$ rpki-client -vvvf r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/AS401560.roa File: AS401560.roa (raw, json) Hash identifier: ZEraZ2yQTyhkN9BiC//AazUMFlsfA5K4sQYIT7ihM48= Subject key identifier: 68:23:9A:A4:2A:84:D5:86:08:70:B8:A8:E2:D6:98:1E:7F:C8:21:BF Certificate issuer: /CN=B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5 Certificate serial: 67FA7B8FC3B6307DF0B4C73913DDEA8DDFB587F4 Authority key identifier: B3:54:D3:28:CB:BF:D1:EF:3C:D2:92:68:A2:3B:0F:CC:60:E3:A2:C5 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.cer Subject info access: rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/AS401560.roa Signing time: Thu 10 Sep 2026 08:49:21 +0000 ROA not before: Thu 10 Sep 2026 08:44:21 +0000 ROA not after: Thu 09 Sep 2027 08:49:21 +0000 asID: 401560 IP address blocks: 164.37.220.0/24 maxlen: 24 Validation: OK Signature path: rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.crl rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.mft rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.cer rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/D0A516B50426202A424F0EBFCB7D2BD4F744F964.crl rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/D0A516B50426202A424F0EBFCB7D2BD4F744F964.mft rsync://rpki.ripe.net/repository/DEFAULT/0KUWtQQmICpCTw6_y30r1PdE-WQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 19 Sep 2026 05:39:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 67:fa:7b:8f:c3:b6:30:7d:f0:b4:c7:39:13:dd:ea:8d:df:b5:87:f4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5 Validity Not Before: Sep 10 08:44:21 2026 GMT Not After : Sep 9 08:49:21 2027 GMT Subject: CN=68239AA42A84D5860870B8A8E2D6981E7FC821BF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:cd:3a:ec:77:14:66:07:b4:91:6b:23:55:39: ba:be:5d:f1:d7:db:74:ad:a0:a2:18:4f:3d:8b:77: 0c:70:56:95:0e:71:83:e9:f6:39:26:d6:9b:b2:02: f9:f8:4a:47:62:20:bf:53:85:47:7f:52:8e:af:24: 33:71:61:5a:29:db:3d:5d:41:f2:c7:9c:57:e5:d9: 53:85:01:51:aa:75:22:be:bf:31:b7:bd:11:ac:b1: af:38:f6:76:84:2a:ae:64:b4:b8:17:ba:03:81:e7: b7:37:14:27:bc:6a:a3:1b:84:86:62:03:28:9f:e5: 33:d3:39:4b:08:e2:df:5d:71:3d:d7:f2:e5:34:6d: e2:b3:6b:aa:7b:d6:96:0d:44:ab:12:57:d3:16:62: f1:32:cb:a2:8d:e9:56:0d:b5:4d:96:79:a0:80:9d: dc:64:d9:d9:31:1b:a1:7c:06:d1:9a:56:bc:84:64: 64:70:0c:9e:1f:a0:53:84:91:5a:3f:16:5d:83:f5: 9e:1a:76:75:dd:b8:06:47:85:87:e7:f4:74:52:72: 7a:1e:d1:88:90:22:56:d5:53:bb:7f:2d:dc:d7:7e: 20:e6:84:36:5e:fd:48:18:4a:0a:97:9c:26:3e:57: bc:60:e0:e2:ef:00:77:91:8a:c9:a3:a8:fd:b0:ed: 4a:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:23:9A:A4:2A:84:D5:86:08:70:B8:A8:E2:D6:98:1E:7F:C8:21:BF X509v3 Authority Key Identifier: keyid:B3:54:D3:28:CB:BF:D1:EF:3C:D2:92:68:A2:3B:0F:CC:60:E3:A2:C5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.cer Subject Information Access: Signed Object - URI:rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/AS401560.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 164.37.220.0/24 Signature Algorithm: sha256WithRSAEncryption 01:0d:48:c4:5f:18:c2:b5:49:0b:3a:ad:a6:9b:95:50:3a:b7: 25:bb:27:37:aa:db:5b:a1:73:d4:5f:ce:54:b3:5a:18:d3:13: db:56:5c:99:03:e2:3c:43:6e:40:cb:4e:1c:76:ba:bb:9f:89: 74:15:79:1a:8e:65:f7:e0:69:72:b7:a1:47:bb:b0:1f:bf:ce: b8:33:88:94:a5:c0:91:e9:6d:a2:54:69:5d:6e:f9:ea:57:94: 29:bd:44:ff:40:f9:3c:e1:83:ca:f7:f6:c6:0f:e3:11:3c:93: ee:32:85:07:2d:d1:ab:0e:df:e8:7d:41:f3:fd:f0:cf:59:79: 26:b1:f1:02:4d:83:cd:5a:e7:2a:3b:24:77:49:a9:57:dd:32: 37:57:d1:6d:71:52:a4:85:55:67:fa:43:29:89:30:94:32:2c: 76:4d:b5:91:39:66:fd:2c:ef:ff:3d:df:a2:f6:e9:07:ac:ca: 1d:70:03:29:fb:36:8a:57:9b:51:01:a5:ad:0b:28:d2:7b:32: ae:38:99:38:b4:60:9e:ac:88:8c:75:c8:27:eb:e7:bf:7e:85: 38:cd:0d:6e:34:d0:5d:6b:31:2b:bc:e7:0d:09:93:6d:22:e9: 7f:fc:92:36:55:73:56:2c:00:dd:d5:73:63:f4:2a:3d:27:35: 54:7b:6a:92 -----BEGIN CERTIFICATE----- MIIFJTCCBA2gAwIBAgIUZ/p7j8O2MH3wtMc5E93qjd+1h/QwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjM1NEQzMjhDQkJGRDFFRjNDRDI5MjY4QTIzQjBGQ0M2 MEUzQTJDNTAeFw0yNjA5MTAwODQ0MjFaFw0yNzA5MDkwODQ5MjFaMDMxMTAvBgNV BAMTKDY4MjM5QUE0MkE4NEQ1ODYwODcwQjhBOEUyRDY5ODFFN0ZDODIxQkYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDFzTrsdxRmB7SRayNVObq+XfHX 23StoKIYTz2LdwxwVpUOcYPp9jkm1puyAvn4SkdiIL9ThUd/Uo6vJDNxYVop2z1d QfLHnFfl2VOFAVGqdSK+vzG3vRGssa849naEKq5ktLgXugOB57c3FCe8aqMbhIZi Ayif5TPTOUsI4t9dcT3X8uU0beKza6p71pYNRKsSV9MWYvEyy6KN6VYNtU2WeaCA ndxk2dkxG6F8BtGaVryEZGRwDJ4foFOEkVo/Fl2D9Z4adnXduAZHhYfn9HRScnoe 0YiQIlbVU7t/LdzXfiDmhDZe/UgYSgqXnCY+V7xg4OLvAHeRismjqP2w7Uq7AgMB AAGjggIvMIICKzAdBgNVHQ4EFgQUaCOapCqE1YYIcLio4taYHn/IIb8wHwYDVR0j BBgwFoAUs1TTKMu/0e880pJoojsPzGDjosUwDgYDVR0PAQH/BAQDAgeAMIGIBgNV HR8EgYAwfjB8oHqgeIZ2cnN5bmM6Ly9yLm1hZ2VsbGFuLmlweG8uY29tL3JlcG8v YTAzNzViMzktZjk0OS00Y2I1LWI1MTktZjk0MDA4YjE2NTRjLTAvMC9CMzU0RDMy OENCQkZEMUVGM0NEMjkyNjhBMjNCMEZDQzYwRTNBMkM1LmNybDCBngYIKwYBBQUH AQEEgZEwgY4wgYsGCCsGAQUFBzAChn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5y aXBlLm5ldC9yZXBvc2l0b3J5LzYxNzA4YTZiLTZjM2EtNDBhMC1hMzAyLTU5NWVj YzE3ODQ4Yy8wL0IzNTREMzI4Q0JCRkQxRUYzQ0QyOTI2OEEyM0IwRkNDNjBFM0Ey QzUuY2VyMHIGCCsGAQUFBwELBGYwZDBiBggrBgEFBQcwC4ZWcnN5bmM6Ly9yLm1h Z2VsbGFuLmlweG8uY29tL3JlcG8vYTAzNzViMzktZjk0OS00Y2I1LWI1MTktZjk0 MDA4YjE2NTRjLTAvMC9BUzQwMTU2MC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEF BQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAKQl3DANBgkqhkiG9w0B AQsFAAOCAQEAAQ1IxF8YwrVJCzqtppuVUDq3JbsnN6rbW6Fz1F/OVLNaGNMT21Zc mQPiPENuQMtOHHa6u5+JdBV5Go5l9+BpcrehR7uwH7/OuDOIlKXAkeltolRpXW75 6leUKb1E/0D5POGDyvf2xg/jETyT7jKFBy3Rqw7f6H1B8/3wz1l5JrHxAk2DzVrn Kjskd0mpV90yN1fRbXFSpIVVZ/pDKYkwlDIsdk21kTlm/Szv/z3fovbpB6zKHXAD Kfs2ilebUQGlrQso0nsyrjiZOLRgnqyIjHXIJ+vnv36FOM0NbjTQXWsxK7znDQmT bSLpf/ySNlVzViwA3dVzY/QqPSc1VHtqkg== -----END CERTIFICATE-----Generated at Fri Sep 18 18:32:43 2026 by rpki-client