$ rpki-client -vvvf r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/33372e312e3232342e302f32342d3234203d3e203536363535.roa File: 33372e312e3232342e302f32342d3234203d3e203536363535.roa (raw, json) Hash identifier: 8erRob5YNIwr/EyipQsbg2h1aapBOh36ORswiaAzfWk= Subject key identifier: 6C:25:40:D7:DA:6D:FD:1C:0B:11:4B:6C:FF:AF:81:39:9A:01:D7:35 Certificate issuer: /CN=2A2FB4DB0AA4D006958316872E467B554E0FD0BE Certificate serial: 45552C07789DAA214E9E0CF0D9A75EA0E0F0DC43 Authority key identifier: 2A:2F:B4:DB:0A:A4:D0:06:95:83:16:87:2E:46:7B:55:4E:0F:D0:BE Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.cer Subject info access: rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/33372e312e3232342e302f32342d3234203d3e203536363535.roa Signing time: Mon 17 Aug 2026 22:07:54 +0000 ROA not before: Mon 17 Aug 2026 22:02:54 +0000 ROA not after: Mon 16 Aug 2027 22:07:54 +0000 asID: 56655 IP address blocks: 37.1.224.0/24 maxlen: 24 Validation: OK Signature path: rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.crl rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.mft rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.cer rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.crl rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft rsync://rpki.ripe.net/repository/DEFAULT/RQLmPOAcrSOaw5e8K7Xmw0fc7uo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 03 Sep 2026 18:02:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 45:55:2c:07:78:9d:aa:21:4e:9e:0c:f0:d9:a7:5e:a0:e0:f0:dc:43 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2A2FB4DB0AA4D006958316872E467B554E0FD0BE Validity Not Before: Aug 17 22:02:54 2026 GMT Not After : Aug 16 22:07:54 2027 GMT Subject: CN=6C2540D7DA6DFD1C0B114B6CFFAF81399A01D735 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:41:b4:03:2b:c3:ef:6e:3c:41:91:86:e0:a1: fb:c5:9a:de:d1:b1:61:ad:96:0a:b9:03:c9:18:a9: 0f:a6:2f:e2:e9:b9:a8:c0:5c:ff:94:29:84:77:ce: 6b:0f:b2:86:d5:3d:87:81:2d:ae:84:f0:88:35:bd: d7:08:e2:1b:8c:b1:c1:09:87:69:02:8f:ee:e2:b8: c9:fc:78:8c:dd:81:a7:6e:76:d6:d4:da:db:84:c3: 09:4f:18:b6:40:d1:5b:d3:09:fe:be:23:dc:1e:37: 1d:4d:47:06:38:cd:67:d3:ad:f8:cf:57:3e:26:65: 1e:26:9d:36:8f:eb:83:ac:26:44:8e:fb:32:45:5b: 19:0b:6a:5f:87:1c:6f:23:6d:49:1c:2f:fb:0f:14: 98:10:ec:92:56:3a:d7:61:23:3b:12:ef:6a:b8:bf: 71:64:95:ff:75:ca:4d:8b:8e:4a:04:a3:aa:a4:25: bd:35:dd:d4:62:fa:bf:c7:8f:ef:18:7d:8e:16:a0: 91:85:6e:3c:72:50:68:20:94:7d:88:45:2e:c1:da: 0b:9d:67:36:93:ff:ab:ed:92:44:4d:a1:1e:d0:01: dc:b9:da:13:ec:19:55:5e:93:dc:bb:ad:e9:6c:36: 75:2b:bc:75:52:d5:26:78:d9:51:a9:df:e9:5c:1f: 99:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:25:40:D7:DA:6D:FD:1C:0B:11:4B:6C:FF:AF:81:39:9A:01:D7:35 X509v3 Authority Key Identifier: keyid:2A:2F:B4:DB:0A:A4:D0:06:95:83:16:87:2E:46:7B:55:4E:0F:D0:BE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.cer Subject Information Access: Signed Object - URI:rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/33372e312e3232342e302f32342d3234203d3e203536363535.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 37.1.224.0/24 Signature Algorithm: sha256WithRSAEncryption 0e:36:71:d1:3e:ca:ff:ce:9c:e4:b6:b9:2a:41:24:6d:5a:b0: a7:99:a0:75:60:02:94:b3:58:60:8d:4a:ba:7b:b1:57:b6:20: a1:b0:ce:6d:ea:02:c6:aa:97:e8:5f:ef:34:a6:18:7d:9e:97: 6b:1f:ab:be:e5:7d:88:ab:a5:9e:6d:66:cd:47:5a:b9:41:8f: d8:28:6c:b0:4c:e0:03:f2:f0:18:fc:97:5f:9a:c8:4a:66:8c: b1:55:60:ce:57:82:23:7d:78:05:7b:5c:c0:27:1d:59:01:b0: a0:04:4d:5f:fa:73:b9:52:42:49:3c:33:f2:5c:94:4d:3d:42: 6c:c6:65:3a:f0:7c:50:9d:d6:22:5b:11:2d:7d:3b:5b:95:9c: 9f:c2:a4:72:2c:5f:32:c6:0b:74:88:de:bf:2a:6a:a6:ee:c6: e8:a7:77:ca:8b:ef:bd:9a:93:23:7b:68:2d:b3:83:fc:36:bb: 01:10:77:fd:df:51:03:39:4f:a1:31:94:6e:29:52:9d:1e:67: 7e:eb:23:ef:e3:f5:8f:dd:9a:cf:39:86:8c:55:83:08:2c:c4: 62:d1:67:42:61:15:11:43:0f:a2:86:be:d2:77:68:81:9a:dd: b6:f9:5d:40:40:ca:a4:01:b0:db:5a:7f:13:fc:ee:b3:7b:ec: 6b:39:00:ca -----BEGIN CERTIFICATE----- MIIFVDCCBDygAwIBAgIURVUsB3idqiFOngzw2adeoODw3EMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkEyRkI0REIwQUE0RDAwNjk1ODMxNjg3MkU0NjdCNTU0 RTBGRDBCRTAeFw0yNjA4MTcyMjAyNTRaFw0yNzA4MTYyMjA3NTRaMDMxMTAvBgNV BAMTKDZDMjU0MEQ3REE2REZEMUMwQjExNEI2Q0ZGQUY4MTM5OUEwMUQ3MzUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQClQbQDK8PvbjxBkYbgofvFmt7R sWGtlgq5A8kYqQ+mL+LpuajAXP+UKYR3zmsPsobVPYeBLa6E8Ig1vdcI4huMscEJ h2kCj+7iuMn8eIzdgadudtbU2tuEwwlPGLZA0VvTCf6+I9weNx1NRwY4zWfTrfjP Vz4mZR4mnTaP64OsJkSO+zJFWxkLal+HHG8jbUkcL/sPFJgQ7JJWOtdhIzsS72q4 v3Fklf91yk2LjkoEo6qkJb013dRi+r/Hj+8YfY4WoJGFbjxyUGgglH2IRS7B2gud ZzaT/6vtkkRNoR7QAdy52hPsGVVek9y7relsNnUrvHVS1SZ42VGp3+lcH5nLAgMB AAGjggJeMIICWjAdBgNVHQ4EFgQUbCVA19pt/RwLEUts/6+BOZoB1zUwHwYDVR0j BBgwFoAUKi+02wqk0AaVgxaHLkZ7VU4P0L4wDgYDVR0PAQH/BAQDAgeAMIGIBgNV HR8EgYAwfjB8oHqgeIZ2cnN5bmM6Ly9yLm1hZ2VsbGFuLmlweG8uY29tL3JlcG8v YTZmMjE0N2EtZGU4YS00NDQwLWJjYTItNmQ4YjdjODc2ZmRhLTAvMC8yQTJGQjRE QjBBQTREMDA2OTU4MzE2ODcyRTQ2N0I1NTRFMEZEMEJFLmNybDCBngYIKwYBBQUH AQEEgZEwgY4wgYsGCCsGAQUFBzAChn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5y aXBlLm5ldC9yZXBvc2l0b3J5LzlkZjMzYTU3LTdlNGYtNDg0NC04NGUyLWI3MTUz YjU1MTFiNC8wLzJBMkZCNERCMEFBNEQwMDY5NTgzMTY4NzJFNDY3QjU1NEUwRkQw QkUuY2VyMIGgBggrBgEFBQcBCwSBkzCBkDCBjQYIKwYBBQUHMAuGgYByc3luYzov L3IubWFnZWxsYW4uaXB4by5jb20vcmVwby9hNmYyMTQ3YS1kZThhLTQ0NDAtYmNh Mi02ZDhiN2M4NzZmZGEtMC8wLzMzMzcyZTMxMmUzMjMyMzQyZTMwMmYzMjM0MmQz MjM0MjAzZDNlMjAzNTM2MzYzNTM1LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAJQHgMA0GCSqGSIb3DQEB CwUAA4IBAQAONnHRPsr/zpzktrkqQSRtWrCnmaB1YAKUs1hgjUq6e7FXtiChsM5t 6gLGqpfoX+80phh9npdrH6u+5X2Iq6WebWbNR1q5QY/YKGywTOAD8vAY/JdfmshK ZoyxVWDOV4IjfXgFe1zAJx1ZAbCgBE1f+nO5UkJJPDPyXJRNPUJsxmU68HxQndYi WxEtfTtblZyfwqRyLF8yxgt0iN6/Kmqm7sbop3fKi++9mpMje2gts4P8NrsBEHf9 31EDOU+hMZRuKVKdHmd+6yPv4/WP3ZrPOYaMVYMILMRi0WdCYRURQw+ihr7Sd2iB mt22+V1AQMqkAbDbWn8T/O6ze+xrOQDK -----END CERTIFICATE-----Generated at Thu Sep 3 07:56:11 2026 by rpki-client