$ rpki-client -vvvf r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/AS218979.roa File: AS218979.roa (raw, json) Hash identifier: 5Li3u6vYddfFi7ByPU4h/nhxyzwbiTiMrHDQKXJ1I/w= Subject key identifier: 9C:80:88:86:A3:58:41:32:06:63:B1:C1:D4:65:84:2C:6B:05:9E:80 Certificate issuer: /CN=B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5 Certificate serial: 2DF80D6F5E1553D6EFDA96FC7A39E084805B7814 Authority key identifier: B3:54:D3:28:CB:BF:D1:EF:3C:D2:92:68:A2:3B:0F:CC:60:E3:A2:C5 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.cer Subject info access: rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/AS218979.roa Signing time: Thu 10 Sep 2026 08:49:21 +0000 ROA not before: Thu 10 Sep 2026 08:44:21 +0000 ROA not after: Thu 09 Sep 2027 08:49:21 +0000 asID: 218979 IP address blocks: 164.37.236.0/24 maxlen: 24 Validation: OK Signature path: rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.crl rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.mft rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.cer rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/D0A516B50426202A424F0EBFCB7D2BD4F744F964.crl rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/D0A516B50426202A424F0EBFCB7D2BD4F744F964.mft rsync://rpki.ripe.net/repository/DEFAULT/0KUWtQQmICpCTw6_y30r1PdE-WQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 21 Sep 2026 05:00:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2d:f8:0d:6f:5e:15:53:d6:ef:da:96:fc:7a:39:e0:84:80:5b:78:14 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5 Validity Not Before: Sep 10 08:44:21 2026 GMT Not After : Sep 9 08:49:21 2027 GMT Subject: CN=9C808886A35841320663B1C1D465842C6B059E80 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:5e:12:92:31:a7:0d:b1:de:83:37:11:12:a7: 82:e5:6f:4a:f2:a6:07:af:54:c8:34:5d:3b:07:d7: 94:10:a0:3a:4d:4a:b2:b4:db:90:a2:4f:e4:09:90: a5:df:aa:c0:8f:50:fa:5e:56:2a:49:f5:f4:c3:44: f6:48:a5:51:78:b9:30:42:f6:92:1f:52:71:dc:35: 6c:4f:3a:7a:59:d2:d6:84:b5:cb:ec:84:68:8b:df: 4c:f5:9a:1e:e6:fc:c2:f3:8f:77:8e:73:5b:ca:af: 00:64:13:70:dc:29:f3:6c:05:d8:22:16:91:0d:cd: 03:17:4d:e9:80:8c:64:21:0d:36:fd:79:7a:ec:40: f9:a3:c2:5b:35:55:06:df:97:db:89:b4:7d:93:46: a7:2d:96:20:7b:69:5e:56:d0:6f:ae:c8:c4:a6:1f: 4c:e8:aa:39:58:d3:dd:41:73:7f:2d:c3:0a:99:25: 88:c9:7a:10:0b:7c:69:29:8c:0b:d1:5b:e3:e2:19: c8:67:ed:2a:a6:e2:cc:4f:3b:d0:4a:f5:22:38:55: 6d:73:c1:e6:5a:21:21:5f:7f:ad:98:63:73:8c:50: c8:57:35:6a:6f:1c:4e:56:27:a3:3f:10:f7:39:a2: b0:4c:50:d8:92:73:b8:d6:c8:30:39:b1:ab:7d:3f: b2:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:80:88:86:A3:58:41:32:06:63:B1:C1:D4:65:84:2C:6B:05:9E:80 X509v3 Authority Key Identifier: keyid:B3:54:D3:28:CB:BF:D1:EF:3C:D2:92:68:A2:3B:0F:CC:60:E3:A2:C5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.cer Subject Information Access: Signed Object - URI:rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/AS218979.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 164.37.236.0/24 Signature Algorithm: sha256WithRSAEncryption 07:89:2a:06:e1:c4:99:c6:12:ae:7b:b1:df:7f:02:5e:56:65: bb:c3:97:60:50:be:ab:db:e1:30:aa:cb:76:9f:e1:64:88:eb: 78:b6:1e:c4:59:a2:3c:b0:38:ff:82:70:76:c9:9e:6c:ba:c7: 72:35:f7:91:4c:73:2c:26:27:b5:82:91:8b:e7:4f:de:fa:12: 0b:b1:90:1c:9e:ce:8a:1f:a8:95:2a:40:f5:04:62:da:1a:92: d3:f0:86:22:42:4c:66:75:7b:a3:90:f1:cf:06:ae:03:80:2f: c3:ac:dd:89:92:00:80:32:15:12:c6:3a:0b:8c:23:c8:1f:f8: ce:89:0b:ce:3e:0c:c4:6b:a0:05:ef:3a:41:4d:e5:e0:99:1a: a0:cd:87:19:73:f0:f7:0c:3b:4f:10:b5:45:cf:cb:f7:8b:10: a3:c5:b8:2d:1e:36:be:f5:bf:14:ca:17:f4:11:19:0a:53:7d: d1:d8:a8:4f:2b:39:49:0b:0b:4a:30:a0:3e:5c:0f:83:fa:7e: d6:6c:c1:a2:c4:12:10:4f:72:d8:41:b6:74:75:e1:67:ef:f6: 18:92:b8:86:63:f7:5e:9f:fc:30:3c:c9:9c:8e:a9:c1:4b:9d: 73:90:20:81:39:87:bd:b6:29:b5:1c:dc:5f:ae:1f:5d:9a:8e: 3f:f6:5d:4f -----BEGIN CERTIFICATE----- MIIFJTCCBA2gAwIBAgIULfgNb14VU9bv2pb8ejnghIBbeBQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjM1NEQzMjhDQkJGRDFFRjNDRDI5MjY4QTIzQjBGQ0M2 MEUzQTJDNTAeFw0yNjA5MTAwODQ0MjFaFw0yNzA5MDkwODQ5MjFaMDMxMTAvBgNV BAMTKDlDODA4ODg2QTM1ODQxMzIwNjYzQjFDMUQ0NjU4NDJDNkIwNTlFODAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDMXhKSMacNsd6DNxESp4Llb0ry pgevVMg0XTsH15QQoDpNSrK025CiT+QJkKXfqsCPUPpeVipJ9fTDRPZIpVF4uTBC 9pIfUnHcNWxPOnpZ0taEtcvshGiL30z1mh7m/MLzj3eOc1vKrwBkE3DcKfNsBdgi FpENzQMXTemAjGQhDTb9eXrsQPmjwls1VQbfl9uJtH2TRqctliB7aV5W0G+uyMSm H0zoqjlY091Bc38twwqZJYjJehALfGkpjAvRW+PiGchn7Sqm4sxPO9BK9SI4VW1z weZaISFff62YY3OMUMhXNWpvHE5WJ6M/EPc5orBMUNiSc7jWyDA5sat9P7KRAgMB AAGjggIvMIICKzAdBgNVHQ4EFgQUnICIhqNYQTIGY7HB1GWELGsFnoAwHwYDVR0j BBgwFoAUs1TTKMu/0e880pJoojsPzGDjosUwDgYDVR0PAQH/BAQDAgeAMIGIBgNV HR8EgYAwfjB8oHqgeIZ2cnN5bmM6Ly9yLm1hZ2VsbGFuLmlweG8uY29tL3JlcG8v YTAzNzViMzktZjk0OS00Y2I1LWI1MTktZjk0MDA4YjE2NTRjLTAvMC9CMzU0RDMy OENCQkZEMUVGM0NEMjkyNjhBMjNCMEZDQzYwRTNBMkM1LmNybDCBngYIKwYBBQUH AQEEgZEwgY4wgYsGCCsGAQUFBzAChn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5y aXBlLm5ldC9yZXBvc2l0b3J5LzYxNzA4YTZiLTZjM2EtNDBhMC1hMzAyLTU5NWVj YzE3ODQ4Yy8wL0IzNTREMzI4Q0JCRkQxRUYzQ0QyOTI2OEEyM0IwRkNDNjBFM0Ey QzUuY2VyMHIGCCsGAQUFBwELBGYwZDBiBggrBgEFBQcwC4ZWcnN5bmM6Ly9yLm1h Z2VsbGFuLmlweG8uY29tL3JlcG8vYTAzNzViMzktZjk0OS00Y2I1LWI1MTktZjk0 MDA4YjE2NTRjLTAvMC9BUzIxODk3OS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEF BQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAKQl7DANBgkqhkiG9w0B AQsFAAOCAQEAB4kqBuHEmcYSrnux338CXlZlu8OXYFC+q9vhMKrLdp/hZIjreLYe xFmiPLA4/4JwdsmebLrHcjX3kUxzLCYntYKRi+dP3voSC7GQHJ7Oih+olSpA9QRi 2hqS0/CGIkJMZnV7o5DxzwauA4Avw6zdiZIAgDIVEsY6C4wjyB/4zokLzj4MxGug Be86QU3l4JkaoM2HGXPw9ww7TxC1Rc/L94sQo8W4LR42vvW/FMoX9BEZClN90dio Tys5SQsLSjCgPlwPg/p+1mzBosQSEE9y2EG2dHXhZ+/2GJK4hmP3Xp/8MDzJnI6p wUudc5AggTmHvbYptRzcX64fXZqOP/ZdTw== -----END CERTIFICATE-----Generated at Sun Sep 20 15:44:38 2026 by rpki-client