$ rpki-client -vvvf r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/AS32042.roa File: AS32042.roa (raw, json) Hash identifier: L5UackTaWFMOY7R/iZ5kwmfN7UHanGgIvYckTjandMQ= Subject key identifier: A3:EB:57:8A:37:4E:4C:DD:EF:E5:2F:7B:72:DA:A8:4D:10:60:7C:67 Certificate issuer: /CN=B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5 Certificate serial: 3CA50B06B308C65D3AB2FB37481B9505CC0F3560 Authority key identifier: B3:54:D3:28:CB:BF:D1:EF:3C:D2:92:68:A2:3B:0F:CC:60:E3:A2:C5 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.cer Subject info access: rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/AS32042.roa Signing time: Thu 10 Sep 2026 08:49:21 +0000 ROA not before: Thu 10 Sep 2026 08:44:21 +0000 ROA not after: Thu 09 Sep 2027 08:49:21 +0000 asID: 32042 IP address blocks: 164.37.209.0/24 maxlen: 24 Validation: OK Signature path: rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.crl rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.mft rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.cer rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/D0A516B50426202A424F0EBFCB7D2BD4F744F964.crl rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/D0A516B50426202A424F0EBFCB7D2BD4F744F964.mft rsync://rpki.ripe.net/repository/DEFAULT/0KUWtQQmICpCTw6_y30r1PdE-WQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 20 Sep 2026 18:01:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3c:a5:0b:06:b3:08:c6:5d:3a:b2:fb:37:48:1b:95:05:cc:0f:35:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5 Validity Not Before: Sep 10 08:44:21 2026 GMT Not After : Sep 9 08:49:21 2027 GMT Subject: CN=A3EB578A374E4CDDEFE52F7B72DAA84D10607C67 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:2c:f3:79:fd:cf:4c:6e:bb:f1:bb:e9:e0:d0: f0:d8:ca:51:ff:de:a1:27:65:e8:8d:41:67:aa:67: 5e:9e:9d:5f:66:1a:31:db:b8:f3:46:e5:cb:ef:6d: e3:57:48:bd:85:3c:f7:e0:69:44:b6:fb:58:03:6b: 4b:bc:f5:e9:7c:1c:37:28:e6:9d:6e:3d:24:ab:a6: 6b:b4:0a:03:14:5e:2e:c8:f8:c8:de:b5:f0:dc:96: 77:68:4c:c8:b0:53:c2:5d:6d:49:01:50:0b:43:8b: 11:83:82:ef:22:70:51:0b:61:d1:d1:ef:44:d3:a6: d3:58:03:77:fb:62:3f:a4:00:af:73:8d:fb:3f:25: 63:f2:3b:6c:9d:46:7a:9d:2a:b8:4e:ef:f6:39:43: 7e:93:92:ef:b0:06:e5:39:40:88:e4:db:8f:21:6e: 49:88:33:62:8f:8e:65:10:f9:19:e1:79:49:41:7c: 0d:f7:86:d2:fe:71:b3:81:98:c8:8e:a5:82:78:e4: 39:d4:d4:f5:fd:74:ad:ad:f5:68:c1:c3:e2:bf:d4: a2:f8:ed:9b:d1:ab:f0:08:ca:e1:6e:e3:14:cc:be: 46:7b:4a:c4:1b:f6:70:74:33:4a:b4:01:f8:62:a0: fb:97:1f:51:a3:f2:de:4b:47:bb:42:e5:51:e6:e5: 0a:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:EB:57:8A:37:4E:4C:DD:EF:E5:2F:7B:72:DA:A8:4D:10:60:7C:67 X509v3 Authority Key Identifier: keyid:B3:54:D3:28:CB:BF:D1:EF:3C:D2:92:68:A2:3B:0F:CC:60:E3:A2:C5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.cer Subject Information Access: Signed Object - URI:rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/AS32042.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 164.37.209.0/24 Signature Algorithm: sha256WithRSAEncryption 60:9a:3a:06:98:b7:ac:74:ef:09:ad:14:7f:67:b8:a7:0f:e0: bc:3d:d8:47:e7:b1:4c:55:c7:a1:86:22:94:a0:b7:e5:7f:be: 18:40:21:9e:84:2d:57:6c:23:f5:ba:6a:fc:55:e7:f8:0b:4e: 7b:30:f7:3d:26:de:ae:4d:2b:9f:b4:a6:1e:42:85:8d:2a:35: 55:49:b0:0d:ce:f3:73:e2:df:fe:26:bf:32:af:c7:47:f9:db: 1e:7e:d1:d0:5d:42:ac:2b:80:fe:b7:43:fa:ba:c5:a8:60:04: 41:c4:5d:db:a3:f8:22:d8:21:e6:09:9f:87:d0:fe:f5:eb:e1: 75:8e:6b:f6:3c:c5:d5:a2:9b:ce:69:88:91:9f:99:80:2d:ce: a4:fd:70:45:0b:1d:50:4c:c3:95:cb:6e:06:52:ed:75:d6:19: 9c:b1:59:db:f6:ed:20:5f:b0:11:8d:55:6e:15:8e:02:8d:cc: c3:a8:9e:ca:79:be:43:80:a3:6b:67:35:2f:eb:28:53:70:74: 50:d6:a1:61:05:d6:68:93:ee:4b:7b:77:0a:02:a7:c0:e4:ca: 5b:4d:39:1b:71:83:53:40:11:02:e5:f1:53:aa:18:aa:8e:fc: 2c:bb:55:54:62:49:c9:94:d2:9e:e9:17:1f:fe:aa:ab:68:d6: c3:9a:ed:63 -----BEGIN CERTIFICATE----- MIIFJDCCBAygAwIBAgIUPKULBrMIxl06svs3SBuVBcwPNWAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjM1NEQzMjhDQkJGRDFFRjNDRDI5MjY4QTIzQjBGQ0M2 MEUzQTJDNTAeFw0yNjA5MTAwODQ0MjFaFw0yNzA5MDkwODQ5MjFaMDMxMTAvBgNV BAMTKEEzRUI1NzhBMzc0RTRDRERFRkU1MkY3QjcyREFBODREMTA2MDdDNjcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDMLPN5/c9Mbrvxu+ng0PDYylH/ 3qEnZeiNQWeqZ16enV9mGjHbuPNG5cvvbeNXSL2FPPfgaUS2+1gDa0u89el8HDco 5p1uPSSrpmu0CgMUXi7I+MjetfDclndoTMiwU8JdbUkBUAtDixGDgu8icFELYdHR 70TTptNYA3f7Yj+kAK9zjfs/JWPyO2ydRnqdKrhO7/Y5Q36Tku+wBuU5QIjk248h bkmIM2KPjmUQ+RnheUlBfA33htL+cbOBmMiOpYJ45DnU1PX9dK2t9WjBw+K/1KL4 7ZvRq/AIyuFu4xTMvkZ7SsQb9nB0M0q0AfhioPuXH1Gj8t5LR7tC5VHm5QqRAgMB AAGjggIuMIICKjAdBgNVHQ4EFgQUo+tXijdOTN3v5S97ctqoTRBgfGcwHwYDVR0j BBgwFoAUs1TTKMu/0e880pJoojsPzGDjosUwDgYDVR0PAQH/BAQDAgeAMIGIBgNV HR8EgYAwfjB8oHqgeIZ2cnN5bmM6Ly9yLm1hZ2VsbGFuLmlweG8uY29tL3JlcG8v YTAzNzViMzktZjk0OS00Y2I1LWI1MTktZjk0MDA4YjE2NTRjLTAvMC9CMzU0RDMy OENCQkZEMUVGM0NEMjkyNjhBMjNCMEZDQzYwRTNBMkM1LmNybDCBngYIKwYBBQUH AQEEgZEwgY4wgYsGCCsGAQUFBzAChn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5y aXBlLm5ldC9yZXBvc2l0b3J5LzYxNzA4YTZiLTZjM2EtNDBhMC1hMzAyLTU5NWVj YzE3ODQ4Yy8wL0IzNTREMzI4Q0JCRkQxRUYzQ0QyOTI2OEEyM0IwRkNDNjBFM0Ey QzUuY2VyMHEGCCsGAQUFBwELBGUwYzBhBggrBgEFBQcwC4ZVcnN5bmM6Ly9yLm1h Z2VsbGFuLmlweG8uY29tL3JlcG8vYTAzNzViMzktZjk0OS00Y2I1LWI1MTktZjk0 MDA4YjE2NTRjLTAvMC9BUzMyMDQyLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQApCXRMA0GCSqGSIb3DQEB CwUAA4IBAQBgmjoGmLesdO8JrRR/Z7inD+C8PdhH57FMVcehhiKUoLflf74YQCGe hC1XbCP1umr8Vef4C057MPc9Jt6uTSuftKYeQoWNKjVVSbANzvNz4t/+Jr8yr8dH +dseftHQXUKsK4D+t0P6usWoYARBxF3bo/gi2CHmCZ+H0P716+F1jmv2PMXVopvO aYiRn5mALc6k/XBFCx1QTMOVy24GUu111hmcsVnb9u0gX7ARjVVuFY4CjczDqJ7K eb5DgKNrZzUv6yhTcHRQ1qFhBdZok+5Le3cKAqfA5MpbTTkbcYNTQBEC5fFTqhiq jvwsu1VUYknJlNKe6Rcf/qqraNbDmu1j -----END CERTIFICATE-----Generated at Sun Sep 20 10:51:11 2026 by rpki-client