$ rpki-client -vvf r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/352e38332e3231312e302f32342d3234203d3e20383334.roa File: 352e38332e3231312e302f32342d3234203d3e20383334.roa (raw, json) Hash identifier: F/j7L/DCZidbXeWxQxk2KsE/U71tFu+avIDy6fBZpO4= Subject key identifier: E2:A0:27:F2:08:82:71:F3:5D:A2:51:0B:30:53:AA:4A:FE:72:A1:C7 Certificate issuer: /CN=2A2FB4DB0AA4D006958316872E467B554E0FD0BE Certificate serial: 1025302D7AFD9769D648D311F41263AF4F7ACD1C Authority key identifier: 2A:2F:B4:DB:0A:A4:D0:06:95:83:16:87:2E:46:7B:55:4E:0F:D0:BE Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.cer Subject info access: rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/352e38332e3231312e302f32342d3234203d3e20383334.roa Signing time: Tue 21 Jul 2026 14:20:08 +0000 ROA not before: Tue 21 Jul 2026 14:15:08 +0000 ROA not after: Tue 20 Jul 2027 14:20:08 +0000 asID: 834 IP address blocks: 5.83.211.0/24 maxlen: 24 Validation: OK Signature path: rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.crl rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.mft rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.cer rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.crl rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft rsync://rpki.ripe.net/repository/DEFAULT/RQLmPOAcrSOaw5e8K7Xmw0fc7uo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 24 Jul 2026 16:54:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10:25:30:2d:7a:fd:97:69:d6:48:d3:11:f4:12:63:af:4f:7a:cd:1c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2A2FB4DB0AA4D006958316872E467B554E0FD0BE Validity Not Before: Jul 21 14:15:08 2026 GMT Not After : Jul 20 14:20:08 2027 GMT Subject: CN=E2A027F2088271F35DA2510B3053AA4AFE72A1C7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:6b:6d:27:cd:30:6c:21:57:21:ac:a7:4d:8a: 15:b0:6e:49:2f:41:84:94:6b:fe:b7:74:7e:b5:29: e8:c0:6b:a7:8c:e6:47:f9:50:4d:a9:7c:94:75:f9: 31:cd:6a:e6:6e:93:df:92:1e:22:b9:ea:1d:d1:83: 4d:03:3e:52:80:0b:db:5e:6d:f2:a0:de:54:b9:8f: b0:83:92:56:9d:ef:64:41:4f:e0:bc:09:ce:51:8c: 2c:89:56:3b:0a:7c:82:c7:15:fa:4f:16:9b:04:2c: 97:30:32:0f:3c:59:62:a1:d7:fe:0f:c2:f7:e0:11: 85:f4:3b:73:7b:c7:e1:f3:07:79:29:bb:11:be:03: f8:b6:7d:9c:59:c4:52:73:78:42:b9:b0:53:10:d7: e2:a3:5a:47:1e:3f:b5:ff:4f:45:ce:0a:81:66:70: 04:19:6c:22:3f:fb:53:c3:67:bb:49:a8:2f:1f:22: a3:73:43:8b:e5:43:70:28:0b:a9:32:64:c6:ae:11: 12:e6:f3:95:21:b4:73:cb:08:d7:db:47:b5:a7:fb: 11:ba:66:c9:d3:c2:43:4e:99:ff:c0:dc:09:61:5b: c1:64:25:dc:91:fc:b9:04:01:4a:e2:78:29:bb:8c: 74:10:e8:77:f9:73:6f:63:95:c4:a1:d4:c9:03:1b: ad:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:A0:27:F2:08:82:71:F3:5D:A2:51:0B:30:53:AA:4A:FE:72:A1:C7 X509v3 Authority Key Identifier: keyid:2A:2F:B4:DB:0A:A4:D0:06:95:83:16:87:2E:46:7B:55:4E:0F:D0:BE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.cer Subject Information Access: Signed Object - URI:rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/352e38332e3231312e302f32342d3234203d3e20383334.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.83.211.0/24 Signature Algorithm: sha256WithRSAEncryption 6f:32:26:e8:83:b3:88:89:2f:82:1c:6d:d1:67:7a:b1:99:d6: 80:21:9c:20:9f:97:81:30:e5:05:e0:ab:4a:3b:fa:23:f2:6c: d7:a6:22:52:1e:ca:5b:15:b2:7c:a5:45:41:4c:2f:92:75:8d: 9b:82:c6:e8:ab:18:aa:b0:42:a2:62:e2:4f:8c:68:68:57:08: 08:0f:d4:bb:3e:7a:2e:73:5e:1a:29:70:01:91:50:04:b0:49: c6:07:3a:d0:74:66:53:98:61:14:2a:93:c1:e6:c5:0b:ce:da: a4:02:c5:49:67:84:35:64:db:d1:83:6c:37:8f:41:79:13:ee: 14:3e:94:24:77:9b:50:30:af:01:07:57:31:2a:3a:42:49:4e: 32:34:77:04:b2:e4:16:62:35:8b:99:3c:88:74:c7:f6:25:0e: c4:51:dc:09:33:64:4d:95:eb:15:4e:f0:c2:04:54:3e:f0:c9: bc:34:a0:6e:1c:37:3c:eb:8d:05:5b:a2:a8:d2:eb:0c:7c:a7: 43:c5:3c:8f:57:96:a2:1b:6a:ca:a1:fe:16:9e:33:24:73:58: 8e:cc:df:52:81:b8:b2:84:52:94:37:82:a9:02:b0:e2:85:36: 5f:0d:10:7f:f4:85:a0:84:2a:07:29:ba:b0:a1:72:b7:9c:55: cb:f0:01:a1 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUECUwLXr9l2nWSNMR9BJjr096zRwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkEyRkI0REIwQUE0RDAwNjk1ODMxNjg3MkU0NjdCNTU0 RTBGRDBCRTAeFw0yNjA3MjExNDE1MDhaFw0yNzA3MjAxNDIwMDhaMDMxMTAvBgNV BAMTKEUyQTAyN0YyMDg4MjcxRjM1REEyNTEwQjMwNTNBQTRBRkU3MkExQzcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCfa20nzTBsIVchrKdNihWwbkkv QYSUa/63dH61KejAa6eM5kf5UE2pfJR1+THNauZuk9+SHiK56h3Rg00DPlKAC9te bfKg3lS5j7CDklad72RBT+C8Cc5RjCyJVjsKfILHFfpPFpsELJcwMg88WWKh1/4P wvfgEYX0O3N7x+HzB3kpuxG+A/i2fZxZxFJzeEK5sFMQ1+KjWkceP7X/T0XOCoFm cAQZbCI/+1PDZ7tJqC8fIqNzQ4vlQ3AoC6kyZMauERLm85UhtHPLCNfbR7Wn+xG6 ZsnTwkNOmf/A3AlhW8FkJdyR/LkEAUrieCm7jHQQ6Hf5c29jlcSh1MkDG61nAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQU4qAn8giCcfNdolELMFOqSv5yoccwHwYDVR0j BBgwFoAUKi+02wqk0AaVgxaHLkZ7VU4P0L4wDgYDVR0PAQH/BAQDAgeAMIGIBgNV HR8EgYAwfjB8oHqgeIZ2cnN5bmM6Ly9yLm1hZ2VsbGFuLmlweG8uY29tL3JlcG8v YTZmMjE0N2EtZGU4YS00NDQwLWJjYTItNmQ4YjdjODc2ZmRhLTAvMC8yQTJGQjRE QjBBQTREMDA2OTU4MzE2ODcyRTQ2N0I1NTRFMEZEMEJFLmNybDCBngYIKwYBBQUH AQEEgZEwgY4wgYsGCCsGAQUFBzAChn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5y aXBlLm5ldC9yZXBvc2l0b3J5LzlkZjMzYTU3LTdlNGYtNDg0NC04NGUyLWI3MTUz YjU1MTFiNC8wLzJBMkZCNERCMEFBNEQwMDY5NTgzMTY4NzJFNDY3QjU1NEUwRkQw QkUuY2VyMIGbBggrBgEFBQcBCwSBjjCBizCBiAYIKwYBBQUHMAuGfHJzeW5jOi8v ci5tYWdlbGxhbi5pcHhvLmNvbS9yZXBvL2E2ZjIxNDdhLWRlOGEtNDQ0MC1iY2Ey LTZkOGI3Yzg3NmZkYS0wLzAvMzUyZTM4MzMyZTMyMzEzMTJlMzAyZjMyMzQyZDMy MzQyMDNkM2UyMDM4MzMzNC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAAVT0zANBgkqhkiG9w0BAQsFAAOC AQEAbzIm6IOziIkvghxt0Wd6sZnWgCGcIJ+XgTDlBeCrSjv6I/Js16YiUh7KWxWy fKVFQUwvknWNm4LG6KsYqrBComLiT4xoaFcICA/Uuz56LnNeGilwAZFQBLBJxgc6 0HRmU5hhFCqTwebFC87apALFSWeENWTb0YNsN49BeRPuFD6UJHebUDCvAQdXMSo6 QklOMjR3BLLkFmI1i5k8iHTH9iUOxFHcCTNkTZXrFU7wwgRUPvDJvDSgbhw3POuN BVuiqNLrDHynQ8U8j1eWohtqyqH+Fp4zJHNYjszfUoG4soRSlDeCqQKw4oU2Xw0Q f/SFoIQqBym6sKFyt5xVy/ABoQ== -----END CERTIFICATE-----Generated at Fri Jul 24 01:14:29 2026 by rpki-client