$ rpki-client -vvf r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/3130392e3130372e36332e302f32342d3234203d3e20333935373933.roa File: 3130392e3130372e36332e302f32342d3234203d3e20333935373933.roa (raw, json) Hash identifier: w/lH7PhTKEmn9cj7wRhnbtOz1bPvxxjdu80vBwexZso= Subject key identifier: 99:7D:29:20:95:0E:F4:A7:49:B0:57:A3:75:7A:FC:7D:12:FC:CA:2D Certificate issuer: /CN=2A2FB4DB0AA4D006958316872E467B554E0FD0BE Certificate serial: 6B5BCCB4059706B495FD2599F99DF35F52609F90 Authority key identifier: 2A:2F:B4:DB:0A:A4:D0:06:95:83:16:87:2E:46:7B:55:4E:0F:D0:BE Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.cer Subject info access: rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/3130392e3130372e36332e302f32342d3234203d3e20333935373933.roa Signing time: Thu 18 Jun 2026 10:47:44 +0000 ROA not before: Thu 18 Jun 2026 10:42:44 +0000 ROA not after: Thu 17 Jun 2027 10:47:44 +0000 asID: 395793 IP address blocks: 109.107.63.0/24 maxlen: 24 Validation: OK Signature path: rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.crl rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.mft rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.cer rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.crl rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft rsync://rpki.ripe.net/repository/DEFAULT/RQLmPOAcrSOaw5e8K7Xmw0fc7uo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 21 Jul 2026 07:00:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6b:5b:cc:b4:05:97:06:b4:95:fd:25:99:f9:9d:f3:5f:52:60:9f:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2A2FB4DB0AA4D006958316872E467B554E0FD0BE Validity Not Before: Jun 18 10:42:44 2026 GMT Not After : Jun 17 10:47:44 2027 GMT Subject: CN=997D2920950EF4A749B057A3757AFC7D12FCCA2D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:b8:da:8e:c5:42:7c:d0:c4:00:7f:70:47:77: 5a:a4:61:1b:2d:0a:da:e5:11:82:29:20:89:10:f3: 04:f6:00:d0:a6:33:70:8b:7f:12:03:e9:f4:10:4a: b4:30:77:50:2e:4f:d3:ea:76:1b:ed:12:c8:49:36: ac:52:80:ce:7d:68:66:3c:2c:9b:a6:ff:06:de:ee: e2:10:b3:34:75:ac:bb:62:43:e0:f7:a7:9c:f0:fc: 28:a4:96:09:28:b6:e7:1e:d4:c4:0d:76:08:ec:f6: c4:16:2b:a5:02:b1:0c:88:d4:33:d1:c3:c2:33:f0: 66:f0:4e:10:3f:bd:38:10:65:74:b5:c1:00:1f:c4: ee:33:05:94:e1:01:cd:3a:4b:85:91:78:68:85:84: 6d:79:c1:dc:a5:9d:22:9c:6a:a6:84:1d:06:06:95: 1f:d9:f7:f8:b7:90:52:52:4b:01:d2:c8:80:ba:95: 97:3e:b0:d0:74:78:01:df:78:ee:6a:fa:98:62:f9: ad:96:85:92:7c:5d:56:e0:ba:45:75:e5:31:e4:c4: e4:eb:65:09:cd:21:bb:b2:86:c0:60:b2:ca:2d:24: 72:1e:e1:db:b6:30:d8:1b:7d:27:2b:27:b9:9f:2e: 85:c9:7b:9c:0f:14:8d:f3:a5:58:b7:f9:0d:20:55: 4d:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:7D:29:20:95:0E:F4:A7:49:B0:57:A3:75:7A:FC:7D:12:FC:CA:2D X509v3 Authority Key Identifier: keyid:2A:2F:B4:DB:0A:A4:D0:06:95:83:16:87:2E:46:7B:55:4E:0F:D0:BE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.cer Subject Information Access: Signed Object - URI:rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/3130392e3130372e36332e302f32342d3234203d3e20333935373933.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 109.107.63.0/24 Signature Algorithm: sha256WithRSAEncryption 02:a9:77:18:32:65:65:9e:64:c4:34:92:2b:ec:5e:6b:41:3b: c6:e7:cf:c4:a8:0c:3b:8c:68:59:a5:0f:b1:20:54:45:12:ba: d2:82:5c:36:5f:53:f7:0e:65:3b:c2:36:f9:4e:1f:e8:ce:af: c8:31:b8:29:f3:6e:83:86:1e:ee:f0:bb:e6:c2:69:18:de:2b: da:73:0f:33:11:33:47:07:79:79:f5:8a:f4:7f:66:d2:0c:62: a3:10:6e:3f:fb:f9:49:2f:27:41:d4:29:a4:59:74:be:6a:bd: ce:f4:c8:28:ff:1e:f6:81:77:4b:47:2a:6d:43:50:45:f5:23: 5d:77:94:27:33:30:f2:89:43:1d:53:8f:cb:49:23:40:cb:f0: a5:c7:f3:28:c0:9f:6a:88:70:64:10:ba:ef:da:ba:01:d5:1a: 7d:dd:07:57:4c:47:71:e4:59:1c:f8:76:24:67:f9:55:2b:a9: 7f:b8:d8:20:53:f2:3a:c1:d0:31:c7:32:10:be:10:1b:83:71: a5:44:fe:41:a4:b6:8d:70:34:1d:77:32:0d:89:43:97:44:2b: b3:58:24:e6:aa:7e:78:fb:ae:2d:67:d7:a3:05:f5:cf:80:c7: 9f:2a:e1:dd:eb:21:37:95:7d:47:42:dc:1c:93:f0:59:8c:de: 19:0e:c0:6c -----BEGIN CERTIFICATE----- MIIFWjCCBEKgAwIBAgIUa1vMtAWXBrSV/SWZ+Z3zX1Jgn5AwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkEyRkI0REIwQUE0RDAwNjk1ODMxNjg3MkU0NjdCNTU0 RTBGRDBCRTAeFw0yNjA2MTgxMDQyNDRaFw0yNzA2MTcxMDQ3NDRaMDMxMTAvBgNV BAMTKDk5N0QyOTIwOTUwRUY0QTc0OUIwNTdBMzc1N0FGQzdEMTJGQ0NBMkQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCXuNqOxUJ80MQAf3BHd1qkYRst CtrlEYIpIIkQ8wT2ANCmM3CLfxID6fQQSrQwd1AuT9PqdhvtEshJNqxSgM59aGY8 LJum/wbe7uIQszR1rLtiQ+D3p5zw/Ciklgkotuce1MQNdgjs9sQWK6UCsQyI1DPR w8Iz8GbwThA/vTgQZXS1wQAfxO4zBZThAc06S4WReGiFhG15wdylnSKcaqaEHQYG lR/Z9/i3kFJSSwHSyIC6lZc+sNB0eAHfeO5q+phi+a2WhZJ8XVbgukV15THkxOTr ZQnNIbuyhsBgssotJHIe4du2MNgbfScrJ7mfLoXJe5wPFI3zpVi3+Q0gVU0TAgMB AAGjggJkMIICYDAdBgNVHQ4EFgQUmX0pIJUO9KdJsFejdXr8fRL8yi0wHwYDVR0j BBgwFoAUKi+02wqk0AaVgxaHLkZ7VU4P0L4wDgYDVR0PAQH/BAQDAgeAMIGIBgNV HR8EgYAwfjB8oHqgeIZ2cnN5bmM6Ly9yLm1hZ2VsbGFuLmlweG8uY29tL3JlcG8v YTZmMjE0N2EtZGU4YS00NDQwLWJjYTItNmQ4YjdjODc2ZmRhLTAvMC8yQTJGQjRE QjBBQTREMDA2OTU4MzE2ODcyRTQ2N0I1NTRFMEZEMEJFLmNybDCBngYIKwYBBQUH AQEEgZEwgY4wgYsGCCsGAQUFBzAChn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5y aXBlLm5ldC9yZXBvc2l0b3J5LzlkZjMzYTU3LTdlNGYtNDg0NC04NGUyLWI3MTUz YjU1MTFiNC8wLzJBMkZCNERCMEFBNEQwMDY5NTgzMTY4NzJFNDY3QjU1NEUwRkQw QkUuY2VyMIGmBggrBgEFBQcBCwSBmTCBljCBkwYIKwYBBQUHMAuGgYZyc3luYzov L3IubWFnZWxsYW4uaXB4by5jb20vcmVwby9hNmYyMTQ3YS1kZThhLTQ0NDAtYmNh Mi02ZDhiN2M4NzZmZGEtMC8wLzMxMzAzOTJlMzEzMDM3MmUzNjMzMmUzMDJmMzIz NDJkMzIzNDIwM2QzZTIwMzMzOTM1MzczOTMzLnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAbWs/MA0GCSqG SIb3DQEBCwUAA4IBAQACqXcYMmVlnmTENJIr7F5rQTvG58/EqAw7jGhZpQ+xIFRF ErrSglw2X1P3DmU7wjb5Th/ozq/IMbgp826Dhh7u8LvmwmkY3ivacw8zETNHB3l5 9Yr0f2bSDGKjEG4/+/lJLydB1CmkWXS+ar3O9Mgo/x72gXdLRyptQ1BF9SNdd5Qn MzDyiUMdU4/LSSNAy/Clx/MowJ9qiHBkELrv2roB1Rp93QdXTEdx5Fkc+HYkZ/lV K6l/uNggU/I6wdAxxzIQvhAbg3GlRP5BpLaNcDQddzINiUOXRCuzWCTmqn54+64t Z9ejBfXPgMefKuHd6yE3lX1HQtwck/BZjN4ZDsBs -----END CERTIFICATE-----Generated at Mon Jul 20 23:46:15 2026 by rpki-client