$ rpki-client -vvvf r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/33372e312e3233302e302f32342d3234203d3e203536363535.roa File: 33372e312e3233302e302f32342d3234203d3e203536363535.roa (raw, json) Hash identifier: wR0cJPLalgrtlBqaCLYKgR6iYQTNzLOrhCK6lPE9+7E= Subject key identifier: 42:A5:BF:38:AA:A1:58:69:42:05:51:8B:D1:F9:6B:76:65:47:2F:8A Certificate issuer: /CN=2A2FB4DB0AA4D006958316872E467B554E0FD0BE Certificate serial: 1EE714EB7A918DF43E9E33F9A71A4A9DD0A55365 Authority key identifier: 2A:2F:B4:DB:0A:A4:D0:06:95:83:16:87:2E:46:7B:55:4E:0F:D0:BE Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.cer Subject info access: rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/33372e312e3233302e302f32342d3234203d3e203536363535.roa Signing time: Tue 25 Aug 2026 09:21:38 +0000 ROA not before: Tue 25 Aug 2026 09:16:38 +0000 ROA not after: Tue 24 Aug 2027 09:21:38 +0000 asID: 56655 IP address blocks: 37.1.230.0/24 maxlen: 24 Validation: OK Signature path: rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.crl rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.mft rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.cer rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.crl rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft rsync://rpki.ripe.net/repository/DEFAULT/RQLmPOAcrSOaw5e8K7Xmw0fc7uo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 03 Sep 2026 18:02:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1e:e7:14:eb:7a:91:8d:f4:3e:9e:33:f9:a7:1a:4a:9d:d0:a5:53:65 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2A2FB4DB0AA4D006958316872E467B554E0FD0BE Validity Not Before: Aug 25 09:16:38 2026 GMT Not After : Aug 24 09:21:38 2027 GMT Subject: CN=42A5BF38AAA158694205518BD1F96B7665472F8A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:03:af:6d:f4:a2:eb:de:9c:86:24:de:65:07: 3d:c7:fb:77:0f:aa:32:c0:2f:f1:93:6e:57:50:8b: 0c:ae:a4:c4:91:da:dc:22:f9:13:23:13:8b:ef:46: 62:db:5d:d3:e1:73:01:73:37:d0:be:b7:99:14:0d: 6a:20:0f:75:a8:b8:12:ef:43:a7:dc:67:4b:1e:b0: 6e:b6:09:4d:a6:41:04:d5:5f:e8:3c:6c:82:f5:88: b3:81:7d:31:ad:77:cc:d8:3c:53:be:c3:42:25:6d: c8:a2:69:14:1e:5f:36:e3:3b:79:6a:28:6d:e2:55: 3f:8d:4c:58:3f:e9:cc:37:48:73:a4:07:0b:71:54: 93:19:0b:b3:4b:30:a6:26:c1:71:0f:46:bf:2d:5c: 9b:62:5e:91:1b:df:80:07:f8:64:47:ef:1f:0f:bf: d0:4d:d5:45:3e:be:f4:b4:64:7e:64:c4:f5:3b:51: 6f:1a:d0:9e:1e:91:1a:58:ff:b9:98:8a:28:e8:6f: 29:82:0e:cc:49:93:20:4a:09:46:de:e3:2a:d4:05: ee:66:42:4c:2a:1a:81:0e:62:04:5b:ba:dc:5c:41: 80:33:f1:75:3b:f3:ae:cf:89:4f:eb:60:6d:df:41: 52:ee:c4:42:7a:c6:b6:8e:b9:43:88:46:a8:5f:12: 95:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:A5:BF:38:AA:A1:58:69:42:05:51:8B:D1:F9:6B:76:65:47:2F:8A X509v3 Authority Key Identifier: keyid:2A:2F:B4:DB:0A:A4:D0:06:95:83:16:87:2E:46:7B:55:4E:0F:D0:BE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.cer Subject Information Access: Signed Object - URI:rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/33372e312e3233302e302f32342d3234203d3e203536363535.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 37.1.230.0/24 Signature Algorithm: sha256WithRSAEncryption 6d:ee:7d:54:47:27:0f:ad:86:8d:ce:41:a6:c2:a3:39:fe:06: a0:a7:ea:91:41:50:5b:2e:a7:99:54:9f:ef:e0:d5:47:75:16: f0:e5:d9:b6:78:df:40:14:af:22:de:c9:67:d5:16:5e:d5:76: 69:26:67:53:d8:7d:13:7d:8a:31:19:e9:a5:1d:92:eb:30:72: 2a:6b:68:03:d6:61:93:17:55:1b:25:8d:25:63:3c:1d:a6:fe: 53:bc:8d:7f:95:98:10:82:63:e4:42:85:c0:e3:51:f3:3a:27: f1:6c:c9:fe:c5:92:bf:08:e5:e7:24:ff:46:09:3e:13:4f:9a: c1:50:f3:8a:fe:bd:fb:3e:b1:88:32:78:66:50:55:7b:6e:80: 4c:53:70:2c:f9:a4:eb:8e:51:39:58:99:a9:dc:a3:ea:70:ff: 38:3c:72:a6:a8:30:7a:29:56:57:11:2c:c7:a6:e4:84:f1:57: 94:e6:4f:27:4a:d4:cc:93:75:d8:36:d4:da:a7:0e:bb:3c:53: 04:08:7c:dc:78:0d:e8:5e:15:b6:8b:90:7b:25:dc:e7:60:5d: 6b:3d:a6:18:bd:67:5c:32:2c:c9:75:9d:60:45:fc:6b:45:39: 57:10:96:82:48:fe:83:b8:97:f7:23:18:8d:76:2c:dd:80:e7: 27:08:0f:c0 -----BEGIN CERTIFICATE----- MIIFVDCCBDygAwIBAgIUHucU63qRjfQ+njP5pxpKndClU2UwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkEyRkI0REIwQUE0RDAwNjk1ODMxNjg3MkU0NjdCNTU0 RTBGRDBCRTAeFw0yNjA4MjUwOTE2MzhaFw0yNzA4MjQwOTIxMzhaMDMxMTAvBgNV BAMTKDQyQTVCRjM4QUFBMTU4Njk0MjA1NTE4QkQxRjk2Qjc2NjU0NzJGOEEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+A69t9KLr3pyGJN5lBz3H+3cP qjLAL/GTbldQiwyupMSR2twi+RMjE4vvRmLbXdPhcwFzN9C+t5kUDWogD3WouBLv Q6fcZ0sesG62CU2mQQTVX+g8bIL1iLOBfTGtd8zYPFO+w0IlbciiaRQeXzbjO3lq KG3iVT+NTFg/6cw3SHOkBwtxVJMZC7NLMKYmwXEPRr8tXJtiXpEb34AH+GRH7x8P v9BN1UU+vvS0ZH5kxPU7UW8a0J4ekRpY/7mYiijobymCDsxJkyBKCUbe4yrUBe5m QkwqGoEOYgRbutxcQYAz8XU7867PiU/rYG3fQVLuxEJ6xraOuUOIRqhfEpWHAgMB AAGjggJeMIICWjAdBgNVHQ4EFgQUQqW/OKqhWGlCBVGL0flrdmVHL4owHwYDVR0j BBgwFoAUKi+02wqk0AaVgxaHLkZ7VU4P0L4wDgYDVR0PAQH/BAQDAgeAMIGIBgNV HR8EgYAwfjB8oHqgeIZ2cnN5bmM6Ly9yLm1hZ2VsbGFuLmlweG8uY29tL3JlcG8v YTZmMjE0N2EtZGU4YS00NDQwLWJjYTItNmQ4YjdjODc2ZmRhLTAvMC8yQTJGQjRE QjBBQTREMDA2OTU4MzE2ODcyRTQ2N0I1NTRFMEZEMEJFLmNybDCBngYIKwYBBQUH AQEEgZEwgY4wgYsGCCsGAQUFBzAChn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5y aXBlLm5ldC9yZXBvc2l0b3J5LzlkZjMzYTU3LTdlNGYtNDg0NC04NGUyLWI3MTUz YjU1MTFiNC8wLzJBMkZCNERCMEFBNEQwMDY5NTgzMTY4NzJFNDY3QjU1NEUwRkQw QkUuY2VyMIGgBggrBgEFBQcBCwSBkzCBkDCBjQYIKwYBBQUHMAuGgYByc3luYzov L3IubWFnZWxsYW4uaXB4by5jb20vcmVwby9hNmYyMTQ3YS1kZThhLTQ0NDAtYmNh Mi02ZDhiN2M4NzZmZGEtMC8wLzMzMzcyZTMxMmUzMjMzMzAyZTMwMmYzMjM0MmQz MjM0MjAzZDNlMjAzNTM2MzYzNTM1LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAJQHmMA0GCSqGSIb3DQEB CwUAA4IBAQBt7n1URycPrYaNzkGmwqM5/gagp+qRQVBbLqeZVJ/v4NVHdRbw5dm2 eN9AFK8i3sln1RZe1XZpJmdT2H0TfYoxGemlHZLrMHIqa2gD1mGTF1UbJY0lYzwd pv5TvI1/lZgQgmPkQoXA41HzOifxbMn+xZK/COXnJP9GCT4TT5rBUPOK/r37PrGI MnhmUFV7boBMU3As+aTrjlE5WJmp3KPqcP84PHKmqDB6KVZXESzHpuSE8VeU5k8n StTMk3XYNtTapw67PFMECHzceA3oXhW2i5B7JdznYF1rPaYYvWdcMizJdZ1gRfxr RTlXEJaCSP6DuJf3IxiNdizdgOcnCA/A -----END CERTIFICATE-----Generated at Thu Sep 3 07:56:28 2026 by rpki-client