$ rpki-client -vvf r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/3130392e3130372e35392e302f32342d3234203d3e20333935373933.roa File: 3130392e3130372e35392e302f32342d3234203d3e20333935373933.roa (raw, json) Hash identifier: Q+KvS7o01B06DQgXYmtSyxjwcQ9+c8BWwNUx9L1MIBQ= Subject key identifier: 33:E1:8A:19:B4:FE:70:26:97:98:FA:70:1D:B2:77:A3:43:E1:78:21 Certificate issuer: /CN=2A2FB4DB0AA4D006958316872E467B554E0FD0BE Certificate serial: 44815EA54ACDF799FA4D5EE01E72BF83E87A5846 Authority key identifier: 2A:2F:B4:DB:0A:A4:D0:06:95:83:16:87:2E:46:7B:55:4E:0F:D0:BE Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.cer Subject info access: rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/3130392e3130372e35392e302f32342d3234203d3e20333935373933.roa Signing time: Thu 18 Jun 2026 10:47:43 +0000 ROA not before: Thu 18 Jun 2026 10:42:43 +0000 ROA not after: Thu 17 Jun 2027 10:47:43 +0000 asID: 395793 IP address blocks: 109.107.59.0/24 maxlen: 24 Validation: OK Signature path: rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.crl rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.mft rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.cer rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.crl rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft rsync://rpki.ripe.net/repository/DEFAULT/RQLmPOAcrSOaw5e8K7Xmw0fc7uo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 21 Jul 2026 07:00:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 44:81:5e:a5:4a:cd:f7:99:fa:4d:5e:e0:1e:72:bf:83:e8:7a:58:46 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2A2FB4DB0AA4D006958316872E467B554E0FD0BE Validity Not Before: Jun 18 10:42:43 2026 GMT Not After : Jun 17 10:47:43 2027 GMT Subject: CN=33E18A19B4FE70269798FA701DB277A343E17821 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:93:fe:cd:6b:37:44:f9:af:dc:75:e7:e7:f8: 94:36:8a:16:3d:35:fe:1c:a5:2a:8d:43:73:ea:ef: e0:7b:c7:a0:25:a3:65:da:58:6b:6a:e4:2a:41:ad: 14:10:0c:1c:5b:55:38:13:b1:a1:78:47:f0:96:5b: e8:d9:c2:50:c9:43:c5:93:b5:87:47:da:c6:36:25: a7:f3:2a:73:d3:29:c4:c4:24:70:43:97:6b:7a:b5: 10:a4:48:9e:f6:89:ef:05:96:6d:fd:6d:f9:70:a6: ef:b2:6b:0a:00:db:61:97:c5:46:1e:70:f7:5e:7b: 35:ee:49:31:2e:a8:48:58:f9:fd:98:fa:c9:e5:6e: 2f:9f:b1:ce:f6:fa:b0:68:34:46:34:e6:63:5e:c5: 96:f4:5d:e8:8e:28:e2:9d:0f:19:24:fc:b6:24:22: 73:5f:c3:ca:d6:f4:5e:3b:bc:b8:78:65:d9:44:d1: 32:56:a2:e8:ef:c7:52:b9:68:45:03:33:af:b4:7e: 55:91:26:04:c0:29:6a:03:02:7b:f1:b3:56:46:5f: 13:f5:a5:35:2f:b4:32:68:04:e8:83:5d:b4:5b:7c: 6b:84:f5:91:7a:d2:0b:be:f7:41:07:af:92:ef:17: 7b:89:68:20:ec:47:d6:0e:ee:c1:41:50:e2:c8:c3: 18:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:E1:8A:19:B4:FE:70:26:97:98:FA:70:1D:B2:77:A3:43:E1:78:21 X509v3 Authority Key Identifier: keyid:2A:2F:B4:DB:0A:A4:D0:06:95:83:16:87:2E:46:7B:55:4E:0F:D0:BE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.cer Subject Information Access: Signed Object - URI:rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/3130392e3130372e35392e302f32342d3234203d3e20333935373933.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 109.107.59.0/24 Signature Algorithm: sha256WithRSAEncryption 04:1b:57:ad:06:1e:4c:7a:78:db:e3:55:74:c8:45:aa:b2:f6: bf:b3:89:a5:c8:fe:bd:1e:19:bb:2f:7b:eb:53:ff:c4:21:c9: 2b:07:1a:ae:91:b1:7d:af:82:65:03:d7:a2:5b:98:88:e1:16: b8:e9:51:7e:fe:17:54:78:0c:68:62:c6:2b:fe:2a:8c:87:75: 45:b5:8a:d8:35:70:95:b8:75:63:03:78:60:6b:b9:9c:a3:51: 40:78:63:e4:73:77:48:1c:d9:76:5a:f8:db:88:d5:d1:37:5d: ce:98:aa:21:a0:83:9f:73:7a:00:78:0b:b2:34:cf:85:23:32: 6d:5b:39:ed:a4:02:14:a0:ad:0e:0f:e2:1d:9f:6c:4f:06:95: 5f:ce:8a:53:76:a5:19:46:2d:96:4e:f3:fb:e8:7d:e0:79:f4: ed:c4:55:e2:3c:44:03:d8:c2:63:ff:c6:66:54:0d:eb:17:09: 56:4d:be:6b:03:6e:a2:e4:ae:aa:6d:c5:1e:b8:42:44:d1:3a: f1:e4:d0:9a:54:ef:0b:59:e6:34:4f:d2:2b:3e:fd:a8:d6:5e: b7:8c:40:24:f2:ab:1b:83:e9:a8:0b:22:6c:7e:d9:35:dc:42: 2e:a3:12:a6:e4:2e:a3:4f:5d:f1:91:d3:b8:9a:5d:36:f9:ea: 1e:fc:e0:b9 -----BEGIN CERTIFICATE----- MIIFWjCCBEKgAwIBAgIURIFepUrN95n6TV7gHnK/g+h6WEYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkEyRkI0REIwQUE0RDAwNjk1ODMxNjg3MkU0NjdCNTU0 RTBGRDBCRTAeFw0yNjA2MTgxMDQyNDNaFw0yNzA2MTcxMDQ3NDNaMDMxMTAvBgNV BAMTKDMzRTE4QTE5QjRGRTcwMjY5Nzk4RkE3MDFEQjI3N0EzNDNFMTc4MjEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1k/7NazdE+a/cdefn+JQ2ihY9 Nf4cpSqNQ3Pq7+B7x6Alo2XaWGtq5CpBrRQQDBxbVTgTsaF4R/CWW+jZwlDJQ8WT tYdH2sY2JafzKnPTKcTEJHBDl2t6tRCkSJ72ie8Flm39bflwpu+yawoA22GXxUYe cPdeezXuSTEuqEhY+f2Y+snlbi+fsc72+rBoNEY05mNexZb0XeiOKOKdDxkk/LYk InNfw8rW9F47vLh4ZdlE0TJWoujvx1K5aEUDM6+0flWRJgTAKWoDAnvxs1ZGXxP1 pTUvtDJoBOiDXbRbfGuE9ZF60gu+90EHr5LvF3uJaCDsR9YO7sFBUOLIwxiFAgMB AAGjggJkMIICYDAdBgNVHQ4EFgQUM+GKGbT+cCaXmPpwHbJ3o0PheCEwHwYDVR0j BBgwFoAUKi+02wqk0AaVgxaHLkZ7VU4P0L4wDgYDVR0PAQH/BAQDAgeAMIGIBgNV HR8EgYAwfjB8oHqgeIZ2cnN5bmM6Ly9yLm1hZ2VsbGFuLmlweG8uY29tL3JlcG8v YTZmMjE0N2EtZGU4YS00NDQwLWJjYTItNmQ4YjdjODc2ZmRhLTAvMC8yQTJGQjRE QjBBQTREMDA2OTU4MzE2ODcyRTQ2N0I1NTRFMEZEMEJFLmNybDCBngYIKwYBBQUH AQEEgZEwgY4wgYsGCCsGAQUFBzAChn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5y aXBlLm5ldC9yZXBvc2l0b3J5LzlkZjMzYTU3LTdlNGYtNDg0NC04NGUyLWI3MTUz YjU1MTFiNC8wLzJBMkZCNERCMEFBNEQwMDY5NTgzMTY4NzJFNDY3QjU1NEUwRkQw QkUuY2VyMIGmBggrBgEFBQcBCwSBmTCBljCBkwYIKwYBBQUHMAuGgYZyc3luYzov L3IubWFnZWxsYW4uaXB4by5jb20vcmVwby9hNmYyMTQ3YS1kZThhLTQ0NDAtYmNh Mi02ZDhiN2M4NzZmZGEtMC8wLzMxMzAzOTJlMzEzMDM3MmUzNTM5MmUzMDJmMzIz NDJkMzIzNDIwM2QzZTIwMzMzOTM1MzczOTMzLnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAbWs7MA0GCSqG SIb3DQEBCwUAA4IBAQAEG1etBh5Menjb41V0yEWqsva/s4mlyP69Hhm7L3vrU//E IckrBxqukbF9r4JlA9eiW5iI4Ra46VF+/hdUeAxoYsYr/iqMh3VFtYrYNXCVuHVj A3hga7mco1FAeGPkc3dIHNl2WvjbiNXRN13OmKohoIOfc3oAeAuyNM+FIzJtWznt pAIUoK0OD+Idn2xPBpVfzopTdqUZRi2WTvP76H3gefTtxFXiPEQD2MJj/8ZmVA3r FwlWTb5rA26i5K6qbcUeuEJE0Trx5NCaVO8LWeY0T9IrPv2o1l63jEAk8qsbg+mo CyJsftk13EIuoxKm5C6jT13xkdO4ml02+eoe/OC5 -----END CERTIFICATE-----Generated at Mon Jul 20 23:46:16 2026 by rpki-client