$ rpki-client -vvf r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/33372e3233302e35302e302f32342d3234203d3e20323033303438.roa File: 33372e3233302e35302e302f32342d3234203d3e20323033303438.roa (raw, json) Hash identifier: qeaZKwRma2NHZNDSuK5DONhGEr00BIBJBum3ChBnY1E= Subject key identifier: B3:50:E3:FD:87:CF:B5:11:82:16:6D:31:0A:92:DF:49:8D:D0:15:BE Certificate issuer: /CN=2A2FB4DB0AA4D006958316872E467B554E0FD0BE Certificate serial: 0D7A1CE0D4570418886AE7753C3140DFAE3EEE11 Authority key identifier: 2A:2F:B4:DB:0A:A4:D0:06:95:83:16:87:2E:46:7B:55:4E:0F:D0:BE Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.cer Subject info access: rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/33372e3233302e35302e302f32342d3234203d3e20323033303438.roa Signing time: Mon 30 Mar 2026 08:08:08 +0000 ROA not before: Mon 30 Mar 2026 08:03:08 +0000 ROA not after: Mon 29 Mar 2027 08:08:08 +0000 asID: 203048 IP address blocks: 37.230.50.0/24 maxlen: 24 Validation: OK Signature path: rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.crl rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.mft rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.cer rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.crl rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft rsync://rpki.ripe.net/repository/DEFAULT/RQLmPOAcrSOaw5e8K7Xmw0fc7uo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 11 Apr 2026 17:02:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0d:7a:1c:e0:d4:57:04:18:88:6a:e7:75:3c:31:40:df:ae:3e:ee:11 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2A2FB4DB0AA4D006958316872E467B554E0FD0BE Validity Not Before: Mar 30 08:03:08 2026 GMT Not After : Mar 29 08:08:08 2027 GMT Subject: CN=B350E3FD87CFB51182166D310A92DF498DD015BE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:56:e4:6d:71:ea:25:b6:8f:60:98:2e:86:67: 30:02:69:bf:97:36:76:1a:c1:6c:24:10:e6:3c:5f: 5c:34:a3:18:d0:c2:6c:fd:2a:a6:85:65:b7:e2:bd: 92:7a:25:a1:9f:02:f1:5b:15:5a:a8:9f:36:5a:56: 93:93:f0:59:3c:80:89:fc:32:62:5f:ca:11:6d:09: 04:54:42:f7:e4:80:3a:f2:d9:18:44:f6:68:7d:5b: b3:96:8d:71:df:e8:25:bd:18:f9:8b:a3:fe:47:82: 5c:d8:85:ce:6e:36:25:2d:51:48:d6:3e:8a:f1:5d: d7:b3:a0:ef:71:ba:d5:1d:56:2e:43:aa:0d:29:c9: 1c:5a:2e:65:05:b5:d4:e0:22:0e:0f:a8:4b:ae:74: ec:5f:e7:cd:36:92:74:51:53:35:62:a2:4f:00:1e: 81:c2:99:3a:ea:3c:af:af:b5:85:8b:67:f1:4b:bc: 78:42:68:e8:af:eb:32:ef:56:b6:d6:23:b2:4e:0f: 99:1d:1c:dd:05:bc:05:37:0d:32:48:38:98:37:d6: be:07:25:6c:52:ee:7a:ff:89:0d:70:7e:a3:ae:59: 5b:e8:a2:1a:f2:67:f7:4e:9a:31:6f:16:35:cd:94: 44:2d:41:bf:97:f7:61:5a:d7:1d:7a:17:c3:13:7b: 86:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:50:E3:FD:87:CF:B5:11:82:16:6D:31:0A:92:DF:49:8D:D0:15:BE X509v3 Authority Key Identifier: keyid:2A:2F:B4:DB:0A:A4:D0:06:95:83:16:87:2E:46:7B:55:4E:0F:D0:BE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.cer Subject Information Access: Signed Object - URI:rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/33372e3233302e35302e302f32342d3234203d3e20323033303438.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 37.230.50.0/24 Signature Algorithm: sha256WithRSAEncryption 8e:bf:c7:30:d7:4e:94:02:33:33:39:ec:85:92:fb:c5:08:ee: 70:9b:8f:80:30:e5:9d:42:73:39:08:49:a5:74:9e:55:6e:e2: bb:11:f8:94:f7:f0:d4:2b:8a:f5:23:33:33:cf:45:50:e3:16: bb:df:8f:da:fc:62:72:15:a5:27:b7:81:34:ab:da:8f:3b:5a: 06:b9:c5:35:86:4d:46:c1:c8:0a:fe:1d:83:9b:e2:b8:9f:04: de:e9:12:c8:4c:10:0b:bd:50:5f:eb:86:c5:4a:28:e1:ea:7e: 21:a0:b4:8c:0b:21:d1:00:b2:99:a2:a8:e4:8d:11:3f:76:3f: 10:bd:dc:ab:4d:45:fc:6b:7c:8c:74:02:c4:e7:66:12:94:d1: af:29:42:c4:12:d8:f3:7d:37:aa:99:aa:37:4c:6d:95:6e:b2: 6b:94:76:ca:7c:d5:b4:c7:b5:95:53:ad:4d:21:c3:99:a8:06: ab:07:b9:d9:96:2f:a9:97:20:46:dd:0c:3d:d3:37:dd:30:12: 0e:6b:20:84:e6:c6:53:e9:67:76:02:85:a6:79:75:bd:b5:94: 04:68:ec:6a:46:ef:d8:ef:2e:49:4d:c4:a6:da:be:65:7f:29: 05:a0:53:bc:80:6d:a4:7a:13:53:1c:36:90:f3:07:e0:df:9b: c6:41:a2:bb -----BEGIN CERTIFICATE----- MIIFWDCCBECgAwIBAgIUDXoc4NRXBBiIaud1PDFA364+7hEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkEyRkI0REIwQUE0RDAwNjk1ODMxNjg3MkU0NjdCNTU0 RTBGRDBCRTAeFw0yNjAzMzAwODAzMDhaFw0yNzAzMjkwODA4MDhaMDMxMTAvBgNV BAMTKEIzNTBFM0ZEODdDRkI1MTE4MjE2NkQzMTBBOTJERjQ5OEREMDE1QkUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCqVuRtceolto9gmC6GZzACab+X NnYawWwkEOY8X1w0oxjQwmz9KqaFZbfivZJ6JaGfAvFbFVqonzZaVpOT8Fk8gIn8 MmJfyhFtCQRUQvfkgDry2RhE9mh9W7OWjXHf6CW9GPmLo/5HglzYhc5uNiUtUUjW PorxXdezoO9xutUdVi5Dqg0pyRxaLmUFtdTgIg4PqEuudOxf5802knRRUzViok8A HoHCmTrqPK+vtYWLZ/FLvHhCaOiv6zLvVrbWI7JOD5kdHN0FvAU3DTJIOJg31r4H JWxS7nr/iQ1wfqOuWVvoohryZ/dOmjFvFjXNlEQtQb+X92Fa1x16F8MTe4a3AgMB AAGjggJiMIICXjAdBgNVHQ4EFgQUs1Dj/YfPtRGCFm0xCpLfSY3QFb4wHwYDVR0j BBgwFoAUKi+02wqk0AaVgxaHLkZ7VU4P0L4wDgYDVR0PAQH/BAQDAgeAMIGIBgNV HR8EgYAwfjB8oHqgeIZ2cnN5bmM6Ly9yLm1hZ2VsbGFuLmlweG8uY29tL3JlcG8v YTZmMjE0N2EtZGU4YS00NDQwLWJjYTItNmQ4YjdjODc2ZmRhLTAvMC8yQTJGQjRE QjBBQTREMDA2OTU4MzE2ODcyRTQ2N0I1NTRFMEZEMEJFLmNybDCBngYIKwYBBQUH AQEEgZEwgY4wgYsGCCsGAQUFBzAChn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5y aXBlLm5ldC9yZXBvc2l0b3J5LzlkZjMzYTU3LTdlNGYtNDg0NC04NGUyLWI3MTUz YjU1MTFiNC8wLzJBMkZCNERCMEFBNEQwMDY5NTgzMTY4NzJFNDY3QjU1NEUwRkQw QkUuY2VyMIGkBggrBgEFBQcBCwSBlzCBlDCBkQYIKwYBBQUHMAuGgYRyc3luYzov L3IubWFnZWxsYW4uaXB4by5jb20vcmVwby9hNmYyMTQ3YS1kZThhLTQ0NDAtYmNh Mi02ZDhiN2M4NzZmZGEtMC8wLzMzMzcyZTMyMzMzMDJlMzUzMDJlMzAyZjMyMzQy ZDMyMzQyMDNkM2UyMDMyMzAzMzMwMzQzOC5yb2EwGAYDVR0gAQH/BA4wDDAKBggr BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEACXmMjANBgkqhkiG 9w0BAQsFAAOCAQEAjr/HMNdOlAIzMznshZL7xQjucJuPgDDlnUJzOQhJpXSeVW7i uxH4lPfw1CuK9SMzM89FUOMWu9+P2vxichWlJ7eBNKvajztaBrnFNYZNRsHICv4d g5viuJ8E3ukSyEwQC71QX+uGxUoo4ep+IaC0jAsh0QCymaKo5I0RP3Y/EL3cq01F /Gt8jHQCxOdmEpTRrylCxBLY8303qpmqN0xtlW6ya5R2ynzVtMe1lVOtTSHDmagG qwe52ZYvqZcgRt0MPdM33TASDmsghObGU+lndgKFpnl1vbWUBGjsakbv2O8uSU3E ptq+ZX8pBaBTvIBtpHoTUxw2kPMH4N+bxkGiuw== -----END CERTIFICATE-----Generated at Sat Apr 11 01:28:29 2026 by rpki-client