$ rpki-client -vvf r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/33372e3233302e36312e302f32342d3234203d3e2032383536.roa File: 33372e3233302e36312e302f32342d3234203d3e2032383536.roa (raw, json) Hash identifier: nxOqv16TrLUGm0CtPYltw+6bAESByJOkEQfdjDKKR/g= Subject key identifier: EC:77:75:F9:8D:07:56:2A:DD:88:D8:B2:A9:90:C6:4B:1C:20:E3:F1 Certificate issuer: /CN=2A2FB4DB0AA4D006958316872E467B554E0FD0BE Certificate serial: 3EAA106BBE145203E02EA563D0C5BD4953AC574E Authority key identifier: 2A:2F:B4:DB:0A:A4:D0:06:95:83:16:87:2E:46:7B:55:4E:0F:D0:BE Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.cer Subject info access: rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/33372e3233302e36312e302f32342d3234203d3e2032383536.roa Signing time: Wed 06 May 2026 20:47:11 +0000 ROA not before: Wed 06 May 2026 20:42:11 +0000 ROA not after: Wed 05 May 2027 20:47:11 +0000 asID: 2856 IP address blocks: 37.230.61.0/24 maxlen: 24 Validation: OK Signature path: rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.crl rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.mft rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.cer rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.crl rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft rsync://rpki.ripe.net/repository/DEFAULT/RQLmPOAcrSOaw5e8K7Xmw0fc7uo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 13 May 2026 04:39:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3e:aa:10:6b:be:14:52:03:e0:2e:a5:63:d0:c5:bd:49:53:ac:57:4e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2A2FB4DB0AA4D006958316872E467B554E0FD0BE Validity Not Before: May 6 20:42:11 2026 GMT Not After : May 5 20:47:11 2027 GMT Subject: CN=EC7775F98D07562ADD88D8B2A990C64B1C20E3F1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:e7:96:44:11:d8:ca:33:ef:05:d7:2a:63:3d: ef:42:b4:92:a5:03:50:49:e2:c8:7a:81:4c:3a:d2: 30:dd:63:22:09:78:2d:4e:ba:d9:2e:52:56:e2:5c: ff:e4:ad:3d:32:a6:da:7a:84:5e:c8:0e:f0:c7:45: e9:f9:71:40:5a:70:47:da:e6:91:5c:63:ad:b3:bc: de:61:a3:de:58:40:25:84:03:e1:2b:e8:b4:bb:14: 9e:5f:08:82:5f:5f:e0:e8:ee:e8:ad:36:5e:f2:fb: c6:94:cc:df:d3:25:df:bf:54:eb:8c:17:02:bd:a3: db:57:8b:10:e7:3e:df:5d:48:e1:ea:ba:77:a7:9a: d2:e2:8d:8b:93:a8:4c:9c:5d:f2:ac:85:76:ac:bc: b0:d9:e1:1c:a2:36:0c:86:48:c5:ae:0b:0f:87:45: b7:76:2b:a7:a0:3b:3c:80:df:3a:38:d5:fb:54:39: 06:4a:0c:b9:a1:37:4d:f4:83:88:bb:77:6d:79:ef: 8f:1b:13:ef:2c:ce:e4:6d:05:c4:65:1e:c1:6f:a6: da:1d:7b:16:ec:ee:46:03:c9:d3:48:9f:af:d9:1e: a2:ab:d0:80:bf:13:a4:73:29:d8:70:cf:08:6b:69: 39:e3:9d:15:f4:48:36:9d:dc:ef:b0:65:91:0d:7e: de:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:77:75:F9:8D:07:56:2A:DD:88:D8:B2:A9:90:C6:4B:1C:20:E3:F1 X509v3 Authority Key Identifier: keyid:2A:2F:B4:DB:0A:A4:D0:06:95:83:16:87:2E:46:7B:55:4E:0F:D0:BE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.cer Subject Information Access: Signed Object - URI:rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/33372e3233302e36312e302f32342d3234203d3e2032383536.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 37.230.61.0/24 Signature Algorithm: sha256WithRSAEncryption 00:8b:ff:c3:0c:b1:6e:63:29:75:7a:72:6f:97:83:eb:13:8e: fc:61:6b:41:b7:f5:dd:07:80:c8:ce:f2:c7:f5:52:4f:9f:75: c8:3a:00:ac:da:a9:20:39:8e:39:06:3e:dc:6f:77:9e:0f:e5: 50:c2:9e:16:9b:77:58:c2:65:7f:79:10:1d:b2:88:46:7b:6e: 59:31:8d:d3:3b:b2:b2:88:ef:b7:f9:b9:37:70:17:94:46:7d: 8f:6b:08:b6:d6:41:0a:44:20:01:6d:1f:76:9c:45:02:ed:95: cc:fb:cd:9d:31:d1:25:48:10:d0:05:81:c0:a2:d1:22:16:0f: e9:72:80:e6:3e:d4:a9:87:40:a7:37:ad:d8:f1:c8:c6:ae:84: a0:1b:e9:c0:4b:9b:a0:e0:d3:31:8e:26:9f:29:94:81:1e:b7: 91:b3:9c:dc:5a:54:54:34:14:b9:52:ec:5d:9b:9b:27:0b:38: c3:fe:25:d6:53:ec:c6:f3:b3:8a:10:33:f5:5b:09:42:80:53: 76:c8:b8:d4:31:cd:6a:01:44:d2:02:37:8a:e3:29:bd:72:6a: 70:14:7b:16:76:36:36:67:ac:bb:b9:f1:92:d7:75:e8:ef:70: 32:51:84:6a:81:88:55:05:9e:12:f2:de:34:38:ef:8a:35:c6: 3a:85:fb:20 -----BEGIN CERTIFICATE----- MIIFVDCCBDygAwIBAgIUPqoQa74UUgPgLqVj0MW9SVOsV04wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkEyRkI0REIwQUE0RDAwNjk1ODMxNjg3MkU0NjdCNTU0 RTBGRDBCRTAeFw0yNjA1MDYyMDQyMTFaFw0yNzA1MDUyMDQ3MTFaMDMxMTAvBgNV BAMTKEVDNzc3NUY5OEQwNzU2MkFERDg4RDhCMkE5OTBDNjRCMUMyMEUzRjEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDc55ZEEdjKM+8F1ypjPe9CtJKl A1BJ4sh6gUw60jDdYyIJeC1OutkuUlbiXP/krT0yptp6hF7IDvDHRen5cUBacEfa 5pFcY62zvN5ho95YQCWEA+Er6LS7FJ5fCIJfX+Do7uitNl7y+8aUzN/TJd+/VOuM FwK9o9tXixDnPt9dSOHqunenmtLijYuTqEycXfKshXasvLDZ4RyiNgyGSMWuCw+H Rbd2K6egOzyA3zo41ftUOQZKDLmhN030g4i7d215748bE+8szuRtBcRlHsFvptod exbs7kYDydNIn6/ZHqKr0IC/E6RzKdhwzwhraTnjnRX0SDad3O+wZZENft7DAgMB AAGjggJeMIICWjAdBgNVHQ4EFgQU7Hd1+Y0HVirdiNiyqZDGSxwg4/EwHwYDVR0j BBgwFoAUKi+02wqk0AaVgxaHLkZ7VU4P0L4wDgYDVR0PAQH/BAQDAgeAMIGIBgNV HR8EgYAwfjB8oHqgeIZ2cnN5bmM6Ly9yLm1hZ2VsbGFuLmlweG8uY29tL3JlcG8v YTZmMjE0N2EtZGU4YS00NDQwLWJjYTItNmQ4YjdjODc2ZmRhLTAvMC8yQTJGQjRE QjBBQTREMDA2OTU4MzE2ODcyRTQ2N0I1NTRFMEZEMEJFLmNybDCBngYIKwYBBQUH AQEEgZEwgY4wgYsGCCsGAQUFBzAChn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5y aXBlLm5ldC9yZXBvc2l0b3J5LzlkZjMzYTU3LTdlNGYtNDg0NC04NGUyLWI3MTUz YjU1MTFiNC8wLzJBMkZCNERCMEFBNEQwMDY5NTgzMTY4NzJFNDY3QjU1NEUwRkQw QkUuY2VyMIGgBggrBgEFBQcBCwSBkzCBkDCBjQYIKwYBBQUHMAuGgYByc3luYzov L3IubWFnZWxsYW4uaXB4by5jb20vcmVwby9hNmYyMTQ3YS1kZThhLTQ0NDAtYmNh Mi02ZDhiN2M4NzZmZGEtMC8wLzMzMzcyZTMyMzMzMDJlMzYzMTJlMzAyZjMyMzQy ZDMyMzQyMDNkM2UyMDMyMzgzNTM2LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAJeY9MA0GCSqGSIb3DQEB CwUAA4IBAQAAi//DDLFuYyl1enJvl4PrE478YWtBt/XdB4DIzvLH9VJPn3XIOgCs 2qkgOY45Bj7cb3eeD+VQwp4Wm3dYwmV/eRAdsohGe25ZMY3TO7KyiO+3+bk3cBeU Rn2Pawi21kEKRCABbR92nEUC7ZXM+82dMdElSBDQBYHAotEiFg/pcoDmPtSph0Cn N63Y8cjGroSgG+nAS5ug4NMxjiafKZSBHreRs5zcWlRUNBS5Uuxdm5snCzjD/iXW U+zG87OKEDP1WwlCgFN2yLjUMc1qAUTSAjeK4ym9cmpwFHsWdjY2Z6y7ufGS13Xo 73AyUYRqgYhVBZ4S8t40OO+KNcY6hfsg -----END CERTIFICATE-----Generated at Tue May 12 22:45:20 2026 by rpki-client