C:D2:92:68:A2:3B:0F:CC:60:E3:A2:C5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.cer Subject Information Access: Signed Object - URI:rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/AS152698.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 164.37.199.0/24 Signature Algorithm: sha256WithRSAEncryption 1d:e6:7c:b0:00:eb:01:72:34:2c:c4:0c:7e:1a:7e:fe:61:45: 46:94:35:f2:04:8a:51:fc:a6:5f:27:dd:e0:23:36:88:60:b5: 02:db:2f:d0:19:19:79:71:ff:86:7a:68:47:eb:39:a5:a7:09: 47:f1:64:38:a8:2b:99:7b:cd:28:2d:8a:6a:54:c9:6e:e1:92: 0f:e3:41:5d:62:4d:25:e7:12:af:c6:ec:d1:17:79:b5:72:ca: 44:0e:b4:a4:e7:c3:8d:b1:a3:5b:6c:d2:6b:83:89:c6:df:c3: 78:40:e7:69:dd:05:9f:bb:9f:c1:cd:af:4a:94:64:1f:fc:5f: 5d:1a:bc:9a:39:79:6f:ab:79:33:12:dc:c9:ca:69:d3:7e:c4: e2:ae:3d:64:09:79:12:1c:a5:53:89:92:89:51:6c:db:eb:33: 26:c8:c6:44:1a:86:29:ef:80:ea:86:33:24:b2:ff:fe:cc:b9: 3e:bf:28:dd:c3:4c:c0:7c:60:ab:75:c6:43:83:2b:ab:6a:f0: 9c:9d:c1:95:79:61:e4:30:95:0e:47:3f:f4:14:a3:e3:ad:fb: 88:fe:ea:73:7d:0b:d8:e5:e9:a7:35:e4:7d:7e:73:98:7e:56: 74:17:6c:58:49:10:c3:bd:41:b5:86:3d:9c:ae:2b:74:b2:62: 79:f6:a3:da -----BEGIN CERTIFICATE----- MIIFJTCCBA2gAwIBAgIUdDTC1e7WFtkzfpkvrzhFbFYz4tcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjM1NEQzMjhDQkJGRDFFRjNDRDI5MjY4QTIzQjBGQ0M2 MEUzQTJDNTAeFw0yNjA3MTAyMDE4MjBaFw0yNzA3MDkyMDIzMjBaMDMxMTAvBgNV BAMTKDYxRDNDNjc3MUVFRDE0MTQwM0JCOTM4RjVBOTE2RTVBQzJGQzEwQUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCyQLLl70pra5lvN9ySxte8Vkcm ITCop2Q/K5NzawWDSJUQ7ybJBjNbBN/zCPrF9IfdLWcJOcXz2fPXvI+L8u2JINzB WQxQyA7syBUThBBL0KcFkLvXyJ2vX2qK3lMXardyOKJ4EDgV2KrjaLVMAw9FASCS 1AoCKOiT6iFX0obYRBbjA/dlxGHyTL0sq7tC3ScFUxXKHBODjBFaXChFoZpbnFQi P07jBKeYXcYAtwpfS46vZDLEmlhEVIK9TXgpkv3O97Npvs4SOUY+/4GqP3+FkA3X 5iPdjFszrlsUze/tS63gKJVRdT1WSEqSJFddlN0bGg/j8xhgaL8yIYIZaK9nAgMB AAGjggIvMIICKzAdBgNVHQ4EFgQUYdPGdx7tFBQDu5OPWpFuWsL8EKwwHwYDVR0j BBgwFoAUs1TTKMu/0e880pJoojsPzGDjosUwDgYDVR0PAQH/BAQDAgeAMIGIBgNV HR8EgYAwfjB8oHqgeIZ2cnN5bmM6Ly9yLm1hZ2VsbGFuLmlweG8uY29tL3JlcG8v YTAzNzViMzktZjk0OS00Y2I1LWI1MTktZjk0MDA4YjE2NTRjLTAvMC9CMzU0RDMy OENCQkZEMUVGM0NEMjkyNjhBMjNCMEZDQzYwRTNBMkM1LmNybDCBngYIKwYBBQUH AQEEgZEwgY4wgYsGCCsGAQUFBzAChn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5y aXBlLm5ldC9yZXBvc2l0b3J5LzYxNzA4YTZiLTZjM2EtNDBhMC1hMzAyLTU5NWVj YzE3ODQ4Yy8wL0IzNTREMzI4Q0JCRkQxRUYzQ0QyOTI2OEEyM0IwRkNDNjBFM0Ey QzUuY2VyMHIGCCsGAQUFBwELBGYwZDBiBggrBgEFBQcwC4ZWcnN5bmM6Ly9yLm1h Z2VsbGFuLmlweG8uY29tL3JlcG8vYTAzNzViMzktZjk0OS00Y2I1LWI1MTktZjk0 MDA4YjE2NTRjLTAvMC9BUzE1MjY5OC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEF BQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAKQlxzANBgkqhkiG9w0B AQsFAAOCAQEAHeZ8sADrAXI0LMQMfhp+/mFFRpQ18gSKUfymXyfd4CM2iGC1Atsv 0BkZeXH/hnpoR+s5pacJR/FkOKgrmXvNKC2KalTJbuGSD+NBXWJNJecSr8bs0Rd5 tXLKRA60pOfDjbGjW2zSa4OJxt/DeEDnad0Fn7ufwc2vSpRkH/xfXRq8mjl5b6t5 MxLcycpp037E4q49ZAl5EhylU4mSiVFs2+szJsjGRBqGKe+A6oYzJLL//sy5Pr8o 3cNMwHxgq3XGQ4Mrq2rwnJ3BlXlh5DCVDkc/9BSj4637iP7qc30L2OXppzXkfX5z mH5WdBdsWEkQw71BtYY9nK4rdLJiefaj2g== -----END CERTIFICATE-----Generated at Sat Jul 18 03:24:21 2026 by rpki-client