$ rpki-client -vvvf r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/AS9304.roa File: AS9304.roa (raw, json) Hash identifier: +3zkvTS5Ohc8aJBeaUhqCjwJtbGIZ6fRUQzaMoV+pX4= Subject key identifier: 84:6C:81:84:50:79:6B:91:72:0E:0A:48:F8:08:AA:83:88:25:14:C0 Certificate issuer: /CN=B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5 Certificate serial: 24AB60B7F36D86369400CF6712097314F572BE84 Authority key identifier: B3:54:D3:28:CB:BF:D1:EF:3C:D2:92:68:A2:3B:0F:CC:60:E3:A2:C5 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.cer Subject info access: rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/AS9304.roa Signing time: Sun 13 Sep 2026 10:19:32 +0000 ROA not before: Sun 13 Sep 2026 10:14:32 +0000 ROA not after: Sun 12 Sep 2027 10:19:32 +0000 asID: 9304 IP address blocks: 164.37.193.0/24 maxlen: 24 164.37.194.0/24 maxlen: 24 164.37.201.0/24 maxlen: 24 164.37.213.0/24 maxlen: 24 164.37.214.0/24 maxlen: 24 164.37.215.0/24 maxlen: 24 164.37.217.0/24 maxlen: 24 164.37.218.0/24 maxlen: 24 164.37.219.0/24 maxlen: 24 164.37.221.0/24 maxlen: 24 164.37.225.0/24 maxlen: 24 164.37.226.0/24 maxlen: 24 164.37.227.0/24 maxlen: 24 164.37.228.0/24 maxlen: 24 164.37.235.0/24 maxlen: 24 Validation: OK Signature path: rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.crl rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.mft rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.cer rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/D0A516B50426202A424F0EBFCB7D2BD4F744F964.crl rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/D0A516B50426202A424F0EBFCB7D2BD4F744F964.mft rsync://rpki.ripe.net/repository/DEFAULT/0KUWtQQmICpCTw6_y30r1PdE-WQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 21 Sep 2026 05:00:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 24:ab:60:b7:f3:6d:86:36:94:00:cf:67:12:09:73:14:f5:72:be:84 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5 Validity Not Before: Sep 13 10:14:32 2026 GMT Not After : Sep 12 10:19:32 2027 GMT Subject: CN=846C818450796B91720E0A48F808AA83882514C0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:fc:f6:46:28:4a:53:b0:d6:0c:22:04:2a:c0: 91:fc:56:e0:5e:cf:33:9d:76:8c:80:ba:19:df:ee: f5:57:76:01:65:3a:fa:53:ec:fc:fa:db:37:1a:e6: 2e:87:8a:0b:a8:11:99:c0:a9:52:b7:fb:4d:ec:9f: c1:48:f9:e8:73:c0:27:33:f4:b7:62:78:e5:4f:c9: c7:7f:a6:e1:ed:0b:04:0c:46:dd:cd:6e:9c:22:7c: db:e5:25:eb:93:db:e1:01:4f:15:46:cc:71:4a:c7: ff:85:73:5a:d3:9e:b6:bc:b5:e8:c4:61:ea:2f:25: 92:68:d3:ed:17:c1:88:20:e6:52:2e:8a:e1:0c:c8: 10:72:ad:0e:ff:ec:63:69:92:8b:9a:c7:84:04:1d: 71:11:45:d3:9e:6e:a1:9d:fa:d1:f0:ac:7b:ce:83: f4:53:8f:91:a6:3e:31:0e:cf:d3:3a:9f:a3:3a:5c: 1d:5f:22:27:26:b8:15:bb:c6:c9:28:6e:49:4c:63: 63:63:3a:53:4e:67:f4:ea:23:54:6e:53:77:9c:bb: c4:bb:94:67:33:d4:ba:b8:88:9e:df:15:fe:41:c5: 47:ce:7d:5d:7c:c1:64:88:ab:2c:5c:c6:57:54:6c: 56:4a:6c:c6:08:f6:b7:89:57:b5:ff:0c:fa:01:4a: 75:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:6C:81:84:50:79:6B:91:72:0E:0A:48:F8:08:AA:83:88:25:14:C0 X509v3 Authority Key Identifier: keyid:B3:54:D3:28:CB:BF:D1:EF:3C:D2:92:68:A2:3B:0F:CC:60:E3:A2:C5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.cer Subject Information Access: Signed Object - URI:rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/AS9304.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 164.37.193.0-164.37.194.255 164.37.201.0/24 164.37.213.0-164.37.215.255 164.37.217.0-164.37.219.255 164.37.221.0/24 164.37.225.0-164.37.228.255 164.37.235.0/24 Signature Algorithm: sha256WithRSAEncryption 1e:ee:9b:d8:be:8b:95:c4:ac:d8:1c:ac:01:4d:a5:47:36:c2: c5:47:11:64:93:67:fa:c5:df:bd:cd:b2:2e:75:a1:17:14:fd: f5:60:55:4c:6c:d8:99:45:07:42:63:93:b4:ee:4b:cc:76:03: 0a:c4:30:5f:5a:01:31:d0:67:c6:0e:93:33:6b:3b:19:5c:66: d5:58:e0:d6:7d:f7:67:dc:7b:36:de:c6:a3:56:ab:37:3a:97: 7f:b7:98:eb:5b:88:ef:a4:0a:cb:21:c0:10:a3:2f:40:2d:ba: bc:48:90:9b:52:5f:7e:82:65:ef:eb:61:af:52:78:ba:aa:e2: 2e:59:fa:6e:c1:6a:2a:08:10:03:7c:ff:fa:19:35:42:26:46: fd:5a:8b:e9:25:f5:ba:29:27:ea:59:5e:96:ef:ac:75:ae:cb: 73:0e:a9:16:40:e8:6e:84:b3:da:a7:03:ac:1d:3b:a4:c1:77: fd:5c:55:78:b8:d9:97:a3:05:d1:3e:dd:02:0e:c3:e5:3b:b7: 36:7d:77:0f:94:83:e6:c6:f5:c6:dd:3c:cb:bb:f1:1a:13:b7: 24:93:04:f5:b8:06:ee:f2:bd:b1:d4:81:2a:97:e0:c3:21:ec: 03:fd:e6:e1:0b:3e:90:8a:c6:62:93:73:94:21:5b:54:3e:a8: 16:6f:15:53 -----BEGIN CERTIFICATE----- MIIFZzCCBE+gAwIBAgIUJKtgt/NthjaUAM9nEglzFPVyvoQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjM1NEQzMjhDQkJGRDFFRjNDRDI5MjY4QTIzQjBGQ0M2 MEUzQTJDNTAeFw0yNjA5MTMxMDE0MzJaFw0yNzA5MTIxMDE5MzJaMDMxMTAvBgNV BAMTKDg0NkM4MTg0NTA3OTZCOTE3MjBFMEE0OEY4MDhBQTgzODgyNTE0QzAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDV/PZGKEpTsNYMIgQqwJH8VuBe zzOddoyAuhnf7vVXdgFlOvpT7Pz62zca5i6HiguoEZnAqVK3+03sn8FI+ehzwCcz 9LdieOVPycd/puHtCwQMRt3NbpwifNvlJeuT2+EBTxVGzHFKx/+Fc1rTnra8tejE YeovJZJo0+0XwYgg5lIuiuEMyBByrQ7/7GNpkouax4QEHXERRdOebqGd+tHwrHvO g/RTj5GmPjEOz9M6n6M6XB1fIicmuBW7xskobklMY2NjOlNOZ/TqI1RuU3ecu8S7 lGcz1Lq4iJ7fFf5BxUfOfV18wWSIqyxcxldUbFZKbMYI9reJV7X/DPoBSnWlAgMB AAGjggJxMIICbTAdBgNVHQ4EFgQUhGyBhFB5a5FyDgpI+Aiqg4glFMAwHwYDVR0j BBgwFoAUs1TTKMu/0e880pJoojsPzGDjosUwDgYDVR0PAQH/BAQDAgeAMIGIBgNV HR8EgYAwfjB8oHqgeIZ2cnN5bmM6Ly9yLm1hZ2VsbGFuLmlweG8uY29tL3JlcG8v YTAzNzViMzktZjk0OS00Y2I1LWI1MTktZjk0MDA4YjE2NTRjLTAvMC9CMzU0RDMy OENCQkZEMUVGM0NEMjkyNjhBMjNCMEZDQzYwRTNBMkM1LmNybDCBngYIKwYBBQUH AQEEgZEwgY4wgYsGCCsGAQUFBzAChn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5y aXBlLm5ldC9yZXBvc2l0b3J5LzYxNzA4YTZiLTZjM2EtNDBhMC1hMzAyLTU5NWVj YzE3ODQ4Yy8wL0IzNTREMzI4Q0JCRkQxRUYzQ0QyOTI2OEEyM0IwRkNDNjBFM0Ey QzUuY2VyMHAGCCsGAQUFBwELBGQwYjBgBggrBgEFBQcwC4ZUcnN5bmM6Ly9yLm1h Z2VsbGFuLmlweG8uY29tL3JlcG8vYTAzNzViMzktZjk0OS00Y2I1LWI1MTktZjk0 MDA4YjE2NTRjLTAvMC9BUzkzMDQucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUH DgIwYwYIKwYBBQUHAQcBAf8EVDBSMFAEAgABMEowDAMEAKQlwQMEAKQlwgMEAKQl yTAMAwQApCXVAwQDpCXQMAwDBACkJdkDBAKkJdgDBACkJd0wDAMEAKQl4QMEAKQl 5AMEAKQl6zANBgkqhkiG9w0BAQsFAAOCAQEAHu6b2L6LlcSs2BysAU2lRzbCxUcR ZJNn+sXfvc2yLnWhFxT99WBVTGzYmUUHQmOTtO5LzHYDCsQwX1oBMdBnxg6TM2s7 GVxm1Vjg1n33Z9x7Nt7Go1arNzqXf7eY61uI76QKyyHAEKMvQC26vEiQm1JffoJl 7+thr1J4uqriLln6bsFqKggQA3z/+hk1QiZG/VqL6SX1uikn6llelu+sda7Lcw6p FkDoboSz2qcDrB07pMF3/VxVeLjZl6MF0T7dAg7D5Tu3Nn13D5SD5sb1xt08y7vx GhO3JJME9bgG7vK9sdSBKpfgwyHsA/3m4Qs+kIrGYpNzlCFbVD6oFm8VUw== -----END CERTIFICATE-----Generated at Sun Sep 20 15:44:44 2026 by rpki-client