$ rpki-client -vvf r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/AS209888.roa File: AS209888.roa (raw, json) Hash identifier: d2ep8I7D9xlsJ5sOdAOHt+np4ohqF42QDE88JEKECC0= Subject key identifier: ED:FD:4C:E6:93:E8:F7:5B:72:33:9D:92:96:ED:38:CE:A7:D1:60:D6 Certificate issuer: /CN=B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5 Certificate serial: 69BF89D2E510EE31A758C06736C48631CEAAB7AF Authority key identifier: B3:54:D3:28:CB:BF:D1:EF:3C:D2:92:68:A2:3B:0F:CC:60:E3:A2:C5 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.cer Subject info access: rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/AS209888.roa Signing time: Fri 10 Jul 2026 20:23:20 +0000 ROA not before: Fri 10 Jul 2026 20:18:20 +0000 ROA not after: Fri 09 Jul 2027 20:23:20 +0000 asID: 209888 IP address blocks: 164.37.195.0/24 maxlen: 24 164.37.210.0/24 maxlen: 24 164.37.223.0/24 maxlen: 24 164.37.224.0/24 maxlen: 24 Validation: OK Signature path: rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.crl rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.mft rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.cer rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/D0A516B50426202A424F0EBFCB7D2BD4F744F964.crl rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/D0A516B50426202A424F0EBFCB7D2BD4F744F964.mft rsync://rpki.ripe.net/repository/DEFAULT/0KUWtQQmICpCTw6_y30r1PdE-WQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 18 Jul 2026 15:41:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 69:bf:89:d2:e5:10:ee:31:a7:58:c0:67:36:c4:86:31:ce:aa:b7:af Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5 Validity Not Before: Jul 10 20:18:20 2026 GMT Not After : Jul 9 20:23:20 2027 GMT Subject: CN=EDFD4CE693E8F75B72339D9296ED38CEA7D160D6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:9e:04:89:c9:1e:39:7b:c9:70:d0:59:91:e3: e9:ae:5e:5a:9d:f9:51:33:f7:66:6d:1b:f3:6e:02: 01:57:f2:51:8a:74:50:2f:06:0f:3a:c6:69:d7:cf: f6:fe:c5:eb:82:d4:43:3d:ef:ba:fd:28:95:e5:94: 95:67:f5:12:68:00:72:f4:c1:e3:4c:f9:40:70:8b: 3c:82:f0:be:ff:7c:a6:9c:01:6a:de:62:69:cb:78: 14:85:07:60:f0:50:27:c6:97:89:15:ee:3a:18:30: 23:0b:1b:49:9c:cb:53:58:f2:82:3b:0e:2e:90:11: b8:99:1b:da:d5:e7:92:5c:1b:56:93:31:85:4c:9e: 2c:9b:a1:7a:41:ba:2e:5d:e8:13:bc:83:07:a6:49: 3c:73:e1:6c:9d:72:2a:c3:37:3e:19:0a:17:cd:8a: e5:4b:e2:8a:7c:37:21:4e:69:22:46:71:03:03:9b: f0:cf:0e:0d:d3:20:27:aa:65:f1:a6:67:4f:f4:10: a2:d3:2c:92:8a:35:74:b6:39:a1:4a:74:0d:ea:9d: 3c:66:d9:9e:b9:84:4b:d8:c0:23:05:39:12:79:1c: d4:61:22:52:12:bd:e7:03:53:fb:dc:68:06:a9:25: b2:01:37:8f:9b:0c:98:78:86:b7:dd:92:e5:a8:e1: 1d:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:FD:4C:E6:93:E8:F7:5B:72:33:9D:92:96:ED:38:CE:A7:D1:60:D6 X509v3 Authority Key Identifier: keyid:B3:54:D3:28:CB:BF:D1:EF:3C:D2:92:68:A2:3B:0F:CC:60:E3:A2:C5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.cer Subject Information Access: Signed Object - URI:rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/AS209888.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 164.37.195.0/24 164.37.210.0/24 164.37.223.0-164.37.224.255 Signature Algorithm: sha256WithRSAEncryption 38:89:3b:19:8f:7f:00:7d:05:eb:ae:7f:c2:4a:c1:6e:f7:15: cd:d9:ae:f5:c1:00:75:f3:c0:64:22:aa:69:00:b3:19:14:e2: 7e:24:b7:d7:21:d8:dc:29:bc:93:61:bb:c9:bd:e3:a7:27:0b: 43:b2:a2:e5:1d:30:c7:7f:83:ed:c9:40:22:cc:60:db:fa:d8: 42:bc:22:7b:93:13:e8:f1:be:c8:90:23:a6:5e:a3:d5:b3:dc: 09:20:fb:1e:22:8d:8c:7f:c2:35:05:57:9d:82:3e:86:de:31: 47:aa:2f:a8:80:bd:8d:65:61:0b:08:c3:a9:c8:f6:94:02:ed: 0d:66:9d:a0:5f:45:bd:cc:b6:4a:90:19:e4:5b:ff:2d:77:88: ca:fc:47:95:71:78:43:58:c7:0b:65:f5:5c:69:8b:ab:8b:ae: c4:1e:38:bc:30:d4:a9:ff:d6:65:12:bc:c0:42:e5:fe:6e:2c: 38:52:ba:10:90:1c:8f:cb:83:93:88:86:a0:54:de:bd:a8:08: 54:cf:d4:c2:e5:b9:d2:6b:3a:db:fe:8e:38:c4:11:32:04:0d: 34:a9:e7:2d:18:fc:8e:f8:56:c7:57:e3:f4:7f:93:b0:50:c2: c6:92:a3:4b:60:e0:87:4c:56:6d:97:af:c4:6e:c4:9f:33:19: 3c:58:bf:c1 -----BEGIN CERTIFICATE----- MIIFOTCCBCGgAwIBAgIUab+J0uUQ7jGnWMBnNsSGMc6qt68wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjM1NEQzMjhDQkJGRDFFRjNDRDI5MjY4QTIzQjBGQ0M2 MEUzQTJDNTAeFw0yNjA3MTAyMDE4MjBaFw0yNzA3MDkyMDIzMjBaMDMxMTAvBgNV BAMTKEVERkQ0Q0U2OTNFOEY3NUI3MjMzOUQ5Mjk2RUQzOENFQTdEMTYwRDYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCzngSJyR45e8lw0FmR4+muXlqd +VEz92ZtG/NuAgFX8lGKdFAvBg86xmnXz/b+xeuC1EM977r9KJXllJVn9RJoAHL0 weNM+UBwizyC8L7/fKacAWreYmnLeBSFB2DwUCfGl4kV7joYMCMLG0mcy1NY8oI7 Di6QEbiZG9rV55JcG1aTMYVMniyboXpBui5d6BO8gwemSTxz4WydcirDNz4ZChfN iuVL4op8NyFOaSJGcQMDm/DPDg3TICeqZfGmZ0/0EKLTLJKKNXS2OaFKdA3qnTxm 2Z65hEvYwCMFORJ5HNRhIlISvecDU/vcaAapJbIBN4+bDJh4hrfdkuWo4R2TAgMB AAGjggJDMIICPzAdBgNVHQ4EFgQU7f1M5pPo91tyM52Slu04zqfRYNYwHwYDVR0j BBgwFoAUs1TTKMu/0e880pJoojsPzGDjosUwDgYDVR0PAQH/BAQDAgeAMIGIBgNV HR8EgYAwfjB8oHqgeIZ2cnN5bmM6Ly9yLm1hZ2VsbGFuLmlweG8uY29tL3JlcG8v YTAzNzViMzktZjk0OS00Y2I1LWI1MTktZjk0MDA4YjE2NTRjLTAvMC9CMzU0RDMy OENCQkZEMUVGM0NEMjkyNjhBMjNCMEZDQzYwRTNBMkM1LmNybDCBngYIKwYBBQUH AQEEgZEwgY4wgYsGCCsGAQUFBzAChn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5y aXBlLm5ldC9yZXBvc2l0b3J5LzYxNzA4YTZiLTZjM2EtNDBhMC1hMzAyLTU5NWVj YzE3ODQ4Yy8wL0IzNTREMzI4Q0JCRkQxRUYzQ0QyOTI2OEEyM0IwRkNDNjBFM0Ey QzUuY2VyMHIGCCsGAQUFBwELBGYwZDBiBggrBgEFBQcwC4ZWcnN5bmM6Ly9yLm1h Z2VsbGFuLmlweG8uY29tL3JlcG8vYTAzNzViMzktZjk0OS00Y2I1LWI1MTktZjk0 MDA4YjE2NTRjLTAvMC9BUzIwOTg4OC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEF BQcOAjAzBggrBgEFBQcBBwEB/wQkMCIwIAQCAAEwGgMEAKQlwwMEAKQl0jAMAwQA pCXfAwQApCXgMA0GCSqGSIb3DQEBCwUAA4IBAQA4iTsZj38AfQXrrn/CSsFu9xXN 2a71wQB188BkIqppALMZFOJ+JLfXIdjcKbyTYbvJveOnJwtDsqLlHTDHf4PtyUAi zGDb+thCvCJ7kxPo8b7IkCOmXqPVs9wJIPseIo2Mf8I1BVedgj6G3jFHqi+ogL2N ZWELCMOpyPaUAu0NZp2gX0W9zLZKkBnkW/8td4jK/EeVcXhDWMcLZfVcaYuri67E Hji8MNSp/9ZlErzAQuX+biw4UroQkByPy4OTiIagVN69qAhUz9TC5bnSazrb/o44 xBEyBA00qectGPyO+FbHV+P0f5OwUMLGkqNLYOCHTFZtl6/EbsSfMxk8WL/B -----END CERTIFICATE-----Generated at Sat Jul 18 03:24:20 2026 by rpki-client