$ rpki-client -vvvf r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/AS219085.roa File: AS219085.roa (raw, json) Hash identifier: P4Oh6uS4whwoJ8vHS8EmC0xle8ONk+Us2abfR16msHE= Subject key identifier: 03:A1:11:D7:53:F6:3C:D2:56:FC:68:7C:93:AC:98:44:1C:1D:32:BE Certificate issuer: /CN=B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5 Certificate serial: 46B382A4B45D1870C9A00C3132BED151620F7DFB Authority key identifier: B3:54:D3:28:CB:BF:D1:EF:3C:D2:92:68:A2:3B:0F:CC:60:E3:A2:C5 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.cer Subject info access: rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/AS219085.roa Signing time: Thu 10 Sep 2026 08:49:20 +0000 ROA not before: Thu 10 Sep 2026 08:44:20 +0000 ROA not after: Thu 09 Sep 2027 08:49:20 +0000 asID: 219085 IP address blocks: 164.37.232.0/24 maxlen: 24 Validation: OK Signature path: rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.crl rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.mft rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.cer rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/D0A516B50426202A424F0EBFCB7D2BD4F744F964.crl rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/D0A516B50426202A424F0EBFCB7D2BD4F744F964.mft rsync://rpki.ripe.net/repository/DEFAULT/0KUWtQQmICpCTw6_y30r1PdE-WQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 21 Sep 2026 05:00:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 46:b3:82:a4:b4:5d:18:70:c9:a0:0c:31:32:be:d1:51:62:0f:7d:fb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5 Validity Not Before: Sep 10 08:44:20 2026 GMT Not After : Sep 9 08:49:20 2027 GMT Subject: CN=03A111D753F63CD256FC687C93AC98441C1D32BE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:6d:8e:28:61:fa:81:ce:b1:be:b0:f9:ed:e3: aa:41:7b:0d:59:72:1f:91:c1:e5:93:a6:53:f7:35: 7b:3d:ea:ba:23:da:b9:28:cf:b4:8f:4f:12:bc:79: b8:2d:48:aa:8e:96:58:7a:b7:df:a7:4b:1c:05:8b: 3f:6f:ec:18:d6:53:e4:91:1f:1d:d6:d4:33:1e:8c: bc:fb:c5:e3:10:66:0b:1b:2c:7b:c7:aa:08:45:76: ce:c0:00:55:ef:25:01:10:25:38:10:89:50:74:53: 46:87:0a:b2:4d:54:55:cf:4f:ac:a6:e3:0f:b6:fb: 5f:3a:3b:13:6d:9c:c7:63:7d:08:9f:0c:71:4a:e0: 84:a0:23:ad:f5:d8:c7:5e:7c:28:e6:40:c0:34:f9: ac:18:24:4f:d9:1b:89:db:0d:1f:02:bd:eb:43:8a: 88:34:82:62:b6:f2:64:3e:df:00:b8:9b:b3:e6:89: 56:69:dc:91:f9:79:88:aa:e4:9a:14:6c:e2:72:70: a1:50:2e:2d:06:c2:01:f5:5d:4c:1f:69:52:93:f4: 58:6c:e7:05:5d:0e:9f:a0:9e:9a:4d:68:13:5f:99: da:87:c7:8c:77:88:cf:57:79:f8:74:37:19:8b:75: 88:7b:03:fb:c9:e8:bc:8f:66:e6:9d:c7:57:58:f0: ef:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:A1:11:D7:53:F6:3C:D2:56:FC:68:7C:93:AC:98:44:1C:1D:32:BE X509v3 Authority Key Identifier: keyid:B3:54:D3:28:CB:BF:D1:EF:3C:D2:92:68:A2:3B:0F:CC:60:E3:A2:C5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.cer Subject Information Access: Signed Object - URI:rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/AS219085.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 164.37.232.0/24 Signature Algorithm: sha256WithRSAEncryption 0c:08:72:6d:92:83:96:d7:14:7e:31:37:ab:25:0b:8c:c1:8d: 60:1e:11:4a:8d:a5:b7:8b:35:47:3c:20:cf:e4:f8:fb:52:65: 14:3d:81:66:63:b7:d0:28:83:54:ef:9e:8c:a9:33:8f:3a:13: f7:61:cd:79:e3:4e:3e:bb:81:e3:aa:ab:4e:47:d5:8c:ea:85: 7d:85:0c:6e:68:68:ec:80:17:10:ca:78:8b:cf:60:ed:fe:5f: 0d:3d:07:46:ea:e9:b3:ac:f3:61:16:8c:53:b4:cf:26:ce:35: a4:d6:d9:c5:33:55:b8:38:6e:94:0e:d1:de:b3:93:93:5b:e7: af:4a:2e:9b:8e:82:a0:08:e6:f0:26:ac:c3:15:7a:4a:93:10: 7d:bf:df:e3:d3:54:c0:08:34:07:c2:7f:75:60:43:e7:04:1c: ec:47:3a:1f:5f:46:a5:62:75:58:63:50:db:0d:9b:f4:f9:44: 1b:e5:1a:6b:d9:fc:63:44:4b:49:7e:29:94:69:7f:40:98:c9: e2:56:7e:28:9b:75:83:bf:1e:da:9e:f4:31:bc:4d:ff:87:e8: 23:2a:6f:9d:1f:88:8b:64:2f:10:3f:44:70:d7:84:63:9c:fb: d4:4f:88:e7:8f:50:b9:f1:96:ff:88:78:e7:2c:eb:ff:9c:c2: a5:60:0f:ac -----BEGIN CERTIFICATE----- MIIFJTCCBA2gAwIBAgIURrOCpLRdGHDJoAwxMr7RUWIPffswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjM1NEQzMjhDQkJGRDFFRjNDRDI5MjY4QTIzQjBGQ0M2 MEUzQTJDNTAeFw0yNjA5MTAwODQ0MjBaFw0yNzA5MDkwODQ5MjBaMDMxMTAvBgNV BAMTKDAzQTExMUQ3NTNGNjNDRDI1NkZDNjg3QzkzQUM5ODQ0MUMxRDMyQkUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDCbY4oYfqBzrG+sPnt46pBew1Z ch+RweWTplP3NXs96roj2rkoz7SPTxK8ebgtSKqOllh6t9+nSxwFiz9v7BjWU+SR Hx3W1DMejLz7xeMQZgsbLHvHqghFds7AAFXvJQEQJTgQiVB0U0aHCrJNVFXPT6ym 4w+2+186OxNtnMdjfQifDHFK4ISgI6312MdefCjmQMA0+awYJE/ZG4nbDR8CvetD iog0gmK28mQ+3wC4m7PmiVZp3JH5eYiq5JoUbOJycKFQLi0GwgH1XUwfaVKT9Fhs 5wVdDp+gnppNaBNfmdqHx4x3iM9Xefh0NxmLdYh7A/vJ6LyPZuadx1dY8O/rAgMB AAGjggIvMIICKzAdBgNVHQ4EFgQUA6ER11P2PNJW/Gh8k6yYRBwdMr4wHwYDVR0j BBgwFoAUs1TTKMu/0e880pJoojsPzGDjosUwDgYDVR0PAQH/BAQDAgeAMIGIBgNV HR8EgYAwfjB8oHqgeIZ2cnN5bmM6Ly9yLm1hZ2VsbGFuLmlweG8uY29tL3JlcG8v YTAzNzViMzktZjk0OS00Y2I1LWI1MTktZjk0MDA4YjE2NTRjLTAvMC9CMzU0RDMy OENCQkZEMUVGM0NEMjkyNjhBMjNCMEZDQzYwRTNBMkM1LmNybDCBngYIKwYBBQUH AQEEgZEwgY4wgYsGCCsGAQUFBzAChn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5y aXBlLm5ldC9yZXBvc2l0b3J5LzYxNzA4YTZiLTZjM2EtNDBhMC1hMzAyLTU5NWVj YzE3ODQ4Yy8wL0IzNTREMzI4Q0JCRkQxRUYzQ0QyOTI2OEEyM0IwRkNDNjBFM0Ey QzUuY2VyMHIGCCsGAQUFBwELBGYwZDBiBggrBgEFBQcwC4ZWcnN5bmM6Ly9yLm1h Z2VsbGFuLmlweG8uY29tL3JlcG8vYTAzNzViMzktZjk0OS00Y2I1LWI1MTktZjk0 MDA4YjE2NTRjLTAvMC9BUzIxOTA4NS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEF BQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAKQl6DANBgkqhkiG9w0B AQsFAAOCAQEADAhybZKDltcUfjE3qyULjMGNYB4RSo2lt4s1Rzwgz+T4+1JlFD2B ZmO30CiDVO+ejKkzjzoT92HNeeNOPruB46qrTkfVjOqFfYUMbmho7IAXEMp4i89g 7f5fDT0HRurps6zzYRaMU7TPJs41pNbZxTNVuDhulA7R3rOTk1vnr0oum46CoAjm 8CaswxV6SpMQfb/f49NUwAg0B8J/dWBD5wQc7Ec6H19GpWJ1WGNQ2w2b9PlEG+Ua a9n8Y0RLSX4plGl/QJjJ4lZ+KJt1g78e2p70MbxN/4foIypvnR+Ii2QvED9EcNeE Y5z71E+I549QufGW/4h45yzr/5zCpWAPrA== -----END CERTIFICATE-----Generated at Sun Sep 20 15:44:46 2026 by rpki-client