$ rpki-client -vvf r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/33372e3233302e35302e302f32342d3234203d3e203634323637.roa File: 33372e3233302e35302e302f32342d3234203d3e203634323637.roa (raw, json) Hash identifier: LZMaor5iOEP8FliRB5Y8Nf7/59yaMqhrko+0gy7cCh4= Subject key identifier: 9D:66:76:0F:DC:B0:46:32:59:73:30:3E:B3:52:74:0B:FA:8D:EE:8A Certificate issuer: /CN=2A2FB4DB0AA4D006958316872E467B554E0FD0BE Certificate serial: 05476256620E849D3FE23D1117E9C96E625B31C8 Authority key identifier: 2A:2F:B4:DB:0A:A4:D0:06:95:83:16:87:2E:46:7B:55:4E:0F:D0:BE Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.cer Subject info access: rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/33372e3233302e35302e302f32342d3234203d3e203634323637.roa Signing time: Tue 23 Sep 2025 15:55:07 +0000 ROA not before: Tue 23 Sep 2025 15:50:07 +0000 ROA not after: Tue 22 Sep 2026 15:55:07 +0000 asID: 64267 IP address blocks: 37.230.50.0/24 maxlen: 24 Validation: OK Signature path: rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.crl rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.mft rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.cer rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.crl rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft rsync://rpki.ripe.net/repository/DEFAULT/RQLmPOAcrSOaw5e8K7Xmw0fc7uo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 20 Oct 2025 15:00:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 05:47:62:56:62:0e:84:9d:3f:e2:3d:11:17:e9:c9:6e:62:5b:31:c8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2A2FB4DB0AA4D006958316872E467B554E0FD0BE Validity Not Before: Sep 23 15:50:07 2025 GMT Not After : Sep 22 15:55:07 2026 GMT Subject: CN=9D66760FDCB046325973303EB352740BFA8DEE8A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:58:79:26:84:16:dd:86:39:b9:10:ab:6c:03: b6:8b:cf:03:f2:a2:6c:84:3f:11:6a:58:0a:7e:90: cd:08:39:1c:d9:de:01:75:f9:e2:0c:53:9c:4d:f1: 9c:7e:41:d7:6d:5c:e3:52:98:3e:7c:f0:ed:b9:b1: 6c:79:2b:5b:c4:f5:ae:86:15:38:82:ce:23:3d:76: 98:51:b9:ae:a2:5b:fe:89:41:0d:6d:92:e9:87:54: 55:3b:09:d3:4b:f6:fd:5c:b6:1f:0c:e8:f9:70:01: 7b:f8:d6:dc:0c:cd:f1:4f:c0:e1:29:3a:a1:67:c9: 94:78:c7:8e:1f:23:96:68:06:88:73:b8:f9:ca:2c: fd:a4:af:9d:16:be:bd:87:54:f7:43:1d:3f:3b:5d: eb:48:9c:67:f2:f0:5f:ca:6f:1f:0b:7b:ef:d3:83: 2c:c5:65:8a:8e:0f:a6:24:20:33:53:68:16:f4:bf: 5b:e1:f0:78:5e:21:5d:6e:f8:22:a7:f3:d8:35:f3: 22:ff:bb:be:6a:85:e9:ae:d7:77:b3:d5:84:eb:71: 63:89:20:1f:96:75:55:44:2b:4b:3f:8c:ab:39:c0: 36:d5:22:03:c0:6b:68:b3:15:87:0f:cb:9c:e3:2c: d7:5d:84:29:6b:a2:a4:02:e7:3f:ae:ce:81:3d:33: f5:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:66:76:0F:DC:B0:46:32:59:73:30:3E:B3:52:74:0B:FA:8D:EE:8A X509v3 Authority Key Identifier: keyid:2A:2F:B4:DB:0A:A4:D0:06:95:83:16:87:2E:46:7B:55:4E:0F:D0:BE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.cer Subject Information Access: Signed Object - URI:rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/33372e3233302e35302e302f32342d3234203d3e203634323637.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 37.230.50.0/24 Signature Algorithm: sha256WithRSAEncryption 5d:49:c5:a5:50:6b:f0:e8:a3:5f:d1:ee:72:5f:59:7a:c2:39: 55:56:8a:db:ba:3f:00:4a:8a:5e:5b:72:72:bf:c4:08:0b:0d: ce:c0:b6:fc:15:93:cf:cd:23:ef:b4:1f:3d:20:a8:94:26:9d: 7f:3f:12:a9:94:6d:e9:51:5a:c7:d9:dd:ee:40:80:70:44:08: 30:5b:95:c2:57:53:30:0e:bf:9f:65:33:f3:f1:a6:77:0e:19: b6:2d:bf:87:f1:ae:73:f1:8f:f6:1f:bc:36:16:7a:59:45:9f: 1c:43:82:7c:fd:e0:40:fb:76:b6:63:b6:47:61:0e:77:8a:71: aa:e4:9b:66:95:7b:46:0e:ea:d4:78:8d:65:bf:4a:a0:94:22: 8e:aa:51:b0:4b:67:6d:86:16:8d:24:af:33:d3:09:d8:b4:f4: a3:ac:3e:f9:9e:63:96:e0:b8:af:a9:03:2d:fd:43:e8:84:fc: 8e:69:b0:ef:54:a2:6f:83:a2:55:dd:0a:7c:ea:73:ad:26:03: 7c:3b:5a:17:38:ed:d2:d8:8e:2c:95:14:00:b2:7e:c3:b2:57: 63:27:3e:f8:4c:1f:34:57:30:96:ed:ff:8e:fb:e2:0f:b1:db: 13:be:65:98:2d:ae:17:90:63:80:c0:9f:d7:99:bf:6d:88:2b: 3a:f0:95:8a -----BEGIN CERTIFICATE----- MIIFVjCCBD6gAwIBAgIUBUdiVmIOhJ0/4j0RF+nJbmJbMcgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkEyRkI0REIwQUE0RDAwNjk1ODMxNjg3MkU0NjdCNTU0 RTBGRDBCRTAeFw0yNTA5MjMxNTUwMDdaFw0yNjA5MjIxNTU1MDdaMDMxMTAvBgNV BAMTKDlENjY3NjBGRENCMDQ2MzI1OTczMzAzRUIzNTI3NDBCRkE4REVFOEEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDOWHkmhBbdhjm5EKtsA7aLzwPy omyEPxFqWAp+kM0IORzZ3gF1+eIMU5xN8Zx+QddtXONSmD588O25sWx5K1vE9a6G FTiCziM9dphRua6iW/6JQQ1tkumHVFU7CdNL9v1cth8M6PlwAXv41twMzfFPwOEp OqFnyZR4x44fI5ZoBohzuPnKLP2kr50Wvr2HVPdDHT87XetInGfy8F/Kbx8Le+/T gyzFZYqOD6YkIDNTaBb0v1vh8HheIV1u+CKn89g18yL/u75qhemu13ez1YTrcWOJ IB+WdVVEK0s/jKs5wDbVIgPAa2izFYcPy5zjLNddhClroqQC5z+uzoE9M/WBAgMB AAGjggJgMIICXDAdBgNVHQ4EFgQUnWZ2D9ywRjJZczA+s1J0C/qN7oowHwYDVR0j BBgwFoAUKi+02wqk0AaVgxaHLkZ7VU4P0L4wDgYDVR0PAQH/BAQDAgeAMIGIBgNV HR8EgYAwfjB8oHqgeIZ2cnN5bmM6Ly9yLm1hZ2VsbGFuLmlweG8uY29tL3JlcG8v YTZmMjE0N2EtZGU4YS00NDQwLWJjYTItNmQ4YjdjODc2ZmRhLTAvMC8yQTJGQjRE QjBBQTREMDA2OTU4MzE2ODcyRTQ2N0I1NTRFMEZEMEJFLmNybDCBngYIKwYBBQUH AQEEgZEwgY4wgYsGCCsGAQUFBzAChn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5y aXBlLm5ldC9yZXBvc2l0b3J5LzlkZjMzYTU3LTdlNGYtNDg0NC04NGUyLWI3MTUz YjU1MTFiNC8wLzJBMkZCNERCMEFBNEQwMDY5NTgzMTY4NzJFNDY3QjU1NEUwRkQw QkUuY2VyMIGiBggrBgEFBQcBCwSBlTCBkjCBjwYIKwYBBQUHMAuGgYJyc3luYzov L3IubWFnZWxsYW4uaXB4by5jb20vcmVwby9hNmYyMTQ3YS1kZThhLTQ0NDAtYmNh Mi02ZDhiN2M4NzZmZGEtMC8wLzMzMzcyZTMyMzMzMDJlMzUzMDJlMzAyZjMyMzQy ZDMyMzQyMDNkM2UyMDM2MzQzMjM2Mzcucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYB BQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAAl5jIwDQYJKoZIhvcN AQELBQADggEBAF1JxaVQa/Doo1/R7nJfWXrCOVVWitu6PwBKil5bcnK/xAgLDc7A tvwVk8/NI++0Hz0gqJQmnX8/EqmUbelRWsfZ3e5AgHBECDBblcJXUzAOv59lM/Px pncOGbYtv4fxrnPxj/YfvDYWellFnxxDgnz94ED7drZjtkdhDneKcarkm2aVe0YO 6tR4jWW/SqCUIo6qUbBLZ22GFo0krzPTCdi09KOsPvmeY5bguK+pAy39Q+iE/I5p sO9Uom+DolXdCnzqc60mA3w7Whc47dLYjiyVFACyfsOyV2MnPvhMHzRXMJbt/477 4g+x2xO+ZZgtrheQY4DAn9eZv22IKzrwlYo= -----END CERTIFICATE-----Generated at Mon Oct 20 01:29:16 2025 by rpki-client