$ rpki-client -vvvf r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/AS9009.roa File: AS9009.roa (raw, json) Hash identifier: uJ7ci88aHntl9oB1r6/WlzKr4lQBoukd4gny4wz9hUw= Subject key identifier: DB:B5:CF:0C:5D:AE:EF:F3:80:E0:11:E1:95:6D:6C:A0:E2:71:27:DD Certificate issuer: /CN=B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5 Certificate serial: 2C26DE3E9D41530247930ECEAE45BF2E13367290 Authority key identifier: B3:54:D3:28:CB:BF:D1:EF:3C:D2:92:68:A2:3B:0F:CC:60:E3:A2:C5 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.cer Subject info access: rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/AS9009.roa Signing time: Wed 23 Sep 2026 10:59:31 +0000 ROA not before: Wed 23 Sep 2026 10:54:31 +0000 ROA not after: Wed 22 Sep 2027 10:59:31 +0000 asID: 9009 IP address blocks: 164.37.234.0/24 maxlen: 24 Validation: OK Signature path: rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.crl rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.mft rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.cer rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/D0A516B50426202A424F0EBFCB7D2BD4F744F964.crl rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/D0A516B50426202A424F0EBFCB7D2BD4F744F964.mft rsync://rpki.ripe.net/repository/DEFAULT/0KUWtQQmICpCTw6_y30r1PdE-WQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 26 Sep 2026 22:43:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2c:26:de:3e:9d:41:53:02:47:93:0e:ce:ae:45:bf:2e:13:36:72:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5 Validity Not Before: Sep 23 10:54:31 2026 GMT Not After : Sep 22 10:59:31 2027 GMT Subject: CN=DBB5CF0C5DAEEFF380E011E1956D6CA0E27127DD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:88:59:bf:e4:f7:25:36:c4:dd:11:d0:33:34: 6d:4d:3c:36:73:05:3c:3d:e3:0e:08:ba:a0:9a:1f: b6:ac:5c:fb:25:fb:15:c8:3c:2a:3a:43:8c:fd:2e: 6c:9d:c5:cd:41:21:19:33:a2:6b:3b:53:f4:7c:46: 0e:eb:b5:08:d3:fe:0e:4b:f1:de:07:fc:7d:c6:6d: 11:15:3d:0f:b5:09:3d:67:c1:45:6a:66:82:a3:0a: 34:e8:8d:2f:b5:ba:37:73:10:e6:84:5b:7a:8a:3f: 4b:e3:50:71:b2:04:d5:e3:57:11:a6:4b:84:76:bb: a4:d2:2d:b5:3b:b8:eb:1d:b3:26:19:b4:58:eb:73: e4:df:a4:72:5c:3d:e3:1e:b6:1c:ac:32:c3:2b:c3: d2:a4:2c:95:e0:6a:ed:89:63:05:af:68:7c:27:97: 2d:08:b1:b3:54:1e:b7:8a:38:c0:ba:18:21:65:14: 31:d6:91:8e:6d:09:24:46:43:c6:e8:12:0c:bc:7a: e6:4f:b0:6c:dd:b6:d4:16:0c:9f:89:18:93:f7:6f: de:2a:ce:7a:c4:31:e3:73:17:7b:ca:53:53:a8:5e: 9f:0d:7d:f3:7f:6a:09:a7:1d:ad:5c:44:bc:07:03: d5:78:f8:1f:dd:15:0f:fb:9f:ab:7e:18:10:c2:00: 6a:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:B5:CF:0C:5D:AE:EF:F3:80:E0:11:E1:95:6D:6C:A0:E2:71:27:DD X509v3 Authority Key Identifier: keyid:B3:54:D3:28:CB:BF:D1:EF:3C:D2:92:68:A2:3B:0F:CC:60:E3:A2:C5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.cer Subject Information Access: Signed Object - URI:rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/AS9009.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 164.37.234.0/24 Signature Algorithm: sha256WithRSAEncryption 33:3e:15:5f:6b:91:31:3a:c3:18:a6:a8:f8:67:3b:24:1b:25: 0b:be:2b:ab:e2:41:0e:b7:46:f8:a3:9c:b8:e4:5e:3f:38:45: e2:6a:94:de:68:0f:64:89:91:d2:d8:0d:0b:bb:99:fd:a9:92: da:f5:1c:8e:c2:b1:5b:d2:b5:1f:35:47:1f:21:a8:ff:ce:ea: e2:aa:8e:0f:e2:a2:84:38:ff:62:3f:9a:eb:39:f9:72:06:43: 5e:1d:c6:25:94:c2:8f:db:17:3e:8f:a4:99:1b:c1:bb:14:ab: db:ca:df:01:a2:d6:71:3f:67:54:fb:e3:30:2a:59:75:4c:9d: 9e:19:2c:25:a9:ac:ae:6f:f6:fb:3f:45:3c:6d:a0:bb:fa:04: 73:0f:3e:38:24:2d:09:da:89:7c:4b:94:b8:76:ce:6b:ac:7a: f3:d0:f5:6e:63:89:40:43:a7:ba:f0:b2:9c:c8:c9:e9:c2:67: ff:ee:02:a3:62:c7:fe:35:1a:38:67:c5:52:28:5e:61:0a:bf: 37:89:86:f9:ab:a1:c1:5b:f9:e7:9c:c7:14:69:cc:34:da:fe: dc:bf:80:b8:bd:01:4b:f6:80:f0:36:15:b2:86:b9:47:11:09: 94:8f:05:a4:42:97:d3:3a:27:1c:34:d9:9f:43:a6:ab:34:de: ef:94:b6:14 -----BEGIN CERTIFICATE----- MIIFIzCCBAugAwIBAgIULCbePp1BUwJHkw7OrkW/LhM2cpAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjM1NEQzMjhDQkJGRDFFRjNDRDI5MjY4QTIzQjBGQ0M2 MEUzQTJDNTAeFw0yNjA5MjMxMDU0MzFaFw0yNzA5MjIxMDU5MzFaMDMxMTAvBgNV BAMTKERCQjVDRjBDNURBRUVGRjM4MEUwMTFFMTk1NkQ2Q0EwRTI3MTI3REQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCOiFm/5PclNsTdEdAzNG1NPDZz BTw94w4IuqCaH7asXPsl+xXIPCo6Q4z9Lmydxc1BIRkzoms7U/R8Rg7rtQjT/g5L 8d4H/H3GbREVPQ+1CT1nwUVqZoKjCjTojS+1ujdzEOaEW3qKP0vjUHGyBNXjVxGm S4R2u6TSLbU7uOsdsyYZtFjrc+TfpHJcPeMethysMsMrw9KkLJXgau2JYwWvaHwn ly0IsbNUHreKOMC6GCFlFDHWkY5tCSRGQ8boEgy8euZPsGzdttQWDJ+JGJP3b94q znrEMeNzF3vKU1OoXp8NffN/agmnHa1cRLwHA9V4+B/dFQ/7n6t+GBDCAGo9AgMB AAGjggItMIICKTAdBgNVHQ4EFgQU27XPDF2u7/OA4BHhlW1soOJxJ90wHwYDVR0j BBgwFoAUs1TTKMu/0e880pJoojsPzGDjosUwDgYDVR0PAQH/BAQDAgeAMIGIBgNV HR8EgYAwfjB8oHqgeIZ2cnN5bmM6Ly9yLm1hZ2VsbGFuLmlweG8uY29tL3JlcG8v YTAzNzViMzktZjk0OS00Y2I1LWI1MTktZjk0MDA4YjE2NTRjLTAvMC9CMzU0RDMy OENCQkZEMUVGM0NEMjkyNjhBMjNCMEZDQzYwRTNBMkM1LmNybDCBngYIKwYBBQUH AQEEgZEwgY4wgYsGCCsGAQUFBzAChn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5y aXBlLm5ldC9yZXBvc2l0b3J5LzYxNzA4YTZiLTZjM2EtNDBhMC1hMzAyLTU5NWVj YzE3ODQ4Yy8wL0IzNTREMzI4Q0JCRkQxRUYzQ0QyOTI2OEEyM0IwRkNDNjBFM0Ey QzUuY2VyMHAGCCsGAQUFBwELBGQwYjBgBggrBgEFBQcwC4ZUcnN5bmM6Ly9yLm1h Z2VsbGFuLmlweG8uY29tL3JlcG8vYTAzNzViMzktZjk0OS00Y2I1LWI1MTktZjk0 MDA4YjE2NTRjLTAvMC9BUzkwMDkucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUH DgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBACkJeowDQYJKoZIhvcNAQEL BQADggEBADM+FV9rkTE6wximqPhnOyQbJQu+K6viQQ63RvijnLjkXj84ReJqlN5o D2SJkdLYDQu7mf2pktr1HI7CsVvStR81Rx8hqP/O6uKqjg/iooQ4/2I/mus5+XIG Q14dxiWUwo/bFz6PpJkbwbsUq9vK3wGi1nE/Z1T74zAqWXVMnZ4ZLCWprK5v9vs/ RTxtoLv6BHMPPjgkLQnaiXxLlLh2zmusevPQ9W5jiUBDp7rwspzIyenCZ//uAqNi x/41GjhnxVIoXmEKvzeJhvmrocFb+eecxxRpzDTa/ty/gLi9AUv2gPA2FbKGuUcR CZSPBaRCl9M6Jxw02Z9Dpqs03u+UthQ= -----END CERTIFICATE-----Generated at Sat Sep 26 15:11:01 2026 by rpki-client