$ rpki-client -vvf r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/33372e3233302e34382e302f32342d3234203d3e20313334343934.roa File: 33372e3233302e34382e302f32342d3234203d3e20313334343934.roa (raw, json) Hash identifier: oIdKtGhvF86ByfdIOKL/pS4nQCjG6NZF+uLnP6iAIMQ= Subject key identifier: 55:4B:A5:1F:AB:F6:05:53:EE:4C:72:EB:92:54:6B:76:62:61:55:85 Certificate issuer: /CN=2A2FB4DB0AA4D006958316872E467B554E0FD0BE Certificate serial: 09689FD9274103DD98877D95D90060AB09A7B4A9 Authority key identifier: 2A:2F:B4:DB:0A:A4:D0:06:95:83:16:87:2E:46:7B:55:4E:0F:D0:BE Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.cer Subject info access: rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/33372e3233302e34382e302f32342d3234203d3e20313334343934.roa Signing time: Thu 06 Aug 2026 09:02:27 +0000 ROA not before: Thu 06 Aug 2026 08:57:27 +0000 ROA not after: Thu 05 Aug 2027 09:02:27 +0000 asID: 134494 IP address blocks: 37.230.48.0/24 maxlen: 24 Validation: OK Signature path: rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.crl rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.mft rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.cer rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.crl rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft rsync://rpki.ripe.net/repository/DEFAULT/RQLmPOAcrSOaw5e8K7Xmw0fc7uo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 13 Aug 2026 07:33:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 09:68:9f:d9:27:41:03:dd:98:87:7d:95:d9:00:60:ab:09:a7:b4:a9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2A2FB4DB0AA4D006958316872E467B554E0FD0BE Validity Not Before: Aug 6 08:57:27 2026 GMT Not After : Aug 5 09:02:27 2027 GMT Subject: CN=554BA51FABF60553EE4C72EB92546B7662615585 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:b4:89:6e:f5:03:ed:4c:8f:08:00:80:35:ef: 27:73:67:e7:7c:6f:d2:d9:1c:ab:3f:44:70:bd:d6: c8:95:4f:4c:fd:dc:dd:32:31:40:74:ef:74:82:ab: fd:02:98:f9:ad:88:04:ab:c4:57:7c:d7:75:61:e8: 57:c6:05:f9:dc:46:38:91:27:72:2d:9e:28:84:20: 83:f6:bc:01:d7:35:93:1d:4b:93:e5:1a:64:9f:e0: f8:86:23:11:0c:b3:c1:9e:be:1f:9e:c4:ed:bc:f6: 93:3d:ca:e1:72:de:ad:37:a4:64:37:bb:37:10:68: ce:17:54:dd:8c:6a:82:95:dc:a4:e8:e1:02:0f:8c: fd:4e:92:04:f5:e9:7a:43:12:84:72:dd:84:29:4b: 37:d6:8f:80:7c:30:7a:e4:45:0c:3e:cf:a5:95:bf: 49:26:9c:26:f5:54:6a:69:89:bd:0c:b8:a4:ef:2c: 65:24:f1:56:b2:2c:80:8c:55:60:33:b4:bf:a9:d9: fa:7e:56:82:23:28:f0:96:06:29:05:7d:dc:c4:f5: 77:95:20:a9:a1:46:1b:7a:54:d3:1a:cb:f9:a4:1d: 75:4c:0c:32:49:de:74:21:00:4c:64:39:c2:95:20: ab:19:4e:b7:f7:64:56:85:b1:fa:00:1e:31:1a:5f: 64:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:4B:A5:1F:AB:F6:05:53:EE:4C:72:EB:92:54:6B:76:62:61:55:85 X509v3 Authority Key Identifier: keyid:2A:2F:B4:DB:0A:A4:D0:06:95:83:16:87:2E:46:7B:55:4E:0F:D0:BE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.cer Subject Information Access: Signed Object - URI:rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/33372e3233302e34382e302f32342d3234203d3e20313334343934.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 37.230.48.0/24 Signature Algorithm: sha256WithRSAEncryption 75:80:03:0d:b3:0d:5c:0f:d9:6b:aa:6f:c0:0e:9f:9c:4f:12: ee:0a:07:5e:aa:48:2a:e6:b3:e9:ac:1f:1f:23:ae:78:46:69: a9:07:54:98:9f:b2:44:40:8d:23:58:16:1a:6e:25:4e:c0:db: 7d:e7:6c:10:ed:aa:c6:2f:d2:92:b1:b0:df:21:7a:be:2a:04: 45:1f:79:ec:92:4f:05:69:89:de:73:c8:8e:82:1a:f2:49:3d: fd:f5:ff:85:ae:24:38:af:49:a5:d7:9d:75:bd:40:ef:d1:40: b1:ff:97:10:f6:99:9b:26:58:39:43:45:6f:3c:d5:57:4c:36: 41:a0:8c:39:77:ea:9a:65:47:bf:c8:4a:f0:19:ee:26:d7:c2: b1:e5:df:1f:f0:8f:60:54:d0:71:b5:b3:f1:0e:66:cb:4a:42: f0:24:c4:fb:df:6c:3b:87:55:56:d5:c9:42:8d:78:48:8c:f9: 52:08:de:f6:d9:9e:c8:a5:50:90:b9:38:ad:5a:f6:cb:65:c8: 6f:05:9d:ea:ad:26:a6:df:5d:88:57:78:29:44:71:5a:af:73: 23:95:ec:96:c7:c7:e9:60:2d:26:6c:24:18:97:78:7e:c4:80: fd:23:63:7c:88:fa:42:75:e0:26:72:1e:83:c2:56:c1:72:f3: ef:3a:e3:6a -----BEGIN CERTIFICATE----- MIIFWDCCBECgAwIBAgIUCWif2SdBA92Yh32V2QBgqwmntKkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkEyRkI0REIwQUE0RDAwNjk1ODMxNjg3MkU0NjdCNTU0 RTBGRDBCRTAeFw0yNjA4MDYwODU3MjdaFw0yNzA4MDUwOTAyMjdaMDMxMTAvBgNV BAMTKDU1NEJBNTFGQUJGNjA1NTNFRTRDNzJFQjkyNTQ2Qjc2NjI2MTU1ODUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCltIlu9QPtTI8IAIA17ydzZ+d8 b9LZHKs/RHC91siVT0z93N0yMUB073SCq/0CmPmtiASrxFd813Vh6FfGBfncRjiR J3ItniiEIIP2vAHXNZMdS5PlGmSf4PiGIxEMs8Gevh+exO289pM9yuFy3q03pGQ3 uzcQaM4XVN2MaoKV3KTo4QIPjP1OkgT16XpDEoRy3YQpSzfWj4B8MHrkRQw+z6WV v0kmnCb1VGppib0MuKTvLGUk8VayLICMVWAztL+p2fp+VoIjKPCWBikFfdzE9XeV IKmhRht6VNMay/mkHXVMDDJJ3nQhAExkOcKVIKsZTrf3ZFaFsfoAHjEaX2Q9AgMB AAGjggJiMIICXjAdBgNVHQ4EFgQUVUulH6v2BVPuTHLrklRrdmJhVYUwHwYDVR0j BBgwFoAUKi+02wqk0AaVgxaHLkZ7VU4P0L4wDgYDVR0PAQH/BAQDAgeAMIGIBgNV HR8EgYAwfjB8oHqgeIZ2cnN5bmM6Ly9yLm1hZ2VsbGFuLmlweG8uY29tL3JlcG8v YTZmMjE0N2EtZGU4YS00NDQwLWJjYTItNmQ4YjdjODc2ZmRhLTAvMC8yQTJGQjRE QjBBQTREMDA2OTU4MzE2ODcyRTQ2N0I1NTRFMEZEMEJFLmNybDCBngYIKwYBBQUH AQEEgZEwgY4wgYsGCCsGAQUFBzAChn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5y aXBlLm5ldC9yZXBvc2l0b3J5LzlkZjMzYTU3LTdlNGYtNDg0NC04NGUyLWI3MTUz YjU1MTFiNC8wLzJBMkZCNERCMEFBNEQwMDY5NTgzMTY4NzJFNDY3QjU1NEUwRkQw QkUuY2VyMIGkBggrBgEFBQcBCwSBlzCBlDCBkQYIKwYBBQUHMAuGgYRyc3luYzov L3IubWFnZWxsYW4uaXB4by5jb20vcmVwby9hNmYyMTQ3YS1kZThhLTQ0NDAtYmNh Mi02ZDhiN2M4NzZmZGEtMC8wLzMzMzcyZTMyMzMzMDJlMzQzODJlMzAyZjMyMzQy ZDMyMzQyMDNkM2UyMDMxMzMzNDM0MzkzNC5yb2EwGAYDVR0gAQH/BA4wDDAKBggr BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEACXmMDANBgkqhkiG 9w0BAQsFAAOCAQEAdYADDbMNXA/Za6pvwA6fnE8S7goHXqpIKuaz6awfHyOueEZp qQdUmJ+yRECNI1gWGm4lTsDbfedsEO2qxi/SkrGw3yF6vioERR957JJPBWmJ3nPI joIa8kk9/fX/ha4kOK9Jpdeddb1A79FAsf+XEPaZmyZYOUNFbzzVV0w2QaCMOXfq mmVHv8hK8BnuJtfCseXfH/CPYFTQcbWz8Q5my0pC8CTE+99sO4dVVtXJQo14SIz5 Ugje9tmeyKVQkLk4rVr2y2XIbwWd6q0mpt9diFd4KURxWq9zI5XslsfH6WAtJmwk GJd4fsSA/SNjfIj6QnXgJnIeg8JWwXLz7zrjag== -----END CERTIFICATE-----Generated at Thu Aug 13 00:28:55 2026 by rpki-client