$ rpki-client -vvvf r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/352e38332e3232332e302f32342d3234203d3e20313938353636.roa File: 352e38332e3232332e302f32342d3234203d3e20313938353636.roa (raw, json) Hash identifier: 0ncalWyngPSSynF2sCbAyY4d3qWTX0QiitnYpIMRCgA= Subject key identifier: 11:84:0B:FB:79:7A:E7:03:F9:EB:91:FB:1F:29:2F:63:B4:05:F4:AC Certificate issuer: /CN=2A2FB4DB0AA4D006958316872E467B554E0FD0BE Certificate serial: 1A06AE3FA7D881FF4940097536740942CBE0969F Authority key identifier: 2A:2F:B4:DB:0A:A4:D0:06:95:83:16:87:2E:46:7B:55:4E:0F:D0:BE Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.cer Subject info access: rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/352e38332e3232332e302f32342d3234203d3e20313938353636.roa Signing time: Mon 17 Aug 2026 21:11:38 +0000 ROA not before: Mon 17 Aug 2026 21:06:38 +0000 ROA not after: Mon 16 Aug 2027 21:11:38 +0000 asID: 198566 IP address blocks: 5.83.223.0/24 maxlen: 24 Validation: OK Signature path: rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.crl rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.mft rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.cer rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.crl rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft rsync://rpki.ripe.net/repository/DEFAULT/RQLmPOAcrSOaw5e8K7Xmw0fc7uo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 03 Sep 2026 18:02:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1a:06:ae:3f:a7:d8:81:ff:49:40:09:75:36:74:09:42:cb:e0:96:9f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2A2FB4DB0AA4D006958316872E467B554E0FD0BE Validity Not Before: Aug 17 21:06:38 2026 GMT Not After : Aug 16 21:11:38 2027 GMT Subject: CN=11840BFB797AE703F9EB91FB1F292F63B405F4AC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:1a:6b:04:2b:e9:9f:1e:f0:9b:90:53:e6:06: e5:7e:c3:4e:37:aa:5f:c0:8b:20:d7:f5:bc:7d:99: f2:02:47:42:6d:93:37:4d:9a:d9:88:72:81:b1:5c: b3:af:3f:98:90:0c:a1:87:bd:0f:a3:c4:f4:e8:2e: 3e:85:b6:93:15:86:e2:62:4a:c5:1c:f2:8f:b6:98: 33:3c:80:78:a8:4e:12:ce:07:bb:dd:4a:5a:75:ef: 57:ac:f5:fc:96:a8:f5:19:d0:7f:fb:54:2e:11:5a: b4:cd:c1:ee:ad:ab:b7:1a:7e:2d:c2:01:23:dd:20: cc:9d:10:91:cb:3c:d0:fd:6a:3c:68:0c:df:bd:cc: 32:81:83:cf:da:95:4b:66:83:4c:68:32:9d:39:b5: 03:b2:39:51:01:96:59:11:66:01:b9:a9:01:2e:3b: 13:f6:8e:2c:9a:e0:20:c6:20:53:54:44:c8:2d:f4: 0c:db:12:d2:9c:11:ed:45:aa:f4:df:40:60:ff:ff: ae:39:cb:5b:fd:bb:26:95:a5:75:40:51:e6:ac:03: f5:46:61:2f:47:c9:10:dd:28:58:be:79:08:7e:43: fb:ee:ba:ec:d0:df:17:f1:14:93:f2:24:47:15:8b: 5a:5e:50:cb:e5:4c:c4:68:a8:a1:d7:c1:ea:1c:df: 8f:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:84:0B:FB:79:7A:E7:03:F9:EB:91:FB:1F:29:2F:63:B4:05:F4:AC X509v3 Authority Key Identifier: keyid:2A:2F:B4:DB:0A:A4:D0:06:95:83:16:87:2E:46:7B:55:4E:0F:D0:BE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.cer Subject Information Access: Signed Object - URI:rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/352e38332e3232332e302f32342d3234203d3e20313938353636.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.83.223.0/24 Signature Algorithm: sha256WithRSAEncryption 48:61:38:a2:dc:50:6d:24:e4:35:69:6e:b9:25:41:a7:af:19: 29:cd:43:58:46:69:6c:98:29:05:97:75:f9:f4:d8:86:81:01: ee:d7:22:1a:4e:f8:c8:74:1d:a2:e5:f9:98:3c:41:15:31:83: 3e:82:a0:b6:78:6f:64:bf:30:a2:d7:05:2e:b6:41:82:20:2c: b8:cc:43:ee:2c:7d:c8:aa:ec:67:1f:4e:54:e2:53:3a:ea:74: a3:2f:f4:43:48:42:6e:e3:b7:6e:3e:c9:59:07:27:3d:69:d7: 48:d9:db:75:f0:43:a9:8d:01:36:a8:d4:36:f4:75:57:23:d3: 1e:fe:2b:2a:d2:13:a5:14:08:ee:c6:f3:36:29:f0:19:a5:9e: 23:f4:1e:50:8e:87:dc:39:12:e5:e8:c8:73:97:42:42:c9:18: 10:39:c8:9f:00:63:05:43:fa:e9:71:ca:2b:53:2c:25:44:9b: fb:90:bb:33:5c:8f:07:b3:bd:cb:e1:e5:5c:7f:89:40:8c:63: 04:bb:dd:90:48:b2:89:65:81:83:f9:3c:30:fb:9f:f7:7e:e1: 30:ed:af:84:9a:c6:8c:8b:f1:9d:27:e3:b3:ee:bd:ff:1c:c6: a6:d7:b9:b0:4a:61:95:b0:60:bf:90:11:08:6e:a0:c7:cf:54: 7a:f9:f0:5e -----BEGIN CERTIFICATE----- MIIFVjCCBD6gAwIBAgIUGgauP6fYgf9JQAl1NnQJQsvglp8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkEyRkI0REIwQUE0RDAwNjk1ODMxNjg3MkU0NjdCNTU0 RTBGRDBCRTAeFw0yNjA4MTcyMTA2MzhaFw0yNzA4MTYyMTExMzhaMDMxMTAvBgNV BAMTKDExODQwQkZCNzk3QUU3MDNGOUVCOTFGQjFGMjkyRjYzQjQwNUY0QUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCdGmsEK+mfHvCbkFPmBuV+w043 ql/AiyDX9bx9mfICR0JtkzdNmtmIcoGxXLOvP5iQDKGHvQ+jxPToLj6FtpMVhuJi SsUc8o+2mDM8gHioThLOB7vdSlp171es9fyWqPUZ0H/7VC4RWrTNwe6tq7cafi3C ASPdIMydEJHLPND9ajxoDN+9zDKBg8/alUtmg0xoMp05tQOyOVEBllkRZgG5qQEu OxP2jiya4CDGIFNURMgt9AzbEtKcEe1FqvTfQGD//645y1v9uyaVpXVAUeasA/VG YS9HyRDdKFi+eQh+Q/vuuuzQ3xfxFJPyJEcVi1peUMvlTMRoqKHXweoc34/DAgMB AAGjggJgMIICXDAdBgNVHQ4EFgQUEYQL+3l65wP565H7HykvY7QF9KwwHwYDVR0j BBgwFoAUKi+02wqk0AaVgxaHLkZ7VU4P0L4wDgYDVR0PAQH/BAQDAgeAMIGIBgNV HR8EgYAwfjB8oHqgeIZ2cnN5bmM6Ly9yLm1hZ2VsbGFuLmlweG8uY29tL3JlcG8v YTZmMjE0N2EtZGU4YS00NDQwLWJjYTItNmQ4YjdjODc2ZmRhLTAvMC8yQTJGQjRE QjBBQTREMDA2OTU4MzE2ODcyRTQ2N0I1NTRFMEZEMEJFLmNybDCBngYIKwYBBQUH AQEEgZEwgY4wgYsGCCsGAQUFBzAChn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5y aXBlLm5ldC9yZXBvc2l0b3J5LzlkZjMzYTU3LTdlNGYtNDg0NC04NGUyLWI3MTUz YjU1MTFiNC8wLzJBMkZCNERCMEFBNEQwMDY5NTgzMTY4NzJFNDY3QjU1NEUwRkQw QkUuY2VyMIGiBggrBgEFBQcBCwSBlTCBkjCBjwYIKwYBBQUHMAuGgYJyc3luYzov L3IubWFnZWxsYW4uaXB4by5jb20vcmVwby9hNmYyMTQ3YS1kZThhLTQ0NDAtYmNh Mi02ZDhiN2M4NzZmZGEtMC8wLzM1MmUzODMzMmUzMjMyMzMyZTMwMmYzMjM0MmQz MjM0MjAzZDNlMjAzMTM5MzgzNTM2MzYucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYB BQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAAFU98wDQYJKoZIhvcN AQELBQADggEBAEhhOKLcUG0k5DVpbrklQaevGSnNQ1hGaWyYKQWXdfn02IaBAe7X IhpO+Mh0HaLl+Zg8QRUxgz6CoLZ4b2S/MKLXBS62QYIgLLjMQ+4sfciq7GcfTlTi UzrqdKMv9ENIQm7jt24+yVkHJz1p10jZ23XwQ6mNATao1Db0dVcj0x7+KyrSE6UU CO7G8zYp8BmlniP0HlCOh9w5EuXoyHOXQkLJGBA5yJ8AYwVD+ulxyitTLCVEm/uQ uzNcjwezvcvh5Vx/iUCMYwS73ZBIsollgYP5PDD7n/d+4TDtr4SaxoyL8Z0n47Pu vf8cxqbXubBKYZWwYL+QEQhuoMfPVHr58F4= -----END CERTIFICATE-----Generated at Thu Sep 3 09:21:36 2026 by rpki-client