$ rpki-client -vvf r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/352e38332e3231322e302f32342d3234203d3e20383334.roa File: 352e38332e3231322e302f32342d3234203d3e20383334.roa (raw, json) Hash identifier: sF2poDmVAEcuN5z8HCxqNKQ8Lt8BOf8YdacKpQ4TJU0= Subject key identifier: 6E:38:27:1E:55:84:0A:BC:C2:CB:5D:85:81:EE:31:24:66:20:B7:10 Certificate issuer: /CN=2A2FB4DB0AA4D006958316872E467B554E0FD0BE Certificate serial: 561F620B242F106366BCF9C91F6738DA6758A9E0 Authority key identifier: 2A:2F:B4:DB:0A:A4:D0:06:95:83:16:87:2E:46:7B:55:4E:0F:D0:BE Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.cer Subject info access: rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/352e38332e3231322e302f32342d3234203d3e20383334.roa Signing time: Tue 17 Mar 2026 19:34:05 +0000 ROA not before: Tue 17 Mar 2026 19:29:05 +0000 ROA not after: Tue 16 Mar 2027 19:34:05 +0000 asID: 834 IP address blocks: 5.83.212.0/24 maxlen: 24 Validation: OK Signature path: rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.crl rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.mft rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.cer rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.crl rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft rsync://rpki.ripe.net/repository/DEFAULT/RQLmPOAcrSOaw5e8K7Xmw0fc7uo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 26 Mar 2026 21:25:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 56:1f:62:0b:24:2f:10:63:66:bc:f9:c9:1f:67:38:da:67:58:a9:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2A2FB4DB0AA4D006958316872E467B554E0FD0BE Validity Not Before: Mar 17 19:29:05 2026 GMT Not After : Mar 16 19:34:05 2027 GMT Subject: CN=6E38271E55840ABCC2CB5D8581EE31246620B710 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:09:f1:e2:55:c8:54:eb:e6:37:23:80:47:81: 10:e2:5b:87:d6:b3:04:9c:d5:7e:89:1b:bb:5e:cb: 53:7b:42:a1:22:d3:fa:6c:bf:ba:19:1a:56:01:50: 42:cc:0c:69:5c:13:ac:5a:09:65:63:c2:17:a1:f9: 1b:ab:a8:b5:67:8f:5e:41:32:2b:44:b3:4f:78:22: ff:d4:86:94:9c:ff:09:b9:90:77:fc:22:89:5a:37: e8:ce:1e:13:59:1d:4f:ec:6d:7b:91:96:d9:41:a2: a7:74:94:4e:63:a5:a0:b2:12:37:ac:39:71:72:82: 28:88:00:69:d4:23:96:29:f4:20:1d:63:58:03:f3: cf:77:13:41:e2:84:ee:41:22:4d:b1:2d:88:99:bc: 69:79:8f:56:f4:94:a0:18:a9:53:ea:fc:27:db:70: ce:59:42:2f:79:fc:50:35:07:31:c6:a6:10:29:c6: 52:0a:fa:e0:b6:05:69:cf:7e:fe:a9:c9:3b:a9:af: f1:d7:b3:ea:65:67:56:61:3f:b0:3d:d8:c3:ee:c2: 10:55:53:bc:8d:0e:63:e0:8a:d6:8f:f9:ab:24:eb: e2:4d:2b:b1:37:37:ff:01:33:7a:ae:4c:4b:3e:6c: e1:11:58:d8:31:d5:49:78:63:ed:9e:07:d0:20:61: d9:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:38:27:1E:55:84:0A:BC:C2:CB:5D:85:81:EE:31:24:66:20:B7:10 X509v3 Authority Key Identifier: keyid:2A:2F:B4:DB:0A:A4:D0:06:95:83:16:87:2E:46:7B:55:4E:0F:D0:BE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.cer Subject Information Access: Signed Object - URI:rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/352e38332e3231322e302f32342d3234203d3e20383334.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.83.212.0/24 Signature Algorithm: sha256WithRSAEncryption 48:b4:f8:83:1d:25:d7:c9:bd:85:a2:56:3a:8c:ad:13:1f:28: 29:de:ea:1a:ad:c9:fc:25:04:ea:da:ee:ca:50:61:b7:eb:1c: 46:a2:52:5d:a8:ee:f7:8d:22:98:db:9a:ed:9c:ee:55:87:a8: 6d:59:f2:0c:1b:3f:9d:61:d5:7e:90:56:c5:38:31:9f:60:46: 64:43:dd:dc:1d:61:00:13:5b:fe:06:58:68:42:23:c3:05:1d: f8:9a:99:8e:62:98:6c:c8:d2:e8:4e:4e:b5:52:a9:3d:2a:2e: 4f:39:26:5b:cc:44:b0:c9:80:f8:e3:3f:19:a8:9c:f1:be:9a: 35:1e:32:1a:93:e9:df:be:87:ad:19:06:df:f1:6b:64:c1:a8: 9b:70:02:7c:7f:e7:20:a8:2e:ec:bb:86:50:83:1c:48:93:2d: c2:5e:e4:35:82:88:a5:77:88:fe:8e:f0:9f:94:e6:df:1e:df: da:b4:3a:6b:2a:15:49:b9:9e:f3:25:9d:bf:01:de:a2:53:8c: a8:46:a3:d5:b5:84:a3:5e:cf:cb:62:94:b8:49:74:64:71:57: b7:8c:cf:d9:38:de:49:cc:0a:0d:b3:47:78:50:0c:cf:3f:93: 8c:09:3d:17:76:cc:db:a2:4c:98:be:26:86:23:80:8a:1e:28: ad:be:71:92 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUVh9iCyQvEGNmvPnJH2c42mdYqeAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkEyRkI0REIwQUE0RDAwNjk1ODMxNjg3MkU0NjdCNTU0 RTBGRDBCRTAeFw0yNjAzMTcxOTI5MDVaFw0yNzAzMTYxOTM0MDVaMDMxMTAvBgNV BAMTKDZFMzgyNzFFNTU4NDBBQkNDMkNCNUQ4NTgxRUUzMTI0NjYyMEI3MTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCyCfHiVchU6+Y3I4BHgRDiW4fW swSc1X6JG7tey1N7QqEi0/psv7oZGlYBUELMDGlcE6xaCWVjwheh+RurqLVnj15B MitEs094Iv/UhpSc/wm5kHf8IolaN+jOHhNZHU/sbXuRltlBoqd0lE5jpaCyEjes OXFygiiIAGnUI5Yp9CAdY1gD8893E0HihO5BIk2xLYiZvGl5j1b0lKAYqVPq/Cfb cM5ZQi95/FA1BzHGphApxlIK+uC2BWnPfv6pyTupr/HXs+plZ1ZhP7A92MPuwhBV U7yNDmPgitaP+ask6+JNK7E3N/8BM3quTEs+bOERWNgx1Ul4Y+2eB9AgYdmxAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUbjgnHlWECrzCy12Fge4xJGYgtxAwHwYDVR0j BBgwFoAUKi+02wqk0AaVgxaHLkZ7VU4P0L4wDgYDVR0PAQH/BAQDAgeAMIGIBgNV HR8EgYAwfjB8oHqgeIZ2cnN5bmM6Ly9yLm1hZ2VsbGFuLmlweG8uY29tL3JlcG8v YTZmMjE0N2EtZGU4YS00NDQwLWJjYTItNmQ4YjdjODc2ZmRhLTAvMC8yQTJGQjRE QjBBQTREMDA2OTU4MzE2ODcyRTQ2N0I1NTRFMEZEMEJFLmNybDCBngYIKwYBBQUH AQEEgZEwgY4wgYsGCCsGAQUFBzAChn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5y aXBlLm5ldC9yZXBvc2l0b3J5LzlkZjMzYTU3LTdlNGYtNDg0NC04NGUyLWI3MTUz YjU1MTFiNC8wLzJBMkZCNERCMEFBNEQwMDY5NTgzMTY4NzJFNDY3QjU1NEUwRkQw QkUuY2VyMIGbBggrBgEFBQcBCwSBjjCBizCBiAYIKwYBBQUHMAuGfHJzeW5jOi8v ci5tYWdlbGxhbi5pcHhvLmNvbS9yZXBvL2E2ZjIxNDdhLWRlOGEtNDQ0MC1iY2Ey LTZkOGI3Yzg3NmZkYS0wLzAvMzUyZTM4MzMyZTMyMzEzMjJlMzAyZjMyMzQyZDMy MzQyMDNkM2UyMDM4MzMzNC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAAVT1DANBgkqhkiG9w0BAQsFAAOC AQEASLT4gx0l18m9haJWOoytEx8oKd7qGq3J/CUE6truylBht+scRqJSXaju940i mNua7ZzuVYeobVnyDBs/nWHVfpBWxTgxn2BGZEPd3B1hABNb/gZYaEIjwwUd+JqZ jmKYbMjS6E5OtVKpPSouTzkmW8xEsMmA+OM/Gaic8b6aNR4yGpPp376HrRkG3/Fr ZMGom3ACfH/nIKgu7LuGUIMcSJMtwl7kNYKIpXeI/o7wn5Tm3x7f2rQ6ayoVSbme 8yWdvwHeolOMqEaj1bWEo17Py2KUuEl0ZHFXt4zP2TjeScwKDbNHeFAMzz+TjAk9 F3bM26JMmL4mhiOAih4orb5xkg== -----END CERTIFICATE-----Generated at Thu Mar 26 09:19:34 2026 by rpki-client