$ rpki-client -vvvf r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/AS14618.roa File: AS14618.roa (raw, json) Hash identifier: TwwjxCO/WQeIby6xdzMXuBj+rZ6vlD2QankYQ2YHe+Q= Subject key identifier: A7:61:9E:79:13:DD:78:F7:28:0E:21:8A:EE:D2:A3:0B:E2:5B:6E:E4 Certificate issuer: /CN=B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5 Certificate serial: 0BE84385A2174D5501C6E1D5C760DB426D43118B Authority key identifier: B3:54:D3:28:CB:BF:D1:EF:3C:D2:92:68:A2:3B:0F:CC:60:E3:A2:C5 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.cer Subject info access: rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/AS14618.roa Signing time: Thu 10 Sep 2026 08:49:21 +0000 ROA not before: Thu 10 Sep 2026 08:44:21 +0000 ROA not after: Thu 09 Sep 2027 08:49:21 +0000 asID: 14618 IP address blocks: 164.37.198.0/23 maxlen: 24 164.37.208.0/24 maxlen: 24 Validation: OK Signature path: rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.crl rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.mft rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.cer rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/D0A516B50426202A424F0EBFCB7D2BD4F744F964.crl rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/D0A516B50426202A424F0EBFCB7D2BD4F744F964.mft rsync://rpki.ripe.net/repository/DEFAULT/0KUWtQQmICpCTw6_y30r1PdE-WQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 21 Sep 2026 05:00:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0b:e8:43:85:a2:17:4d:55:01:c6:e1:d5:c7:60:db:42:6d:43:11:8b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5 Validity Not Before: Sep 10 08:44:21 2026 GMT Not After : Sep 9 08:49:21 2027 GMT Subject: CN=A7619E7913DD78F7280E218AEED2A30BE25B6EE4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:8f:db:56:e3:ef:51:53:7c:03:25:42:d8:49: 2f:69:13:5f:ab:26:0c:d9:e8:2a:5e:2d:91:17:7d: 6e:ef:02:2f:1a:a5:22:33:58:04:3a:d6:47:92:3f: ef:f4:b2:21:6e:9d:99:b9:41:da:7e:16:4b:7c:9a: 85:ea:63:3a:3a:e9:a1:d1:50:09:09:16:fc:03:c4: 57:ac:be:00:cf:77:cf:21:73:69:40:e7:2a:49:ec: fa:82:a1:53:64:dd:5f:c5:63:3d:80:77:b2:76:c0: 3e:6d:18:dc:74:46:2c:9c:b3:21:fa:2e:85:79:c1: 4d:67:ee:9a:c3:5d:e0:d1:89:5c:ae:74:ed:09:ac: 4f:51:a4:f8:86:13:85:9e:bb:74:b4:86:04:10:21: 44:6a:82:38:05:6e:9e:68:2e:de:bc:8e:31:0f:9d: 5a:66:01:83:a7:af:0a:9d:6a:37:cf:61:bb:1c:f6: 91:36:52:87:63:72:0b:54:8a:12:57:91:fc:a1:83: 8e:72:ef:e2:a8:a8:a5:2e:bc:2f:af:e3:88:2b:58: 2a:e1:6f:05:de:92:97:30:41:0c:ab:ff:d1:ce:52: a5:99:90:3c:71:64:d0:64:72:fe:f4:3a:c0:4a:9e: 3d:a7:14:49:64:e2:6f:6f:2a:3e:62:e0:cf:f6:17: 2a:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:61:9E:79:13:DD:78:F7:28:0E:21:8A:EE:D2:A3:0B:E2:5B:6E:E4 X509v3 Authority Key Identifier: keyid:B3:54:D3:28:CB:BF:D1:EF:3C:D2:92:68:A2:3B:0F:CC:60:E3:A2:C5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.cer Subject Information Access: Signed Object - URI:rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/AS14618.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 164.37.198.0/23 164.37.208.0/24 Signature Algorithm: sha256WithRSAEncryption 64:1b:01:5d:67:cc:01:83:6a:c0:3a:c5:ed:32:c5:e9:a5:38: 01:0d:30:86:55:31:dd:ae:ad:5f:d0:67:10:83:e4:5f:2a:6c: e8:92:0d:23:b0:aa:bf:dc:98:ec:10:58:96:ca:a0:e0:37:24: 70:e8:42:44:7c:95:96:4e:89:23:c6:59:2f:e4:f7:0d:06:3c: 2e:9d:ef:7b:87:d4:1e:e1:1d:bc:01:2a:36:2f:20:ef:63:6d: 54:2e:c2:bd:54:6d:ec:19:8e:80:cf:26:42:dd:cc:a2:19:65: 34:b9:b6:72:c5:33:bc:ef:82:0d:0d:32:09:98:a0:3d:a2:2e: 5d:da:0b:93:03:37:98:0f:33:14:33:e7:d7:02:1f:6a:b8:3a: a9:79:17:d1:43:5a:57:c2:4a:91:31:cd:e2:d8:4f:92:17:ea: a1:7a:8f:0d:d4:97:42:5f:70:8e:03:81:c4:00:a8:9e:0a:3a: 9b:83:10:7e:dd:45:8d:9a:6f:ea:01:ee:91:33:bd:11:ec:91: 07:66:94:84:2c:40:94:98:ee:2f:8a:93:e0:c7:6e:64:f8:fb: 01:be:a1:f5:c8:08:70:f1:59:34:f5:5c:3c:f5:7c:31:ee:d2: 0b:4c:a5:59:c0:71:36:91:0d:04:f9:c1:80:03:f8:a1:56:75: 9a:0d:0e:36 -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUC+hDhaIXTVUBxuHVx2DbQm1DEYswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjM1NEQzMjhDQkJGRDFFRjNDRDI5MjY4QTIzQjBGQ0M2 MEUzQTJDNTAeFw0yNjA5MTAwODQ0MjFaFw0yNzA5MDkwODQ5MjFaMDMxMTAvBgNV BAMTKEE3NjE5RTc5MTNERDc4RjcyODBFMjE4QUVFRDJBMzBCRTI1QjZFRTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDkj9tW4+9RU3wDJULYSS9pE1+r JgzZ6CpeLZEXfW7vAi8apSIzWAQ61keSP+/0siFunZm5Qdp+Fkt8moXqYzo66aHR UAkJFvwDxFesvgDPd88hc2lA5ypJ7PqCoVNk3V/FYz2Ad7J2wD5tGNx0RiycsyH6 LoV5wU1n7prDXeDRiVyudO0JrE9RpPiGE4Weu3S0hgQQIURqgjgFbp5oLt68jjEP nVpmAYOnrwqdajfPYbsc9pE2UodjcgtUihJXkfyhg45y7+KoqKUuvC+v44grWCrh bwXekpcwQQyr/9HOUqWZkDxxZNBkcv70OsBKnj2nFElk4m9vKj5i4M/2FyqLAgMB AAGjggI0MIICMDAdBgNVHQ4EFgQUp2GeeRPdePcoDiGK7tKjC+JbbuQwHwYDVR0j BBgwFoAUs1TTKMu/0e880pJoojsPzGDjosUwDgYDVR0PAQH/BAQDAgeAMIGIBgNV HR8EgYAwfjB8oHqgeIZ2cnN5bmM6Ly9yLm1hZ2VsbGFuLmlweG8uY29tL3JlcG8v YTAzNzViMzktZjk0OS00Y2I1LWI1MTktZjk0MDA4YjE2NTRjLTAvMC9CMzU0RDMy OENCQkZEMUVGM0NEMjkyNjhBMjNCMEZDQzYwRTNBMkM1LmNybDCBngYIKwYBBQUH AQEEgZEwgY4wgYsGCCsGAQUFBzAChn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5y aXBlLm5ldC9yZXBvc2l0b3J5LzYxNzA4YTZiLTZjM2EtNDBhMC1hMzAyLTU5NWVj YzE3ODQ4Yy8wL0IzNTREMzI4Q0JCRkQxRUYzQ0QyOTI2OEEyM0IwRkNDNjBFM0Ey QzUuY2VyMHEGCCsGAQUFBwELBGUwYzBhBggrBgEFBQcwC4ZVcnN5bmM6Ly9yLm1h Z2VsbGFuLmlweG8uY29tL3JlcG8vYTAzNzViMzktZjk0OS00Y2I1LWI1MTktZjk0 MDA4YjE2NTRjLTAvMC9BUzE0NjE4LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQBpCXGAwQApCXQMA0GCSqG SIb3DQEBCwUAA4IBAQBkGwFdZ8wBg2rAOsXtMsXppTgBDTCGVTHdrq1f0GcQg+Rf Kmzokg0jsKq/3JjsEFiWyqDgNyRw6EJEfJWWTokjxlkv5PcNBjwune97h9Qe4R28 ASo2LyDvY21ULsK9VG3sGY6AzyZC3cyiGWU0ubZyxTO874INDTIJmKA9oi5d2guT AzeYDzMUM+fXAh9quDqpeRfRQ1pXwkqRMc3i2E+SF+qheo8N1JdCX3COA4HEAKie CjqbgxB+3UWNmm/qAe6RM70R7JEHZpSELECUmO4vipPgx25k+PsBvqH1yAhw8Vk0 9Vw89Xwx7tILTKVZwHE2kQ0E+cGAA/ihVnWaDQ42 -----END CERTIFICATE-----Generated at Sun Sep 20 13:26:35 2026 by rpki-client