$ rpki-client -vvvf r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/AS25198.roa File: AS25198.roa (raw, json) Hash identifier: NhNSw0d99VX7kKohZINhNRhQjHB0/MMN2Q2Ts/Z0RdU= Subject key identifier: 82:92:A9:53:EA:B1:9E:F2:06:3F:08:A9:AB:86:DF:48:C1:04:58:84 Certificate issuer: /CN=B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5 Certificate serial: 375DD7964E76F58901E79187FB157BC45E7F2546 Authority key identifier: B3:54:D3:28:CB:BF:D1:EF:3C:D2:92:68:A2:3B:0F:CC:60:E3:A2:C5 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.cer Subject info access: rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/AS25198.roa Signing time: Thu 10 Sep 2026 08:49:22 +0000 ROA not before: Thu 10 Sep 2026 08:44:22 +0000 ROA not after: Thu 09 Sep 2027 08:49:22 +0000 asID: 25198 IP address blocks: 164.37.204.0/24 maxlen: 24 164.37.205.0/24 maxlen: 24 164.37.212.0/24 maxlen: 24 Validation: OK Signature path: rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.crl rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.mft rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.cer rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/D0A516B50426202A424F0EBFCB7D2BD4F744F964.crl rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/D0A516B50426202A424F0EBFCB7D2BD4F744F964.mft rsync://rpki.ripe.net/repository/DEFAULT/0KUWtQQmICpCTw6_y30r1PdE-WQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 21 Sep 2026 05:00:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 37:5d:d7:96:4e:76:f5:89:01:e7:91:87:fb:15:7b:c4:5e:7f:25:46 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5 Validity Not Before: Sep 10 08:44:22 2026 GMT Not After : Sep 9 08:49:22 2027 GMT Subject: CN=8292A953EAB19EF2063F08A9AB86DF48C1045884 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:e5:1a:0f:ac:41:03:f8:20:e0:83:f8:f3:06: 26:ae:14:67:f8:a7:5b:a7:30:b0:1a:ab:a1:cb:e1: 89:e4:94:7c:c4:1f:02:ea:27:57:b8:9b:ef:33:7f: 4f:0f:c9:49:08:d0:b2:78:54:b2:4a:dd:33:62:e6: 13:4c:56:1f:45:9f:8c:0b:2f:7c:b1:51:f6:58:c2: f0:9e:a2:c5:2e:01:b0:7a:e4:06:3e:fc:1e:fe:c1: a7:a1:63:08:de:f8:14:79:17:be:04:92:71:64:a7: b4:e9:1e:6d:88:59:27:9c:24:fe:e0:23:aa:0b:5a: 8d:04:b2:83:f8:f8:8a:59:d8:87:68:4c:2c:2c:33: 99:0e:14:9c:5a:c7:08:9a:c4:07:62:a4:07:b9:b2: ab:ea:be:97:12:c0:f6:05:cc:6e:d1:79:cf:b6:09: b7:f5:4b:b8:81:ef:a0:da:ce:bf:ed:5d:c1:2c:c7: 8d:10:d3:11:e5:d1:f1:53:bf:16:4f:a0:46:81:f7: 1a:7c:0e:83:47:ed:c0:3a:5c:84:c9:13:31:67:6c: 5d:45:2c:89:dc:53:be:f8:9f:46:f3:d2:41:e7:5a: b2:6e:29:82:cc:49:ab:33:d5:ff:b0:c6:32:79:90: 51:4e:83:16:63:6d:2e:b3:ad:4c:01:b5:e1:04:f2: 10:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:92:A9:53:EA:B1:9E:F2:06:3F:08:A9:AB:86:DF:48:C1:04:58:84 X509v3 Authority Key Identifier: keyid:B3:54:D3:28:CB:BF:D1:EF:3C:D2:92:68:A2:3B:0F:CC:60:E3:A2:C5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.cer Subject Information Access: Signed Object - URI:rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/AS25198.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 164.37.204.0/23 164.37.212.0/24 Signature Algorithm: sha256WithRSAEncryption 7c:de:01:ff:ec:73:cf:93:c4:e2:0e:27:26:15:bb:5e:87:0a: 45:a5:c1:6a:b3:e6:a7:05:c1:0a:3a:5a:37:51:87:48:25:e6: d7:e0:44:8a:bd:c9:f0:c8:6d:87:48:bb:65:f0:78:35:81:e9: 08:99:c2:18:35:a7:e8:2c:55:c7:28:56:04:64:36:f4:2f:50: c0:df:4f:95:c4:3c:17:a8:07:e0:2f:4f:74:ff:6b:9e:29:cb: 02:00:65:d2:32:73:93:2b:c3:ae:61:55:ae:c7:e3:f1:1c:0b: 5d:5b:ad:2e:76:00:ab:75:81:1e:bf:63:79:c4:c7:c5:a9:2f: f7:cd:f5:ad:b0:26:2d:fc:9a:a2:b7:46:9c:39:de:6b:52:c5: 90:a1:56:da:8f:d0:9e:56:31:f5:13:db:51:35:ee:99:68:ab: a4:d1:ce:df:45:fd:b2:c2:0f:fa:36:b8:01:58:a6:c0:31:c2: 03:2b:df:b9:25:b8:17:07:d6:5d:6b:dd:f0:e3:90:2d:58:2e: e8:1d:40:e5:ee:9a:ae:e9:c6:53:98:00:60:35:3f:14:45:9f: 36:f9:78:60:b9:a8:c1:72:65:aa:4f:3a:7c:40:df:5b:d8:65: 87:c5:49:8d:52:88:f4:f2:fb:59:08:76:a4:45:6f:c7:cc:74: fe:3f:f3:d0 -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUN13Xlk529YkB55GH+xV7xF5/JUYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjM1NEQzMjhDQkJGRDFFRjNDRDI5MjY4QTIzQjBGQ0M2 MEUzQTJDNTAeFw0yNjA5MTAwODQ0MjJaFw0yNzA5MDkwODQ5MjJaMDMxMTAvBgNV BAMTKDgyOTJBOTUzRUFCMTlFRjIwNjNGMDhBOUFCODZERjQ4QzEwNDU4ODQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCy5RoPrEED+CDgg/jzBiauFGf4 p1unMLAaq6HL4YnklHzEHwLqJ1e4m+8zf08PyUkI0LJ4VLJK3TNi5hNMVh9Fn4wL L3yxUfZYwvCeosUuAbB65AY+/B7+waehYwje+BR5F74EknFkp7TpHm2IWSecJP7g I6oLWo0EsoP4+IpZ2IdoTCwsM5kOFJxaxwiaxAdipAe5sqvqvpcSwPYFzG7Rec+2 Cbf1S7iB76Dazr/tXcEsx40Q0xHl0fFTvxZPoEaB9xp8DoNH7cA6XITJEzFnbF1F LIncU774n0bz0kHnWrJuKYLMSasz1f+wxjJ5kFFOgxZjbS6zrUwBteEE8hCTAgMB AAGjggI0MIICMDAdBgNVHQ4EFgQUgpKpU+qxnvIGPwipq4bfSMEEWIQwHwYDVR0j BBgwFoAUs1TTKMu/0e880pJoojsPzGDjosUwDgYDVR0PAQH/BAQDAgeAMIGIBgNV HR8EgYAwfjB8oHqgeIZ2cnN5bmM6Ly9yLm1hZ2VsbGFuLmlweG8uY29tL3JlcG8v YTAzNzViMzktZjk0OS00Y2I1LWI1MTktZjk0MDA4YjE2NTRjLTAvMC9CMzU0RDMy OENCQkZEMUVGM0NEMjkyNjhBMjNCMEZDQzYwRTNBMkM1LmNybDCBngYIKwYBBQUH AQEEgZEwgY4wgYsGCCsGAQUFBzAChn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5y aXBlLm5ldC9yZXBvc2l0b3J5LzYxNzA4YTZiLTZjM2EtNDBhMC1hMzAyLTU5NWVj YzE3ODQ4Yy8wL0IzNTREMzI4Q0JCRkQxRUYzQ0QyOTI2OEEyM0IwRkNDNjBFM0Ey QzUuY2VyMHEGCCsGAQUFBwELBGUwYzBhBggrBgEFBQcwC4ZVcnN5bmM6Ly9yLm1h Z2VsbGFuLmlweG8uY29tL3JlcG8vYTAzNzViMzktZjk0OS00Y2I1LWI1MTktZjk0 MDA4YjE2NTRjLTAvMC9BUzI1MTk4LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQBpCXMAwQApCXUMA0GCSqG SIb3DQEBCwUAA4IBAQB83gH/7HPPk8TiDicmFbtehwpFpcFqs+anBcEKOlo3UYdI JebX4ESKvcnwyG2HSLtl8Hg1gekImcIYNafoLFXHKFYEZDb0L1DA30+VxDwXqAfg L090/2ueKcsCAGXSMnOTK8OuYVWux+PxHAtdW60udgCrdYEev2N5xMfFqS/3zfWt sCYt/Jqit0acOd5rUsWQoVbaj9CeVjH1E9tRNe6ZaKuk0c7fRf2ywg/6NrgBWKbA McIDK9+5JbgXB9Zda93w45AtWC7oHUDl7pqu6cZTmABgNT8URZ82+XhguajBcmWq Tzp8QN9b2GWHxUmNUoj08vtZCHakRW/HzHT+P/PQ -----END CERTIFICATE-----Generated at Sun Sep 20 15:44:55 2026 by rpki-client