$ rpki-client -vvf r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/352e38332e3231302e302f32342d3234203d3e203230343733.roa File: 352e38332e3231302e302f32342d3234203d3e203230343733.roa (raw, json) Hash identifier: S4uLiNxj2VFPoccMQLzjtMXjtMNSSJZS39HMs9V67j8= Subject key identifier: DE:68:5C:0D:88:10:92:93:8E:86:9A:F9:69:08:DB:69:91:38:C6:30 Certificate issuer: /CN=2A2FB4DB0AA4D006958316872E467B554E0FD0BE Certificate serial: 7CA78C0476FA2C6A0A7BA5082D233FF00789075E Authority key identifier: 2A:2F:B4:DB:0A:A4:D0:06:95:83:16:87:2E:46:7B:55:4E:0F:D0:BE Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.cer Subject info access: rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/352e38332e3231302e302f32342d3234203d3e203230343733.roa Signing time: Tue 21 Jul 2026 14:18:32 +0000 ROA not before: Tue 21 Jul 2026 14:13:32 +0000 ROA not after: Tue 20 Jul 2027 14:18:32 +0000 asID: 20473 IP address blocks: 5.83.210.0/24 maxlen: 24 Validation: OK Signature path: rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.crl rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.mft rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.cer rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.crl rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft rsync://rpki.ripe.net/repository/DEFAULT/RQLmPOAcrSOaw5e8K7Xmw0fc7uo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 24 Jul 2026 16:54:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7c:a7:8c:04:76:fa:2c:6a:0a:7b:a5:08:2d:23:3f:f0:07:89:07:5e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2A2FB4DB0AA4D006958316872E467B554E0FD0BE Validity Not Before: Jul 21 14:13:32 2026 GMT Not After : Jul 20 14:18:32 2027 GMT Subject: CN=DE685C0D881092938E869AF96908DB699138C630 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:fd:9e:78:8d:ba:b3:19:58:10:45:55:7c:52:03: 60:5e:4a:74:a5:6b:a7:71:66:eb:41:12:79:dd:50: c2:e9:f7:8a:d5:c3:64:29:d2:86:6d:7e:ad:a2:85: 73:8e:d5:3b:66:af:da:e3:97:be:d2:a6:0d:71:94: 9d:ad:2d:e7:cf:05:05:31:6e:d8:31:f5:74:9c:a9: 65:bf:b8:a6:4a:f6:d6:d6:fc:98:b4:eb:4f:e6:58: a0:83:43:b0:85:5b:cd:5c:3d:a8:6a:4b:ed:d4:d3: 36:af:b0:9d:2d:46:50:d6:0e:13:00:ea:23:cb:fd: 70:7a:bd:af:49:18:eb:30:95:aa:cb:ee:30:40:1c: be:2d:5a:10:67:e7:5e:dd:a1:01:cd:79:79:cf:67: a2:5f:e2:a9:f1:ac:ca:f2:1a:58:47:9c:aa:95:87: 72:cc:12:00:98:57:b7:d5:5b:b3:f9:fd:74:dd:4c: f4:8b:2c:22:8c:d0:40:7f:4c:c8:b2:e9:c1:f3:14: 4e:0c:0a:54:0c:3d:ac:6f:0f:33:c5:85:9d:22:fa: 1a:db:58:c5:46:ef:3e:5b:5b:b5:48:5f:b3:34:ec: 28:29:4a:a4:e0:48:f5:0e:f7:45:ab:55:28:0f:01: d6:8f:92:ec:68:45:f7:8e:c6:a1:75:a8:38:34:01: 17:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:68:5C:0D:88:10:92:93:8E:86:9A:F9:69:08:DB:69:91:38:C6:30 X509v3 Authority Key Identifier: keyid:2A:2F:B4:DB:0A:A4:D0:06:95:83:16:87:2E:46:7B:55:4E:0F:D0:BE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.cer Subject Information Access: Signed Object - URI:rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/352e38332e3231302e302f32342d3234203d3e203230343733.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.83.210.0/24 Signature Algorithm: sha256WithRSAEncryption a2:d2:1a:6a:2a:21:d7:4e:f4:4b:15:0d:fe:59:aa:4d:ef:59: f3:bf:5a:e1:09:b5:bb:99:e8:37:8d:ae:61:00:d5:65:69:75: a0:77:b9:88:64:20:14:18:99:14:b4:47:2e:b9:85:2a:89:31: b0:d4:2b:53:64:be:7a:d0:70:ab:0e:55:eb:d4:d1:94:b7:a7: 81:f3:b3:17:64:6c:d9:99:1f:45:f4:c7:72:02:05:cb:81:e1: 19:34:24:a3:df:f6:79:65:e9:9f:04:10:fe:02:4e:fb:f6:77: 04:77:c8:ea:29:bd:f3:cf:1f:bb:e8:c7:f3:7c:23:59:38:d4: b4:75:bb:00:67:2d:95:bc:d4:1f:cd:56:4c:35:44:c6:1d:fc: b6:cc:3d:70:fe:ee:27:8c:cc:60:6f:43:87:8f:c2:3c:06:de: c9:0b:5e:59:b8:a9:65:64:3d:fb:da:33:a5:f9:b1:68:93:76: f5:0c:55:d7:a2:f4:70:f2:62:1a:21:1d:11:1e:82:b0:19:30: 39:6a:db:dd:f2:ca:d0:33:1a:31:38:b7:81:5c:27:92:81:60: ec:a2:21:dd:0e:1c:5f:a3:45:34:dd:66:e1:e8:77:95:07:07: 82:8f:ef:bf:55:bd:ff:26:6c:4e:21:7c:d9:68:78:ee:99:d3: 6b:63:7a:11 -----BEGIN CERTIFICATE----- MIIFVDCCBDygAwIBAgIUfKeMBHb6LGoKe6UILSM/8AeJB14wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkEyRkI0REIwQUE0RDAwNjk1ODMxNjg3MkU0NjdCNTU0 RTBGRDBCRTAeFw0yNjA3MjExNDEzMzJaFw0yNzA3MjAxNDE4MzJaMDMxMTAvBgNV BAMTKERFNjg1QzBEODgxMDkyOTM4RTg2OUFGOTY5MDhEQjY5OTEzOEM2MzAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD9nniNurMZWBBFVXxSA2BeSnSl a6dxZutBEnndUMLp94rVw2Qp0oZtfq2ihXOO1Ttmr9rjl77Spg1xlJ2tLefPBQUx btgx9XScqWW/uKZK9tbW/Ji060/mWKCDQ7CFW81cPahqS+3U0zavsJ0tRlDWDhMA 6iPL/XB6va9JGOswlarL7jBAHL4tWhBn517doQHNeXnPZ6Jf4qnxrMryGlhHnKqV h3LMEgCYV7fVW7P5/XTdTPSLLCKM0EB/TMiy6cHzFE4MClQMPaxvDzPFhZ0i+hrb WMVG7z5bW7VIX7M07CgpSqTgSPUO90WrVSgPAdaPkuxoRfeOxqF1qDg0ARcnAgMB AAGjggJeMIICWjAdBgNVHQ4EFgQU3mhcDYgQkpOOhpr5aQjbaZE4xjAwHwYDVR0j BBgwFoAUKi+02wqk0AaVgxaHLkZ7VU4P0L4wDgYDVR0PAQH/BAQDAgeAMIGIBgNV HR8EgYAwfjB8oHqgeIZ2cnN5bmM6Ly9yLm1hZ2VsbGFuLmlweG8uY29tL3JlcG8v YTZmMjE0N2EtZGU4YS00NDQwLWJjYTItNmQ4YjdjODc2ZmRhLTAvMC8yQTJGQjRE QjBBQTREMDA2OTU4MzE2ODcyRTQ2N0I1NTRFMEZEMEJFLmNybDCBngYIKwYBBQUH AQEEgZEwgY4wgYsGCCsGAQUFBzAChn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5y aXBlLm5ldC9yZXBvc2l0b3J5LzlkZjMzYTU3LTdlNGYtNDg0NC04NGUyLWI3MTUz YjU1MTFiNC8wLzJBMkZCNERCMEFBNEQwMDY5NTgzMTY4NzJFNDY3QjU1NEUwRkQw QkUuY2VyMIGgBggrBgEFBQcBCwSBkzCBkDCBjQYIKwYBBQUHMAuGgYByc3luYzov L3IubWFnZWxsYW4uaXB4by5jb20vcmVwby9hNmYyMTQ3YS1kZThhLTQ0NDAtYmNh Mi02ZDhiN2M4NzZmZGEtMC8wLzM1MmUzODMzMmUzMjMxMzAyZTMwMmYzMjM0MmQz MjM0MjAzZDNlMjAzMjMwMzQzNzMzLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQABVPSMA0GCSqGSIb3DQEB CwUAA4IBAQCi0hpqKiHXTvRLFQ3+WapN71nzv1rhCbW7meg3ja5hANVlaXWgd7mI ZCAUGJkUtEcuuYUqiTGw1CtTZL560HCrDlXr1NGUt6eB87MXZGzZmR9F9MdyAgXL geEZNCSj3/Z5ZemfBBD+Ak779ncEd8jqKb3zzx+76MfzfCNZONS0dbsAZy2VvNQf zVZMNUTGHfy2zD1w/u4njMxgb0OHj8I8Bt7JC15ZuKllZD372jOl+bFok3b1DFXX ovRw8mIaIR0RHoKwGTA5atvd8srQMxoxOLeBXCeSgWDsoiHdDhxfo0U03Wbh6HeV BweCj++/Vb3/JmxOIXzZaHjumdNrY3oR -----END CERTIFICATE-----Generated at Fri Jul 24 02:00:48 2026 by rpki-client