$ rpki-client -vvvf r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/33372e3233302e35322e302f32342d3234203d3e203235313938.roa File: 33372e3233302e35322e302f32342d3234203d3e203235313938.roa (raw, json) Hash identifier: 2LVTB51xGNpWgF/ClSy0calCpLjE/B12g0y0PjJ3ST0= Subject key identifier: 9B:11:08:73:FB:3A:30:E3:8B:57:17:4D:A4:C4:59:41:24:6D:6B:66 Certificate issuer: /CN=2A2FB4DB0AA4D006958316872E467B554E0FD0BE Certificate serial: 672A7E651DD33EEC96BCA7B85C5D8AFC4A5E8441 Authority key identifier: 2A:2F:B4:DB:0A:A4:D0:06:95:83:16:87:2E:46:7B:55:4E:0F:D0:BE Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.cer Subject info access: rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/33372e3233302e35322e302f32342d3234203d3e203235313938.roa Signing time: Thu 06 Aug 2026 14:45:27 +0000 ROA not before: Thu 06 Aug 2026 14:40:27 +0000 ROA not after: Thu 05 Aug 2027 14:45:27 +0000 asID: 25198 IP address blocks: 37.230.52.0/24 maxlen: 24 Validation: OK Signature path: rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.crl rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.mft rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.cer rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.crl rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft rsync://rpki.ripe.net/repository/DEFAULT/RQLmPOAcrSOaw5e8K7Xmw0fc7uo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 25 Aug 2026 10:34:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 67:2a:7e:65:1d:d3:3e:ec:96:bc:a7:b8:5c:5d:8a:fc:4a:5e:84:41 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2A2FB4DB0AA4D006958316872E467B554E0FD0BE Validity Not Before: Aug 6 14:40:27 2026 GMT Not After : Aug 5 14:45:27 2027 GMT Subject: CN=9B110873FB3A30E38B57174DA4C45941246D6B66 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:c6:df:64:db:fd:8c:10:de:c0:f3:2d:af:d6: c6:7a:94:16:7a:2d:5f:80:7f:f2:56:be:30:04:d0: 9d:ea:c8:4a:ac:2b:fc:56:82:ef:83:57:54:b0:f9: b6:e3:31:dc:d0:da:7f:bb:18:0e:ba:79:02:44:59: 93:e9:42:c1:28:b6:fb:66:d7:52:bf:7b:68:16:f0: 94:d6:66:60:0a:96:c0:aa:37:4b:e2:d1:94:e5:6a: 47:e9:11:80:e0:ad:30:32:b1:f7:6a:1b:a6:68:69: c5:34:38:e9:4f:f3:c9:bf:de:8d:43:e6:ed:76:97: cc:58:c0:c6:30:24:66:e5:be:dc:4d:2b:5c:b1:b4: 1d:3c:07:08:2f:a7:74:80:5f:7c:69:44:10:bf:b1: 0b:e2:5a:d9:36:16:e6:83:d3:df:15:4d:7d:49:24: 72:40:2e:de:ab:42:79:4e:b4:df:af:83:e5:66:8f: e2:fa:f4:b0:2c:d0:42:64:15:c5:70:06:0a:0d:25: 95:1e:17:5c:ec:2b:0c:f3:bd:2c:c3:bc:52:60:90: 17:9b:68:f9:ad:cc:21:15:41:59:ea:02:b3:de:d7: 8a:ae:72:0b:b7:2d:ac:6a:dc:0a:8e:7f:e9:68:96: 04:d7:aa:4c:3d:5f:45:ea:a8:b7:63:84:8d:80:46: c5:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:11:08:73:FB:3A:30:E3:8B:57:17:4D:A4:C4:59:41:24:6D:6B:66 X509v3 Authority Key Identifier: keyid:2A:2F:B4:DB:0A:A4:D0:06:95:83:16:87:2E:46:7B:55:4E:0F:D0:BE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.cer Subject Information Access: Signed Object - URI:rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/33372e3233302e35322e302f32342d3234203d3e203235313938.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 37.230.52.0/24 Signature Algorithm: sha256WithRSAEncryption 28:8d:5a:64:d7:4b:8e:d1:56:ef:cf:db:4c:a4:aa:00:1c:a5: b3:b5:af:c3:de:b7:ec:fa:6f:01:da:10:73:04:a7:c6:13:f6: 8c:e5:bf:d5:7f:5f:c5:10:23:3a:3b:ce:64:95:fc:21:20:6f: df:5a:dd:4a:b4:9a:9c:e0:5b:c2:39:9c:6c:3e:9f:60:30:3c: 3c:67:29:ac:9c:20:0d:f4:ad:64:3f:66:c4:81:2c:72:fe:01: 99:37:7e:5f:d1:27:c5:b9:71:a4:b3:9b:e7:b1:69:eb:7e:cb: 95:ec:af:58:2a:6d:92:29:96:26:b0:c2:68:60:91:34:a2:94: 56:19:c7:44:c7:46:5b:01:90:06:fe:e4:70:27:10:ec:15:6a: c6:91:af:74:ec:56:2d:f8:93:3c:c3:e5:11:3c:12:ba:28:ea: fc:47:a5:8b:57:f5:80:a2:4b:06:57:ee:72:78:aa:d5:60:a1: 17:c2:6b:a3:de:3e:15:da:fc:75:be:fc:f1:e0:25:23:52:ef: 57:2c:96:70:09:94:63:e7:b8:a8:cb:34:da:31:91:d2:a3:8a: 2e:4a:3d:1f:7a:6a:cb:2c:ed:3d:78:b9:45:5c:73:92:1c:48: a5:61:b2:e0:9b:00:12:40:6b:d2:0a:42:a9:2f:54:7a:32:48: 68:4a:be:1d -----BEGIN CERTIFICATE----- MIIFVjCCBD6gAwIBAgIUZyp+ZR3TPuyWvKe4XF2K/EpehEEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkEyRkI0REIwQUE0RDAwNjk1ODMxNjg3MkU0NjdCNTU0 RTBGRDBCRTAeFw0yNjA4MDYxNDQwMjdaFw0yNzA4MDUxNDQ1MjdaMDMxMTAvBgNV BAMTKDlCMTEwODczRkIzQTMwRTM4QjU3MTc0REE0QzQ1OTQxMjQ2RDZCNjYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDExt9k2/2MEN7A8y2v1sZ6lBZ6 LV+Af/JWvjAE0J3qyEqsK/xWgu+DV1Sw+bbjMdzQ2n+7GA66eQJEWZPpQsEotvtm 11K/e2gW8JTWZmAKlsCqN0vi0ZTlakfpEYDgrTAysfdqG6ZoacU0OOlP88m/3o1D 5u12l8xYwMYwJGblvtxNK1yxtB08Bwgvp3SAX3xpRBC/sQviWtk2FuaD098VTX1J JHJALt6rQnlOtN+vg+Vmj+L69LAs0EJkFcVwBgoNJZUeF1zsKwzzvSzDvFJgkBeb aPmtzCEVQVnqArPe14qucgu3Laxq3AqOf+lolgTXqkw9X0XqqLdjhI2ARsXvAgMB AAGjggJgMIICXDAdBgNVHQ4EFgQUmxEIc/s6MOOLVxdNpMRZQSRta2YwHwYDVR0j BBgwFoAUKi+02wqk0AaVgxaHLkZ7VU4P0L4wDgYDVR0PAQH/BAQDAgeAMIGIBgNV HR8EgYAwfjB8oHqgeIZ2cnN5bmM6Ly9yLm1hZ2VsbGFuLmlweG8uY29tL3JlcG8v YTZmMjE0N2EtZGU4YS00NDQwLWJjYTItNmQ4YjdjODc2ZmRhLTAvMC8yQTJGQjRE QjBBQTREMDA2OTU4MzE2ODcyRTQ2N0I1NTRFMEZEMEJFLmNybDCBngYIKwYBBQUH AQEEgZEwgY4wgYsGCCsGAQUFBzAChn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5y aXBlLm5ldC9yZXBvc2l0b3J5LzlkZjMzYTU3LTdlNGYtNDg0NC04NGUyLWI3MTUz YjU1MTFiNC8wLzJBMkZCNERCMEFBNEQwMDY5NTgzMTY4NzJFNDY3QjU1NEUwRkQw QkUuY2VyMIGiBggrBgEFBQcBCwSBlTCBkjCBjwYIKwYBBQUHMAuGgYJyc3luYzov L3IubWFnZWxsYW4uaXB4by5jb20vcmVwby9hNmYyMTQ3YS1kZThhLTQ0NDAtYmNh Mi02ZDhiN2M4NzZmZGEtMC8wLzMzMzcyZTMyMzMzMDJlMzUzMjJlMzAyZjMyMzQy ZDMyMzQyMDNkM2UyMDMyMzUzMTM5Mzgucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYB BQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAAl5jQwDQYJKoZIhvcN AQELBQADggEBACiNWmTXS47RVu/P20ykqgAcpbO1r8Pet+z6bwHaEHMEp8YT9ozl v9V/X8UQIzo7zmSV/CEgb99a3Uq0mpzgW8I5nGw+n2AwPDxnKaycIA30rWQ/ZsSB LHL+AZk3fl/RJ8W5caSzm+exaet+y5Xsr1gqbZIpliawwmhgkTSilFYZx0THRlsB kAb+5HAnEOwVasaRr3TsVi34kzzD5RE8Eroo6vxHpYtX9YCiSwZX7nJ4qtVgoRfC a6PePhXa/HW+/PHgJSNS71cslnAJlGPnuKjLNNoxkdKjii5KPR96asss7T14uUVc c5IcSKVhsuCbABJAa9IKQqkvVHoySGhKvh0= -----END CERTIFICATE-----Generated at Mon Aug 24 15:35:56 2026 by rpki-client