$ rpki-client -vvvf r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/AS152868.roa File: AS152868.roa (raw, json) Hash identifier: EEFUPEcSFLjKVleBK/G1esGPZee8qBf8kSURpYNOpxI= Subject key identifier: 4A:92:5D:0A:19:B7:16:77:7E:D7:AB:84:3F:CF:C3:B4:39:90:F7:A9 Certificate issuer: /CN=B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5 Certificate serial: 1CDC2FEAF8D2103EF96BB8E720F4E84576610686 Authority key identifier: B3:54:D3:28:CB:BF:D1:EF:3C:D2:92:68:A2:3B:0F:CC:60:E3:A2:C5 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.cer Subject info access: rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/AS152868.roa Signing time: Thu 10 Sep 2026 08:49:22 +0000 ROA not before: Thu 10 Sep 2026 08:44:22 +0000 ROA not after: Thu 09 Sep 2027 08:49:22 +0000 asID: 152868 IP address blocks: 164.37.231.0/24 maxlen: 24 Validation: OK Signature path: rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.crl rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.mft rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.cer rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/D0A516B50426202A424F0EBFCB7D2BD4F744F964.crl rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/D0A516B50426202A424F0EBFCB7D2BD4F744F964.mft rsync://rpki.ripe.net/repository/DEFAULT/0KUWtQQmICpCTw6_y30r1PdE-WQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 21 Sep 2026 05:00:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1c:dc:2f:ea:f8:d2:10:3e:f9:6b:b8:e7:20:f4:e8:45:76:61:06:86 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5 Validity Not Before: Sep 10 08:44:22 2026 GMT Not After : Sep 9 08:49:22 2027 GMT Subject: CN=4A925D0A19B716777ED7AB843FCFC3B43990F7A9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:f3:a0:1d:53:01:a0:ea:36:44:61:52:d7:2b: 42:8b:05:e6:17:06:05:06:fc:ad:67:e9:24:2e:f5: a6:6a:4c:cc:0b:17:b6:f2:16:29:22:ea:b7:44:f3: d3:db:ad:68:55:a9:90:c7:63:20:28:00:96:e2:e7: cb:5f:43:76:aa:f5:b7:0e:99:4f:9b:03:92:e8:83: 7a:7e:29:7f:3c:45:14:99:07:42:24:49:05:d9:b1: e7:d1:9a:a7:eb:d9:d7:c3:3f:d7:e6:a0:80:6b:ff: ca:62:fe:f9:bb:05:1d:82:97:60:18:c2:e4:fb:08: 60:85:75:96:ad:23:6a:d1:43:ec:fa:90:9c:1d:1c: b2:05:28:f9:5a:a2:0a:97:24:c6:f6:62:7a:50:7b: d5:31:cd:b9:22:50:5b:51:85:84:f1:37:b9:b8:66: 79:f5:11:45:21:78:15:7b:3e:16:54:cd:90:05:e6: b8:e5:a4:47:57:59:e0:82:b0:92:34:cf:ac:a4:d6: 07:12:ca:a1:6f:de:44:04:e4:ea:b2:56:0e:e3:df: 3a:68:9c:ce:39:65:53:19:8f:1c:ab:bd:9f:ea:f6: 34:c6:50:78:96:a7:7a:3b:e0:ed:b7:3b:c5:ab:06: 28:34:e3:a2:82:21:11:5f:05:89:d8:99:9c:65:d3: 61:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:92:5D:0A:19:B7:16:77:7E:D7:AB:84:3F:CF:C3:B4:39:90:F7:A9 X509v3 Authority Key Identifier: keyid:B3:54:D3:28:CB:BF:D1:EF:3C:D2:92:68:A2:3B:0F:CC:60:E3:A2:C5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.cer Subject Information Access: Signed Object - URI:rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/AS152868.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 164.37.231.0/24 Signature Algorithm: sha256WithRSAEncryption 19:7f:fc:fb:96:e1:e8:11:76:9d:23:65:c9:12:84:d5:ab:01: 55:c8:d5:19:8d:80:3d:e3:0b:d3:ea:dd:28:98:a3:e3:69:69: 38:9b:cf:1f:ed:a5:a3:a8:59:76:eb:d1:c8:f3:e3:6a:93:39: a2:7f:11:0b:49:c7:9d:ba:19:70:0a:11:54:66:f5:39:b0:d1: f9:eb:06:83:10:5d:9e:63:de:cb:1a:bb:8b:be:6a:c5:ba:b4: 7c:1e:4d:04:77:68:8c:00:39:56:c3:5a:86:c1:dd:08:3f:37: 3a:64:d7:96:6d:b2:d4:9e:d1:0c:89:62:ef:4e:66:d9:e5:70: 8d:bd:bb:f5:5a:0e:d0:0c:d5:c5:00:bb:a9:cc:8c:38:59:53: 49:4e:20:dc:d1:b9:cb:c1:2a:cc:16:5c:9b:1b:c9:e9:80:0c: 74:7b:59:43:90:6a:18:02:8d:6c:a1:52:be:84:10:a3:37:96: c0:32:ed:48:77:0b:35:c0:de:d9:d7:04:89:81:37:b2:dc:37: 62:c9:c0:41:fb:79:6e:2f:c6:38:5f:2d:42:78:db:c8:77:39: f8:ec:8e:0b:d9:63:f4:d6:8d:04:89:6d:b4:de:1e:2d:58:c7: 81:e1:2b:00:bf:d3:53:a1:ff:fa:8f:1f:ae:9c:8d:89:d8:08: c7:04:16:4a -----BEGIN CERTIFICATE----- MIIFJTCCBA2gAwIBAgIUHNwv6vjSED75a7jnIPToRXZhBoYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjM1NEQzMjhDQkJGRDFFRjNDRDI5MjY4QTIzQjBGQ0M2 MEUzQTJDNTAeFw0yNjA5MTAwODQ0MjJaFw0yNzA5MDkwODQ5MjJaMDMxMTAvBgNV BAMTKDRBOTI1RDBBMTlCNzE2Nzc3RUQ3QUI4NDNGQ0ZDM0I0Mzk5MEY3QTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDf86AdUwGg6jZEYVLXK0KLBeYX BgUG/K1n6SQu9aZqTMwLF7byFiki6rdE89PbrWhVqZDHYyAoAJbi58tfQ3aq9bcO mU+bA5Log3p+KX88RRSZB0IkSQXZsefRmqfr2dfDP9fmoIBr/8pi/vm7BR2Cl2AY wuT7CGCFdZatI2rRQ+z6kJwdHLIFKPlaogqXJMb2YnpQe9UxzbkiUFtRhYTxN7m4 Znn1EUUheBV7PhZUzZAF5rjlpEdXWeCCsJI0z6yk1gcSyqFv3kQE5OqyVg7j3zpo nM45ZVMZjxyrvZ/q9jTGUHiWp3o74O23O8WrBig046KCIRFfBYnYmZxl02GzAgMB AAGjggIvMIICKzAdBgNVHQ4EFgQUSpJdChm3Fnd+16uEP8/DtDmQ96kwHwYDVR0j BBgwFoAUs1TTKMu/0e880pJoojsPzGDjosUwDgYDVR0PAQH/BAQDAgeAMIGIBgNV HR8EgYAwfjB8oHqgeIZ2cnN5bmM6Ly9yLm1hZ2VsbGFuLmlweG8uY29tL3JlcG8v YTAzNzViMzktZjk0OS00Y2I1LWI1MTktZjk0MDA4YjE2NTRjLTAvMC9CMzU0RDMy OENCQkZEMUVGM0NEMjkyNjhBMjNCMEZDQzYwRTNBMkM1LmNybDCBngYIKwYBBQUH AQEEgZEwgY4wgYsGCCsGAQUFBzAChn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5y aXBlLm5ldC9yZXBvc2l0b3J5LzYxNzA4YTZiLTZjM2EtNDBhMC1hMzAyLTU5NWVj YzE3ODQ4Yy8wL0IzNTREMzI4Q0JCRkQxRUYzQ0QyOTI2OEEyM0IwRkNDNjBFM0Ey QzUuY2VyMHIGCCsGAQUFBwELBGYwZDBiBggrBgEFBQcwC4ZWcnN5bmM6Ly9yLm1h Z2VsbGFuLmlweG8uY29tL3JlcG8vYTAzNzViMzktZjk0OS00Y2I1LWI1MTktZjk0 MDA4YjE2NTRjLTAvMC9BUzE1Mjg2OC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEF BQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAKQl5zANBgkqhkiG9w0B AQsFAAOCAQEAGX/8+5bh6BF2nSNlyRKE1asBVcjVGY2APeML0+rdKJij42lpOJvP H+2lo6hZduvRyPPjapM5on8RC0nHnboZcAoRVGb1ObDR+esGgxBdnmPeyxq7i75q xbq0fB5NBHdojAA5VsNahsHdCD83OmTXlm2y1J7RDIli705m2eVwjb279VoO0AzV xQC7qcyMOFlTSU4g3NG5y8EqzBZcmxvJ6YAMdHtZQ5BqGAKNbKFSvoQQozeWwDLt SHcLNcDe2dcEiYE3stw3YsnAQft5bi/GOF8tQnjbyHc5+OyOC9lj9NaNBIlttN4e LVjHgeErAL/TU6H/+o8frpyNidgIxwQWSg== -----END CERTIFICATE-----Generated at Sun Sep 20 15:44:51 2026 by rpki-client