$ rpki-client -vvf r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/AS209888.roa File: AS209888.roa (raw, json) Hash identifier: QGdHT0O1oiu/Md1zgKWZh9Znz0GhLz6AuWmNsdjfDzE= Subject key identifier: 08:39:1F:8D:50:29:69:2E:B8:33:92:10:86:1F:17:1A:BF:04:53:F5 Certificate issuer: /CN=B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5 Certificate serial: 23F26F97A554CDD35896FACAA051E569BCC78942 Authority key identifier: B3:54:D3:28:CB:BF:D1:EF:3C:D2:92:68:A2:3B:0F:CC:60:E3:A2:C5 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.cer Subject info access: rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/AS209888.roa Signing time: Wed 22 Jul 2026 03:12:50 +0000 ROA not before: Wed 22 Jul 2026 03:07:50 +0000 ROA not after: Wed 21 Jul 2027 03:12:50 +0000 asID: 209888 IP address blocks: 164.37.210.0/24 maxlen: 24 164.37.223.0/24 maxlen: 24 164.37.224.0/24 maxlen: 24 Validation: OK Signature path: rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.crl rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.mft rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.cer rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/D0A516B50426202A424F0EBFCB7D2BD4F744F964.crl rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/D0A516B50426202A424F0EBFCB7D2BD4F744F964.mft rsync://rpki.ripe.net/repository/DEFAULT/0KUWtQQmICpCTw6_y30r1PdE-WQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 24 Jul 2026 14:03:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 23:f2:6f:97:a5:54:cd:d3:58:96:fa:ca:a0:51:e5:69:bc:c7:89:42 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5 Validity Not Before: Jul 22 03:07:50 2026 GMT Not After : Jul 21 03:12:50 2027 GMT Subject: CN=08391F8D5029692EB8339210861F171ABF0453F5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:0c:e1:8e:51:00:0a:a9:ab:b5:70:15:69:1d: 9e:2f:c6:be:8d:54:e6:bd:e5:61:63:1f:89:24:c7: 39:4a:a8:e8:5f:4c:c7:e4:47:a0:d0:42:26:e6:46: 4e:30:e5:62:28:55:e6:2a:02:9f:b0:25:ea:66:5c: 60:f5:88:84:3f:61:c4:34:c7:6f:ce:59:5f:83:5e: 74:7a:7e:06:05:22:76:d7:39:36:b7:73:3d:42:be: f7:76:b9:b4:9c:78:86:60:1c:9c:f3:45:a3:c6:56: 4f:2d:e8:50:3a:b3:d8:5f:b1:18:43:7c:bf:2d:4e: 5a:b0:3a:be:8b:74:57:14:67:76:8c:7f:87:9a:19: ac:eb:be:ec:d0:09:7a:90:97:0d:15:ef:29:6e:71: 56:14:14:68:80:15:f2:1c:04:12:80:b2:de:e3:01: 5a:5f:37:52:8b:46:e3:74:40:c3:16:88:33:64:bc: 69:d0:f6:89:b7:b8:93:ba:1e:bc:bf:76:aa:b4:f9: 81:dd:6a:cd:d0:c4:2b:f7:0f:e6:ef:1e:5e:f7:63: d9:29:57:82:21:80:70:98:77:f5:b6:28:bc:cc:74: 5d:30:e2:30:72:27:b5:de:c9:cb:65:b9:43:8a:47: 7b:4c:1b:b8:2d:85:f3:90:6a:e6:45:77:61:ed:b2: c3:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:39:1F:8D:50:29:69:2E:B8:33:92:10:86:1F:17:1A:BF:04:53:F5 X509v3 Authority Key Identifier: keyid:B3:54:D3:28:CB:BF:D1:EF:3C:D2:92:68:A2:3B:0F:CC:60:E3:A2:C5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.cer Subject Information Access: Signed Object - URI:rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/AS209888.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 164.37.210.0/24 164.37.223.0-164.37.224.255 Signature Algorithm: sha256WithRSAEncryption 44:60:4c:be:ad:45:46:1e:0f:3e:2e:c5:43:0b:10:6a:6a:48: f9:11:d4:ea:89:7b:c6:ed:48:b5:ff:9f:df:fd:46:84:5f:73: 73:82:5e:ea:3a:fc:e1:33:0c:38:e8:3a:82:5f:f1:98:6d:6d: 26:fe:97:e5:38:95:f9:a0:88:2e:fe:ac:5c:b7:7c:9a:17:04: 0f:ce:80:52:de:13:90:ec:f0:8c:f8:ed:cb:2a:1c:ad:ca:22: 9b:5c:fa:ef:de:12:c6:51:74:99:00:eb:c6:df:bd:c3:08:f8: 89:34:23:9c:a3:d3:3c:df:cb:8a:13:da:c0:fa:f5:51:19:78: ce:22:fe:09:03:38:cd:00:bf:8f:9e:10:d3:66:13:37:42:b2: a2:06:9c:59:0f:9c:06:a5:58:12:f6:9d:98:a0:e7:e3:a0:0c: 6f:67:f3:0f:ff:b2:d2:ba:12:7f:61:d6:f0:60:b7:81:6e:0c: 8d:16:52:f6:85:e3:7e:47:6c:15:72:82:2e:c7:e4:45:41:a9: 50:e4:0a:79:88:f3:a8:aa:4c:ba:cf:b9:71:60:5e:5e:ca:57: 59:98:5c:9f:ae:f7:e2:dc:ff:f6:f0:cf:46:58:5d:35:39:3d: ef:df:6b:e7:2c:4f:be:68:af:1a:0b:03:04:02:e3:b2:7b:14: 4b:6b:d6:eb -----BEGIN CERTIFICATE----- MIIFMzCCBBugAwIBAgIUI/Jvl6VUzdNYlvrKoFHlabzHiUIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjM1NEQzMjhDQkJGRDFFRjNDRDI5MjY4QTIzQjBGQ0M2 MEUzQTJDNTAeFw0yNjA3MjIwMzA3NTBaFw0yNzA3MjEwMzEyNTBaMDMxMTAvBgNV BAMTKDA4MzkxRjhENTAyOTY5MkVCODMzOTIxMDg2MUYxNzFBQkYwNDUzRjUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDaDOGOUQAKqau1cBVpHZ4vxr6N VOa95WFjH4kkxzlKqOhfTMfkR6DQQibmRk4w5WIoVeYqAp+wJepmXGD1iIQ/YcQ0 x2/OWV+DXnR6fgYFInbXOTa3cz1Cvvd2ubSceIZgHJzzRaPGVk8t6FA6s9hfsRhD fL8tTlqwOr6LdFcUZ3aMf4eaGazrvuzQCXqQlw0V7ylucVYUFGiAFfIcBBKAst7j AVpfN1KLRuN0QMMWiDNkvGnQ9om3uJO6Hry/dqq0+YHdas3QxCv3D+bvHl73Y9kp V4IhgHCYd/W2KLzMdF0w4jByJ7XeyctluUOKR3tMG7gthfOQauZFd2HtssNHAgMB AAGjggI9MIICOTAdBgNVHQ4EFgQUCDkfjVApaS64M5IQhh8XGr8EU/UwHwYDVR0j BBgwFoAUs1TTKMu/0e880pJoojsPzGDjosUwDgYDVR0PAQH/BAQDAgeAMIGIBgNV HR8EgYAwfjB8oHqgeIZ2cnN5bmM6Ly9yLm1hZ2VsbGFuLmlweG8uY29tL3JlcG8v YTAzNzViMzktZjk0OS00Y2I1LWI1MTktZjk0MDA4YjE2NTRjLTAvMC9CMzU0RDMy OENCQkZEMUVGM0NEMjkyNjhBMjNCMEZDQzYwRTNBMkM1LmNybDCBngYIKwYBBQUH AQEEgZEwgY4wgYsGCCsGAQUFBzAChn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5y aXBlLm5ldC9yZXBvc2l0b3J5LzYxNzA4YTZiLTZjM2EtNDBhMC1hMzAyLTU5NWVj YzE3ODQ4Yy8wL0IzNTREMzI4Q0JCRkQxRUYzQ0QyOTI2OEEyM0IwRkNDNjBFM0Ey QzUuY2VyMHIGCCsGAQUFBwELBGYwZDBiBggrBgEFBQcwC4ZWcnN5bmM6Ly9yLm1h Z2VsbGFuLmlweG8uY29tL3JlcG8vYTAzNzViMzktZjk0OS00Y2I1LWI1MTktZjk0 MDA4YjE2NTRjLTAvMC9BUzIwOTg4OC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEF BQcOAjAtBggrBgEFBQcBBwEB/wQeMBwwGgQCAAEwFAMEAKQl0jAMAwQApCXfAwQA pCXgMA0GCSqGSIb3DQEBCwUAA4IBAQBEYEy+rUVGHg8+LsVDCxBqakj5EdTqiXvG 7Ui1/5/f/UaEX3Nzgl7qOvzhMww46DqCX/GYbW0m/pflOJX5oIgu/qxct3yaFwQP zoBS3hOQ7PCM+O3LKhytyiKbXPrv3hLGUXSZAOvG373DCPiJNCOco9M838uKE9rA +vVRGXjOIv4JAzjNAL+PnhDTZhM3QrKiBpxZD5wGpVgS9p2YoOfjoAxvZ/MP/7LS uhJ/YdbwYLeBbgyNFlL2heN+R2wVcoIux+RFQalQ5Ap5iPOoqky6z7lxYF5eyldZ mFyfrvfi3P/28M9GWF01OT3v32vnLE++aK8aCwMEAuOyexRLa9br -----END CERTIFICATE-----Generated at Thu Jul 23 23:45:23 2026 by rpki-client