$ rpki-client -vvvf r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/33372e3233302e35302e302f32342d3234203d3e203235313938.roa File: 33372e3233302e35302e302f32342d3234203d3e203235313938.roa (raw, json) Hash identifier: 3rKI0m3smzQZ1Jz3I31pY4U1yDfrd0Ca6+W5sk50LrA= Subject key identifier: AF:4D:3F:9D:C2:94:39:1C:78:53:3E:B8:8A:C6:47:35:B4:21:51:C5 Certificate issuer: /CN=2A2FB4DB0AA4D006958316872E467B554E0FD0BE Certificate serial: 33E0A65DB7A46D2CCE6D9364F4348E0CD7823790 Authority key identifier: 2A:2F:B4:DB:0A:A4:D0:06:95:83:16:87:2E:46:7B:55:4E:0F:D0:BE Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.cer Subject info access: rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/33372e3233302e35302e302f32342d3234203d3e203235313938.roa Signing time: Thu 06 Aug 2026 14:45:30 +0000 ROA not before: Thu 06 Aug 2026 14:40:30 +0000 ROA not after: Thu 05 Aug 2027 14:45:30 +0000 asID: 25198 IP address blocks: 37.230.50.0/24 maxlen: 24 Validation: OK Signature path: rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.crl rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.mft rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.cer rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.crl rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft rsync://rpki.ripe.net/repository/DEFAULT/RQLmPOAcrSOaw5e8K7Xmw0fc7uo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 25 Aug 2026 10:34:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 33:e0:a6:5d:b7:a4:6d:2c:ce:6d:93:64:f4:34:8e:0c:d7:82:37:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2A2FB4DB0AA4D006958316872E467B554E0FD0BE Validity Not Before: Aug 6 14:40:30 2026 GMT Not After : Aug 5 14:45:30 2027 GMT Subject: CN=AF4D3F9DC294391C78533EB88AC64735B42151C5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:ff:86:c7:92:d4:09:4c:72:50:27:a4:34:8b: d3:b0:e8:26:e1:eb:b6:d0:8d:21:19:7f:9e:5f:72: 47:2c:3b:76:e7:ec:81:78:09:c1:f7:81:50:fe:72: e8:99:99:a1:83:ba:10:3b:fe:63:84:ab:2f:ae:ca: dc:2c:78:29:af:9c:e8:c0:6a:8e:f2:eb:74:7a:d0: 6d:9e:13:a8:28:41:58:b3:4b:eb:95:96:e8:f1:eb: 63:31:e7:21:0a:24:ad:53:cc:82:12:9e:f6:41:37: 74:f5:dc:26:e8:9f:70:50:79:a2:4e:88:c4:74:20: 2a:e5:a5:e4:6d:4c:fe:ef:3e:4f:f7:44:fc:ac:63: 19:24:c7:76:53:05:fd:3c:34:07:7f:bb:ad:9d:d1: d9:18:7f:31:04:1a:20:37:2c:47:fe:0a:ef:2d:80: 9d:76:3e:4e:d9:a2:87:c7:3f:53:4b:da:ac:ed:02: 70:58:5f:ef:2c:95:4d:8d:89:d8:ed:7b:03:b3:18: fa:c2:df:73:d6:6a:c1:ee:b5:58:75:d7:ce:54:60: 22:e8:34:12:c3:88:0d:6b:ac:21:58:68:74:10:8d: f1:ea:87:7f:54:ab:7e:41:d9:9b:a2:28:62:29:f1: 7d:de:77:7f:c4:23:3d:8d:89:52:9a:ac:3d:24:ca: 70:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:4D:3F:9D:C2:94:39:1C:78:53:3E:B8:8A:C6:47:35:B4:21:51:C5 X509v3 Authority Key Identifier: keyid:2A:2F:B4:DB:0A:A4:D0:06:95:83:16:87:2E:46:7B:55:4E:0F:D0:BE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.cer Subject Information Access: Signed Object - URI:rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/33372e3233302e35302e302f32342d3234203d3e203235313938.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 37.230.50.0/24 Signature Algorithm: sha256WithRSAEncryption 8c:55:08:36:c9:10:04:95:8a:0b:2b:b4:91:be:be:a8:ff:1d: 6a:cb:cc:a1:d2:b4:4d:47:9e:41:6b:22:6d:00:fa:a3:d6:ac: 0c:25:f7:57:85:42:ba:3e:aa:d0:6b:0d:6f:84:d9:1f:9d:48: 8a:7a:62:2f:98:dd:11:00:33:f9:e6:9b:d9:c6:8c:0a:83:aa: 95:b2:6b:9d:5a:11:21:f8:70:2f:87:df:58:56:06:28:af:1a: 61:2c:68:f8:8c:2e:b3:d2:e7:5d:d4:bc:b5:62:2f:88:aa:04: 54:ba:ef:f3:ee:ce:fd:13:55:73:ff:4d:0e:75:a9:84:52:17: 77:8c:59:e6:1e:ed:be:92:ce:aa:e5:10:d7:61:72:9d:89:ec: e8:7d:c5:e3:30:52:9c:a3:4d:13:89:fc:30:cc:38:68:1d:ff: 4f:e3:04:4b:b1:b0:ac:42:e8:cc:9b:9e:bb:a3:9d:34:e9:81: d1:44:0b:08:74:6e:52:d4:ab:20:d4:1b:f1:eb:b5:75:45:84: 1c:95:50:b2:cc:46:1e:db:70:e8:36:b5:90:ab:15:b1:8b:22: 52:f3:c0:ce:fd:a6:22:87:12:04:ca:c1:47:92:19:1b:92:a7: fb:06:76:6b:62:bc:e0:29:40:ff:02:e8:ea:a3:ba:13:9c:83: 9e:df:31:59 -----BEGIN CERTIFICATE----- MIIFVjCCBD6gAwIBAgIUM+CmXbekbSzObZNk9DSODNeCN5AwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkEyRkI0REIwQUE0RDAwNjk1ODMxNjg3MkU0NjdCNTU0 RTBGRDBCRTAeFw0yNjA4MDYxNDQwMzBaFw0yNzA4MDUxNDQ1MzBaMDMxMTAvBgNV BAMTKEFGNEQzRjlEQzI5NDM5MUM3ODUzM0VCODhBQzY0NzM1QjQyMTUxQzUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCy/4bHktQJTHJQJ6Q0i9Ow6Cbh 67bQjSEZf55fckcsO3bn7IF4CcH3gVD+cuiZmaGDuhA7/mOEqy+uytwseCmvnOjA ao7y63R60G2eE6goQVizS+uVlujx62Mx5yEKJK1TzIISnvZBN3T13Cbon3BQeaJO iMR0ICrlpeRtTP7vPk/3RPysYxkkx3ZTBf08NAd/u62d0dkYfzEEGiA3LEf+Cu8t gJ12Pk7ZoofHP1NL2qztAnBYX+8slU2NidjtewOzGPrC33PWasHutVh1185UYCLo NBLDiA1rrCFYaHQQjfHqh39Uq35B2ZuiKGIp8X3ed3/EIz2NiVKarD0kynALAgMB AAGjggJgMIICXDAdBgNVHQ4EFgQUr00/ncKUORx4Uz64isZHNbQhUcUwHwYDVR0j BBgwFoAUKi+02wqk0AaVgxaHLkZ7VU4P0L4wDgYDVR0PAQH/BAQDAgeAMIGIBgNV HR8EgYAwfjB8oHqgeIZ2cnN5bmM6Ly9yLm1hZ2VsbGFuLmlweG8uY29tL3JlcG8v YTZmMjE0N2EtZGU4YS00NDQwLWJjYTItNmQ4YjdjODc2ZmRhLTAvMC8yQTJGQjRE QjBBQTREMDA2OTU4MzE2ODcyRTQ2N0I1NTRFMEZEMEJFLmNybDCBngYIKwYBBQUH AQEEgZEwgY4wgYsGCCsGAQUFBzAChn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5y aXBlLm5ldC9yZXBvc2l0b3J5LzlkZjMzYTU3LTdlNGYtNDg0NC04NGUyLWI3MTUz YjU1MTFiNC8wLzJBMkZCNERCMEFBNEQwMDY5NTgzMTY4NzJFNDY3QjU1NEUwRkQw QkUuY2VyMIGiBggrBgEFBQcBCwSBlTCBkjCBjwYIKwYBBQUHMAuGgYJyc3luYzov L3IubWFnZWxsYW4uaXB4by5jb20vcmVwby9hNmYyMTQ3YS1kZThhLTQ0NDAtYmNh Mi02ZDhiN2M4NzZmZGEtMC8wLzMzMzcyZTMyMzMzMDJlMzUzMDJlMzAyZjMyMzQy ZDMyMzQyMDNkM2UyMDMyMzUzMTM5Mzgucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYB BQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAAl5jIwDQYJKoZIhvcN AQELBQADggEBAIxVCDbJEASVigsrtJG+vqj/HWrLzKHStE1HnkFrIm0A+qPWrAwl 91eFQro+qtBrDW+E2R+dSIp6Yi+Y3REAM/nmm9nGjAqDqpWya51aESH4cC+H31hW BiivGmEsaPiMLrPS513UvLViL4iqBFS67/Puzv0TVXP/TQ51qYRSF3eMWeYe7b6S zqrlENdhcp2J7Oh9xeMwUpyjTROJ/DDMOGgd/0/jBEuxsKxC6MybnrujnTTpgdFE Cwh0blLUqyDUG/HrtXVFhByVULLMRh7bcOg2tZCrFbGLIlLzwM79piKHEgTKwUeS GRuSp/sGdmtivOApQP8C6OqjuhOcg57fMVk= -----END CERTIFICATE-----Generated at Mon Aug 24 15:35:14 2026 by rpki-client