$ rpki-client -vvf r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/3130392e3130372e36302e302f32342d3234203d3e20333935373933.roa File: 3130392e3130372e36302e302f32342d3234203d3e20333935373933.roa (raw, json) Hash identifier: XTgInaeOntSBkF0yJDzeGvx5H7ZaqAuSr0RrSJjqn0s= Subject key identifier: B3:2E:DB:C7:B7:60:BB:E1:9F:43:23:6E:5D:F2:16:38:69:4B:6C:FC Certificate issuer: /CN=2A2FB4DB0AA4D006958316872E467B554E0FD0BE Certificate serial: 3B24BE41A218255330F2B048B0CD9B44B568B37F Authority key identifier: 2A:2F:B4:DB:0A:A4:D0:06:95:83:16:87:2E:46:7B:55:4E:0F:D0:BE Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.cer Subject info access: rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/3130392e3130372e36302e302f32342d3234203d3e20333935373933.roa Signing time: Thu 18 Jun 2026 10:47:44 +0000 ROA not before: Thu 18 Jun 2026 10:42:44 +0000 ROA not after: Thu 17 Jun 2027 10:47:44 +0000 asID: 395793 IP address blocks: 109.107.60.0/24 maxlen: 24 Validation: OK Signature path: rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.crl rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.mft rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.cer rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.crl rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft rsync://rpki.ripe.net/repository/DEFAULT/RQLmPOAcrSOaw5e8K7Xmw0fc7uo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 21 Jul 2026 07:00:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3b:24:be:41:a2:18:25:53:30:f2:b0:48:b0:cd:9b:44:b5:68:b3:7f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2A2FB4DB0AA4D006958316872E467B554E0FD0BE Validity Not Before: Jun 18 10:42:44 2026 GMT Not After : Jun 17 10:47:44 2027 GMT Subject: CN=B32EDBC7B760BBE19F43236E5DF21638694B6CFC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:b9:09:1a:b8:5e:3c:87:4c:2d:b0:db:ec:6a: 5d:06:a2:d8:28:65:57:b8:8f:87:31:02:86:e0:89: f5:e1:8e:bb:55:09:d8:a9:ff:43:ed:78:5c:c5:1a: 53:d5:2b:dc:10:1b:e4:01:f0:45:33:db:eb:bd:7e: 62:d2:e4:9b:17:fc:a5:b9:08:15:1c:c3:cc:dc:00: 13:3c:e8:d7:e3:df:8a:b4:a8:f3:a7:d4:cb:f4:53: eb:80:bb:1f:4f:9b:80:6e:7a:42:94:40:59:30:39: 0f:d3:ef:80:ea:ad:39:20:1b:45:69:44:fd:7d:0c: 29:bb:1b:02:ab:78:d7:54:89:10:da:c1:61:05:fb: bf:1b:61:84:56:7c:3f:3a:e5:84:b1:e9:e2:28:ea: 0e:ff:d8:61:be:63:7c:e2:b9:34:34:f6:9c:3f:b5: c9:7a:8f:94:f6:86:a6:29:8e:89:6a:4c:26:c8:c5: 4c:8e:05:b4:15:51:1e:67:8f:88:b1:5a:d5:3b:84: d6:a6:b0:04:60:4d:a9:07:d7:97:20:29:f1:c9:89: ef:6f:4b:1f:73:22:ec:8b:05:8c:eb:42:1a:c8:08: 2b:46:72:44:0b:a0:55:9a:13:42:f4:1e:7b:58:06: 18:a9:6d:6d:96:73:70:2c:59:d8:05:91:78:32:ce: 64:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:2E:DB:C7:B7:60:BB:E1:9F:43:23:6E:5D:F2:16:38:69:4B:6C:FC X509v3 Authority Key Identifier: keyid:2A:2F:B4:DB:0A:A4:D0:06:95:83:16:87:2E:46:7B:55:4E:0F:D0:BE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.cer Subject Information Access: Signed Object - URI:rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/3130392e3130372e36302e302f32342d3234203d3e20333935373933.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 109.107.60.0/24 Signature Algorithm: sha256WithRSAEncryption 17:af:dd:e5:8d:79:b6:9a:b4:2b:cd:86:4c:73:0b:54:3b:6d: 59:40:86:5e:be:03:1e:82:38:85:58:b3:0b:30:00:b7:bc:37: 7b:84:51:67:76:56:18:5f:c0:5f:25:de:bf:7c:ee:3a:bc:4b: 83:ff:fd:7d:87:18:bb:d3:d4:58:37:03:3b:26:84:72:5c:50: c6:66:48:fa:fc:e8:7f:6a:f4:29:09:99:9f:5f:31:64:5c:c4: 5d:92:12:25:10:85:e9:a6:2a:af:67:e0:2a:66:0d:ee:8c:1b: f5:43:c2:cc:5c:d0:3c:11:fd:bb:75:ea:60:91:be:34:98:72: ae:6b:24:32:0f:e2:64:87:b8:7b:f1:12:e7:05:6a:8e:34:e5: a4:24:43:3e:df:2e:5d:7b:54:c0:dc:c9:67:0e:9a:ff:44:0a: 9d:80:6a:b0:fb:11:e3:54:bc:31:e4:8f:de:4b:25:36:72:da: 2d:d1:e0:e5:e9:8c:8a:91:b9:dd:b6:63:0d:df:90:f5:61:9d: 99:21:a2:11:3f:e0:6f:61:e1:43:48:58:75:fa:ac:2b:d9:ee: e8:e7:28:72:cc:e0:19:a7:41:fc:8e:8e:9d:88:6f:9a:64:e1: d0:12:d6:44:f9:fe:ca:82:c0:7f:c6:b9:56:b0:d6:82:25:dd: 30:5c:e2:8d -----BEGIN CERTIFICATE----- MIIFWjCCBEKgAwIBAgIUOyS+QaIYJVMw8rBIsM2bRLVos38wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkEyRkI0REIwQUE0RDAwNjk1ODMxNjg3MkU0NjdCNTU0 RTBGRDBCRTAeFw0yNjA2MTgxMDQyNDRaFw0yNzA2MTcxMDQ3NDRaMDMxMTAvBgNV BAMTKEIzMkVEQkM3Qjc2MEJCRTE5RjQzMjM2RTVERjIxNjM4Njk0QjZDRkMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDDuQkauF48h0wtsNvsal0Gotgo ZVe4j4cxAobgifXhjrtVCdip/0PteFzFGlPVK9wQG+QB8EUz2+u9fmLS5JsX/KW5 CBUcw8zcABM86Nfj34q0qPOn1Mv0U+uAux9Pm4BuekKUQFkwOQ/T74DqrTkgG0Vp RP19DCm7GwKreNdUiRDawWEF+78bYYRWfD865YSx6eIo6g7/2GG+Y3ziuTQ09pw/ tcl6j5T2hqYpjolqTCbIxUyOBbQVUR5nj4ixWtU7hNamsARgTakH15cgKfHJie9v Sx9zIuyLBYzrQhrICCtGckQLoFWaE0L0HntYBhipbW2Wc3AsWdgFkXgyzmRfAgMB AAGjggJkMIICYDAdBgNVHQ4EFgQUsy7bx7dgu+GfQyNuXfIWOGlLbPwwHwYDVR0j BBgwFoAUKi+02wqk0AaVgxaHLkZ7VU4P0L4wDgYDVR0PAQH/BAQDAgeAMIGIBgNV HR8EgYAwfjB8oHqgeIZ2cnN5bmM6Ly9yLm1hZ2VsbGFuLmlweG8uY29tL3JlcG8v YTZmMjE0N2EtZGU4YS00NDQwLWJjYTItNmQ4YjdjODc2ZmRhLTAvMC8yQTJGQjRE QjBBQTREMDA2OTU4MzE2ODcyRTQ2N0I1NTRFMEZEMEJFLmNybDCBngYIKwYBBQUH AQEEgZEwgY4wgYsGCCsGAQUFBzAChn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5y aXBlLm5ldC9yZXBvc2l0b3J5LzlkZjMzYTU3LTdlNGYtNDg0NC04NGUyLWI3MTUz YjU1MTFiNC8wLzJBMkZCNERCMEFBNEQwMDY5NTgzMTY4NzJFNDY3QjU1NEUwRkQw QkUuY2VyMIGmBggrBgEFBQcBCwSBmTCBljCBkwYIKwYBBQUHMAuGgYZyc3luYzov L3IubWFnZWxsYW4uaXB4by5jb20vcmVwby9hNmYyMTQ3YS1kZThhLTQ0NDAtYmNh Mi02ZDhiN2M4NzZmZGEtMC8wLzMxMzAzOTJlMzEzMDM3MmUzNjMwMmUzMDJmMzIz NDJkMzIzNDIwM2QzZTIwMzMzOTM1MzczOTMzLnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAbWs8MA0GCSqG SIb3DQEBCwUAA4IBAQAXr93ljXm2mrQrzYZMcwtUO21ZQIZevgMegjiFWLMLMAC3 vDd7hFFndlYYX8BfJd6/fO46vEuD//19hxi709RYNwM7JoRyXFDGZkj6/Oh/avQp CZmfXzFkXMRdkhIlEIXppiqvZ+AqZg3ujBv1Q8LMXNA8Ef27depgkb40mHKuayQy D+Jkh7h78RLnBWqONOWkJEM+3y5de1TA3MlnDpr/RAqdgGqw+xHjVLwx5I/eSyU2 ctot0eDl6YyKkbndtmMN35D1YZ2ZIaIRP+BvYeFDSFh1+qwr2e7o5yhyzOAZp0H8 jo6diG+aZOHQEtZE+f7KgsB/xrlWsNaCJd0wXOKN -----END CERTIFICATE-----Generated at Mon Jul 20 23:45:45 2026 by rpki-client