$ rpki-client -vvf r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/AS402221.roa File: AS402221.roa (raw, json) Hash identifier: VpQaH3MzSdffEw+yJpBk4UmV/bouOPG/Kpag3177zFA= Subject key identifier: B4:28:9D:07:E3:EF:70:BE:2A:D8:96:A9:85:47:E9:B2:AA:5B:58:1C Certificate issuer: /CN=B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5 Certificate serial: 039D6D263F695C5401375FC40D9522334B519FC5 Authority key identifier: B3:54:D3:28:CB:BF:D1:EF:3C:D2:92:68:A2:3B:0F:CC:60:E3:A2:C5 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.cer Subject info access: rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/AS402221.roa Signing time: Wed 22 Jul 2026 03:11:50 +0000 ROA not before: Wed 22 Jul 2026 03:06:50 +0000 ROA not after: Wed 21 Jul 2027 03:11:50 +0000 asID: 402221 IP address blocks: 164.37.208.0/24 maxlen: 24 164.37.219.0/24 maxlen: 24 164.37.220.0/24 maxlen: 24 Validation: OK Signature path: rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.crl rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.mft rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.cer rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/D0A516B50426202A424F0EBFCB7D2BD4F744F964.crl rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/D0A516B50426202A424F0EBFCB7D2BD4F744F964.mft rsync://rpki.ripe.net/repository/DEFAULT/0KUWtQQmICpCTw6_y30r1PdE-WQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 24 Jul 2026 22:30:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 03:9d:6d:26:3f:69:5c:54:01:37:5f:c4:0d:95:22:33:4b:51:9f:c5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5 Validity Not Before: Jul 22 03:06:50 2026 GMT Not After : Jul 21 03:11:50 2027 GMT Subject: CN=B4289D07E3EF70BE2AD896A98547E9B2AA5B581C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:31:ec:bd:9f:3c:84:19:a4:52:05:6d:2a:51: aa:38:cb:07:72:09:8c:40:80:4d:70:aa:83:0e:bb: 2c:c6:6b:c7:f4:6b:71:ef:39:7d:0f:c6:d0:7d:1b: 70:21:27:d6:38:86:60:42:b9:f9:1f:86:11:ee:04: be:07:ea:a4:6a:42:cf:d2:04:08:23:ca:d4:df:3d: 69:fc:2b:14:e0:dc:8d:30:f2:c5:0e:67:35:59:f0: 78:cf:6d:44:a0:28:d5:ec:3f:91:e3:1b:69:7a:fb: 15:b3:72:3e:6f:ac:ac:7f:4c:22:9a:37:cd:75:c7: d6:48:ce:60:ea:95:8b:8d:a7:ed:4e:9a:e7:37:96: 7a:43:e6:a8:5a:2d:c0:e0:25:de:92:9b:21:05:92: 59:e1:84:00:f3:aa:37:1a:e0:9d:01:d5:31:6a:2b: d8:9f:3d:fa:7b:f0:90:dc:ad:d7:cd:48:2c:f3:95: bd:6c:f9:7a:58:ba:69:e9:7f:f3:e3:c1:76:c4:93: c8:db:1f:af:4b:42:dd:0d:a5:ad:b9:60:1a:4a:d6: ee:be:30:eb:4b:79:77:2f:02:5c:9e:da:cf:d5:f0: 90:ca:63:56:8a:60:62:24:83:aa:9d:01:17:84:1b: 57:0b:15:f2:e8:1c:11:56:90:e2:3b:1b:8f:01:b9: 91:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:28:9D:07:E3:EF:70:BE:2A:D8:96:A9:85:47:E9:B2:AA:5B:58:1C X509v3 Authority Key Identifier: keyid:B3:54:D3:28:CB:BF:D1:EF:3C:D2:92:68:A2:3B:0F:CC:60:E3:A2:C5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.cer Subject Information Access: Signed Object - URI:rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/AS402221.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 164.37.208.0/24 164.37.219.0-164.37.220.255 Signature Algorithm: sha256WithRSAEncryption 2b:fb:0f:72:51:3d:02:d5:95:d3:9e:6e:d7:af:18:03:1b:4d: 01:0e:c9:b3:db:eb:ba:7d:7a:c7:89:2a:49:d9:90:d0:81:74: 8c:08:8e:38:cc:e6:be:15:ed:e7:0a:1b:02:d5:f1:df:1e:92: 56:02:b8:53:e5:ee:2d:ac:96:18:43:bb:7b:91:a0:84:5f:e9: a7:2a:29:74:d9:40:d9:a6:10:1e:79:2e:06:31:9a:33:0f:ce: d4:f4:72:e6:c6:48:10:07:d8:57:80:c9:0b:f9:b2:34:ad:1c: c6:c9:26:c3:91:4a:82:3b:cd:24:03:3f:39:08:e6:29:b7:e4: a0:48:b6:1f:34:4f:ac:96:d8:c4:45:19:14:50:e6:fb:50:d2: 4b:a8:23:bc:39:f3:19:d4:d8:34:70:0e:f5:fd:d8:2a:57:6b: ba:e7:2e:9d:fe:02:f1:30:17:66:f7:62:e6:69:1e:a3:86:d7: 53:a3:90:1f:c7:41:6c:5e:68:65:e2:b1:6c:bc:52:4c:1d:eb: 51:ac:33:18:02:03:07:60:53:6f:d9:38:73:63:be:de:dc:5f: 13:ed:b7:67:14:f2:fe:87:da:6f:5f:c0:17:be:a1:e8:f9:c4: 5e:fd:c5:42:78:14:7c:ed:45:6d:82:9c:c7:23:9a:9e:52:7a: 86:cf:33:31 -----BEGIN CERTIFICATE----- MIIFMzCCBBugAwIBAgIUA51tJj9pXFQBN1/EDZUiM0tRn8UwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjM1NEQzMjhDQkJGRDFFRjNDRDI5MjY4QTIzQjBGQ0M2 MEUzQTJDNTAeFw0yNjA3MjIwMzA2NTBaFw0yNzA3MjEwMzExNTBaMDMxMTAvBgNV BAMTKEI0Mjg5RDA3RTNFRjcwQkUyQUQ4OTZBOTg1NDdFOUIyQUE1QjU4MUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCcMey9nzyEGaRSBW0qUao4ywdy CYxAgE1wqoMOuyzGa8f0a3HvOX0PxtB9G3AhJ9Y4hmBCufkfhhHuBL4H6qRqQs/S BAgjytTfPWn8KxTg3I0w8sUOZzVZ8HjPbUSgKNXsP5HjG2l6+xWzcj5vrKx/TCKa N811x9ZIzmDqlYuNp+1Omuc3lnpD5qhaLcDgJd6SmyEFklnhhADzqjca4J0B1TFq K9ifPfp78JDcrdfNSCzzlb1s+XpYumnpf/PjwXbEk8jbH69LQt0Npa25YBpK1u6+ MOtLeXcvAlye2s/V8JDKY1aKYGIkg6qdAReEG1cLFfLoHBFWkOI7G48BuZFDAgMB AAGjggI9MIICOTAdBgNVHQ4EFgQUtCidB+PvcL4q2JaphUfpsqpbWBwwHwYDVR0j BBgwFoAUs1TTKMu/0e880pJoojsPzGDjosUwDgYDVR0PAQH/BAQDAgeAMIGIBgNV HR8EgYAwfjB8oHqgeIZ2cnN5bmM6Ly9yLm1hZ2VsbGFuLmlweG8uY29tL3JlcG8v YTAzNzViMzktZjk0OS00Y2I1LWI1MTktZjk0MDA4YjE2NTRjLTAvMC9CMzU0RDMy OENCQkZEMUVGM0NEMjkyNjhBMjNCMEZDQzYwRTNBMkM1LmNybDCBngYIKwYBBQUH AQEEgZEwgY4wgYsGCCsGAQUFBzAChn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5y aXBlLm5ldC9yZXBvc2l0b3J5LzYxNzA4YTZiLTZjM2EtNDBhMC1hMzAyLTU5NWVj YzE3ODQ4Yy8wL0IzNTREMzI4Q0JCRkQxRUYzQ0QyOTI2OEEyM0IwRkNDNjBFM0Ey QzUuY2VyMHIGCCsGAQUFBwELBGYwZDBiBggrBgEFBQcwC4ZWcnN5bmM6Ly9yLm1h Z2VsbGFuLmlweG8uY29tL3JlcG8vYTAzNzViMzktZjk0OS00Y2I1LWI1MTktZjk0 MDA4YjE2NTRjLTAvMC9BUzQwMjIyMS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEF BQcOAjAtBggrBgEFBQcBBwEB/wQeMBwwGgQCAAEwFAMEAKQl0DAMAwQApCXbAwQA pCXcMA0GCSqGSIb3DQEBCwUAA4IBAQAr+w9yUT0C1ZXTnm7XrxgDG00BDsmz2+u6 fXrHiSpJ2ZDQgXSMCI44zOa+Fe3nChsC1fHfHpJWArhT5e4trJYYQ7t7kaCEX+mn Kil02UDZphAeeS4GMZozD87U9HLmxkgQB9hXgMkL+bI0rRzGySbDkUqCO80kAz85 COYpt+SgSLYfNE+sltjERRkUUOb7UNJLqCO8OfMZ1Ng0cA71/dgqV2u65y6d/gLx MBdm92LmaR6jhtdTo5Afx0FsXmhl4rFsvFJMHetRrDMYAgMHYFNv2ThzY77e3F8T 7bdnFPL+h9pvX8AXvqHo+cRe/cVCeBR87UVtgpzHI5qeUnqGzzMx -----END CERTIFICATE-----Generated at Fri Jul 24 15:24:07 2026 by rpki-client