$ rpki-client -vvf r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/33372e3233302e35362e302f32342d3234203d3e20323730303532.roa File: 33372e3233302e35362e302f32342d3234203d3e20323730303532.roa (raw, json) Hash identifier: 92cA6/wJpgzkjz6q3MFmTiqJ6L/lGT6HBG0YDNt1fag= Subject key identifier: F6:06:D8:B5:6F:CF:42:CE:6B:2D:91:5C:DE:E5:84:B4:18:33:1D:93 Certificate issuer: /CN=2A2FB4DB0AA4D006958316872E467B554E0FD0BE Certificate serial: 4EDD343574BD3041B4025FC78874F1BBE7FA5E34 Authority key identifier: 2A:2F:B4:DB:0A:A4:D0:06:95:83:16:87:2E:46:7B:55:4E:0F:D0:BE Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.cer Subject info access: rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/33372e3233302e35362e302f32342d3234203d3e20323730303532.roa Signing time: Thu 26 Mar 2026 13:46:55 +0000 ROA not before: Thu 26 Mar 2026 13:41:55 +0000 ROA not after: Thu 25 Mar 2027 13:46:55 +0000 asID: 270052 IP address blocks: 37.230.56.0/24 maxlen: 24 Validation: OK Signature path: rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.crl rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.mft rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.cer rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.crl rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft rsync://rpki.ripe.net/repository/DEFAULT/RQLmPOAcrSOaw5e8K7Xmw0fc7uo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 27 Mar 2026 09:00:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4e:dd:34:35:74:bd:30:41:b4:02:5f:c7:88:74:f1:bb:e7:fa:5e:34 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2A2FB4DB0AA4D006958316872E467B554E0FD0BE Validity Not Before: Mar 26 13:41:55 2026 GMT Not After : Mar 25 13:46:55 2027 GMT Subject: CN=F606D8B56FCF42CE6B2D915CDEE584B418331D93 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:62:3e:6c:07:f5:08:c0:23:24:4e:44:09:0f: 13:ae:10:92:90:0b:ba:18:cb:77:e2:67:05:2c:70: 39:59:9c:93:e1:96:a6:51:d3:18:08:0b:8b:d4:e1: f6:df:19:39:a6:71:89:79:31:56:9c:7d:6c:62:f9: c0:c5:8e:15:4f:66:a1:5f:5c:7b:f1:29:83:f1:1a: 65:56:14:94:61:bb:be:06:91:10:6f:1c:a9:81:3a: 53:d6:71:b9:65:30:5c:5c:d0:8f:22:c2:fe:43:6d: a6:72:d9:49:87:ae:eb:1b:42:42:9e:72:17:72:11: 56:68:8f:c9:da:5b:60:79:3e:7f:2c:62:0e:2a:44: 19:91:c8:81:42:29:26:66:c7:f3:b3:3c:4d:8a:a4: 0b:a0:ef:23:aa:ce:79:3b:ce:9b:fb:bc:7a:c9:56: 9f:6e:65:5e:70:12:f4:03:1d:92:ba:0a:cf:73:d1: df:6d:bf:76:3b:9a:7a:4a:e6:3d:75:15:62:c3:60: b0:39:11:11:de:d1:97:37:97:35:26:61:b4:a7:dd: 5d:01:43:66:7d:f8:fd:ac:1c:d9:d4:bf:fe:0e:46: 5f:6c:30:ca:27:7e:48:f1:78:b4:35:12:3a:ef:ca: 15:bc:02:86:56:c3:3c:af:26:70:e3:f9:64:fc:31: 3a:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:06:D8:B5:6F:CF:42:CE:6B:2D:91:5C:DE:E5:84:B4:18:33:1D:93 X509v3 Authority Key Identifier: keyid:2A:2F:B4:DB:0A:A4:D0:06:95:83:16:87:2E:46:7B:55:4E:0F:D0:BE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.cer Subject Information Access: Signed Object - URI:rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/33372e3233302e35362e302f32342d3234203d3e20323730303532.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 37.230.56.0/24 Signature Algorithm: sha256WithRSAEncryption 76:8f:e0:af:fe:dd:9a:8e:45:79:ae:bf:0d:4c:72:69:6c:3d: 46:00:03:77:38:a2:e8:50:3c:cc:94:20:0e:6c:4a:22:bf:23: 31:e1:38:f4:73:89:67:59:47:da:0d:11:5e:51:8b:38:9f:66: 32:ef:bd:a5:05:95:93:47:92:cb:de:df:d7:34:68:92:1f:95: 7d:21:14:f0:54:39:2b:ab:5f:31:57:9e:8e:54:ab:1e:16:d0: 0a:b0:a9:d1:02:66:69:cb:a0:97:0b:63:04:63:35:57:fb:f1: 5a:92:02:af:a3:8c:db:a9:0a:b7:0e:51:af:ff:d6:cf:db:8c: 29:fc:86:4f:10:56:38:26:ec:01:9e:c4:35:6b:a4:c8:30:ce: d0:0b:e1:90:f5:2a:6b:86:be:d7:ea:ff:24:2c:e7:68:f5:66: 64:6a:ec:16:c5:5e:0b:c1:f6:b7:59:5f:ee:23:6d:d4:85:35: 5b:2f:a3:c8:8f:7e:d1:70:63:8f:e8:f6:29:00:9d:51:92:ff: 00:86:25:d9:19:29:d8:f5:ce:f6:77:be:b5:0f:f2:55:95:32: 01:58:a0:91:75:a9:eb:73:5e:34:f8:a6:c1:44:04:b2:5e:ad: 98:e5:f7:bb:10:ab:e9:3d:19:d6:71:14:03:71:89:43:3f:e4: 9d:90:dc:c2 -----BEGIN CERTIFICATE----- MIIFWDCCBECgAwIBAgIUTt00NXS9MEG0Al/HiHTxu+f6XjQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkEyRkI0REIwQUE0RDAwNjk1ODMxNjg3MkU0NjdCNTU0 RTBGRDBCRTAeFw0yNjAzMjYxMzQxNTVaFw0yNzAzMjUxMzQ2NTVaMDMxMTAvBgNV BAMTKEY2MDZEOEI1NkZDRjQyQ0U2QjJEOTE1Q0RFRTU4NEI0MTgzMzFEOTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCSYj5sB/UIwCMkTkQJDxOuEJKQ C7oYy3fiZwUscDlZnJPhlqZR0xgIC4vU4fbfGTmmcYl5MVacfWxi+cDFjhVPZqFf XHvxKYPxGmVWFJRhu74GkRBvHKmBOlPWcbllMFxc0I8iwv5DbaZy2UmHrusbQkKe chdyEVZoj8naW2B5Pn8sYg4qRBmRyIFCKSZmx/OzPE2KpAug7yOqznk7zpv7vHrJ Vp9uZV5wEvQDHZK6Cs9z0d9tv3Y7mnpK5j11FWLDYLA5ERHe0Zc3lzUmYbSn3V0B Q2Z9+P2sHNnUv/4ORl9sMMonfkjxeLQ1EjrvyhW8AoZWwzyvJnDj+WT8MTpLAgMB AAGjggJiMIICXjAdBgNVHQ4EFgQU9gbYtW/PQs5rLZFc3uWEtBgzHZMwHwYDVR0j BBgwFoAUKi+02wqk0AaVgxaHLkZ7VU4P0L4wDgYDVR0PAQH/BAQDAgeAMIGIBgNV HR8EgYAwfjB8oHqgeIZ2cnN5bmM6Ly9yLm1hZ2VsbGFuLmlweG8uY29tL3JlcG8v YTZmMjE0N2EtZGU4YS00NDQwLWJjYTItNmQ4YjdjODc2ZmRhLTAvMC8yQTJGQjRE QjBBQTREMDA2OTU4MzE2ODcyRTQ2N0I1NTRFMEZEMEJFLmNybDCBngYIKwYBBQUH AQEEgZEwgY4wgYsGCCsGAQUFBzAChn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5y aXBlLm5ldC9yZXBvc2l0b3J5LzlkZjMzYTU3LTdlNGYtNDg0NC04NGUyLWI3MTUz YjU1MTFiNC8wLzJBMkZCNERCMEFBNEQwMDY5NTgzMTY4NzJFNDY3QjU1NEUwRkQw QkUuY2VyMIGkBggrBgEFBQcBCwSBlzCBlDCBkQYIKwYBBQUHMAuGgYRyc3luYzov L3IubWFnZWxsYW4uaXB4by5jb20vcmVwby9hNmYyMTQ3YS1kZThhLTQ0NDAtYmNh Mi02ZDhiN2M4NzZmZGEtMC8wLzMzMzcyZTMyMzMzMDJlMzUzNjJlMzAyZjMyMzQy ZDMyMzQyMDNkM2UyMDMyMzczMDMwMzUzMi5yb2EwGAYDVR0gAQH/BA4wDDAKBggr BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEACXmODANBgkqhkiG 9w0BAQsFAAOCAQEAdo/gr/7dmo5Fea6/DUxyaWw9RgADdzii6FA8zJQgDmxKIr8j MeE49HOJZ1lH2g0RXlGLOJ9mMu+9pQWVk0eSy97f1zRokh+VfSEU8FQ5K6tfMVee jlSrHhbQCrCp0QJmacuglwtjBGM1V/vxWpICr6OM26kKtw5Rr//Wz9uMKfyGTxBW OCbsAZ7ENWukyDDO0AvhkPUqa4a+1+r/JCznaPVmZGrsFsVeC8H2t1lf7iNt1IU1 Wy+jyI9+0XBjj+j2KQCdUZL/AIYl2Rkp2PXO9ne+tQ/yVZUyAVigkXWp63NeNPim wUQEsl6tmOX3uxCr6T0Z1nEUA3GJQz/knZDcwg== -----END CERTIFICATE-----Generated at Thu Mar 26 17:16:22 2026 by rpki-client