$ rpki-client -vvf r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/3130392e3130372e35382e302f32342d3234203d3e20333935373933.roa File: 3130392e3130372e35382e302f32342d3234203d3e20333935373933.roa (raw, json) Hash identifier: Maef7TFzeks1A8htt9oggmDkVx39T1g9S7e1WlzQ88U= Subject key identifier: 14:DB:1D:FC:96:F8:1E:10:A8:DE:12:84:26:B3:47:B5:FD:19:0F:93 Certificate issuer: /CN=2A2FB4DB0AA4D006958316872E467B554E0FD0BE Certificate serial: 4438A4E6F208ADFD614A56B99911859E48F3F968 Authority key identifier: 2A:2F:B4:DB:0A:A4:D0:06:95:83:16:87:2E:46:7B:55:4E:0F:D0:BE Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.cer Subject info access: rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/3130392e3130372e35382e302f32342d3234203d3e20333935373933.roa Signing time: Thu 18 Jun 2026 10:47:44 +0000 ROA not before: Thu 18 Jun 2026 10:42:44 +0000 ROA not after: Thu 17 Jun 2027 10:47:44 +0000 asID: 395793 IP address blocks: 109.107.58.0/24 maxlen: 24 Validation: OK Signature path: rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.crl rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.mft rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.cer rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.crl rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft rsync://rpki.ripe.net/repository/DEFAULT/RQLmPOAcrSOaw5e8K7Xmw0fc7uo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 21 Jul 2026 07:00:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 44:38:a4:e6:f2:08:ad:fd:61:4a:56:b9:99:11:85:9e:48:f3:f9:68 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2A2FB4DB0AA4D006958316872E467B554E0FD0BE Validity Not Before: Jun 18 10:42:44 2026 GMT Not After : Jun 17 10:47:44 2027 GMT Subject: CN=14DB1DFC96F81E10A8DE128426B347B5FD190F93 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:a8:5c:fb:9b:dc:10:a4:56:b8:e8:b4:1b:52: 93:df:b4:1e:03:e1:f5:48:ee:3e:94:6b:83:86:d1: d1:81:22:14:82:b4:a3:01:c5:03:ea:8c:e7:1b:97: a5:92:34:51:da:52:42:ff:52:ca:bf:7b:f1:1e:92: 41:17:20:60:0c:53:c4:e4:db:0f:9a:bc:ca:51:9c: ad:1d:6d:fe:a2:3b:55:d8:fa:d9:ee:97:05:d6:7d: 77:c5:9d:85:b7:7f:12:00:0e:c3:f8:36:fa:6f:c1: c0:9b:11:ae:32:9f:59:e0:48:38:e7:26:41:b9:05: 3c:12:ce:8e:dc:e6:dc:37:13:a6:9e:82:70:14:ca: fb:66:25:05:a3:25:58:ca:aa:93:c4:e3:ac:99:de: b6:42:32:01:a8:6e:21:b2:07:f7:95:86:88:e9:d3: 4c:b9:67:8b:3b:25:ad:1e:bd:9e:d6:2f:8e:e0:b5: 01:20:f6:ae:0f:e7:54:70:3a:57:0c:df:a0:89:d1: 4f:71:37:4f:e6:92:95:c6:b3:66:fa:c1:3d:69:62: 9b:23:74:70:e9:10:76:4f:45:0f:79:4d:79:51:a4: de:8f:a8:84:96:1a:f5:41:f5:77:46:4a:2b:0b:9e: c2:17:d3:78:fa:57:eb:f2:78:e2:8b:92:50:0c:a1: df:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:DB:1D:FC:96:F8:1E:10:A8:DE:12:84:26:B3:47:B5:FD:19:0F:93 X509v3 Authority Key Identifier: keyid:2A:2F:B4:DB:0A:A4:D0:06:95:83:16:87:2E:46:7B:55:4E:0F:D0:BE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.cer Subject Information Access: Signed Object - URI:rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/3130392e3130372e35382e302f32342d3234203d3e20333935373933.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 109.107.58.0/24 Signature Algorithm: sha256WithRSAEncryption 81:ab:04:78:a2:db:f6:88:9f:ea:31:61:78:8b:52:60:e4:f7: bf:65:40:a2:65:d0:26:48:a0:3f:12:75:9c:c4:a0:ab:c8:60: 61:83:60:57:79:ed:03:97:89:c7:f4:00:b2:97:5a:c7:dd:a7: 2f:ee:5c:1d:dc:c8:58:ea:ed:97:d7:d9:a8:cd:0e:30:85:c4: d3:46:2f:3b:39:7f:e8:cc:18:91:53:db:14:19:7e:36:75:c4: 27:95:2f:61:1a:8c:54:10:eb:8c:bc:35:97:e6:85:63:07:02: 8b:a9:b1:59:b6:33:23:89:41:2c:77:e7:e5:57:5e:a3:ba:da: 95:2b:6d:46:b9:89:e2:76:f5:66:48:6a:54:1b:4d:f1:fd:06: 51:87:fd:90:e9:ee:33:4f:3d:0c:31:16:b9:e5:49:3d:91:4e: 81:57:10:5b:96:f8:04:57:b8:13:61:74:1f:db:92:97:45:e6: 1e:a6:79:77:97:48:71:fe:9b:bf:e0:b1:62:f8:34:2b:4c:7c: 17:00:a2:7b:e4:06:8b:10:dc:d1:87:09:43:f0:a1:28:4f:af: 27:25:5b:58:c8:3b:32:04:cf:81:9e:ff:15:1e:a9:30:f3:8d: 0f:8c:c0:2b:66:d9:09:87:ec:07:47:7f:0b:c8:13:52:1b:11: e8:56:21:e4 -----BEGIN CERTIFICATE----- MIIFWjCCBEKgAwIBAgIURDik5vIIrf1hSla5mRGFnkjz+WgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkEyRkI0REIwQUE0RDAwNjk1ODMxNjg3MkU0NjdCNTU0 RTBGRDBCRTAeFw0yNjA2MTgxMDQyNDRaFw0yNzA2MTcxMDQ3NDRaMDMxMTAvBgNV BAMTKDE0REIxREZDOTZGODFFMTBBOERFMTI4NDI2QjM0N0I1RkQxOTBGOTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCgqFz7m9wQpFa46LQbUpPftB4D 4fVI7j6Ua4OG0dGBIhSCtKMBxQPqjOcbl6WSNFHaUkL/Usq/e/EekkEXIGAMU8Tk 2w+avMpRnK0dbf6iO1XY+tnulwXWfXfFnYW3fxIADsP4NvpvwcCbEa4yn1ngSDjn JkG5BTwSzo7c5tw3E6aegnAUyvtmJQWjJVjKqpPE46yZ3rZCMgGobiGyB/eVhojp 00y5Z4s7Ja0evZ7WL47gtQEg9q4P51RwOlcM36CJ0U9xN0/mkpXGs2b6wT1pYpsj dHDpEHZPRQ95TXlRpN6PqISWGvVB9XdGSisLnsIX03j6V+vyeOKLklAMod8HAgMB AAGjggJkMIICYDAdBgNVHQ4EFgQUFNsd/Jb4HhCo3hKEJrNHtf0ZD5MwHwYDVR0j BBgwFoAUKi+02wqk0AaVgxaHLkZ7VU4P0L4wDgYDVR0PAQH/BAQDAgeAMIGIBgNV HR8EgYAwfjB8oHqgeIZ2cnN5bmM6Ly9yLm1hZ2VsbGFuLmlweG8uY29tL3JlcG8v YTZmMjE0N2EtZGU4YS00NDQwLWJjYTItNmQ4YjdjODc2ZmRhLTAvMC8yQTJGQjRE QjBBQTREMDA2OTU4MzE2ODcyRTQ2N0I1NTRFMEZEMEJFLmNybDCBngYIKwYBBQUH AQEEgZEwgY4wgYsGCCsGAQUFBzAChn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5y aXBlLm5ldC9yZXBvc2l0b3J5LzlkZjMzYTU3LTdlNGYtNDg0NC04NGUyLWI3MTUz YjU1MTFiNC8wLzJBMkZCNERCMEFBNEQwMDY5NTgzMTY4NzJFNDY3QjU1NEUwRkQw QkUuY2VyMIGmBggrBgEFBQcBCwSBmTCBljCBkwYIKwYBBQUHMAuGgYZyc3luYzov L3IubWFnZWxsYW4uaXB4by5jb20vcmVwby9hNmYyMTQ3YS1kZThhLTQ0NDAtYmNh Mi02ZDhiN2M4NzZmZGEtMC8wLzMxMzAzOTJlMzEzMDM3MmUzNTM4MmUzMDJmMzIz NDJkMzIzNDIwM2QzZTIwMzMzOTM1MzczOTMzLnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAbWs6MA0GCSqG SIb3DQEBCwUAA4IBAQCBqwR4otv2iJ/qMWF4i1Jg5Pe/ZUCiZdAmSKA/EnWcxKCr yGBhg2BXee0Dl4nH9ACyl1rH3acv7lwd3MhY6u2X19mozQ4whcTTRi87OX/ozBiR U9sUGX42dcQnlS9hGoxUEOuMvDWX5oVjBwKLqbFZtjMjiUEsd+flV16jutqVK21G uYnidvVmSGpUG03x/QZRh/2Q6e4zTz0MMRa55Uk9kU6BVxBblvgEV7gTYXQf25KX ReYepnl3l0hx/pu/4LFi+DQrTHwXAKJ75AaLENzRhwlD8KEoT68nJVtYyDsyBM+B nv8VHqkw840PjMArZtkJh+wHR38LyBNSGxHoViHk -----END CERTIFICATE-----Generated at Mon Jul 20 23:46:00 2026 by rpki-client