$ rpki-client -vvf r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/3130392e3130372e36322e302f32342d3234203d3e20333935373933.roa File: 3130392e3130372e36322e302f32342d3234203d3e20333935373933.roa (raw, json) Hash identifier: QHEsONf4IhU5XbIlQosmv69P5duvdV7yrDPmb37+AFA= Subject key identifier: 53:A4:7F:69:9F:65:87:42:A8:16:4D:3A:64:FD:98:CD:A1:7A:A1:7B Certificate issuer: /CN=2A2FB4DB0AA4D006958316872E467B554E0FD0BE Certificate serial: 0E817E5016052B5267E2A00B324E6FB4906685BA Authority key identifier: 2A:2F:B4:DB:0A:A4:D0:06:95:83:16:87:2E:46:7B:55:4E:0F:D0:BE Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.cer Subject info access: rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/3130392e3130372e36322e302f32342d3234203d3e20333935373933.roa Signing time: Thu 18 Jun 2026 10:47:44 +0000 ROA not before: Thu 18 Jun 2026 10:42:44 +0000 ROA not after: Thu 17 Jun 2027 10:47:44 +0000 asID: 395793 IP address blocks: 109.107.62.0/24 maxlen: 24 Validation: OK Signature path: rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.crl rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.mft rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.cer rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.crl rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft rsync://rpki.ripe.net/repository/DEFAULT/RQLmPOAcrSOaw5e8K7Xmw0fc7uo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 21 Jul 2026 18:06:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0e:81:7e:50:16:05:2b:52:67:e2:a0:0b:32:4e:6f:b4:90:66:85:ba Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2A2FB4DB0AA4D006958316872E467B554E0FD0BE Validity Not Before: Jun 18 10:42:44 2026 GMT Not After : Jun 17 10:47:44 2027 GMT Subject: CN=53A47F699F658742A8164D3A64FD98CDA17AA17B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:b6:d6:64:8d:74:9f:da:4d:ff:cd:11:fa:1e: fd:ee:ba:e8:5b:3f:ec:41:79:fc:66:94:02:40:d4: ff:bf:56:d0:98:17:ff:f5:a3:39:0c:f5:6b:a1:38: cc:dd:7e:be:a2:f1:62:3d:50:9a:53:39:03:f9:e6: 3f:8c:52:0b:bb:b5:11:a3:9e:da:2d:e0:f7:1f:09: 69:59:09:3e:e0:36:f9:ea:46:1a:c0:32:c6:2d:d3: 74:e5:fa:f5:17:7b:4f:21:38:63:fb:2a:f2:2a:7a: 33:2d:d6:71:14:50:29:19:58:12:5c:32:31:79:4b: 20:04:ab:8f:d3:fa:9a:02:29:a2:38:6c:98:a8:73: 51:60:dd:73:e8:28:c2:2a:8b:b9:18:ef:5b:92:5b: 1f:3b:8f:5f:80:94:cd:df:a0:c3:06:eb:ab:6f:c5: 55:fe:6e:f0:fc:4a:cf:40:a0:e6:10:9d:42:34:df: 8f:1e:88:78:b4:dc:5c:d5:68:78:67:20:84:fe:cf: dd:c3:04:b0:76:88:d6:12:48:cf:8f:a8:78:37:8a: bf:3e:fe:f5:b2:4b:52:8a:81:ee:a2:1f:6a:a4:41: e4:2a:e4:88:22:33:08:cd:62:5d:b9:09:40:22:e3: 21:e9:42:ee:27:64:a6:4d:56:f7:5a:dd:48:67:b3: 47:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:A4:7F:69:9F:65:87:42:A8:16:4D:3A:64:FD:98:CD:A1:7A:A1:7B X509v3 Authority Key Identifier: keyid:2A:2F:B4:DB:0A:A4:D0:06:95:83:16:87:2E:46:7B:55:4E:0F:D0:BE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.cer Subject Information Access: Signed Object - URI:rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/3130392e3130372e36322e302f32342d3234203d3e20333935373933.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 109.107.62.0/24 Signature Algorithm: sha256WithRSAEncryption 86:c9:41:3f:94:56:eb:ee:48:ee:f3:0c:9d:a7:ef:89:08:7f: d4:3e:69:df:eb:6c:e8:0a:b4:6f:49:a9:ad:95:8c:42:96:78: e8:dd:80:e1:89:38:e5:bc:45:03:aa:38:44:ff:7b:19:f1:01: 3b:9e:74:65:37:1a:ea:1e:8c:d9:a9:31:7c:9e:02:5c:dd:aa: 55:a5:e7:ef:16:62:21:ca:79:bb:5b:25:b4:ef:1c:47:4f:94: 0c:2d:fd:39:3c:10:ae:c7:2c:cc:8d:1a:32:16:5d:b0:30:a7: b6:11:3f:9a:15:7e:a2:aa:6c:d0:d2:c3:e8:dd:52:89:00:00: 7a:2c:b5:c4:78:27:83:d4:6b:00:65:77:e9:20:d0:00:69:33: ef:50:e0:9e:2a:d9:d1:42:d7:ac:f9:6b:6a:4e:7d:92:98:cb: bf:25:b6:86:56:5a:4c:ed:4e:f8:d8:df:bf:c9:49:ad:9c:ac: 1f:10:fe:bf:08:95:f8:4c:a1:38:9e:f5:b3:12:2d:f6:d7:67: 6a:19:24:fa:69:73:35:76:17:39:11:d1:65:7d:80:91:09:1b: 4d:c3:fe:60:35:78:76:bb:00:fc:8f:bd:fc:dc:ac:3a:91:f8: 9a:bb:31:f8:22:fe:4f:89:40:27:8d:46:82:7d:04:63:04:5c: 55:65:89:53 -----BEGIN CERTIFICATE----- MIIFWjCCBEKgAwIBAgIUDoF+UBYFK1Jn4qALMk5vtJBmhbowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkEyRkI0REIwQUE0RDAwNjk1ODMxNjg3MkU0NjdCNTU0 RTBGRDBCRTAeFw0yNjA2MTgxMDQyNDRaFw0yNzA2MTcxMDQ3NDRaMDMxMTAvBgNV BAMTKDUzQTQ3RjY5OUY2NTg3NDJBODE2NEQzQTY0RkQ5OENEQTE3QUExN0IwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCsttZkjXSf2k3/zRH6Hv3uuuhb P+xBefxmlAJA1P+/VtCYF//1ozkM9WuhOMzdfr6i8WI9UJpTOQP55j+MUgu7tRGj ntot4PcfCWlZCT7gNvnqRhrAMsYt03Tl+vUXe08hOGP7KvIqejMt1nEUUCkZWBJc MjF5SyAEq4/T+poCKaI4bJioc1Fg3XPoKMIqi7kY71uSWx87j1+AlM3foMMG66tv xVX+bvD8Ss9AoOYQnUI0348eiHi03FzVaHhnIIT+z93DBLB2iNYSSM+PqHg3ir8+ /vWyS1KKge6iH2qkQeQq5IgiMwjNYl25CUAi4yHpQu4nZKZNVvda3Uhns0e3AgMB AAGjggJkMIICYDAdBgNVHQ4EFgQUU6R/aZ9lh0KoFk06ZP2YzaF6oXswHwYDVR0j BBgwFoAUKi+02wqk0AaVgxaHLkZ7VU4P0L4wDgYDVR0PAQH/BAQDAgeAMIGIBgNV HR8EgYAwfjB8oHqgeIZ2cnN5bmM6Ly9yLm1hZ2VsbGFuLmlweG8uY29tL3JlcG8v YTZmMjE0N2EtZGU4YS00NDQwLWJjYTItNmQ4YjdjODc2ZmRhLTAvMC8yQTJGQjRE QjBBQTREMDA2OTU4MzE2ODcyRTQ2N0I1NTRFMEZEMEJFLmNybDCBngYIKwYBBQUH AQEEgZEwgY4wgYsGCCsGAQUFBzAChn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5y aXBlLm5ldC9yZXBvc2l0b3J5LzlkZjMzYTU3LTdlNGYtNDg0NC04NGUyLWI3MTUz YjU1MTFiNC8wLzJBMkZCNERCMEFBNEQwMDY5NTgzMTY4NzJFNDY3QjU1NEUwRkQw QkUuY2VyMIGmBggrBgEFBQcBCwSBmTCBljCBkwYIKwYBBQUHMAuGgYZyc3luYzov L3IubWFnZWxsYW4uaXB4by5jb20vcmVwby9hNmYyMTQ3YS1kZThhLTQ0NDAtYmNh Mi02ZDhiN2M4NzZmZGEtMC8wLzMxMzAzOTJlMzEzMDM3MmUzNjMyMmUzMDJmMzIz NDJkMzIzNDIwM2QzZTIwMzMzOTM1MzczOTMzLnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAbWs+MA0GCSqG SIb3DQEBCwUAA4IBAQCGyUE/lFbr7kju8wydp++JCH/UPmnf62zoCrRvSamtlYxC lnjo3YDhiTjlvEUDqjhE/3sZ8QE7nnRlNxrqHozZqTF8ngJc3apVpefvFmIhynm7 WyW07xxHT5QMLf05PBCuxyzMjRoyFl2wMKe2ET+aFX6iqmzQ0sPo3VKJAAB6LLXE eCeD1GsAZXfpINAAaTPvUOCeKtnRQtes+WtqTn2SmMu/JbaGVlpM7U742N+/yUmt nKwfEP6/CJX4TKE4nvWzEi3212dqGST6aXM1dhc5EdFlfYCRCRtNw/5gNXh2uwD8 j7383Kw6kfiauzH4Iv5PiUAnjUaCfQRjBFxVZYlT -----END CERTIFICATE-----Generated at Mon Jul 20 23:46:15 2026 by rpki-client