$ rpki-client -vvf r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/33372e3233302e35302e302f32342d3234203d3e20383334.roa File: 33372e3233302e35302e302f32342d3234203d3e20383334.roa (raw, json) Hash identifier: l3L5ROf+O287iyjt0MWbSBz9yEGuvxkvdOO5ObkPdwc= Subject key identifier: 2D:DC:D1:EF:8B:0D:E4:34:4C:AD:9D:85:CD:FD:06:54:2B:05:20:76 Certificate issuer: /CN=2A2FB4DB0AA4D006958316872E467B554E0FD0BE Certificate serial: 29B4C84C2CA9C88BA4A8717B5C56AAFF7D4CA1AD Authority key identifier: 2A:2F:B4:DB:0A:A4:D0:06:95:83:16:87:2E:46:7B:55:4E:0F:D0:BE Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.cer Subject info access: rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/33372e3233302e35302e302f32342d3234203d3e20383334.roa Signing time: Sat 20 Jun 2026 07:00:05 +0000 ROA not before: Sat 20 Jun 2026 06:55:05 +0000 ROA not after: Sat 19 Jun 2027 07:00:05 +0000 asID: 834 IP address blocks: 37.230.50.0/24 maxlen: 24 Validation: OK Signature path: rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.crl rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.mft rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.cer rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.crl rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft rsync://rpki.ripe.net/repository/DEFAULT/RQLmPOAcrSOaw5e8K7Xmw0fc7uo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 30 Jun 2026 01:05:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 29:b4:c8:4c:2c:a9:c8:8b:a4:a8:71:7b:5c:56:aa:ff:7d:4c:a1:ad Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2A2FB4DB0AA4D006958316872E467B554E0FD0BE Validity Not Before: Jun 20 06:55:05 2026 GMT Not After : Jun 19 07:00:05 2027 GMT Subject: CN=2DDCD1EF8B0DE4344CAD9D85CDFD06542B052076 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:e1:24:55:ad:98:02:0f:aa:3f:fd:9b:d2:8d: cc:ed:97:4d:f2:cb:31:53:ee:6d:86:ed:6a:d6:11: 10:f3:21:f3:69:87:8c:31:50:26:19:69:30:51:ba: a8:cd:ee:6c:7a:17:61:e9:3e:73:e8:ed:64:1a:a0: 13:55:b2:32:68:dd:74:f3:23:ad:99:b9:50:36:cf: 00:f9:40:03:20:96:59:33:8d:cb:a9:3a:b8:29:3d: 75:4b:53:45:5f:08:86:25:d1:e3:8e:04:6f:a3:b8: af:e0:83:68:15:50:2f:cb:b0:55:25:7c:61:f8:96: be:d5:7f:ba:41:4b:8f:31:c9:5c:cb:7c:a4:84:a2: 92:c6:08:ce:88:63:28:e2:b7:69:64:0d:e7:fb:06: 5a:11:5a:b6:da:a2:6f:ac:24:7f:c1:e7:e4:9d:d3: 0a:4d:2c:a7:1a:2b:d6:2d:f5:1e:41:05:85:06:6c: 27:b6:06:2c:a0:ff:13:6f:34:f0:e4:f6:8d:4d:c0: 9c:69:2a:a2:82:26:c9:b4:37:1e:0d:80:b9:14:86: a1:90:8b:63:cb:c1:a6:16:05:97:8a:8b:bd:4f:04: 32:72:5e:25:e7:c8:a6:26:27:75:4f:6e:31:5f:ed: e0:af:20:70:d9:46:da:f7:a6:27:93:b3:7c:d3:db: 7c:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:DC:D1:EF:8B:0D:E4:34:4C:AD:9D:85:CD:FD:06:54:2B:05:20:76 X509v3 Authority Key Identifier: keyid:2A:2F:B4:DB:0A:A4:D0:06:95:83:16:87:2E:46:7B:55:4E:0F:D0:BE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.cer Subject Information Access: Signed Object - URI:rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/33372e3233302e35302e302f32342d3234203d3e20383334.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 37.230.50.0/24 Signature Algorithm: sha256WithRSAEncryption a2:ee:ac:e1:f2:0d:ca:a2:fa:17:d0:19:07:48:2d:38:f2:ce: a4:2c:f3:f7:ea:5c:52:40:80:49:f2:d1:28:f0:bd:1d:52:3e: 67:dd:15:b7:92:5c:f9:fe:f2:88:fc:2b:6a:50:c0:45:5b:20: 14:eb:ab:4d:8f:42:86:a2:33:67:6b:66:cc:7c:e5:0b:f6:b9: 91:90:59:7a:bd:9c:0a:ad:1c:ab:a2:6f:c6:f4:8d:82:eb:36: 48:20:af:9a:d6:6f:84:cd:a4:0a:82:4d:10:9f:36:f7:88:bf: 3e:cd:58:41:91:58:32:88:e2:1b:d9:95:fa:45:01:e6:bc:75: 0c:b4:69:80:2f:c0:b3:aa:3c:5f:34:c3:c7:4f:ea:9f:82:47: 41:88:41:7e:08:27:bb:e4:ab:67:77:f8:83:e9:df:da:8a:c4: 3e:3d:5c:11:52:2e:d3:47:c7:44:ae:b3:62:7b:de:bb:7d:ed: cf:6c:aa:82:fa:06:9b:53:70:59:1a:db:c5:be:ba:c0:cc:1f: 63:2e:c4:9a:ee:8e:82:88:90:fe:52:68:9a:b7:f4:57:3e:b0: 36:b7:83:3e:f6:3d:cd:f7:19:8c:ab:5a:37:dd:4b:9d:6f:59: c9:d8:43:06:9e:d4:4d:9b:b8:45:dd:a1:ef:5f:12:14:94:b7: 02:d1:b3:0b -----BEGIN CERTIFICATE----- MIIFUTCCBDmgAwIBAgIUKbTITCypyIukqHF7XFaq/31Moa0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkEyRkI0REIwQUE0RDAwNjk1ODMxNjg3MkU0NjdCNTU0 RTBGRDBCRTAeFw0yNjA2MjAwNjU1MDVaFw0yNzA2MTkwNzAwMDVaMDMxMTAvBgNV BAMTKDJERENEMUVGOEIwREU0MzQ0Q0FEOUQ4NUNERkQwNjU0MkIwNTIwNzYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDH4SRVrZgCD6o//ZvSjcztl03y yzFT7m2G7WrWERDzIfNph4wxUCYZaTBRuqjN7mx6F2HpPnPo7WQaoBNVsjJo3XTz I62ZuVA2zwD5QAMgllkzjcupOrgpPXVLU0VfCIYl0eOOBG+juK/gg2gVUC/LsFUl fGH4lr7Vf7pBS48xyVzLfKSEopLGCM6IYyjit2lkDef7BloRWrbaom+sJH/B5+Sd 0wpNLKcaK9Yt9R5BBYUGbCe2Biyg/xNvNPDk9o1NwJxpKqKCJsm0Nx4NgLkUhqGQ i2PLwaYWBZeKi71PBDJyXiXnyKYmJ3VPbjFf7eCvIHDZRtr3pieTs3zT23zLAgMB AAGjggJbMIICVzAdBgNVHQ4EFgQULdzR74sN5DRMrZ2Fzf0GVCsFIHYwHwYDVR0j BBgwFoAUKi+02wqk0AaVgxaHLkZ7VU4P0L4wDgYDVR0PAQH/BAQDAgeAMIGIBgNV HR8EgYAwfjB8oHqgeIZ2cnN5bmM6Ly9yLm1hZ2VsbGFuLmlweG8uY29tL3JlcG8v YTZmMjE0N2EtZGU4YS00NDQwLWJjYTItNmQ4YjdjODc2ZmRhLTAvMC8yQTJGQjRE QjBBQTREMDA2OTU4MzE2ODcyRTQ2N0I1NTRFMEZEMEJFLmNybDCBngYIKwYBBQUH AQEEgZEwgY4wgYsGCCsGAQUFBzAChn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5y aXBlLm5ldC9yZXBvc2l0b3J5LzlkZjMzYTU3LTdlNGYtNDg0NC04NGUyLWI3MTUz YjU1MTFiNC8wLzJBMkZCNERCMEFBNEQwMDY5NTgzMTY4NzJFNDY3QjU1NEUwRkQw QkUuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCBigYIKwYBBQUHMAuGfnJzeW5jOi8v ci5tYWdlbGxhbi5pcHhvLmNvbS9yZXBvL2E2ZjIxNDdhLWRlOGEtNDQ0MC1iY2Ey LTZkOGI3Yzg3NmZkYS0wLzAvMzMzNzJlMzIzMzMwMmUzNTMwMmUzMDJmMzIzNDJk MzIzNDIwM2QzZTIwMzgzMzM0LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4C MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAJeYyMA0GCSqGSIb3DQEBCwUA A4IBAQCi7qzh8g3KovoX0BkHSC048s6kLPP36lxSQIBJ8tEo8L0dUj5n3RW3klz5 /vKI/CtqUMBFWyAU66tNj0KGojNna2bMfOUL9rmRkFl6vZwKrRyrom/G9I2C6zZI IK+a1m+EzaQKgk0Qnzb3iL8+zVhBkVgyiOIb2ZX6RQHmvHUMtGmAL8CzqjxfNMPH T+qfgkdBiEF+CCe75Ktnd/iD6d/aisQ+PVwRUi7TR8dErrNie967fe3PbKqC+gab U3BZGtvFvrrAzB9jLsSa7o6CiJD+Umiat/RXPrA2t4M+9j3N9xmMq1o33Uudb1nJ 2EMGntRNm7hF3aHvXxIUlLcC0bML -----END CERTIFICATE-----Generated at Mon Jun 29 10:00:57 2026 by rpki-client