$ rpki-client -vvf r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/3130392e3130372e35362e302f32312d3231203d3e20323134313433.roa File: 3130392e3130372e35362e302f32312d3231203d3e20323134313433.roa (raw, json) Hash identifier: qzxNl7yuC0nWKqEU3hmToLySxk1fYYYE+BpPX4u6zEc= Subject key identifier: 32:B6:1D:B8:0D:41:02:3B:A2:99:6A:32:51:88:E9:8A:EF:19:75:F2 Certificate issuer: /CN=2A2FB4DB0AA4D006958316872E467B554E0FD0BE Certificate serial: 05F3DAC2A98101B23C76D7C516836D8E8B5554D1 Authority key identifier: 2A:2F:B4:DB:0A:A4:D0:06:95:83:16:87:2E:46:7B:55:4E:0F:D0:BE Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.cer Subject info access: rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/3130392e3130372e35362e302f32312d3231203d3e20323134313433.roa Signing time: Tue 17 Jun 2025 17:54:46 +0000 ROA not before: Tue 17 Jun 2025 17:49:46 +0000 ROA not after: Tue 16 Jun 2026 17:54:46 +0000 asID: 214143 IP address blocks: 109.107.56.0/21 maxlen: 21 Validation: OK Signature path: rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.crl rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.mft rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.cer rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.crl rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft rsync://rpki.ripe.net/repository/DEFAULT/RQLmPOAcrSOaw5e8K7Xmw0fc7uo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 03 Jul 2025 16:00:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 05:f3:da:c2:a9:81:01:b2:3c:76:d7:c5:16:83:6d:8e:8b:55:54:d1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2A2FB4DB0AA4D006958316872E467B554E0FD0BE Validity Not Before: Jun 17 17:49:46 2025 GMT Not After : Jun 16 17:54:46 2026 GMT Subject: CN=32B61DB80D41023BA2996A325188E98AEF1975F2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:50:84:80:35:8b:c1:d1:ab:49:dc:8c:1a:62: 03:d9:2e:80:46:22:d7:df:a9:d0:ed:30:c7:d4:92: aa:20:99:bd:84:51:1b:6c:bd:e3:96:95:d3:77:12: dc:3a:f3:5b:b6:de:e1:7e:09:bf:71:75:95:4a:83: 31:68:62:d3:21:db:4c:ac:07:bb:71:6e:ee:35:87: e1:72:7e:d0:e2:61:7e:19:41:e3:33:65:f7:1c:75: 4b:da:6f:17:9c:2c:f4:9a:c4:ef:b4:ee:14:34:ff: b5:82:90:d0:a9:87:48:19:0d:92:7e:b8:a4:5d:33: be:27:a8:5c:09:de:b4:f7:f4:b8:67:7a:9e:74:0c: 46:67:10:84:7d:56:b0:cd:22:a2:1a:a7:3c:1f:6c: 81:64:02:41:5e:d5:e5:cd:e1:82:a9:ad:cb:cb:34: 49:43:e0:6a:f4:ed:77:76:44:a3:56:20:38:8a:36: 49:20:8c:97:1b:9f:d6:70:4e:8f:c3:c8:1a:b2:dd: 18:29:e6:10:9f:6f:54:ee:77:2c:e1:5e:f0:2a:f6: 18:b3:e8:cc:6c:21:5c:e2:ea:75:39:65:e0:14:2c: e9:0a:9b:84:2b:3c:0b:d0:af:72:87:ca:a9:8b:25: ec:ed:ba:b5:a8:09:77:06:f1:2a:22:a3:6e:1b:5b: 70:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:B6:1D:B8:0D:41:02:3B:A2:99:6A:32:51:88:E9:8A:EF:19:75:F2 X509v3 Authority Key Identifier: keyid:2A:2F:B4:DB:0A:A4:D0:06:95:83:16:87:2E:46:7B:55:4E:0F:D0:BE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.cer Subject Information Access: Signed Object - URI:rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/3130392e3130372e35362e302f32312d3231203d3e20323134313433.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 109.107.56.0/21 Signature Algorithm: sha256WithRSAEncryption 38:67:da:a2:40:3d:1f:b3:a8:e6:9b:57:f6:60:ef:4f:0b:1f: c0:a6:b6:78:05:59:97:01:3e:77:23:53:aa:0c:51:7f:43:c5: 71:44:99:99:f6:c0:2f:e6:26:67:97:8b:1e:95:35:bd:e6:b5: 23:e8:e6:a8:39:1a:70:5b:39:a9:df:58:3c:1a:b9:c2:8c:be: d1:07:35:f5:77:21:66:6c:03:45:b8:74:34:a1:ea:3c:ff:b9: 3f:45:83:c7:df:0d:bd:35:73:55:64:07:ca:d5:9a:91:53:64: a1:0b:02:24:33:8f:db:7f:86:1b:70:b3:a2:dc:bd:47:22:56: f4:ec:ad:32:e8:06:bf:2f:f5:bc:58:d3:11:dc:40:ea:7d:83: b9:f7:a3:54:bb:49:b8:63:d9:8a:73:be:8a:d7:98:17:9f:18: ec:5b:9f:9d:b2:70:60:fa:71:28:5f:0a:34:10:e1:97:62:ca: 4c:4b:bb:5a:a8:ec:94:bf:83:18:06:3a:12:0e:8a:b8:b9:78: 46:91:5b:89:c7:3e:b2:ac:bd:6e:67:10:2f:89:ad:80:5c:f1: 18:9a:9d:11:dd:01:a7:61:e1:c7:bf:2f:69:ba:7b:66:1c:38: a9:ec:98:e0:b3:9e:96:74:18:e9:c2:c6:0e:cf:f2:d5:f7:8a: 3c:dc:80:df -----BEGIN CERTIFICATE----- MIIFWjCCBEKgAwIBAgIUBfPawqmBAbI8dtfFFoNtjotVVNEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkEyRkI0REIwQUE0RDAwNjk1ODMxNjg3MkU0NjdCNTU0 RTBGRDBCRTAeFw0yNTA2MTcxNzQ5NDZaFw0yNjA2MTYxNzU0NDZaMDMxMTAvBgNV BAMTKDMyQjYxREI4MEQ0MTAyM0JBMjk5NkEzMjUxODhFOThBRUYxOTc1RjIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDRUISANYvB0atJ3IwaYgPZLoBG ItffqdDtMMfUkqogmb2EURtsveOWldN3Etw681u23uF+Cb9xdZVKgzFoYtMh20ys B7txbu41h+FyftDiYX4ZQeMzZfccdUvabxecLPSaxO+07hQ0/7WCkNCph0gZDZJ+ uKRdM74nqFwJ3rT39Lhnep50DEZnEIR9VrDNIqIapzwfbIFkAkFe1eXN4YKprcvL NElD4Gr07Xd2RKNWIDiKNkkgjJcbn9ZwTo/DyBqy3Rgp5hCfb1TudyzhXvAq9hiz 6MxsIVzi6nU5ZeAULOkKm4QrPAvQr3KHyqmLJezturWoCXcG8Soio24bW3DRAgMB AAGjggJkMIICYDAdBgNVHQ4EFgQUMrYduA1BAjuimWoyUYjpiu8ZdfIwHwYDVR0j BBgwFoAUKi+02wqk0AaVgxaHLkZ7VU4P0L4wDgYDVR0PAQH/BAQDAgeAMIGIBgNV HR8EgYAwfjB8oHqgeIZ2cnN5bmM6Ly9yLm1hZ2VsbGFuLmlweG8uY29tL3JlcG8v YTZmMjE0N2EtZGU4YS00NDQwLWJjYTItNmQ4YjdjODc2ZmRhLTAvMC8yQTJGQjRE QjBBQTREMDA2OTU4MzE2ODcyRTQ2N0I1NTRFMEZEMEJFLmNybDCBngYIKwYBBQUH AQEEgZEwgY4wgYsGCCsGAQUFBzAChn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5y aXBlLm5ldC9yZXBvc2l0b3J5LzlkZjMzYTU3LTdlNGYtNDg0NC04NGUyLWI3MTUz YjU1MTFiNC8wLzJBMkZCNERCMEFBNEQwMDY5NTgzMTY4NzJFNDY3QjU1NEUwRkQw QkUuY2VyMIGmBggrBgEFBQcBCwSBmTCBljCBkwYIKwYBBQUHMAuGgYZyc3luYzov L3IubWFnZWxsYW4uaXB4by5jb20vcmVwby9hNmYyMTQ3YS1kZThhLTQ0NDAtYmNh Mi02ZDhiN2M4NzZmZGEtMC8wLzMxMzAzOTJlMzEzMDM3MmUzNTM2MmUzMDJmMzIz MTJkMzIzMTIwM2QzZTIwMzIzMTM0MzEzNDMzLnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDbWs4MA0GCSqG SIb3DQEBCwUAA4IBAQA4Z9qiQD0fs6jmm1f2YO9PCx/AprZ4BVmXAT53I1OqDFF/ Q8VxRJmZ9sAv5iZnl4selTW95rUj6OaoORpwWzmp31g8GrnCjL7RBzX1dyFmbANF uHQ0oeo8/7k/RYPH3w29NXNVZAfK1ZqRU2ShCwIkM4/bf4YbcLOi3L1HIlb07K0y 6Aa/L/W8WNMR3EDqfYO596NUu0m4Y9mKc76K15gXnxjsW5+dsnBg+nEoXwo0EOGX YspMS7taqOyUv4MYBjoSDoq4uXhGkVuJxz6yrL1uZxAvia2AXPEYmp0R3QGnYeHH vy9puntmHDip7Jjgs56WdBjpwsYOz/LV94o83IDf -----END CERTIFICATE-----Generated at Thu Jul 3 04:29:06 2025 by rpki-client