$ rpki-client -vvf r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/3130392e3130372e35362e302f32342d3234203d3e20333935373933.roa File: 3130392e3130372e35362e302f32342d3234203d3e20333935373933.roa (raw, json) Hash identifier: Yi+bJDlMq2oQ65osqTj73kdjCGc+nc21ncLdURf3pjA= Subject key identifier: BF:0F:AF:6E:C4:32:14:66:51:96:F1:AF:97:E2:05:AB:7B:62:78:AE Certificate issuer: /CN=2A2FB4DB0AA4D006958316872E467B554E0FD0BE Certificate serial: 27D3FBB43985AC913AA3F4DAD6A53926B13A94EA Authority key identifier: 2A:2F:B4:DB:0A:A4:D0:06:95:83:16:87:2E:46:7B:55:4E:0F:D0:BE Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.cer Subject info access: rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/3130392e3130372e35362e302f32342d3234203d3e20333935373933.roa Signing time: Thu 18 Jun 2026 10:47:44 +0000 ROA not before: Thu 18 Jun 2026 10:42:44 +0000 ROA not after: Thu 17 Jun 2027 10:47:44 +0000 asID: 395793 IP address blocks: 109.107.56.0/24 maxlen: 24 Validation: OK Signature path: rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.crl rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.mft rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.cer rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.crl rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft rsync://rpki.ripe.net/repository/DEFAULT/RQLmPOAcrSOaw5e8K7Xmw0fc7uo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 21 Jul 2026 07:00:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 27:d3:fb:b4:39:85:ac:91:3a:a3:f4:da:d6:a5:39:26:b1:3a:94:ea Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2A2FB4DB0AA4D006958316872E467B554E0FD0BE Validity Not Before: Jun 18 10:42:44 2026 GMT Not After : Jun 17 10:47:44 2027 GMT Subject: CN=BF0FAF6EC43214665196F1AF97E205AB7B6278AE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:f5:8f:4b:e1:86:5f:76:c4:b9:c2:d8:00:aa: 7b:67:c5:82:9f:ab:3c:54:4d:31:ce:40:d2:fb:1d: 5a:34:2a:89:73:79:e7:f3:ba:b4:7c:a6:27:f5:e3: ed:35:eb:10:58:e7:aa:2e:20:6c:39:b7:cf:8f:a3: 4c:0d:fe:62:49:5b:de:c1:fa:f4:83:db:cf:21:63: 6b:44:ba:23:a3:d3:25:3f:6c:ac:a9:83:6f:32:cd: 84:9d:ea:e8:ee:21:d6:d3:6c:6a:6d:80:8e:bc:29: 21:6e:79:a0:6b:0f:66:2b:a2:93:8f:57:aa:78:3a: fd:ba:a5:95:39:72:5b:ac:0b:ac:9e:51:43:e5:3d: 54:50:52:1f:67:9b:c7:04:31:aa:d3:ad:7a:82:92: ae:76:65:22:db:23:9a:b0:b1:07:dc:a9:7b:46:be: cb:c7:2d:64:7f:f5:d0:53:9c:bf:c3:15:bf:2e:0b: 0b:15:60:e4:4b:b9:dc:81:82:e3:1f:30:84:8a:0d: 68:ee:ef:05:d2:60:10:0d:c0:dd:8a:00:d8:28:ac: 48:0e:72:c4:1a:bb:ee:17:a7:e6:f5:44:a0:91:7f: 3e:c7:71:ff:6b:b5:b2:57:e1:67:5c:31:03:15:33: bc:5a:c4:b6:d1:03:6e:17:cf:0c:a9:87:9f:54:04: 09:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:0F:AF:6E:C4:32:14:66:51:96:F1:AF:97:E2:05:AB:7B:62:78:AE X509v3 Authority Key Identifier: keyid:2A:2F:B4:DB:0A:A4:D0:06:95:83:16:87:2E:46:7B:55:4E:0F:D0:BE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.cer Subject Information Access: Signed Object - URI:rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/3130392e3130372e35362e302f32342d3234203d3e20333935373933.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 109.107.56.0/24 Signature Algorithm: sha256WithRSAEncryption 78:e7:50:5c:06:c7:a0:d6:a0:82:47:ba:78:a0:22:32:1f:f2: 71:38:e8:9d:19:2c:57:c5:c1:86:90:f4:ac:26:b6:ca:dd:7e: d9:6d:96:fd:00:26:3b:f8:b9:8b:97:7b:ec:cd:65:2d:b9:76: 1c:97:0e:02:05:29:6d:18:71:53:4f:4b:c9:79:50:06:83:7e: b5:32:12:0c:f8:7c:34:a5:58:18:31:80:46:d0:29:20:56:59: 26:06:5e:6a:3c:c3:9c:e3:24:b7:98:d8:95:37:46:ab:1f:bc: 0f:ce:52:be:4c:19:d4:f2:e9:14:12:0f:4a:39:07:c8:0f:97: 6c:4b:92:e1:22:00:c3:6c:58:91:c1:01:a9:f5:31:19:6a:32: 39:03:7f:fc:9e:cc:0f:bb:83:34:04:d3:32:2d:ca:a4:12:58: 07:7c:ff:8a:82:f0:f2:9a:43:db:37:59:fe:d6:cc:57:9f:54: 05:a8:3a:eb:5c:e4:2b:85:dc:91:e5:6a:29:3c:80:1f:ab:d8: 9a:57:ba:bb:43:41:93:a8:d3:d9:a5:84:e5:46:6e:9d:bd:08: e2:99:7e:0a:3f:c1:82:e6:90:bb:6c:ca:0f:d4:19:ca:c8:28: 4f:7d:3b:41:54:ad:5b:5e:d6:c2:3c:06:7e:c2:2f:60:73:a8: 5b:1b:71:b4 -----BEGIN CERTIFICATE----- MIIFWjCCBEKgAwIBAgIUJ9P7tDmFrJE6o/Ta1qU5JrE6lOowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkEyRkI0REIwQUE0RDAwNjk1ODMxNjg3MkU0NjdCNTU0 RTBGRDBCRTAeFw0yNjA2MTgxMDQyNDRaFw0yNzA2MTcxMDQ3NDRaMDMxMTAvBgNV BAMTKEJGMEZBRjZFQzQzMjE0NjY1MTk2RjFBRjk3RTIwNUFCN0I2Mjc4QUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCy9Y9L4YZfdsS5wtgAqntnxYKf qzxUTTHOQNL7HVo0KolzeefzurR8pif14+016xBY56ouIGw5t8+Po0wN/mJJW97B +vSD288hY2tEuiOj0yU/bKypg28yzYSd6ujuIdbTbGptgI68KSFueaBrD2YropOP V6p4Ov26pZU5clusC6yeUUPlPVRQUh9nm8cEMarTrXqCkq52ZSLbI5qwsQfcqXtG vsvHLWR/9dBTnL/DFb8uCwsVYORLudyBguMfMISKDWju7wXSYBANwN2KANgorEgO csQau+4Xp+b1RKCRfz7Hcf9rtbJX4WdcMQMVM7xaxLbRA24Xzwyph59UBAkRAgMB AAGjggJkMIICYDAdBgNVHQ4EFgQUvw+vbsQyFGZRlvGvl+IFq3tieK4wHwYDVR0j BBgwFoAUKi+02wqk0AaVgxaHLkZ7VU4P0L4wDgYDVR0PAQH/BAQDAgeAMIGIBgNV HR8EgYAwfjB8oHqgeIZ2cnN5bmM6Ly9yLm1hZ2VsbGFuLmlweG8uY29tL3JlcG8v YTZmMjE0N2EtZGU4YS00NDQwLWJjYTItNmQ4YjdjODc2ZmRhLTAvMC8yQTJGQjRE QjBBQTREMDA2OTU4MzE2ODcyRTQ2N0I1NTRFMEZEMEJFLmNybDCBngYIKwYBBQUH AQEEgZEwgY4wgYsGCCsGAQUFBzAChn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5y aXBlLm5ldC9yZXBvc2l0b3J5LzlkZjMzYTU3LTdlNGYtNDg0NC04NGUyLWI3MTUz YjU1MTFiNC8wLzJBMkZCNERCMEFBNEQwMDY5NTgzMTY4NzJFNDY3QjU1NEUwRkQw QkUuY2VyMIGmBggrBgEFBQcBCwSBmTCBljCBkwYIKwYBBQUHMAuGgYZyc3luYzov L3IubWFnZWxsYW4uaXB4by5jb20vcmVwby9hNmYyMTQ3YS1kZThhLTQ0NDAtYmNh Mi02ZDhiN2M4NzZmZGEtMC8wLzMxMzAzOTJlMzEzMDM3MmUzNTM2MmUzMDJmMzIz NDJkMzIzNDIwM2QzZTIwMzMzOTM1MzczOTMzLnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAbWs4MA0GCSqG SIb3DQEBCwUAA4IBAQB451BcBseg1qCCR7p4oCIyH/JxOOidGSxXxcGGkPSsJrbK 3X7ZbZb9ACY7+LmLl3vszWUtuXYclw4CBSltGHFTT0vJeVAGg361MhIM+Hw0pVgY MYBG0CkgVlkmBl5qPMOc4yS3mNiVN0arH7wPzlK+TBnU8ukUEg9KOQfID5dsS5Lh IgDDbFiRwQGp9TEZajI5A3/8nswPu4M0BNMyLcqkElgHfP+KgvDymkPbN1n+1sxX n1QFqDrrXOQrhdyR5WopPIAfq9iaV7q7Q0GTqNPZpYTlRm6dvQjimX4KP8GC5pC7 bMoP1BnKyChPfTtBVK1bXtbCPAZ+wi9gc6hbG3G0 -----END CERTIFICATE-----Generated at Mon Jul 20 23:45:45 2026 by rpki-client