$ rpki-client -vvvf r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/AS214467.roa File: AS214467.roa (raw, json) Hash identifier: VvWknrmLSiYc7ThppPq8sMBib3bI4tR2WAdgn2C2jFk= Subject key identifier: 40:B2:0A:77:F4:65:A5:3A:08:7E:7D:95:4F:F9:D9:BF:D5:FF:7E:4B Certificate issuer: /CN=B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5 Certificate serial: 240FB10CD5BF63CB2A736A524EEF7463F4B924B9 Authority key identifier: B3:54:D3:28:CB:BF:D1:EF:3C:D2:92:68:A2:3B:0F:CC:60:E3:A2:C5 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.cer Subject info access: rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/AS214467.roa Signing time: Fri 11 Sep 2026 14:22:00 +0000 ROA not before: Fri 11 Sep 2026 14:17:00 +0000 ROA not after: Fri 10 Sep 2027 14:22:00 +0000 asID: 214467 IP address blocks: 164.37.230.0/24 maxlen: 24 Validation: OK Signature path: rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.crl rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.mft rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.cer rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/D0A516B50426202A424F0EBFCB7D2BD4F744F964.crl rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/D0A516B50426202A424F0EBFCB7D2BD4F744F964.mft rsync://rpki.ripe.net/repository/DEFAULT/0KUWtQQmICpCTw6_y30r1PdE-WQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 21 Sep 2026 05:00:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 24:0f:b1:0c:d5:bf:63:cb:2a:73:6a:52:4e:ef:74:63:f4:b9:24:b9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5 Validity Not Before: Sep 11 14:17:00 2026 GMT Not After : Sep 10 14:22:00 2027 GMT Subject: CN=40B20A77F465A53A087E7D954FF9D9BFD5FF7E4B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:f8:a2:d8:71:0f:c2:b5:99:0f:32:5a:c7:05: 96:48:55:e7:78:5e:4e:08:62:28:e2:cd:0e:b1:bb: ac:b7:77:73:d7:22:ec:bd:f1:ac:8c:81:cc:67:d9: f5:f2:ac:24:43:a2:cf:c5:b2:f4:12:84:48:33:8c: 6a:19:7c:3f:3d:b7:24:17:7f:c9:5f:23:09:1e:07: 83:cb:b9:b6:cb:56:94:c9:19:c5:1e:d0:50:81:3a: a1:88:63:12:99:64:25:08:6f:11:16:63:b4:30:d0: 1c:2d:78:ea:f8:e8:9c:36:a9:e6:4a:90:d7:6b:94: 42:97:0e:78:aa:4c:dc:3e:9a:36:6d:09:dd:2d:95: 7a:40:cd:56:30:79:b8:a9:d5:d0:23:01:1f:44:54: 9e:57:0f:0f:6b:f3:5e:fa:10:77:61:32:7c:cb:f6: e3:6f:ea:f8:78:96:9b:a1:ce:b4:07:6f:4a:e0:2c: 1f:b0:0a:5f:d9:aa:ff:6d:e2:15:40:21:1e:9a:ea: f8:ac:d8:f9:36:f8:db:91:36:53:d6:17:3e:0e:7c: 35:85:b1:20:ca:9b:13:aa:19:17:7c:0e:77:81:e0: e3:fe:fc:d3:c4:1e:ba:74:0c:1a:34:d6:8d:72:35: 4b:a1:53:53:36:9a:62:99:fb:d2:be:cc:96:68:71: b6:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:B2:0A:77:F4:65:A5:3A:08:7E:7D:95:4F:F9:D9:BF:D5:FF:7E:4B X509v3 Authority Key Identifier: keyid:B3:54:D3:28:CB:BF:D1:EF:3C:D2:92:68:A2:3B:0F:CC:60:E3:A2:C5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.cer Subject Information Access: Signed Object - URI:rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/AS214467.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 164.37.230.0/24 Signature Algorithm: sha256WithRSAEncryption 36:ca:c9:ee:5a:89:3c:54:1f:ff:44:5e:02:d3:3e:c9:c9:7e: 67:c9:6d:af:0b:0e:81:fa:79:5f:94:e1:e5:50:a4:4f:67:83: c6:bf:48:88:88:b4:0d:45:40:c8:d2:7b:ec:bc:e1:ee:cf:f7: c6:3e:88:a2:d0:8a:13:3e:f8:6b:b6:82:12:a6:3c:61:1f:a1: 15:ae:0b:80:f3:7d:9d:35:bc:ee:7e:4f:aa:d0:df:cd:62:59: c8:80:21:38:df:4e:d3:e3:86:31:92:d9:c9:5a:58:7f:0b:47: 7d:5a:45:34:82:95:e2:40:c7:31:47:3a:bc:fd:09:17:7b:2d: 54:48:1b:67:f3:de:b6:bc:31:b2:a5:e3:f3:40:15:93:ee:fe: ee:29:5d:c0:f1:52:a0:0b:10:e9:eb:f7:21:54:5e:bc:a7:0f: 00:35:39:30:a0:28:95:3d:c6:2e:d5:6d:89:7d:04:03:55:ef: 18:ee:67:37:cb:12:e9:c0:1f:fc:89:ff:ea:e8:01:fd:cc:84: 6d:c3:51:80:e8:31:be:88:b6:99:2d:3f:b6:2e:68:1b:af:29: af:bb:30:e3:41:2e:22:59:c7:26:39:ce:ce:bd:d6:d6:9d:12: 0a:fd:c1:20:27:75:d0:44:4a:71:6e:52:b3:3c:d2:8f:39:a1: 4b:f8:79:a0 -----BEGIN CERTIFICATE----- MIIFJTCCBA2gAwIBAgIUJA+xDNW/Y8sqc2pSTu90Y/S5JLkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjM1NEQzMjhDQkJGRDFFRjNDRDI5MjY4QTIzQjBGQ0M2 MEUzQTJDNTAeFw0yNjA5MTExNDE3MDBaFw0yNzA5MTAxNDIyMDBaMDMxMTAvBgNV BAMTKDQwQjIwQTc3RjQ2NUE1M0EwODdFN0Q5NTRGRjlEOUJGRDVGRjdFNEIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDa+KLYcQ/CtZkPMlrHBZZIVed4 Xk4IYijizQ6xu6y3d3PXIuy98ayMgcxn2fXyrCRDos/FsvQShEgzjGoZfD89tyQX f8lfIwkeB4PLubbLVpTJGcUe0FCBOqGIYxKZZCUIbxEWY7Qw0BwteOr46Jw2qeZK kNdrlEKXDniqTNw+mjZtCd0tlXpAzVYwebip1dAjAR9EVJ5XDw9r8176EHdhMnzL 9uNv6vh4lpuhzrQHb0rgLB+wCl/Zqv9t4hVAIR6a6vis2Pk2+NuRNlPWFz4OfDWF sSDKmxOqGRd8DneB4OP+/NPEHrp0DBo01o1yNUuhU1M2mmKZ+9K+zJZocbajAgMB AAGjggIvMIICKzAdBgNVHQ4EFgQUQLIKd/RlpToIfn2VT/nZv9X/fkswHwYDVR0j BBgwFoAUs1TTKMu/0e880pJoojsPzGDjosUwDgYDVR0PAQH/BAQDAgeAMIGIBgNV HR8EgYAwfjB8oHqgeIZ2cnN5bmM6Ly9yLm1hZ2VsbGFuLmlweG8uY29tL3JlcG8v YTAzNzViMzktZjk0OS00Y2I1LWI1MTktZjk0MDA4YjE2NTRjLTAvMC9CMzU0RDMy OENCQkZEMUVGM0NEMjkyNjhBMjNCMEZDQzYwRTNBMkM1LmNybDCBngYIKwYBBQUH AQEEgZEwgY4wgYsGCCsGAQUFBzAChn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5y aXBlLm5ldC9yZXBvc2l0b3J5LzYxNzA4YTZiLTZjM2EtNDBhMC1hMzAyLTU5NWVj YzE3ODQ4Yy8wL0IzNTREMzI4Q0JCRkQxRUYzQ0QyOTI2OEEyM0IwRkNDNjBFM0Ey QzUuY2VyMHIGCCsGAQUFBwELBGYwZDBiBggrBgEFBQcwC4ZWcnN5bmM6Ly9yLm1h Z2VsbGFuLmlweG8uY29tL3JlcG8vYTAzNzViMzktZjk0OS00Y2I1LWI1MTktZjk0 MDA4YjE2NTRjLTAvMC9BUzIxNDQ2Ny5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEF BQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAKQl5jANBgkqhkiG9w0B AQsFAAOCAQEANsrJ7lqJPFQf/0ReAtM+ycl+Z8ltrwsOgfp5X5Th5VCkT2eDxr9I iIi0DUVAyNJ77Lzh7s/3xj6IotCKEz74a7aCEqY8YR+hFa4LgPN9nTW87n5PqtDf zWJZyIAhON9O0+OGMZLZyVpYfwtHfVpFNIKV4kDHMUc6vP0JF3stVEgbZ/Petrwx sqXj80AVk+7+7ildwPFSoAsQ6ev3IVRevKcPADU5MKAolT3GLtVtiX0EA1XvGO5n N8sS6cAf/In/6ugB/cyEbcNRgOgxvoi2mS0/ti5oG68pr7sw40EuIlnHJjnOzr3W 1p0SCv3BICd10ERKcW5SszzSjzmhS/h5oA== -----END CERTIFICATE-----Generated at Sun Sep 20 15:44:44 2026 by rpki-client