$ rpki-client -vvf r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/3136342e33372e3232342e302f32302d3234203d3e20383334.roa File: 3136342e33372e3232342e302f32302d3234203d3e20383334.roa (raw, json) Hash identifier: PW2QsT0O1KaY/v7oxPb0F7zoxn/7e0YiSqG8BftGfoQ= Subject key identifier: A2:E5:4E:A7:A8:F5:BE:60:C5:72:A0:30:16:76:A2:B0:AF:BE:09:DE Certificate issuer: /CN=B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5 Certificate serial: 49E53390A336CA6A888F62D083EBF3636437C509 Authority key identifier: B3:54:D3:28:CB:BF:D1:EF:3C:D2:92:68:A2:3B:0F:CC:60:E3:A2:C5 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.cer Subject info access: rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/3136342e33372e3232342e302f32302d3234203d3e20383334.roa Signing time: Tue 28 Jul 2026 12:18:54 +0000 ROA not before: Tue 28 Jul 2026 12:13:54 +0000 ROA not after: Tue 27 Jul 2027 12:18:54 +0000 asID: 834 IP address blocks: 164.37.224.0/20 maxlen: 24 Validation: OK Signature path: rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.crl rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.mft rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.cer rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/D0A516B50426202A424F0EBFCB7D2BD4F744F964.crl rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/D0A516B50426202A424F0EBFCB7D2BD4F744F964.mft rsync://rpki.ripe.net/repository/DEFAULT/0KUWtQQmICpCTw6_y30r1PdE-WQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 29 Jul 2026 14:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 49:e5:33:90:a3:36:ca:6a:88:8f:62:d0:83:eb:f3:63:64:37:c5:09 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5 Validity Not Before: Jul 28 12:13:54 2026 GMT Not After : Jul 27 12:18:54 2027 GMT Subject: CN=A2E54EA7A8F5BE60C572A0301676A2B0AFBE09DE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:69:17:d0:33:f1:bd:26:01:0d:5b:ca:13:d1: 48:4b:f2:6d:d7:bf:69:26:6d:8e:8e:73:af:3f:cf: ef:e9:16:e5:bb:10:9b:68:32:e7:16:af:6b:72:2c: b4:12:37:8a:b2:d2:d5:08:b7:8c:45:29:f9:c6:4a: 55:94:10:20:f2:5e:1d:77:a6:87:ff:1c:6b:41:d0: 5c:71:74:ef:3c:9f:fd:5a:d0:e8:d3:79:a7:49:2e: 5e:3c:c2:de:53:38:f1:b3:50:7b:fd:53:78:a4:09: 8f:05:f5:91:ea:2a:fe:46:68:b7:0d:48:9d:c9:31: a0:06:3f:26:95:13:5e:ae:0d:75:21:59:ac:0c:e7: 56:06:fd:86:eb:95:19:ab:c2:78:84:4d:1f:fe:35: 20:3b:43:f9:3b:bd:18:34:59:ef:c7:8c:3c:cf:69: 8b:33:4a:a5:dc:fa:df:74:f3:5f:af:f4:98:59:c5: 5d:66:c7:e1:44:98:1c:64:c6:0b:e0:c1:b9:bb:4c: b4:8a:8b:d2:36:f2:00:67:23:87:6f:ee:ae:7b:da: aa:a8:1c:68:7b:ed:31:64:74:0e:ed:f8:31:4d:54: 32:eb:ff:10:a5:a2:75:4b:8b:1a:4a:11:ff:bf:74: d4:0c:ff:1d:61:ab:80:f1:33:de:c5:7d:7d:b9:7d: 5b:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:E5:4E:A7:A8:F5:BE:60:C5:72:A0:30:16:76:A2:B0:AF:BE:09:DE X509v3 Authority Key Identifier: keyid:B3:54:D3:28:CB:BF:D1:EF:3C:D2:92:68:A2:3B:0F:CC:60:E3:A2:C5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.cer Subject Information Access: Signed Object - URI:rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/3136342e33372e3232342e302f32302d3234203d3e20383334.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 164.37.224.0/20 Signature Algorithm: sha256WithRSAEncryption 1f:dd:af:24:99:b1:89:f5:57:40:ec:42:cb:a9:95:10:31:3e: 30:1e:0d:21:d9:8e:cf:20:66:8d:02:c4:cf:f1:14:47:58:c7: 72:4e:95:0b:3c:6c:90:18:b5:e2:ec:74:a7:a3:5d:56:2c:01: 86:7a:cc:a8:3a:f9:f5:b8:d8:2e:d2:6c:88:e6:ff:c1:6f:a4: 85:5a:0e:e7:9d:1d:b9:e3:af:b5:e6:8a:01:83:45:2c:d5:bb: ec:7d:25:4b:6f:00:79:7f:56:f6:e5:e9:52:a2:a6:1c:e8:e8: 28:01:2b:21:22:23:cb:40:3e:d0:ce:ee:d6:0c:7a:ab:04:7e: f2:6f:dd:f3:ea:7f:d6:60:d8:81:bb:aa:87:d8:18:bc:e0:20: 0e:9f:14:27:19:a8:89:f8:74:c1:cc:3e:f7:ce:21:01:6d:51: 1c:78:40:69:17:2f:61:89:32:e2:68:d5:b7:1f:a9:a3:89:31: 45:39:3a:d3:ef:55:b5:4f:04:c6:86:e7:a0:f0:3c:cc:bf:08: 4c:0d:fc:67:16:c1:3f:76:53:0c:d4:6d:58:d7:05:0c:6c:13: 0b:8b:a4:77:b9:0e:92:4a:af:46:bc:f7:bb:81:2f:19:8f:b0: a0:f8:a1:1b:3a:f2:89:43:29:67:18:8b:af:f2:17:a4:57:92: 43:5e:39:ab -----BEGIN CERTIFICATE----- MIIFVDCCBDygAwIBAgIUSeUzkKM2ymqIj2LQg+vzY2Q3xQkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjM1NEQzMjhDQkJGRDFFRjNDRDI5MjY4QTIzQjBGQ0M2 MEUzQTJDNTAeFw0yNjA3MjgxMjEzNTRaFw0yNzA3MjcxMjE4NTRaMDMxMTAvBgNV BAMTKEEyRTU0RUE3QThGNUJFNjBDNTcyQTAzMDE2NzZBMkIwQUZCRTA5REUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDHaRfQM/G9JgENW8oT0UhL8m3X v2kmbY6Oc68/z+/pFuW7EJtoMucWr2tyLLQSN4qy0tUIt4xFKfnGSlWUECDyXh13 pof/HGtB0FxxdO88n/1a0OjTeadJLl48wt5TOPGzUHv9U3ikCY8F9ZHqKv5GaLcN SJ3JMaAGPyaVE16uDXUhWawM51YG/YbrlRmrwniETR/+NSA7Q/k7vRg0We/HjDzP aYszSqXc+t9081+v9JhZxV1mx+FEmBxkxgvgwbm7TLSKi9I28gBnI4dv7q572qqo HGh77TFkdA7t+DFNVDLr/xClonVLixpKEf+/dNQM/x1hq4DxM97FfX25fVu3AgMB AAGjggJeMIICWjAdBgNVHQ4EFgQUouVOp6j1vmDFcqAwFnaisK++Cd4wHwYDVR0j BBgwFoAUs1TTKMu/0e880pJoojsPzGDjosUwDgYDVR0PAQH/BAQDAgeAMIGIBgNV HR8EgYAwfjB8oHqgeIZ2cnN5bmM6Ly9yLm1hZ2VsbGFuLmlweG8uY29tL3JlcG8v YTAzNzViMzktZjk0OS00Y2I1LWI1MTktZjk0MDA4YjE2NTRjLTAvMC9CMzU0RDMy OENCQkZEMUVGM0NEMjkyNjhBMjNCMEZDQzYwRTNBMkM1LmNybDCBngYIKwYBBQUH AQEEgZEwgY4wgYsGCCsGAQUFBzAChn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5y aXBlLm5ldC9yZXBvc2l0b3J5LzYxNzA4YTZiLTZjM2EtNDBhMC1hMzAyLTU5NWVj YzE3ODQ4Yy8wL0IzNTREMzI4Q0JCRkQxRUYzQ0QyOTI2OEEyM0IwRkNDNjBFM0Ey QzUuY2VyMIGgBggrBgEFBQcBCwSBkzCBkDCBjQYIKwYBBQUHMAuGgYByc3luYzov L3IubWFnZWxsYW4uaXB4by5jb20vcmVwby9hMDM3NWIzOS1mOTQ5LTRjYjUtYjUx OS1mOTQwMDhiMTY1NGMtMC8wLzMxMzYzNDJlMzMzNzJlMzIzMjM0MmUzMDJmMzIz MDJkMzIzNDIwM2QzZTIwMzgzMzM0LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEpCXgMA0GCSqGSIb3DQEB CwUAA4IBAQAf3a8kmbGJ9VdA7ELLqZUQMT4wHg0h2Y7PIGaNAsTP8RRHWMdyTpUL PGyQGLXi7HSno11WLAGGesyoOvn1uNgu0myI5v/Bb6SFWg7nnR2546+15ooBg0Us 1bvsfSVLbwB5f1b25elSoqYc6OgoASshIiPLQD7Qzu7WDHqrBH7yb93z6n/WYNiB u6qH2Bi84CAOnxQnGaiJ+HTBzD73ziEBbVEceEBpFy9hiTLiaNW3H6mjiTFFOTrT 71W1TwTGhueg8DzMvwhMDfxnFsE/dlMM1G1Y1wUMbBMLi6R3uQ6SSq9GvPe7gS8Z j7Cg+KEbOvKJQylnGIuv8hekV5JDXjmr -----END CERTIFICATE-----Generated at Tue Jul 28 19:01:34 2026 by rpki-client