$ rpki-client -vvvf r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/AS2497.roa File: AS2497.roa (raw, json) Hash identifier: d5F5dmAtuZlaZDF55xZAaf2hX5JGBdVOl+Gch1FK028= Subject key identifier: CC:04:83:D1:86:FE:33:15:8B:95:9C:4C:4C:0C:9C:B3:AF:97:86:57 Certificate issuer: /CN=B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5 Certificate serial: 48D306167F79BA075BCD5ABCC64B8C515E674C94 Authority key identifier: B3:54:D3:28:CB:BF:D1:EF:3C:D2:92:68:A2:3B:0F:CC:60:E3:A2:C5 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.cer Subject info access: rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/AS2497.roa Signing time: Thu 10 Sep 2026 08:49:22 +0000 ROA not before: Thu 10 Sep 2026 08:44:22 +0000 ROA not after: Thu 09 Sep 2027 08:49:22 +0000 asID: 2497 IP address blocks: 164.37.196.0/23 maxlen: 24 Validation: OK Signature path: rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.crl rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.mft rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.cer rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/D0A516B50426202A424F0EBFCB7D2BD4F744F964.crl rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/D0A516B50426202A424F0EBFCB7D2BD4F744F964.mft rsync://rpki.ripe.net/repository/DEFAULT/0KUWtQQmICpCTw6_y30r1PdE-WQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 21 Sep 2026 05:00:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 48:d3:06:16:7f:79:ba:07:5b:cd:5a:bc:c6:4b:8c:51:5e:67:4c:94 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5 Validity Not Before: Sep 10 08:44:22 2026 GMT Not After : Sep 9 08:49:22 2027 GMT Subject: CN=CC0483D186FE33158B959C4C4C0C9CB3AF978657 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:ee:7c:20:f1:4c:c8:4f:08:f7:6e:15:12:be: b2:1e:87:d1:1b:75:a0:d0:ab:bd:17:64:f7:58:f4: e2:0c:bf:a9:af:aa:d3:ad:0d:fb:46:2a:cb:9f:98: e5:e5:e5:37:7c:78:b5:48:66:33:78:c0:bd:5d:31: bc:e2:e7:a0:16:47:6e:10:4c:8c:af:01:cb:c6:a5: 47:c5:35:5c:95:28:28:15:61:6d:65:73:7e:ef:24: 4e:6e:fa:f4:07:6e:8b:a2:3c:62:b8:d0:f5:c9:82: 4e:aa:75:f1:7b:7b:1a:22:5e:8c:f1:86:ff:33:3c: 71:26:ca:fa:77:fc:31:76:85:d1:13:2f:cf:b8:52: 72:cb:32:9c:02:62:89:e9:13:5b:a3:47:3b:82:ab: c2:fc:f6:0f:df:5f:ce:09:78:fd:96:dd:35:0e:aa: f4:8f:cc:70:eb:2c:85:3e:d1:9f:c1:d3:b8:50:21: 1f:9f:b5:fc:f3:04:be:c5:63:e7:35:cc:bf:3f:24: e2:57:fc:3d:04:4c:ec:a2:82:00:06:39:b0:c3:b1: 41:c3:c5:ac:0d:47:57:7b:c4:33:8b:31:35:b1:bf: 68:5b:42:2a:94:95:9e:5d:76:02:70:73:65:61:60: 9e:e4:2d:3a:1e:3e:05:d3:8b:8b:d5:07:03:68:1b: 43:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:04:83:D1:86:FE:33:15:8B:95:9C:4C:4C:0C:9C:B3:AF:97:86:57 X509v3 Authority Key Identifier: keyid:B3:54:D3:28:CB:BF:D1:EF:3C:D2:92:68:A2:3B:0F:CC:60:E3:A2:C5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.cer Subject Information Access: Signed Object - URI:rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/AS2497.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 164.37.196.0/23 Signature Algorithm: sha256WithRSAEncryption 7c:ee:ba:42:6d:33:3c:96:8d:63:9a:77:c2:97:c0:07:26:42: 80:60:e5:f2:8e:43:e6:e0:85:85:61:80:59:db:d7:77:ea:7b: 45:ae:ff:83:d6:ea:ba:b4:ed:15:53:84:b0:49:d7:bd:d5:21: ca:dc:33:80:9e:94:3c:e5:af:a8:d7:e7:18:50:5b:63:bf:55: 2c:fd:a7:3f:68:06:46:59:7a:b4:ea:3f:a2:00:56:96:45:c8: 03:db:21:5a:3b:26:06:b7:0f:74:23:77:54:40:97:1a:f3:15: 78:eb:50:b4:c8:a4:83:a4:d4:a5:81:09:25:6a:60:9d:3e:1f: e8:bc:9b:24:a5:62:01:16:a4:6d:38:a9:f8:38:41:08:fb:85: 80:bd:cf:7d:2d:1f:a7:ed:90:ef:2f:55:d6:cc:a1:cb:f3:ca: 80:84:57:ff:72:b6:13:de:e4:43:4c:f7:31:e0:bc:08:80:39: 3a:d6:34:0c:d7:5d:d2:ae:ab:eb:32:82:5f:b5:8f:8a:3b:a3: f8:24:b7:f5:d8:a0:bc:6e:79:7d:a8:94:56:51:2d:0d:07:d3: 97:89:93:c7:c2:4b:a1:b3:d2:e6:6d:7c:1f:1f:da:da:38:fa: 14:7f:5b:a1:51:6f:46:a0:e6:8e:f4:05:f9:19:aa:69:88:ef: c4:7e:15:57 -----BEGIN CERTIFICATE----- MIIFIzCCBAugAwIBAgIUSNMGFn95ugdbzVq8xkuMUV5nTJQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjM1NEQzMjhDQkJGRDFFRjNDRDI5MjY4QTIzQjBGQ0M2 MEUzQTJDNTAeFw0yNjA5MTAwODQ0MjJaFw0yNzA5MDkwODQ5MjJaMDMxMTAvBgNV BAMTKENDMDQ4M0QxODZGRTMzMTU4Qjk1OUM0QzRDMEM5Q0IzQUY5Nzg2NTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC97nwg8UzITwj3bhUSvrIeh9Eb daDQq70XZPdY9OIMv6mvqtOtDftGKsufmOXl5Td8eLVIZjN4wL1dMbzi56AWR24Q TIyvAcvGpUfFNVyVKCgVYW1lc37vJE5u+vQHbouiPGK40PXJgk6qdfF7exoiXozx hv8zPHEmyvp3/DF2hdETL8+4UnLLMpwCYonpE1ujRzuCq8L89g/fX84JeP2W3TUO qvSPzHDrLIU+0Z/B07hQIR+ftfzzBL7FY+c1zL8/JOJX/D0ETOyiggAGObDDsUHD xawNR1d7xDOLMTWxv2hbQiqUlZ5ddgJwc2VhYJ7kLToePgXTi4vVBwNoG0PpAgMB AAGjggItMIICKTAdBgNVHQ4EFgQUzASD0Yb+MxWLlZxMTAycs6+XhlcwHwYDVR0j BBgwFoAUs1TTKMu/0e880pJoojsPzGDjosUwDgYDVR0PAQH/BAQDAgeAMIGIBgNV HR8EgYAwfjB8oHqgeIZ2cnN5bmM6Ly9yLm1hZ2VsbGFuLmlweG8uY29tL3JlcG8v YTAzNzViMzktZjk0OS00Y2I1LWI1MTktZjk0MDA4YjE2NTRjLTAvMC9CMzU0RDMy OENCQkZEMUVGM0NEMjkyNjhBMjNCMEZDQzYwRTNBMkM1LmNybDCBngYIKwYBBQUH AQEEgZEwgY4wgYsGCCsGAQUFBzAChn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5y aXBlLm5ldC9yZXBvc2l0b3J5LzYxNzA4YTZiLTZjM2EtNDBhMC1hMzAyLTU5NWVj YzE3ODQ4Yy8wL0IzNTREMzI4Q0JCRkQxRUYzQ0QyOTI2OEEyM0IwRkNDNjBFM0Ey QzUuY2VyMHAGCCsGAQUFBwELBGQwYjBgBggrBgEFBQcwC4ZUcnN5bmM6Ly9yLm1h Z2VsbGFuLmlweG8uY29tL3JlcG8vYTAzNzViMzktZjk0OS00Y2I1LWI1MTktZjk0 MDA4YjE2NTRjLTAvMC9BUzI0OTcucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUH DgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAGkJcQwDQYJKoZIhvcNAQEL BQADggEBAHzuukJtMzyWjWOad8KXwAcmQoBg5fKOQ+bghYVhgFnb13fqe0Wu/4PW 6rq07RVThLBJ173VIcrcM4CelDzlr6jX5xhQW2O/VSz9pz9oBkZZerTqP6IAVpZF yAPbIVo7Jga3D3Qjd1RAlxrzFXjrULTIpIOk1KWBCSVqYJ0+H+i8mySlYgEWpG04 qfg4QQj7hYC9z30tH6ftkO8vVdbMocvzyoCEV/9ythPe5ENM9zHgvAiAOTrWNAzX XdKuq+sygl+1j4o7o/gkt/XYoLxueX2olFZRLQ0H05eJk8fCS6Gz0uZtfB8f2to4 +hR/W6FRb0ag5o70BfkZqmmI78R+FVc= -----END CERTIFICATE-----Generated at Sun Sep 20 15:44:39 2026 by rpki-client