$ rpki-client -vvf r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/AS402276.roa File: AS402276.roa (raw, json) Hash identifier: NGjsaZ1CnFUiw4ACvuh6gsaw/mYrmfH5DGndSmFnFUQ= Subject key identifier: 81:4D:30:71:C3:3A:F1:5A:5B:19:37:4A:D0:81:3A:04:11:EB:32:C9 Certificate issuer: /CN=B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5 Certificate serial: 05D921BCD22988397540E100F49D908ECD43B608 Authority key identifier: B3:54:D3:28:CB:BF:D1:EF:3C:D2:92:68:A2:3B:0F:CC:60:E3:A2:C5 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.cer Subject info access: rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/AS402276.roa Signing time: Wed 22 Jul 2026 03:13:06 +0000 ROA not before: Wed 22 Jul 2026 03:08:06 +0000 ROA not after: Wed 21 Jul 2027 03:13:06 +0000 asID: 402276 IP address blocks: 164.37.217.0/24 maxlen: 24 164.37.234.0/24 maxlen: 24 164.37.239.0/24 maxlen: 24 Validation: OK Signature path: rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.crl rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.mft rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.cer rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/D0A516B50426202A424F0EBFCB7D2BD4F744F964.crl rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/D0A516B50426202A424F0EBFCB7D2BD4F744F964.mft rsync://rpki.ripe.net/repository/DEFAULT/0KUWtQQmICpCTw6_y30r1PdE-WQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 24 Jul 2026 22:30:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 05:d9:21:bc:d2:29:88:39:75:40:e1:00:f4:9d:90:8e:cd:43:b6:08 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5 Validity Not Before: Jul 22 03:08:06 2026 GMT Not After : Jul 21 03:13:06 2027 GMT Subject: CN=814D3071C33AF15A5B19374AD0813A0411EB32C9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:4a:2a:cc:93:f5:49:a5:4c:09:ad:a9:ec:71: 6e:04:0f:d6:58:cc:e7:c5:76:09:b4:f5:16:c0:ef: 04:fa:de:56:93:22:64:73:0a:18:5b:17:36:2d:70: b3:db:aa:42:2a:9e:d2:44:10:02:48:12:d9:b4:8a: 8e:49:7b:7d:3e:e2:7c:af:fa:f7:77:eb:eb:03:c1: 3d:15:fe:38:00:b6:44:9e:a1:64:dc:50:fc:01:04: 14:9e:f3:60:9a:1a:32:7d:8f:ad:fc:02:6e:7b:a5: 84:fb:c6:b9:95:cb:2e:03:52:6a:8e:9e:54:69:a2: ee:5c:5e:59:17:c6:05:f1:5a:59:f2:67:e1:d5:64: e9:bd:be:93:1e:6d:b6:0f:ad:58:22:2d:29:73:c6: 47:dc:97:5a:f0:04:d9:2c:6e:f9:24:60:d0:30:a0: 0a:3a:3c:b7:3d:fb:df:c0:72:f9:b0:9f:9c:39:40: e1:c4:62:cd:9b:66:9d:41:51:8b:58:fd:2f:d4:86: c8:39:3f:34:0e:aa:8c:61:52:7d:47:f9:87:77:1e: b6:2a:e1:6c:d7:c5:4b:0e:77:d5:49:71:13:90:49: 4a:51:42:6a:6b:7b:5d:3c:21:5a:ea:2d:0c:13:09: d0:55:ce:24:2b:96:d2:51:73:87:5d:d7:d7:b0:ea: d1:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:4D:30:71:C3:3A:F1:5A:5B:19:37:4A:D0:81:3A:04:11:EB:32:C9 X509v3 Authority Key Identifier: keyid:B3:54:D3:28:CB:BF:D1:EF:3C:D2:92:68:A2:3B:0F:CC:60:E3:A2:C5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.cer Subject Information Access: Signed Object - URI:rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/AS402276.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 164.37.217.0/24 164.37.234.0/24 164.37.239.0/24 Signature Algorithm: sha256WithRSAEncryption 90:a6:41:e3:f8:7b:5e:f7:ab:f4:7c:80:fd:8c:9a:57:42:48: 0b:e4:4c:83:65:9c:23:88:f7:01:08:64:97:b6:5d:0d:0c:7b: 2b:75:f3:ec:e0:fa:6c:30:ac:2c:0e:95:49:5c:49:6f:df:ae: e0:8e:bb:b7:d5:d7:07:08:86:dd:ee:3a:95:0e:fe:90:e5:10: 70:f7:d0:63:9d:52:f9:46:c0:ee:5b:32:ac:29:f2:7d:c3:ac: 7d:19:0e:e9:de:39:28:62:55:90:20:ca:69:af:8d:b0:da:d6: e9:8a:cd:2b:0a:9d:3b:b6:41:13:71:4d:86:ce:30:07:92:fe: df:37:57:21:ed:6e:47:89:1d:38:a8:cd:29:99:f4:7c:70:ed: 2e:51:60:8e:20:b0:6e:c6:4b:21:94:5f:4e:a3:b7:b8:4e:44: 98:79:07:1c:50:7e:50:0c:98:37:f1:ad:cb:0b:c1:ad:7e:40: c0:a0:17:0b:fa:50:d9:58:cc:ee:6a:bd:de:cf:2b:83:f1:42: 97:ac:6c:c8:f1:5e:8a:0a:45:ed:83:89:42:55:42:ba:b5:c0: 13:89:12:be:3e:d5:c2:90:1f:83:d0:d7:72:66:8f:bf:0e:74: c5:d7:56:92:d6:9f:73:41:74:54:c3:00:19:b0:02:73:95:87: f0:67:af:04 -----BEGIN CERTIFICATE----- MIIFMTCCBBmgAwIBAgIUBdkhvNIpiDl1QOEA9J2Qjs1DtggwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjM1NEQzMjhDQkJGRDFFRjNDRDI5MjY4QTIzQjBGQ0M2 MEUzQTJDNTAeFw0yNjA3MjIwMzA4MDZaFw0yNzA3MjEwMzEzMDZaMDMxMTAvBgNV BAMTKDgxNEQzMDcxQzMzQUYxNUE1QjE5Mzc0QUQwODEzQTA0MTFFQjMyQzkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCoSirMk/VJpUwJranscW4ED9ZY zOfFdgm09RbA7wT63laTImRzChhbFzYtcLPbqkIqntJEEAJIEtm0io5Je30+4nyv +vd36+sDwT0V/jgAtkSeoWTcUPwBBBSe82CaGjJ9j638Am57pYT7xrmVyy4DUmqO nlRpou5cXlkXxgXxWlnyZ+HVZOm9vpMebbYPrVgiLSlzxkfcl1rwBNksbvkkYNAw oAo6PLc9+9/Acvmwn5w5QOHEYs2bZp1BUYtY/S/Uhsg5PzQOqoxhUn1H+Yd3HrYq 4WzXxUsOd9VJcROQSUpRQmpre108IVrqLQwTCdBVziQrltJRc4dd19ew6tHzAgMB AAGjggI7MIICNzAdBgNVHQ4EFgQUgU0wccM68VpbGTdK0IE6BBHrMskwHwYDVR0j BBgwFoAUs1TTKMu/0e880pJoojsPzGDjosUwDgYDVR0PAQH/BAQDAgeAMIGIBgNV HR8EgYAwfjB8oHqgeIZ2cnN5bmM6Ly9yLm1hZ2VsbGFuLmlweG8uY29tL3JlcG8v YTAzNzViMzktZjk0OS00Y2I1LWI1MTktZjk0MDA4YjE2NTRjLTAvMC9CMzU0RDMy OENCQkZEMUVGM0NEMjkyNjhBMjNCMEZDQzYwRTNBMkM1LmNybDCBngYIKwYBBQUH AQEEgZEwgY4wgYsGCCsGAQUFBzAChn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5y aXBlLm5ldC9yZXBvc2l0b3J5LzYxNzA4YTZiLTZjM2EtNDBhMC1hMzAyLTU5NWVj YzE3ODQ4Yy8wL0IzNTREMzI4Q0JCRkQxRUYzQ0QyOTI2OEEyM0IwRkNDNjBFM0Ey QzUuY2VyMHIGCCsGAQUFBwELBGYwZDBiBggrBgEFBQcwC4ZWcnN5bmM6Ly9yLm1h Z2VsbGFuLmlweG8uY29tL3JlcG8vYTAzNzViMzktZjk0OS00Y2I1LWI1MTktZjk0 MDA4YjE2NTRjLTAvMC9BUzQwMjI3Ni5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEF BQcOAjArBggrBgEFBQcBBwEB/wQcMBowGAQCAAEwEgMEAKQl2QMEAKQl6gMEAKQl 7zANBgkqhkiG9w0BAQsFAAOCAQEAkKZB4/h7Xver9HyA/YyaV0JIC+RMg2WcI4j3 AQhkl7ZdDQx7K3Xz7OD6bDCsLA6VSVxJb9+u4I67t9XXBwiG3e46lQ7+kOUQcPfQ Y51S+UbA7lsyrCnyfcOsfRkO6d45KGJVkCDKaa+NsNrW6YrNKwqdO7ZBE3FNhs4w B5L+3zdXIe1uR4kdOKjNKZn0fHDtLlFgjiCwbsZLIZRfTqO3uE5EmHkHHFB+UAyY N/GtywvBrX5AwKAXC/pQ2VjM7mq93s8rg/FCl6xsyPFeigpF7YOJQlVCurXAE4kS vj7VwpAfg9DXcmaPvw50xddWktafc0F0VMMAGbACc5WH8GevBA== -----END CERTIFICATE-----Generated at Fri Jul 24 09:36:57 2026 by rpki-client