$ rpki-client -vvf r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/AS402276.roa File: AS402276.roa (raw, json) Hash identifier: 72H1acL9gAFbwzVkkJz0JtX+g7A+N6bW2IbhnoAiv8Y= Subject key identifier: 8A:CB:3A:C6:FD:B5:93:3C:C2:FC:A0:C9:A6:79:43:D6:85:94:9A:BD Certificate issuer: /CN=B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5 Certificate serial: 2803D5FB3A6F0DC18F354C63D5536EEFDB8AF3EB Authority key identifier: B3:54:D3:28:CB:BF:D1:EF:3C:D2:92:68:A2:3B:0F:CC:60:E3:A2:C5 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.cer Subject info access: rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/AS402276.roa Signing time: Fri 10 Jul 2026 20:23:19 +0000 ROA not before: Fri 10 Jul 2026 20:18:19 +0000 ROA not after: Fri 09 Jul 2027 20:23:19 +0000 asID: 402276 IP address blocks: 164.37.196.0/24 maxlen: 24 164.37.217.0/24 maxlen: 24 164.37.234.0/24 maxlen: 24 164.37.239.0/24 maxlen: 24 Validation: OK Signature path: rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.crl rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.mft rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.cer rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/D0A516B50426202A424F0EBFCB7D2BD4F744F964.crl rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/D0A516B50426202A424F0EBFCB7D2BD4F744F964.mft rsync://rpki.ripe.net/repository/DEFAULT/0KUWtQQmICpCTw6_y30r1PdE-WQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 18 Jul 2026 15:41:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 28:03:d5:fb:3a:6f:0d:c1:8f:35:4c:63:d5:53:6e:ef:db:8a:f3:eb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5 Validity Not Before: Jul 10 20:18:19 2026 GMT Not After : Jul 9 20:23:19 2027 GMT Subject: CN=8ACB3AC6FDB5933CC2FCA0C9A67943D685949ABD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:d0:f4:f9:6c:2a:6d:15:38:76:8a:79:0f:f8: ac:bc:c5:0f:94:d0:1a:bf:4d:84:b2:d4:81:cc:07: 0a:7f:b0:70:58:b5:92:af:fe:15:51:3d:ae:a3:8a: 45:40:cd:2c:3f:dd:fe:7f:c2:28:9f:39:89:a2:37: c2:ad:c0:43:e5:9d:8e:96:b8:7c:14:cd:2f:ec:e1: 97:ba:bf:e5:87:0a:bf:b7:3b:7c:c5:48:95:fe:3d: 15:be:aa:29:49:26:94:64:bc:17:bf:80:62:ed:96: 19:20:42:33:f5:30:8e:a5:47:13:01:5d:51:9b:ea: aa:b0:ac:a6:c4:24:ba:dd:e7:73:c6:ac:51:4e:c3: ff:d8:df:e9:94:56:f7:ac:99:c6:ce:cf:6e:fd:46: 1a:6f:06:da:5e:56:43:74:7b:87:37:db:46:72:b4: 88:32:29:7a:1a:04:42:1b:9f:9c:e2:9a:f8:1a:34: 8c:59:9d:c6:1a:99:4d:a8:17:ca:fe:6b:7a:02:57: 69:c2:a1:a2:c4:c8:37:69:8a:22:30:d3:65:d7:ce: 29:8c:d7:93:80:fe:b1:d1:d8:52:cf:cb:58:17:66: 5c:bd:cc:ce:94:f3:ed:27:53:d5:59:2e:41:b2:39: cb:0e:4b:e1:1e:7e:64:47:b0:40:eb:6e:9e:45:3c: 22:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:CB:3A:C6:FD:B5:93:3C:C2:FC:A0:C9:A6:79:43:D6:85:94:9A:BD X509v3 Authority Key Identifier: keyid:B3:54:D3:28:CB:BF:D1:EF:3C:D2:92:68:A2:3B:0F:CC:60:E3:A2:C5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.cer Subject Information Access: Signed Object - URI:rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/AS402276.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 164.37.196.0/24 164.37.217.0/24 164.37.234.0/24 164.37.239.0/24 Signature Algorithm: sha256WithRSAEncryption 18:78:e6:48:6c:37:67:0b:14:e4:6f:e4:f2:d0:aa:5b:46:6e: 1e:fd:3c:c8:6d:b3:0b:19:5c:30:7e:7a:d7:c1:e3:cd:4e:4e: d5:fe:8b:7a:45:bb:69:f3:0b:75:f6:e8:bf:b7:dd:95:0d:fa: ef:52:1b:81:aa:1d:cf:cd:b9:c2:0d:d8:d0:58:71:58:79:4d: 8c:91:7c:12:5c:81:a5:54:e1:a1:2f:3a:6b:63:67:98:31:2a: 17:c5:3e:c7:81:19:8a:b5:fd:aa:86:98:44:f5:bf:ca:50:ab: ed:e0:4a:5c:b3:69:e5:af:05:8e:63:1e:02:bc:b9:f9:3e:bf: 38:25:68:2b:57:09:34:af:cb:aa:8a:e3:ee:2c:95:70:83:88: 76:3a:87:d8:33:1f:ff:d9:25:a4:cf:fb:20:7d:13:46:7e:6c: 6a:db:4e:06:c9:dd:99:2a:91:04:54:68:72:70:a9:f7:ed:ce: d1:44:f1:f6:9b:86:58:6e:93:34:86:85:ae:03:ec:c4:ed:24: 0d:fa:70:d8:f3:b1:79:ba:14:06:bd:56:a9:4e:0b:89:dc:1b: e9:99:fe:e5:a8:38:78:5c:fd:d4:1e:6a:76:bc:ff:77:07:70: 17:3b:2e:b1:a2:cf:4e:28:de:5d:b5:e5:5b:4a:4f:81:e1:76: 1c:89:58:28 -----BEGIN CERTIFICATE----- MIIFNzCCBB+gAwIBAgIUKAPV+zpvDcGPNUxj1VNu79uK8+swDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjM1NEQzMjhDQkJGRDFFRjNDRDI5MjY4QTIzQjBGQ0M2 MEUzQTJDNTAeFw0yNjA3MTAyMDE4MTlaFw0yNzA3MDkyMDIzMTlaMDMxMTAvBgNV BAMTKDhBQ0IzQUM2RkRCNTkzM0NDMkZDQTBDOUE2Nzk0M0Q2ODU5NDlBQkQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCn0PT5bCptFTh2inkP+Ky8xQ+U 0Bq/TYSy1IHMBwp/sHBYtZKv/hVRPa6jikVAzSw/3f5/wiifOYmiN8KtwEPlnY6W uHwUzS/s4Ze6v+WHCr+3O3zFSJX+PRW+qilJJpRkvBe/gGLtlhkgQjP1MI6lRxMB XVGb6qqwrKbEJLrd53PGrFFOw//Y3+mUVvesmcbOz279RhpvBtpeVkN0e4c320Zy tIgyKXoaBEIbn5zimvgaNIxZncYamU2oF8r+a3oCV2nCoaLEyDdpiiIw02XXzimM 15OA/rHR2FLPy1gXZly9zM6U8+0nU9VZLkGyOcsOS+EefmRHsEDrbp5FPCKlAgMB AAGjggJBMIICPTAdBgNVHQ4EFgQUiss6xv21kzzC/KDJpnlD1oWUmr0wHwYDVR0j BBgwFoAUs1TTKMu/0e880pJoojsPzGDjosUwDgYDVR0PAQH/BAQDAgeAMIGIBgNV HR8EgYAwfjB8oHqgeIZ2cnN5bmM6Ly9yLm1hZ2VsbGFuLmlweG8uY29tL3JlcG8v YTAzNzViMzktZjk0OS00Y2I1LWI1MTktZjk0MDA4YjE2NTRjLTAvMC9CMzU0RDMy OENCQkZEMUVGM0NEMjkyNjhBMjNCMEZDQzYwRTNBMkM1LmNybDCBngYIKwYBBQUH AQEEgZEwgY4wgYsGCCsGAQUFBzAChn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5y aXBlLm5ldC9yZXBvc2l0b3J5LzYxNzA4YTZiLTZjM2EtNDBhMC1hMzAyLTU5NWVj YzE3ODQ4Yy8wL0IzNTREMzI4Q0JCRkQxRUYzQ0QyOTI2OEEyM0IwRkNDNjBFM0Ey QzUuY2VyMHIGCCsGAQUFBwELBGYwZDBiBggrBgEFBQcwC4ZWcnN5bmM6Ly9yLm1h Z2VsbGFuLmlweG8uY29tL3JlcG8vYTAzNzViMzktZjk0OS00Y2I1LWI1MTktZjk0 MDA4YjE2NTRjLTAvMC9BUzQwMjI3Ni5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEF BQcOAjAxBggrBgEFBQcBBwEB/wQiMCAwHgQCAAEwGAMEAKQlxAMEAKQl2QMEAKQl 6gMEAKQl7zANBgkqhkiG9w0BAQsFAAOCAQEAGHjmSGw3ZwsU5G/k8tCqW0ZuHv08 yG2zCxlcMH5618HjzU5O1f6LekW7afMLdfbov7fdlQ3671Ibgaodz825wg3Y0Fhx WHlNjJF8ElyBpVThoS86a2NnmDEqF8U+x4EZirX9qoaYRPW/ylCr7eBKXLNp5a8F jmMeAry5+T6/OCVoK1cJNK/Lqorj7iyVcIOIdjqH2DMf/9klpM/7IH0TRn5sattO BsndmSqRBFRocnCp9+3O0UTx9puGWG6TNIaFrgPsxO0kDfpw2POxeboUBr1WqU4L idwb6Zn+5ag4eFz91B5qdrz/dwdwFzsusaLPTijeXbXlW0pPgeF2HIlYKA== -----END CERTIFICATE-----Generated at Sat Jul 18 03:24:20 2026 by rpki-client