$ rpki-client -vvf r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/3130392e3130372e35372e302f32342d3234203d3e20333935373933.roa File: 3130392e3130372e35372e302f32342d3234203d3e20333935373933.roa (raw, json) Hash identifier: 4QDNyTiDi9ix4d3H0eZYAjQpGFtCNLXtF9cOcYDusq4= Subject key identifier: 6F:C4:CB:96:4A:35:1F:CD:25:9D:6D:F2:07:5A:71:96:67:FA:FC:69 Certificate issuer: /CN=2A2FB4DB0AA4D006958316872E467B554E0FD0BE Certificate serial: 313CDC01D70976DDDEB613B211AA0ACE72B22A90 Authority key identifier: 2A:2F:B4:DB:0A:A4:D0:06:95:83:16:87:2E:46:7B:55:4E:0F:D0:BE Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.cer Subject info access: rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/3130392e3130372e35372e302f32342d3234203d3e20333935373933.roa Signing time: Thu 18 Jun 2026 10:47:44 +0000 ROA not before: Thu 18 Jun 2026 10:42:44 +0000 ROA not after: Thu 17 Jun 2027 10:47:44 +0000 asID: 395793 IP address blocks: 109.107.57.0/24 maxlen: 24 Validation: OK Signature path: rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.crl rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.mft rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.cer rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.crl rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft rsync://rpki.ripe.net/repository/DEFAULT/RQLmPOAcrSOaw5e8K7Xmw0fc7uo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 21 Jul 2026 07:00:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 31:3c:dc:01:d7:09:76:dd:de:b6:13:b2:11:aa:0a:ce:72:b2:2a:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2A2FB4DB0AA4D006958316872E467B554E0FD0BE Validity Not Before: Jun 18 10:42:44 2026 GMT Not After : Jun 17 10:47:44 2027 GMT Subject: CN=6FC4CB964A351FCD259D6DF2075A719667FAFC69 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:ed:c7:8b:68:de:7d:88:a6:a5:f6:b1:c0:ce: 6e:0e:97:06:ec:a6:50:58:c4:7f:f0:67:45:f9:a2: 0f:b7:21:d8:60:a5:f5:ba:3b:63:f6:17:7d:5a:f1: b9:d0:47:96:49:99:30:2e:8a:f2:65:0e:1a:8c:1c: c8:b9:7b:0f:3d:48:d8:f9:67:13:28:c4:86:bb:f4: 8f:57:3e:b0:2d:a7:3d:95:43:2b:b2:a0:5d:a7:95: f3:be:34:84:70:8b:e6:1b:5d:58:a7:2d:00:13:af: d1:b5:db:68:9d:b6:ad:77:36:49:6f:23:f5:4b:ae: db:c1:86:66:37:dd:54:6b:47:56:8b:fa:74:2d:e7: 0c:92:40:8a:df:aa:f9:cf:2c:b5:a7:ed:17:85:2a: e8:3c:1f:fe:fa:53:c1:d4:fe:66:14:99:b3:2e:c9: 57:5d:1f:7a:cb:ba:71:f0:5e:3d:48:47:3c:ce:22: e3:6c:13:0f:e5:1e:4a:04:44:10:2c:cb:65:a6:38: 4e:d7:6e:fa:f8:01:da:80:7d:e9:c5:f8:ba:8b:5e: 27:47:e7:63:40:d6:0e:b3:aa:35:f9:ae:d2:0b:92: 7f:f7:a0:a5:ab:8b:21:ae:b0:76:7a:b9:eb:66:58: a2:52:5d:a5:b4:e0:71:c4:18:81:50:a5:e8:4b:dd: 17:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:C4:CB:96:4A:35:1F:CD:25:9D:6D:F2:07:5A:71:96:67:FA:FC:69 X509v3 Authority Key Identifier: keyid:2A:2F:B4:DB:0A:A4:D0:06:95:83:16:87:2E:46:7B:55:4E:0F:D0:BE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.cer Subject Information Access: Signed Object - URI:rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/3130392e3130372e35372e302f32342d3234203d3e20333935373933.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 109.107.57.0/24 Signature Algorithm: sha256WithRSAEncryption 6f:3b:06:36:a6:d6:fd:3e:21:5c:c6:81:55:4c:82:cb:1a:25: 01:5d:88:40:61:07:f6:3b:9a:98:e6:cb:97:f1:7e:ea:e1:12: bc:b0:c6:58:a5:5d:bb:e1:02:c1:29:b0:86:8e:44:2b:da:a7: 1b:3d:71:15:cc:f9:de:25:60:b4:70:68:b2:ec:0b:b4:10:8b: ea:f3:e5:65:b3:3f:8b:68:03:73:71:83:99:8a:b8:ca:4a:0d: 6c:cb:aa:44:62:e1:ed:97:71:3c:a7:b9:d3:75:63:e8:57:db: aa:a6:84:da:4d:f5:72:8f:7e:27:7e:8e:ed:f4:1c:fb:59:f5: 78:b5:20:95:ac:4b:9f:6a:a6:a5:0c:81:2e:cd:cd:a9:8b:a2: dd:0c:26:f6:00:59:fe:2e:d2:e9:3b:05:5e:d6:02:56:b5:fe: 6d:da:f5:3d:2c:15:2b:c5:ad:6d:58:52:0b:4f:78:5c:62:ee: 05:da:20:7b:f6:84:22:1c:2b:8f:6a:6c:ff:cf:bf:d8:d8:a4: 78:0f:8a:ff:39:2f:63:46:50:18:ef:d4:1f:e8:1d:33:b0:a4: e4:36:f5:03:00:3a:c1:18:98:01:4c:87:3a:b1:5a:65:bc:a6: 3a:9b:2b:29:ed:a2:63:3b:1a:83:f3:cf:c7:13:e4:e7:8a:ec: fb:e3:4f:08 -----BEGIN CERTIFICATE----- MIIFWjCCBEKgAwIBAgIUMTzcAdcJdt3ethOyEaoKznKyKpAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkEyRkI0REIwQUE0RDAwNjk1ODMxNjg3MkU0NjdCNTU0 RTBGRDBCRTAeFw0yNjA2MTgxMDQyNDRaFw0yNzA2MTcxMDQ3NDRaMDMxMTAvBgNV BAMTKDZGQzRDQjk2NEEzNTFGQ0QyNTlENkRGMjA3NUE3MTk2NjdGQUZDNjkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDV7ceLaN59iKal9rHAzm4Olwbs plBYxH/wZ0X5og+3IdhgpfW6O2P2F31a8bnQR5ZJmTAuivJlDhqMHMi5ew89SNj5 ZxMoxIa79I9XPrAtpz2VQyuyoF2nlfO+NIRwi+YbXVinLQATr9G122idtq13Nklv I/VLrtvBhmY33VRrR1aL+nQt5wySQIrfqvnPLLWn7ReFKug8H/76U8HU/mYUmbMu yVddH3rLunHwXj1IRzzOIuNsEw/lHkoERBAsy2WmOE7Xbvr4AdqAfenF+LqLXidH 52NA1g6zqjX5rtILkn/3oKWriyGusHZ6uetmWKJSXaW04HHEGIFQpehL3RenAgMB AAGjggJkMIICYDAdBgNVHQ4EFgQUb8TLlko1H80lnW3yB1pxlmf6/GkwHwYDVR0j BBgwFoAUKi+02wqk0AaVgxaHLkZ7VU4P0L4wDgYDVR0PAQH/BAQDAgeAMIGIBgNV HR8EgYAwfjB8oHqgeIZ2cnN5bmM6Ly9yLm1hZ2VsbGFuLmlweG8uY29tL3JlcG8v YTZmMjE0N2EtZGU4YS00NDQwLWJjYTItNmQ4YjdjODc2ZmRhLTAvMC8yQTJGQjRE QjBBQTREMDA2OTU4MzE2ODcyRTQ2N0I1NTRFMEZEMEJFLmNybDCBngYIKwYBBQUH AQEEgZEwgY4wgYsGCCsGAQUFBzAChn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5y aXBlLm5ldC9yZXBvc2l0b3J5LzlkZjMzYTU3LTdlNGYtNDg0NC04NGUyLWI3MTUz YjU1MTFiNC8wLzJBMkZCNERCMEFBNEQwMDY5NTgzMTY4NzJFNDY3QjU1NEUwRkQw QkUuY2VyMIGmBggrBgEFBQcBCwSBmTCBljCBkwYIKwYBBQUHMAuGgYZyc3luYzov L3IubWFnZWxsYW4uaXB4by5jb20vcmVwby9hNmYyMTQ3YS1kZThhLTQ0NDAtYmNh Mi02ZDhiN2M4NzZmZGEtMC8wLzMxMzAzOTJlMzEzMDM3MmUzNTM3MmUzMDJmMzIz NDJkMzIzNDIwM2QzZTIwMzMzOTM1MzczOTMzLnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAbWs5MA0GCSqG SIb3DQEBCwUAA4IBAQBvOwY2ptb9PiFcxoFVTILLGiUBXYhAYQf2O5qY5suX8X7q 4RK8sMZYpV274QLBKbCGjkQr2qcbPXEVzPneJWC0cGiy7Au0EIvq8+Vlsz+LaANz cYOZirjKSg1sy6pEYuHtl3E8p7nTdWPoV9uqpoTaTfVyj34nfo7t9Bz7WfV4tSCV rEufaqalDIEuzc2pi6LdDCb2AFn+LtLpOwVe1gJWtf5t2vU9LBUrxa1tWFILT3hc Yu4F2iB79oQiHCuPamz/z7/Y2KR4D4r/OS9jRlAY79Qf6B0zsKTkNvUDADrBGJgB TIc6sVplvKY6mysp7aJjOxqD88/HE+Tniuz7408I -----END CERTIFICATE-----Generated at Mon Jul 20 23:45:46 2026 by rpki-client