$ rpki-client -vvvf r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/33372e3233302e34382e302f32342d3234203d3e20343032323135.roa File: 33372e3233302e34382e302f32342d3234203d3e20343032323135.roa (raw, json) Hash identifier: opUSRlOyDMwxeyidljZ+A2pMq1jZz7hDWiMQYAjiGO4= Subject key identifier: B0:5D:73:95:A1:C5:85:EC:EF:68:D9:38:15:4B:CD:CB:76:A2:F7:5F Certificate issuer: /CN=2A2FB4DB0AA4D006958316872E467B554E0FD0BE Certificate serial: 6141778B729789F67473E9D83CE2AE45F46600C2 Authority key identifier: 2A:2F:B4:DB:0A:A4:D0:06:95:83:16:87:2E:46:7B:55:4E:0F:D0:BE Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.cer Subject info access: rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/33372e3233302e34382e302f32342d3234203d3e20343032323135.roa Signing time: Sat 08 Aug 2026 11:17:42 +0000 ROA not before: Sat 08 Aug 2026 11:12:42 +0000 ROA not after: Sat 07 Aug 2027 11:17:42 +0000 asID: 402215 IP address blocks: 37.230.48.0/24 maxlen: 24 Validation: OK Signature path: rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.crl rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.mft rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.cer rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.crl rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft rsync://rpki.ripe.net/repository/DEFAULT/RQLmPOAcrSOaw5e8K7Xmw0fc7uo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 01 Sep 2026 10:57:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 61:41:77:8b:72:97:89:f6:74:73:e9:d8:3c:e2:ae:45:f4:66:00:c2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2A2FB4DB0AA4D006958316872E467B554E0FD0BE Validity Not Before: Aug 8 11:12:42 2026 GMT Not After : Aug 7 11:17:42 2027 GMT Subject: CN=B05D7395A1C585ECEF68D938154BCDCB76A2F75F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:f9:dd:dd:9c:0b:ff:40:5a:23:f0:84:2d:c0: cb:9e:77:17:93:6c:ba:b3:7a:c9:f5:c0:b8:09:f3: b8:3b:ac:cc:0d:f6:2c:fb:64:39:07:0e:32:7b:ed: e7:c7:b1:b3:bf:87:08:d7:4d:70:a8:5c:58:b2:3f: 2c:81:28:93:54:e4:05:c7:5d:73:eb:fb:45:1b:75: ea:e5:77:a1:c2:73:5a:3a:35:68:84:78:ce:0c:e2: d2:e9:d4:44:b6:06:a3:89:0e:54:7c:77:b8:f4:e2: 5e:78:a7:d4:f6:b9:a8:02:4c:21:5b:00:72:ee:44: 1f:56:e7:5a:8c:ad:e8:cf:0e:18:d9:9c:90:93:05: 5c:48:ff:31:fc:e3:89:47:8b:e8:76:cb:03:a2:42: 8d:fc:17:6f:f9:aa:20:50:1c:d7:07:4e:63:00:e7: 3d:76:a1:c2:e3:38:10:b9:d3:cc:7f:15:64:fd:ff: 14:95:12:87:39:7c:91:99:8c:e9:95:97:97:0c:af: 0c:66:ae:8c:47:f2:80:4f:59:ae:61:a8:3e:29:ff: 04:2c:9b:cd:de:a5:d3:72:ba:0d:a3:c5:6e:ba:03: 0a:b9:54:55:83:f6:7b:a6:10:4c:f6:bd:f5:a8:c1: 5f:24:f6:9f:68:2c:5e:a6:cd:e4:0e:51:28:26:4e: 54:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:5D:73:95:A1:C5:85:EC:EF:68:D9:38:15:4B:CD:CB:76:A2:F7:5F X509v3 Authority Key Identifier: keyid:2A:2F:B4:DB:0A:A4:D0:06:95:83:16:87:2E:46:7B:55:4E:0F:D0:BE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.cer Subject Information Access: Signed Object - URI:rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/33372e3233302e34382e302f32342d3234203d3e20343032323135.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 37.230.48.0/24 Signature Algorithm: sha256WithRSAEncryption 1a:e1:08:9d:3a:06:57:cd:fa:50:47:4b:b1:8d:05:42:a7:a7: f8:d8:8e:d2:1c:a6:17:9b:fc:11:35:38:b9:58:dd:79:08:d7: 2e:9e:a3:22:2a:0e:e3:c8:8b:31:59:3f:67:b2:4e:41:1a:ff: a6:90:8a:fd:d4:5f:0e:65:9a:1f:d3:e3:41:bf:d5:fb:07:89: 3a:62:9b:ec:40:82:57:d0:4f:65:ba:00:b2:5a:59:64:6e:0f: 0d:96:37:75:00:c6:10:e7:99:1b:1c:2c:f7:2d:60:76:2e:9e: f7:9c:c4:d3:c5:fe:b9:d2:62:2d:fb:1a:11:f6:88:09:17:62: 96:29:74:0d:9d:5a:a3:22:27:d1:c2:f5:62:79:e8:d6:6a:a3: 37:7d:ab:16:2a:72:a6:a5:ad:4c:e7:e7:5c:f8:fc:7a:55:1a: 91:81:63:a9:9c:f6:b9:f5:f8:bd:2a:af:86:95:02:b2:7d:e2: 40:73:dd:57:e0:fb:05:cf:56:12:7b:37:bc:49:da:9d:9d:71: 44:e0:dd:72:8d:0b:2c:3d:05:0d:d9:3c:a2:1d:e7:40:38:b8: 1b:c6:1d:83:3a:66:7a:85:7e:d0:77:3a:c7:5d:e1:13:d3:ee: 22:64:60:45:69:dc:22:c2:8a:6d:7b:a5:19:6a:20:73:a2:18: d7:f3:75:c4 -----BEGIN CERTIFICATE----- MIIFWDCCBECgAwIBAgIUYUF3i3KXifZ0c+nYPOKuRfRmAMIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkEyRkI0REIwQUE0RDAwNjk1ODMxNjg3MkU0NjdCNTU0 RTBGRDBCRTAeFw0yNjA4MDgxMTEyNDJaFw0yNzA4MDcxMTE3NDJaMDMxMTAvBgNV BAMTKEIwNUQ3Mzk1QTFDNTg1RUNFRjY4RDkzODE1NEJDRENCNzZBMkY3NUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDe+d3dnAv/QFoj8IQtwMuedxeT bLqzesn1wLgJ87g7rMwN9iz7ZDkHDjJ77efHsbO/hwjXTXCoXFiyPyyBKJNU5AXH XXPr+0Ubderld6HCc1o6NWiEeM4M4tLp1ES2BqOJDlR8d7j04l54p9T2uagCTCFb AHLuRB9W51qMrejPDhjZnJCTBVxI/zH844lHi+h2ywOiQo38F2/5qiBQHNcHTmMA 5z12ocLjOBC508x/FWT9/xSVEoc5fJGZjOmVl5cMrwxmroxH8oBPWa5hqD4p/wQs m83epdNyug2jxW66Awq5VFWD9numEEz2vfWowV8k9p9oLF6mzeQOUSgmTlTZAgMB AAGjggJiMIICXjAdBgNVHQ4EFgQUsF1zlaHFhezvaNk4FUvNy3ai918wHwYDVR0j BBgwFoAUKi+02wqk0AaVgxaHLkZ7VU4P0L4wDgYDVR0PAQH/BAQDAgeAMIGIBgNV HR8EgYAwfjB8oHqgeIZ2cnN5bmM6Ly9yLm1hZ2VsbGFuLmlweG8uY29tL3JlcG8v YTZmMjE0N2EtZGU4YS00NDQwLWJjYTItNmQ4YjdjODc2ZmRhLTAvMC8yQTJGQjRE QjBBQTREMDA2OTU4MzE2ODcyRTQ2N0I1NTRFMEZEMEJFLmNybDCBngYIKwYBBQUH AQEEgZEwgY4wgYsGCCsGAQUFBzAChn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5y aXBlLm5ldC9yZXBvc2l0b3J5LzlkZjMzYTU3LTdlNGYtNDg0NC04NGUyLWI3MTUz YjU1MTFiNC8wLzJBMkZCNERCMEFBNEQwMDY5NTgzMTY4NzJFNDY3QjU1NEUwRkQw QkUuY2VyMIGkBggrBgEFBQcBCwSBlzCBlDCBkQYIKwYBBQUHMAuGgYRyc3luYzov L3IubWFnZWxsYW4uaXB4by5jb20vcmVwby9hNmYyMTQ3YS1kZThhLTQ0NDAtYmNh Mi02ZDhiN2M4NzZmZGEtMC8wLzMzMzcyZTMyMzMzMDJlMzQzODJlMzAyZjMyMzQy ZDMyMzQyMDNkM2UyMDM0MzAzMjMyMzEzNS5yb2EwGAYDVR0gAQH/BA4wDDAKBggr BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEACXmMDANBgkqhkiG 9w0BAQsFAAOCAQEAGuEInToGV836UEdLsY0FQqen+NiO0hymF5v8ETU4uVjdeQjX Lp6jIioO48iLMVk/Z7JOQRr/ppCK/dRfDmWaH9PjQb/V+weJOmKb7ECCV9BPZboA slpZZG4PDZY3dQDGEOeZGxws9y1gdi6e95zE08X+udJiLfsaEfaICRdilil0DZ1a oyIn0cL1Ynno1mqjN32rFipypqWtTOfnXPj8elUakYFjqZz2ufX4vSqvhpUCsn3i QHPdV+D7Bc9WEns3vEnanZ1xRODdco0LLD0FDdk8oh3nQDi4G8YdgzpmeoV+0Hc6 x13hE9PuImRgRWncIsKKbXulGWogc6IY1/N1xA== -----END CERTIFICATE-----Generated at Tue Sep 1 02:34:40 2026 by rpki-client