$ rpki-client -vvf r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/AS33355.roa File: AS33355.roa (raw, json) Hash identifier: 2PE7fSJO1G7NZoyVWD3PPAejHMciwOp8f6rBRHhLV9c= Subject key identifier: FC:CC:70:62:06:50:56:C5:76:1F:47:66:C6:74:79:62:79:AC:25:35 Certificate issuer: /CN=B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5 Certificate serial: 2DC030DE4EFD6340812464C894419EDAF2383104 Authority key identifier: B3:54:D3:28:CB:BF:D1:EF:3C:D2:92:68:A2:3B:0F:CC:60:E3:A2:C5 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.cer Subject info access: rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/AS33355.roa Signing time: Tue 21 Jul 2026 15:12:53 +0000 ROA not before: Tue 21 Jul 2026 15:07:53 +0000 ROA not after: Tue 20 Jul 2027 15:12:53 +0000 asID: 33355 IP address blocks: 164.37.213.0/24 maxlen: 24 164.37.227.0/24 maxlen: 24 164.37.231.0/24 maxlen: 24 Validation: OK Signature path: rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.crl rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.mft rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.cer rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/D0A516B50426202A424F0EBFCB7D2BD4F744F964.crl rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/D0A516B50426202A424F0EBFCB7D2BD4F744F964.mft rsync://rpki.ripe.net/repository/DEFAULT/0KUWtQQmICpCTw6_y30r1PdE-WQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 24 Jul 2026 22:30:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2d:c0:30:de:4e:fd:63:40:81:24:64:c8:94:41:9e:da:f2:38:31:04 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5 Validity Not Before: Jul 21 15:07:53 2026 GMT Not After : Jul 20 15:12:53 2027 GMT Subject: CN=FCCC7062065056C5761F4766C674796279AC2535 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:54:d6:0f:31:d1:3c:75:a4:f8:a3:4e:cf:8b: 33:93:17:97:85:0f:d9:31:ce:68:e3:6c:38:65:80: 7a:3c:1e:fd:91:1e:5e:78:7c:54:c0:98:9e:c3:74: 56:55:06:7b:2e:5f:26:63:83:28:ab:d3:7c:f1:e4: ef:ac:1d:f1:3b:a8:dc:ce:2d:fe:3a:c9:8d:0c:40: f6:a2:0e:55:25:e3:59:19:58:88:9e:eb:de:fc:6b: 0a:24:69:68:47:da:ea:6f:94:79:d8:09:ed:35:31: 73:b3:67:b9:a7:2b:b5:02:7d:e0:0c:b6:7d:41:f5: 8d:14:d1:5e:41:13:5b:9d:1e:d4:07:b8:de:f3:2b: dc:b8:4d:a3:5e:1f:6b:d1:fe:3d:f8:a7:fc:ad:13: 4b:a9:9b:ba:fd:09:88:1b:e7:84:dc:bb:86:dc:4f: 4d:c2:0c:e6:04:e8:b0:54:4d:f7:17:4e:50:b9:bf: 4d:0b:bb:df:8d:11:b9:6c:57:8a:2d:a5:55:77:6e: c1:4e:7a:ed:e9:39:a0:a8:23:0e:37:5d:ab:b6:f2: f2:cc:20:30:3c:f4:71:2e:fc:54:93:ce:0e:b9:e5: 1d:fb:a8:97:c2:bd:63:7b:a4:f7:a2:29:0c:2c:8b: 12:d9:77:a7:a1:46:a1:2e:b3:7d:08:90:be:00:96: eb:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:CC:70:62:06:50:56:C5:76:1F:47:66:C6:74:79:62:79:AC:25:35 X509v3 Authority Key Identifier: keyid:B3:54:D3:28:CB:BF:D1:EF:3C:D2:92:68:A2:3B:0F:CC:60:E3:A2:C5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.cer Subject Information Access: Signed Object - URI:rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/AS33355.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 164.37.213.0/24 164.37.227.0/24 164.37.231.0/24 Signature Algorithm: sha256WithRSAEncryption 24:b0:bb:89:38:61:ae:66:ed:f0:0f:30:40:bc:32:89:2b:60: 6d:c2:d8:89:13:34:c1:51:13:fe:6e:4c:e0:c9:98:a0:8f:e8: fb:20:1c:f6:00:e8:d4:15:88:7f:04:82:05:f9:cc:19:3f:34: 02:c3:f2:75:38:2b:cd:f4:d9:d2:38:7e:28:d3:22:5d:20:fa: 99:bf:02:92:92:d1:4d:1c:ec:de:a9:05:03:3d:d0:9e:46:0a: 14:94:49:d6:8f:89:4b:45:01:8f:1a:95:b0:b5:be:f1:47:34: b5:22:ec:cd:2b:06:93:56:ce:ee:ca:97:13:1d:b1:72:49:42: 62:06:7e:ca:88:cf:3b:a2:f0:95:bb:b4:62:65:58:2b:e6:87: d1:ea:16:e7:53:1c:c1:63:73:62:8d:85:f9:bf:1c:b9:c9:ad: 24:46:26:d9:d2:75:06:f2:f0:4c:cc:07:b3:b5:8b:54:96:a1: b3:1b:92:33:4b:c7:e0:b6:f5:65:f4:77:fa:9c:e0:5f:91:25: 52:f2:19:fa:04:c3:5f:5b:e9:7f:b2:43:d0:3e:90:fa:21:4e: 03:a9:50:57:e1:5c:9b:55:da:9a:85:2b:82:79:8b:ff:2c:12: 79:30:e8:ce:b2:9f:83:bb:f0:bc:76:d2:34:20:b0:8b:c4:3a: 3b:73:6d:0b -----BEGIN CERTIFICATE----- MIIFMDCCBBigAwIBAgIULcAw3k79Y0CBJGTIlEGe2vI4MQQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjM1NEQzMjhDQkJGRDFFRjNDRDI5MjY4QTIzQjBGQ0M2 MEUzQTJDNTAeFw0yNjA3MjExNTA3NTNaFw0yNzA3MjAxNTEyNTNaMDMxMTAvBgNV BAMTKEZDQ0M3MDYyMDY1MDU2QzU3NjFGNDc2NkM2NzQ3OTYyNzlBQzI1MzUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDPVNYPMdE8daT4o07PizOTF5eF D9kxzmjjbDhlgHo8Hv2RHl54fFTAmJ7DdFZVBnsuXyZjgyir03zx5O+sHfE7qNzO Lf46yY0MQPaiDlUl41kZWIie6978awokaWhH2upvlHnYCe01MXOzZ7mnK7UCfeAM tn1B9Y0U0V5BE1udHtQHuN7zK9y4TaNeH2vR/j34p/ytE0upm7r9CYgb54Tcu4bc T03CDOYE6LBUTfcXTlC5v00Lu9+NEblsV4otpVV3bsFOeu3pOaCoIw43Xau28vLM IDA89HEu/FSTzg655R37qJfCvWN7pPeiKQwsixLZd6ehRqEus30IkL4AlutvAgMB AAGjggI6MIICNjAdBgNVHQ4EFgQU/MxwYgZQVsV2H0dmxnR5YnmsJTUwHwYDVR0j BBgwFoAUs1TTKMu/0e880pJoojsPzGDjosUwDgYDVR0PAQH/BAQDAgeAMIGIBgNV HR8EgYAwfjB8oHqgeIZ2cnN5bmM6Ly9yLm1hZ2VsbGFuLmlweG8uY29tL3JlcG8v YTAzNzViMzktZjk0OS00Y2I1LWI1MTktZjk0MDA4YjE2NTRjLTAvMC9CMzU0RDMy OENCQkZEMUVGM0NEMjkyNjhBMjNCMEZDQzYwRTNBMkM1LmNybDCBngYIKwYBBQUH AQEEgZEwgY4wgYsGCCsGAQUFBzAChn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5y aXBlLm5ldC9yZXBvc2l0b3J5LzYxNzA4YTZiLTZjM2EtNDBhMC1hMzAyLTU5NWVj YzE3ODQ4Yy8wL0IzNTREMzI4Q0JCRkQxRUYzQ0QyOTI2OEEyM0IwRkNDNjBFM0Ey QzUuY2VyMHEGCCsGAQUFBwELBGUwYzBhBggrBgEFBQcwC4ZVcnN5bmM6Ly9yLm1h Z2VsbGFuLmlweG8uY29tL3JlcG8vYTAzNzViMzktZjk0OS00Y2I1LWI1MTktZjk0 MDA4YjE2NTRjLTAvMC9BUzMzMzU1LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQApCXVAwQApCXjAwQApCXn MA0GCSqGSIb3DQEBCwUAA4IBAQAksLuJOGGuZu3wDzBAvDKJK2BtwtiJEzTBURP+ bkzgyZigj+j7IBz2AOjUFYh/BIIF+cwZPzQCw/J1OCvN9NnSOH4o0yJdIPqZvwKS ktFNHOzeqQUDPdCeRgoUlEnWj4lLRQGPGpWwtb7xRzS1IuzNKwaTVs7uypcTHbFy SUJiBn7KiM87ovCVu7RiZVgr5ofR6hbnUxzBY3NijYX5vxy5ya0kRibZ0nUG8vBM zAeztYtUlqGzG5IzS8fgtvVl9Hf6nOBfkSVS8hn6BMNfW+l/skPQPpD6IU4DqVBX 4VybVdqahSuCeYv/LBJ5MOjOsp+Du/C8dtI0ILCLxDo7c20L -----END CERTIFICATE-----Generated at Fri Jul 24 09:37:05 2026 by rpki-client