$ rpki-client -vvvf r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/33372e3233302e35352e302f32342d3234203d3e203235313938.roa File: 33372e3233302e35352e302f32342d3234203d3e203235313938.roa (raw, json) Hash identifier: 6v5UIVTlNmvosM06uThnMgMBRTCIUO5zbXDHF9cwLBk= Subject key identifier: EE:01:31:63:48:1D:AF:8F:FA:51:8A:0A:5F:BA:14:71:2C:79:9D:F8 Certificate issuer: /CN=2A2FB4DB0AA4D006958316872E467B554E0FD0BE Certificate serial: 40114F3524C787B0530A1B4349C19EC111E195A0 Authority key identifier: 2A:2F:B4:DB:0A:A4:D0:06:95:83:16:87:2E:46:7B:55:4E:0F:D0:BE Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.cer Subject info access: rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/33372e3233302e35352e302f32342d3234203d3e203235313938.roa Signing time: Sun 30 Aug 2026 00:03:45 +0000 ROA not before: Sat 29 Aug 2026 23:58:45 +0000 ROA not after: Sun 29 Aug 2027 00:03:45 +0000 asID: 25198 IP address blocks: 37.230.55.0/24 maxlen: 24 Validation: OK Signature path: rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.crl rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.mft rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.cer rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.crl rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft rsync://rpki.ripe.net/repository/DEFAULT/RQLmPOAcrSOaw5e8K7Xmw0fc7uo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 03 Sep 2026 18:02:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 40:11:4f:35:24:c7:87:b0:53:0a:1b:43:49:c1:9e:c1:11:e1:95:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2A2FB4DB0AA4D006958316872E467B554E0FD0BE Validity Not Before: Aug 29 23:58:45 2026 GMT Not After : Aug 29 00:03:45 2027 GMT Subject: CN=EE013163481DAF8FFA518A0A5FBA14712C799DF8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:06:6d:1f:34:71:5b:0a:7c:23:5b:ba:29:88: e0:d3:d9:8c:0b:26:c7:6d:b3:ae:a1:02:0b:6e:0e: ae:8c:0f:3b:c5:5f:98:e2:54:21:2f:78:2a:82:15: 9f:ed:45:3c:4a:8f:8e:15:e2:9e:81:5a:2c:31:25: 0c:88:c5:ba:5f:28:7f:95:97:25:72:38:79:f7:77: 95:dc:82:33:1b:55:36:80:77:d7:96:fe:3f:b2:36: 21:bd:bb:c2:d3:1a:e4:c9:44:be:7d:3b:8a:ba:e1: cb:1a:1a:ac:f5:f3:71:54:d3:17:a3:a3:3a:de:c3: 03:3d:75:bc:d1:42:96:c8:33:a4:47:e3:82:d9:08: 74:04:98:c5:53:c1:5e:1b:59:3d:53:24:f3:c9:da: f4:4a:0a:04:50:1c:bc:dd:7e:7f:35:f0:21:65:2c: b4:fa:18:7c:e1:5e:0d:fb:41:1e:77:03:68:c4:17: 8c:9f:0e:ca:ea:88:b0:28:42:c6:75:b9:12:96:2b: 19:8d:78:33:74:97:7c:cb:1d:38:23:a9:77:dc:54: 81:85:d1:1c:d7:57:16:1b:1a:21:1d:5c:b2:53:25: 1b:9b:7b:f8:5b:12:27:a5:e0:6c:d2:4b:09:13:3f: 58:5c:3e:c1:51:cf:76:10:32:9f:38:61:a9:c8:e5: 87:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:01:31:63:48:1D:AF:8F:FA:51:8A:0A:5F:BA:14:71:2C:79:9D:F8 X509v3 Authority Key Identifier: keyid:2A:2F:B4:DB:0A:A4:D0:06:95:83:16:87:2E:46:7B:55:4E:0F:D0:BE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.cer Subject Information Access: Signed Object - URI:rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/33372e3233302e35352e302f32342d3234203d3e203235313938.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 37.230.55.0/24 Signature Algorithm: sha256WithRSAEncryption 0b:9f:0b:48:d1:3e:f4:12:6b:0e:4a:f1:8e:2f:4a:24:1c:7d: 49:da:78:24:69:58:2b:ee:6d:5d:02:90:a8:7a:dd:54:c7:2c: 47:31:3b:17:98:51:35:f5:7f:6b:78:8c:a3:5f:0e:e2:9f:a3: 90:09:39:2a:ea:78:24:83:0b:22:98:76:ca:51:4b:a7:e5:b6: 81:3a:5c:fc:58:e4:1d:13:22:35:08:12:8d:f9:e6:93:46:84: d2:13:8e:85:f9:46:ca:28:98:ee:6b:d7:5e:f3:65:dc:ab:40: 7b:50:73:13:95:32:05:12:a1:96:2c:b1:b2:02:67:a1:5d:5a: 48:7e:94:43:a1:e9:25:e3:0a:4e:62:40:33:d7:fd:76:6b:58: 35:81:75:0b:1f:6b:0f:31:98:8a:5a:d5:14:91:50:95:c7:76: 89:cf:1e:22:37:e2:98:5d:44:8a:2c:29:d7:9d:84:1c:b7:b5: bd:5c:7f:b2:54:d2:47:d6:4b:8f:2e:dd:74:79:57:8b:6c:6e: c6:47:40:2e:45:7b:ae:43:4d:8c:60:e5:5f:5b:0b:2a:04:3c: 74:3e:7f:ec:bb:69:a0:ff:9a:79:81:3b:2e:35:bf:e7:ac:8c: 4d:69:c5:75:ac:cd:ab:93:b1:10:7a:d3:7a:ba:9f:6a:91:fe: 41:d6:c3:2d -----BEGIN CERTIFICATE----- MIIFVjCCBD6gAwIBAgIUQBFPNSTHh7BTChtDScGewRHhlaAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkEyRkI0REIwQUE0RDAwNjk1ODMxNjg3MkU0NjdCNTU0 RTBGRDBCRTAeFw0yNjA4MjkyMzU4NDVaFw0yNzA4MjkwMDAzNDVaMDMxMTAvBgNV BAMTKEVFMDEzMTYzNDgxREFGOEZGQTUxOEEwQTVGQkExNDcxMkM3OTlERjgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/Bm0fNHFbCnwjW7opiODT2YwL Jsdts66hAgtuDq6MDzvFX5jiVCEveCqCFZ/tRTxKj44V4p6BWiwxJQyIxbpfKH+V lyVyOHn3d5XcgjMbVTaAd9eW/j+yNiG9u8LTGuTJRL59O4q64csaGqz183FU0xej ozrewwM9dbzRQpbIM6RH44LZCHQEmMVTwV4bWT1TJPPJ2vRKCgRQHLzdfn818CFl LLT6GHzhXg37QR53A2jEF4yfDsrqiLAoQsZ1uRKWKxmNeDN0l3zLHTgjqXfcVIGF 0RzXVxYbGiEdXLJTJRube/hbEiel4GzSSwkTP1hcPsFRz3YQMp84YanI5YeFAgMB AAGjggJgMIICXDAdBgNVHQ4EFgQU7gExY0gdr4/6UYoKX7oUcSx5nfgwHwYDVR0j BBgwFoAUKi+02wqk0AaVgxaHLkZ7VU4P0L4wDgYDVR0PAQH/BAQDAgeAMIGIBgNV HR8EgYAwfjB8oHqgeIZ2cnN5bmM6Ly9yLm1hZ2VsbGFuLmlweG8uY29tL3JlcG8v YTZmMjE0N2EtZGU4YS00NDQwLWJjYTItNmQ4YjdjODc2ZmRhLTAvMC8yQTJGQjRE QjBBQTREMDA2OTU4MzE2ODcyRTQ2N0I1NTRFMEZEMEJFLmNybDCBngYIKwYBBQUH AQEEgZEwgY4wgYsGCCsGAQUFBzAChn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5y aXBlLm5ldC9yZXBvc2l0b3J5LzlkZjMzYTU3LTdlNGYtNDg0NC04NGUyLWI3MTUz YjU1MTFiNC8wLzJBMkZCNERCMEFBNEQwMDY5NTgzMTY4NzJFNDY3QjU1NEUwRkQw QkUuY2VyMIGiBggrBgEFBQcBCwSBlTCBkjCBjwYIKwYBBQUHMAuGgYJyc3luYzov L3IubWFnZWxsYW4uaXB4by5jb20vcmVwby9hNmYyMTQ3YS1kZThhLTQ0NDAtYmNh Mi02ZDhiN2M4NzZmZGEtMC8wLzMzMzcyZTMyMzMzMDJlMzUzNTJlMzAyZjMyMzQy ZDMyMzQyMDNkM2UyMDMyMzUzMTM5Mzgucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYB BQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAAl5jcwDQYJKoZIhvcN AQELBQADggEBAAufC0jRPvQSaw5K8Y4vSiQcfUnaeCRpWCvubV0CkKh63VTHLEcx OxeYUTX1f2t4jKNfDuKfo5AJOSrqeCSDCyKYdspRS6fltoE6XPxY5B0TIjUIEo35 5pNGhNITjoX5RsoomO5r117zZdyrQHtQcxOVMgUSoZYssbICZ6FdWkh+lEOh6SXj Ck5iQDPX/XZrWDWBdQsfaw8xmIpa1RSRUJXHdonPHiI34phdRIosKdedhBy3tb1c f7JU0kfWS48u3XR5V4tsbsZHQC5Fe65DTYxg5V9bCyoEPHQ+f+y7aaD/mnmBOy41 v+esjE1pxXWszauTsRB603q6n2qR/kHWwy0= -----END CERTIFICATE-----Generated at Thu Sep 3 09:23:36 2026 by rpki-client