$ rpki-client -vvvf r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/352e38332e3231362e302f32342d3234203d3e203235313938.roa File: 352e38332e3231362e302f32342d3234203d3e203235313938.roa (raw, json) Hash identifier: uqSXpfVjPUkynHz8E5eF3SFhQ3vOca2BsUksa8tIv/g= Subject key identifier: 54:1E:32:E0:37:8D:59:29:F5:86:67:45:1E:2A:F1:B7:8C:80:AE:43 Certificate issuer: /CN=2A2FB4DB0AA4D006958316872E467B554E0FD0BE Certificate serial: 186EDA974EADC35EBE55A818EF31BD194D815183 Authority key identifier: 2A:2F:B4:DB:0A:A4:D0:06:95:83:16:87:2E:46:7B:55:4E:0F:D0:BE Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.cer Subject info access: rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/352e38332e3231362e302f32342d3234203d3e203235313938.roa Signing time: Thu 06 Aug 2026 14:45:26 +0000 ROA not before: Thu 06 Aug 2026 14:40:26 +0000 ROA not after: Thu 05 Aug 2027 14:45:26 +0000 asID: 25198 IP address blocks: 5.83.216.0/24 maxlen: 24 Validation: OK Signature path: rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.crl rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.mft rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.cer rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.crl rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft rsync://rpki.ripe.net/repository/DEFAULT/RQLmPOAcrSOaw5e8K7Xmw0fc7uo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 24 Aug 2026 15:37:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 18:6e:da:97:4e:ad:c3:5e:be:55:a8:18:ef:31:bd:19:4d:81:51:83 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2A2FB4DB0AA4D006958316872E467B554E0FD0BE Validity Not Before: Aug 6 14:40:26 2026 GMT Not After : Aug 5 14:45:26 2027 GMT Subject: CN=541E32E0378D5929F58667451E2AF1B78C80AE43 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:6c:dc:86:df:b7:99:75:e2:f4:79:a3:74:72: 7d:2a:3a:3f:5d:5a:77:ee:99:87:d9:3a:72:28:3c: 9a:40:60:d1:0e:94:9c:66:75:07:e4:00:98:fa:a4: 77:74:be:50:5a:88:de:c2:ea:bc:6e:38:14:30:7d: a8:48:f0:46:d4:0a:d5:da:49:e0:51:3b:15:45:78: 07:29:03:c5:a4:fe:b6:d7:43:e2:fc:41:06:b2:37: 00:cf:9c:12:dd:27:0a:d6:17:62:c1:9c:df:0b:91: e5:3a:d0:7d:37:3b:34:71:23:f1:e4:69:4c:34:47: 86:96:77:dd:b5:87:c8:cb:55:9c:3d:49:97:c9:85: 68:65:b8:14:95:a9:08:b6:f4:79:5e:0e:e0:79:9a: 1e:d3:c2:f8:53:a6:9a:b5:28:60:14:41:f0:e2:a2: 92:37:b3:19:dc:0c:12:37:60:6f:ee:78:b8:4f:2f: fa:12:ac:79:94:21:a6:9f:48:c7:39:8d:fa:e2:01: d3:e3:1f:0c:53:b1:52:46:87:65:4f:53:68:fb:73: 40:ed:96:56:de:dc:52:18:d4:8c:cd:7c:74:bb:7c: 78:63:25:27:cf:dd:07:f0:b1:07:08:f3:f2:04:c3: 1c:11:30:ce:fc:f3:3f:11:19:e0:b8:ba:ac:16:ca: 87:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:1E:32:E0:37:8D:59:29:F5:86:67:45:1E:2A:F1:B7:8C:80:AE:43 X509v3 Authority Key Identifier: keyid:2A:2F:B4:DB:0A:A4:D0:06:95:83:16:87:2E:46:7B:55:4E:0F:D0:BE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.cer Subject Information Access: Signed Object - URI:rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/352e38332e3231362e302f32342d3234203d3e203235313938.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.83.216.0/24 Signature Algorithm: sha256WithRSAEncryption a3:0c:6d:88:8e:60:99:d1:26:80:b5:55:d5:e8:ce:fb:a7:5d: 42:df:71:a4:c4:b1:f7:c7:29:41:65:d3:f7:e9:fd:c6:c0:9a: 11:93:f5:e5:1a:89:d2:51:b2:d7:19:dc:f4:72:13:16:43:26: e6:50:c4:84:7f:8c:8d:33:09:32:a7:0e:1b:51:21:29:ad:c6: 4b:b3:49:99:cc:f7:1d:6c:2c:31:b4:95:16:a0:df:cd:6c:19: 03:98:0b:b8:27:40:98:61:88:64:b3:d7:da:79:12:b7:5e:62: 56:31:7e:93:a2:44:d7:5d:6d:59:05:9a:fe:6c:fd:f5:a0:f3: 4c:fe:34:71:05:d2:7e:ea:c5:18:cf:59:5b:24:02:64:0f:0d: 5d:e7:e1:d1:28:40:ce:a6:24:22:4f:21:a3:e5:e6:b4:77:7e: 98:b2:b8:8c:d7:4b:74:75:64:5e:bf:fa:8c:75:a9:bc:1b:7f: 6f:17:b8:9e:41:01:d6:5d:10:c0:82:e4:bb:fd:51:e4:40:f5: 1b:6e:c9:b8:b5:cc:ef:3d:87:4f:a3:a4:8d:fb:76:12:03:bd: af:42:f6:92:56:3e:41:3b:d3:ab:e2:20:43:3f:86:30:8d:fc: cc:c9:1c:e9:93:d5:ee:b7:cf:ac:e0:e4:59:0f:da:13:0e:83: 5e:bd:f8:ab -----BEGIN CERTIFICATE----- MIIFVDCCBDygAwIBAgIUGG7al06tw16+VagY7zG9GU2BUYMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkEyRkI0REIwQUE0RDAwNjk1ODMxNjg3MkU0NjdCNTU0 RTBGRDBCRTAeFw0yNjA4MDYxNDQwMjZaFw0yNzA4MDUxNDQ1MjZaMDMxMTAvBgNV BAMTKDU0MUUzMkUwMzc4RDU5MjlGNTg2Njc0NTFFMkFGMUI3OEM4MEFFNDMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCZbNyG37eZdeL0eaN0cn0qOj9d WnfumYfZOnIoPJpAYNEOlJxmdQfkAJj6pHd0vlBaiN7C6rxuOBQwfahI8EbUCtXa SeBROxVFeAcpA8Wk/rbXQ+L8QQayNwDPnBLdJwrWF2LBnN8LkeU60H03OzRxI/Hk aUw0R4aWd921h8jLVZw9SZfJhWhluBSVqQi29HleDuB5mh7TwvhTppq1KGAUQfDi opI3sxncDBI3YG/ueLhPL/oSrHmUIaafSMc5jfriAdPjHwxTsVJGh2VPU2j7c0Dt llbe3FIY1IzNfHS7fHhjJSfP3QfwsQcI8/IEwxwRMM788z8RGeC4uqwWyoe1AgMB AAGjggJeMIICWjAdBgNVHQ4EFgQUVB4y4DeNWSn1hmdFHirxt4yArkMwHwYDVR0j BBgwFoAUKi+02wqk0AaVgxaHLkZ7VU4P0L4wDgYDVR0PAQH/BAQDAgeAMIGIBgNV HR8EgYAwfjB8oHqgeIZ2cnN5bmM6Ly9yLm1hZ2VsbGFuLmlweG8uY29tL3JlcG8v YTZmMjE0N2EtZGU4YS00NDQwLWJjYTItNmQ4YjdjODc2ZmRhLTAvMC8yQTJGQjRE QjBBQTREMDA2OTU4MzE2ODcyRTQ2N0I1NTRFMEZEMEJFLmNybDCBngYIKwYBBQUH AQEEgZEwgY4wgYsGCCsGAQUFBzAChn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5y aXBlLm5ldC9yZXBvc2l0b3J5LzlkZjMzYTU3LTdlNGYtNDg0NC04NGUyLWI3MTUz YjU1MTFiNC8wLzJBMkZCNERCMEFBNEQwMDY5NTgzMTY4NzJFNDY3QjU1NEUwRkQw QkUuY2VyMIGgBggrBgEFBQcBCwSBkzCBkDCBjQYIKwYBBQUHMAuGgYByc3luYzov L3IubWFnZWxsYW4uaXB4by5jb20vcmVwby9hNmYyMTQ3YS1kZThhLTQ0NDAtYmNh Mi02ZDhiN2M4NzZmZGEtMC8wLzM1MmUzODMzMmUzMjMxMzYyZTMwMmYzMjM0MmQz MjM0MjAzZDNlMjAzMjM1MzEzOTM4LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQABVPYMA0GCSqGSIb3DQEB CwUAA4IBAQCjDG2IjmCZ0SaAtVXV6M77p11C33GkxLH3xylBZdP36f3GwJoRk/Xl GonSUbLXGdz0chMWQybmUMSEf4yNMwkypw4bUSEprcZLs0mZzPcdbCwxtJUWoN/N bBkDmAu4J0CYYYhks9faeRK3XmJWMX6TokTXXW1ZBZr+bP31oPNM/jRxBdJ+6sUY z1lbJAJkDw1d5+HRKEDOpiQiTyGj5ea0d36YsriM10t0dWRev/qMdam8G39vF7ie QQHWXRDAguS7/VHkQPUbbsm4tczvPYdPo6SN+3YSA72vQvaSVj5BO9Or4iBDP4Yw jfzMyRzpk9Xut8+s4ORZD9oTDoNevfir -----END CERTIFICATE-----Generated at Mon Aug 24 06:37:06 2026 by rpki-client