$ rpki-client -vvvf r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/AS16509.roa File: AS16509.roa (raw, json) Hash identifier: 6mKugWM5WzTmXkIrrC9a214bvqLYidHsSJn5BEPdauY= Subject key identifier: 19:6D:5A:7A:5B:47:13:0A:11:71:81:4D:10:DF:BD:D0:FF:57:05:58 Certificate issuer: /CN=B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5 Certificate serial: 7BC047262A79AAB01899D87E27CB0CD25AB1AE98 Authority key identifier: B3:54:D3:28:CB:BF:D1:EF:3C:D2:92:68:A2:3B:0F:CC:60:E3:A2:C5 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.cer Subject info access: rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/AS16509.roa Signing time: Thu 10 Sep 2026 08:49:22 +0000 ROA not before: Thu 10 Sep 2026 08:44:22 +0000 ROA not after: Thu 09 Sep 2027 08:49:22 +0000 asID: 16509 IP address blocks: 164.37.198.0/23 maxlen: 24 164.37.208.0/24 maxlen: 24 Validation: OK Signature path: rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.crl rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.mft rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.cer rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/D0A516B50426202A424F0EBFCB7D2BD4F744F964.crl rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/D0A516B50426202A424F0EBFCB7D2BD4F744F964.mft rsync://rpki.ripe.net/repository/DEFAULT/0KUWtQQmICpCTw6_y30r1PdE-WQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 16 Sep 2026 03:29:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7b:c0:47:26:2a:79:aa:b0:18:99:d8:7e:27:cb:0c:d2:5a:b1:ae:98 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5 Validity Not Before: Sep 10 08:44:22 2026 GMT Not After : Sep 9 08:49:22 2027 GMT Subject: CN=196D5A7A5B47130A1171814D10DFBDD0FF570558 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:d0:8f:f1:67:99:3f:13:9f:98:37:b1:81:a8: 04:ef:28:3c:48:8a:62:1e:96:b2:85:6d:0e:02:50: 75:7a:ad:1f:b1:ea:8c:e8:0b:44:df:4a:b1:46:b5: fa:54:7f:34:ed:1c:25:ca:49:1b:be:f3:cc:0a:8a: a0:73:14:ec:35:6d:0d:7b:d6:54:9c:66:c0:e1:ef: 64:12:ca:7a:90:d9:60:33:47:30:cc:79:88:5c:2c: a5:cc:ea:cd:0b:d4:35:e7:47:17:9d:61:a4:5d:2a: 36:d4:5a:45:75:e6:2d:ba:27:21:09:f5:40:25:d7: 52:91:29:ea:be:a7:e8:a4:70:b4:7e:d8:20:e6:e9: 30:b4:2f:d5:8c:8a:df:e3:6c:21:68:2a:1a:d1:75: 45:ce:a4:50:5e:a0:21:e9:75:2c:b9:f5:ac:92:00: 9e:fe:44:e9:a5:79:7b:89:f6:91:10:d8:4c:5c:4a: 11:6e:41:d2:60:06:52:db:3b:6d:54:e1:af:be:d8: b5:e5:5d:3c:9f:9a:62:15:3a:b7:43:13:da:c8:de: 04:56:39:b1:4f:31:04:58:9c:e4:ed:26:58:a3:6b: 16:93:67:84:db:a7:71:d8:3e:53:05:e1:2c:f1:59: 09:ff:0c:08:4a:4f:11:6e:bb:d9:a8:4b:45:87:fc: 4f:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:6D:5A:7A:5B:47:13:0A:11:71:81:4D:10:DF:BD:D0:FF:57:05:58 X509v3 Authority Key Identifier: keyid:B3:54:D3:28:CB:BF:D1:EF:3C:D2:92:68:A2:3B:0F:CC:60:E3:A2:C5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.cer Subject Information Access: Signed Object - URI:rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/AS16509.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 164.37.198.0/23 164.37.208.0/24 Signature Algorithm: sha256WithRSAEncryption a9:3f:5c:3d:7f:66:2a:94:82:4d:cd:a4:fe:3e:84:34:2e:48: 51:a1:51:4b:ff:53:e0:2a:fc:b4:81:6a:e6:24:85:04:97:76: 5e:ba:c1:45:3a:f5:29:76:70:a5:90:e2:5a:52:a5:11:ce:a2: 8e:45:38:d3:35:29:7d:6f:39:bb:12:33:3f:40:ce:4c:29:e4: 5c:37:f5:a5:23:f4:9b:51:e0:ee:a3:82:f2:1c:30:ce:66:06: 78:97:85:de:a8:ac:01:0f:6c:e4:c3:7d:0f:b8:c9:a1:31:7a: 89:40:99:62:6a:7c:c2:44:ca:4c:91:b6:73:ba:9f:7d:47:16: 85:2a:5a:28:55:77:12:3f:35:0f:c1:33:cf:1a:5e:6b:5b:8a: 6d:b9:bd:dc:99:90:bd:50:12:e5:04:df:05:be:1e:15:a8:c6: 19:bf:36:db:2e:c2:de:e1:01:3d:ff:7d:02:4c:a4:08:47:40: 8b:49:cb:65:f0:64:a5:20:42:57:03:20:9d:96:22:b8:55:df: f1:63:33:d9:22:a7:04:6c:0b:23:4c:c0:7a:75:c6:8a:cb:d5: 8d:6f:dd:ea:ac:49:9f:18:c3:c9:7d:eb:2a:fe:b9:93:83:f4: 01:63:ce:f6:14:58:b9:e3:fb:64:4a:5d:da:6e:de:e0:75:a3: 32:bd:f0:12 -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUe8BHJip5qrAYmdh+J8sM0lqxrpgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjM1NEQzMjhDQkJGRDFFRjNDRDI5MjY4QTIzQjBGQ0M2 MEUzQTJDNTAeFw0yNjA5MTAwODQ0MjJaFw0yNzA5MDkwODQ5MjJaMDMxMTAvBgNV BAMTKDE5NkQ1QTdBNUI0NzEzMEExMTcxODE0RDEwREZCREQwRkY1NzA1NTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDn0I/xZ5k/E5+YN7GBqATvKDxI imIelrKFbQ4CUHV6rR+x6ozoC0TfSrFGtfpUfzTtHCXKSRu+88wKiqBzFOw1bQ17 1lScZsDh72QSynqQ2WAzRzDMeYhcLKXM6s0L1DXnRxedYaRdKjbUWkV15i26JyEJ 9UAl11KRKeq+p+ikcLR+2CDm6TC0L9WMit/jbCFoKhrRdUXOpFBeoCHpdSy59ayS AJ7+ROmleXuJ9pEQ2ExcShFuQdJgBlLbO21U4a++2LXlXTyfmmIVOrdDE9rI3gRW ObFPMQRYnOTtJlijaxaTZ4Tbp3HYPlMF4SzxWQn/DAhKTxFuu9moS0WH/E8BAgMB AAGjggI0MIICMDAdBgNVHQ4EFgQUGW1aeltHEwoRcYFNEN+90P9XBVgwHwYDVR0j BBgwFoAUs1TTKMu/0e880pJoojsPzGDjosUwDgYDVR0PAQH/BAQDAgeAMIGIBgNV HR8EgYAwfjB8oHqgeIZ2cnN5bmM6Ly9yLm1hZ2VsbGFuLmlweG8uY29tL3JlcG8v YTAzNzViMzktZjk0OS00Y2I1LWI1MTktZjk0MDA4YjE2NTRjLTAvMC9CMzU0RDMy OENCQkZEMUVGM0NEMjkyNjhBMjNCMEZDQzYwRTNBMkM1LmNybDCBngYIKwYBBQUH AQEEgZEwgY4wgYsGCCsGAQUFBzAChn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5y aXBlLm5ldC9yZXBvc2l0b3J5LzYxNzA4YTZiLTZjM2EtNDBhMC1hMzAyLTU5NWVj YzE3ODQ4Yy8wL0IzNTREMzI4Q0JCRkQxRUYzQ0QyOTI2OEEyM0IwRkNDNjBFM0Ey QzUuY2VyMHEGCCsGAQUFBwELBGUwYzBhBggrBgEFBQcwC4ZVcnN5bmM6Ly9yLm1h Z2VsbGFuLmlweG8uY29tL3JlcG8vYTAzNzViMzktZjk0OS00Y2I1LWI1MTktZjk0 MDA4YjE2NTRjLTAvMC9BUzE2NTA5LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQBpCXGAwQApCXQMA0GCSqG SIb3DQEBCwUAA4IBAQCpP1w9f2YqlIJNzaT+PoQ0LkhRoVFL/1PgKvy0gWrmJIUE l3ZeusFFOvUpdnClkOJaUqURzqKORTjTNSl9bzm7EjM/QM5MKeRcN/WlI/SbUeDu o4LyHDDOZgZ4l4XeqKwBD2zkw30PuMmhMXqJQJlianzCRMpMkbZzup99RxaFKloo VXcSPzUPwTPPGl5rW4ptub3cmZC9UBLlBN8Fvh4VqMYZvzbbLsLe4QE9/30CTKQI R0CLSctl8GSlIEJXAyCdliK4Vd/xYzPZIqcEbAsjTMB6dcaKy9WNb93qrEmfGMPJ fesq/rmTg/QBY872FFi54/tkSl3abt7gdaMyvfAS -----END CERTIFICATE-----Generated at Tue Sep 15 12:42:59 2026 by rpki-client