$ rpki-client -vvvf r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/33372e3233302e36332e302f32342d3234203d3e203536363535.roa File: 33372e3233302e36332e302f32342d3234203d3e203536363535.roa (raw, json) Hash identifier: G4g0ANGUTgm4HCamBq6LHk3rZlwkeeYCbM0e/SRrCfM= Subject key identifier: 0B:A5:07:6D:8D:7F:E8:5C:C5:A7:D2:C0:E2:E4:5D:67:DB:EA:D4:B1 Certificate issuer: /CN=2A2FB4DB0AA4D006958316872E467B554E0FD0BE Certificate serial: 47B43B2BC2A118191FAF6ADD9D86D71DAA36593D Authority key identifier: 2A:2F:B4:DB:0A:A4:D0:06:95:83:16:87:2E:46:7B:55:4E:0F:D0:BE Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.cer Subject info access: rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/33372e3233302e36332e302f32342d3234203d3e203536363535.roa Signing time: Tue 18 Aug 2026 12:11:12 +0000 ROA not before: Tue 18 Aug 2026 12:06:12 +0000 ROA not after: Tue 17 Aug 2027 12:11:12 +0000 asID: 56655 IP address blocks: 37.230.63.0/24 maxlen: 24 Validation: OK Signature path: rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.crl rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.mft rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.cer rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.crl rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft rsync://rpki.ripe.net/repository/DEFAULT/RQLmPOAcrSOaw5e8K7Xmw0fc7uo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 03 Sep 2026 18:02:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 47:b4:3b:2b:c2:a1:18:19:1f:af:6a:dd:9d:86:d7:1d:aa:36:59:3d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2A2FB4DB0AA4D006958316872E467B554E0FD0BE Validity Not Before: Aug 18 12:06:12 2026 GMT Not After : Aug 17 12:11:12 2027 GMT Subject: CN=0BA5076D8D7FE85CC5A7D2C0E2E45D67DBEAD4B1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:81:6e:01:d7:78:a6:e8:6a:76:77:e1:83:3e: cd:6b:fa:b6:36:42:86:aa:7f:b8:46:1f:23:60:11: c8:82:ff:aa:28:df:d0:0b:87:eb:f0:e5:39:7a:e6: 8c:5e:8a:0a:99:bb:0f:ac:5d:f9:60:af:ae:dd:53: ff:8a:b7:a7:82:3b:23:12:31:bb:7a:69:69:23:d4: ff:17:8f:8f:d0:2d:7a:b4:2b:ae:eb:2d:04:55:9e: 9e:67:c7:e9:19:55:44:0a:68:cf:36:6d:69:ef:7d: e1:4f:20:7b:df:30:f7:3d:9f:6a:70:50:2d:3e:39: 3d:84:ba:df:23:3d:00:51:20:8d:8b:89:03:97:d0: a0:2c:ed:b6:54:61:a1:27:72:c1:85:e8:fc:d4:47: f7:8e:47:fb:f4:c2:de:fd:77:d0:18:7e:9f:7c:75: b7:1f:c7:6b:ef:2c:cb:cc:2d:e3:da:8d:37:65:97: 30:6d:f2:93:9b:d2:2c:14:ac:22:c8:76:de:e5:57: 87:3b:7d:bc:dc:6e:55:2f:50:41:1f:0c:82:89:a0: e9:d5:93:27:fa:86:44:dc:1a:00:79:3f:ff:64:e2: b6:ce:f7:51:93:0a:4f:94:49:80:dd:13:f0:04:15: c0:56:73:67:3a:e8:9d:16:39:6c:f0:88:78:f9:43: 08:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:A5:07:6D:8D:7F:E8:5C:C5:A7:D2:C0:E2:E4:5D:67:DB:EA:D4:B1 X509v3 Authority Key Identifier: keyid:2A:2F:B4:DB:0A:A4:D0:06:95:83:16:87:2E:46:7B:55:4E:0F:D0:BE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.cer Subject Information Access: Signed Object - URI:rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/33372e3233302e36332e302f32342d3234203d3e203536363535.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 37.230.63.0/24 Signature Algorithm: sha256WithRSAEncryption 63:f0:ec:a2:41:6f:45:02:25:75:a1:9a:03:ec:ed:94:ca:5f: ac:32:07:3e:79:cf:ef:2a:3c:10:82:ca:fd:ba:9a:19:91:6f: 43:ed:bb:31:13:60:13:84:79:63:b9:c0:67:e9:b2:90:f5:a2: 92:e2:29:92:f5:09:83:34:06:63:b5:52:6c:e3:3d:26:bf:f4: 17:23:cf:77:59:85:f7:ee:40:62:7e:5e:8e:a3:f4:86:10:01: 70:7c:35:90:f8:8f:d0:b4:ee:77:97:eb:14:de:ed:95:86:44: 78:8f:5b:5b:b5:ee:56:e2:0a:4d:08:a1:60:45:ea:a2:26:86: 00:90:df:eb:fd:8f:f8:d0:be:93:bc:94:46:2e:f5:f3:4e:5e: 09:f1:c4:b6:23:79:04:25:a4:0a:9a:bc:89:f7:60:62:15:76: cc:07:0c:f5:b7:ea:8a:65:09:f5:d4:04:10:d0:31:9e:99:73: 22:25:ed:e8:04:a2:18:c2:33:f2:32:a8:e9:54:be:cd:6c:8e: 4d:5f:31:51:0c:2f:fc:43:a0:8d:c0:29:9e:0c:7c:a8:a9:3d: 3b:b4:2d:54:51:c1:94:cd:77:4e:3f:0d:de:86:00:97:ed:c0: 1d:6d:41:23:c7:9b:f5:96:be:cc:63:04:85:40:b1:5c:54:e3: 42:d4:a1:49 -----BEGIN CERTIFICATE----- MIIFVjCCBD6gAwIBAgIUR7Q7K8KhGBkfr2rdnYbXHao2WT0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkEyRkI0REIwQUE0RDAwNjk1ODMxNjg3MkU0NjdCNTU0 RTBGRDBCRTAeFw0yNjA4MTgxMjA2MTJaFw0yNzA4MTcxMjExMTJaMDMxMTAvBgNV BAMTKDBCQTUwNzZEOEQ3RkU4NUNDNUE3RDJDMEUyRTQ1RDY3REJFQUQ0QjEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCkgW4B13im6Gp2d+GDPs1r+rY2 Qoaqf7hGHyNgEciC/6oo39ALh+vw5Tl65oxeigqZuw+sXflgr67dU/+Kt6eCOyMS Mbt6aWkj1P8Xj4/QLXq0K67rLQRVnp5nx+kZVUQKaM82bWnvfeFPIHvfMPc9n2pw UC0+OT2Eut8jPQBRII2LiQOX0KAs7bZUYaEncsGF6PzUR/eOR/v0wt79d9AYfp98 dbcfx2vvLMvMLePajTdllzBt8pOb0iwUrCLIdt7lV4c7fbzcblUvUEEfDIKJoOnV kyf6hkTcGgB5P/9k4rbO91GTCk+USYDdE/AEFcBWc2c66J0WOWzwiHj5QwhBAgMB AAGjggJgMIICXDAdBgNVHQ4EFgQUC6UHbY1/6FzFp9LA4uRdZ9vq1LEwHwYDVR0j BBgwFoAUKi+02wqk0AaVgxaHLkZ7VU4P0L4wDgYDVR0PAQH/BAQDAgeAMIGIBgNV HR8EgYAwfjB8oHqgeIZ2cnN5bmM6Ly9yLm1hZ2VsbGFuLmlweG8uY29tL3JlcG8v YTZmMjE0N2EtZGU4YS00NDQwLWJjYTItNmQ4YjdjODc2ZmRhLTAvMC8yQTJGQjRE QjBBQTREMDA2OTU4MzE2ODcyRTQ2N0I1NTRFMEZEMEJFLmNybDCBngYIKwYBBQUH AQEEgZEwgY4wgYsGCCsGAQUFBzAChn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5y aXBlLm5ldC9yZXBvc2l0b3J5LzlkZjMzYTU3LTdlNGYtNDg0NC04NGUyLWI3MTUz YjU1MTFiNC8wLzJBMkZCNERCMEFBNEQwMDY5NTgzMTY4NzJFNDY3QjU1NEUwRkQw QkUuY2VyMIGiBggrBgEFBQcBCwSBlTCBkjCBjwYIKwYBBQUHMAuGgYJyc3luYzov L3IubWFnZWxsYW4uaXB4by5jb20vcmVwby9hNmYyMTQ3YS1kZThhLTQ0NDAtYmNh Mi02ZDhiN2M4NzZmZGEtMC8wLzMzMzcyZTMyMzMzMDJlMzYzMzJlMzAyZjMyMzQy ZDMyMzQyMDNkM2UyMDM1MzYzNjM1MzUucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYB BQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAAl5j8wDQYJKoZIhvcN AQELBQADggEBAGPw7KJBb0UCJXWhmgPs7ZTKX6wyBz55z+8qPBCCyv26mhmRb0Pt uzETYBOEeWO5wGfpspD1opLiKZL1CYM0BmO1UmzjPSa/9Bcjz3dZhffuQGJ+Xo6j 9IYQAXB8NZD4j9C07neX6xTe7ZWGRHiPW1u17lbiCk0IoWBF6qImhgCQ3+v9j/jQ vpO8lEYu9fNOXgnxxLYjeQQlpAqavIn3YGIVdswHDPW36oplCfXUBBDQMZ6ZcyIl 7egEohjCM/IyqOlUvs1sjk1fMVEML/xDoI3AKZ4MfKipPTu0LVRRwZTNd04/Dd6G AJftwB1tQSPHm/WWvsxjBIVAsVxU40LUoUk= -----END CERTIFICATE-----Generated at Thu Sep 3 07:56:45 2026 by rpki-client