$ rpki-client -vvf r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/3130392e3130372e34382e302f32312d3231203d3e20333935373933.roa File: 3130392e3130372e34382e302f32312d3231203d3e20333935373933.roa (raw, json) Hash identifier: FrBQAmq9hTtn6RQN+iWwUvhm2LeQhudLE2z3CXw/K/M= Subject key identifier: E8:B2:B3:C5:24:7C:12:C4:8E:CA:2B:28:86:5A:F4:B4:D1:31:B0:80 Certificate issuer: /CN=2A2FB4DB0AA4D006958316872E467B554E0FD0BE Certificate serial: 10B682B5778D84297E8FF9385E6C26A205FABCFF Authority key identifier: 2A:2F:B4:DB:0A:A4:D0:06:95:83:16:87:2E:46:7B:55:4E:0F:D0:BE Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.cer Subject info access: rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/3130392e3130372e34382e302f32312d3231203d3e20333935373933.roa Signing time: Tue 17 Jun 2025 17:54:37 +0000 ROA not before: Tue 17 Jun 2025 17:49:37 +0000 ROA not after: Tue 16 Jun 2026 17:54:37 +0000 asID: 395793 IP address blocks: 109.107.48.0/21 maxlen: 21 Validation: OK Signature path: rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.crl rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.mft rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.cer rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.crl rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft rsync://rpki.ripe.net/repository/DEFAULT/RQLmPOAcrSOaw5e8K7Xmw0fc7uo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 23 Jun 2025 11:18:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10:b6:82:b5:77:8d:84:29:7e:8f:f9:38:5e:6c:26:a2:05:fa:bc:ff Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2A2FB4DB0AA4D006958316872E467B554E0FD0BE Validity Not Before: Jun 17 17:49:37 2025 GMT Not After : Jun 16 17:54:37 2026 GMT Subject: CN=E8B2B3C5247C12C48ECA2B28865AF4B4D131B080 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:0e:38:df:75:21:7a:9b:a1:6e:49:cb:ed:02: 03:27:12:2a:92:56:48:f8:23:f5:83:9d:b6:3d:46: bc:6b:82:e6:42:f5:93:52:1b:02:a1:4f:ac:67:81: 56:c8:18:9d:1a:08:0f:ed:be:38:d6:61:f9:ff:78: 2b:2f:15:0a:06:18:22:fe:64:73:9b:84:a9:19:82: ac:48:2f:66:f0:c4:ac:1a:c2:b7:0c:5d:7b:8c:11: e4:bd:cb:67:d8:21:6b:cf:0d:8c:d2:b6:82:aa:89: 84:bd:8a:3e:8b:f3:72:a7:e2:4a:28:0a:dc:a6:7a: 24:d2:0a:d9:9d:79:6d:5b:0c:81:87:00:3c:5d:c0: 6f:7a:9d:b9:c7:1d:bd:af:80:86:69:a4:4d:02:4a: bd:f1:17:4a:71:7a:76:e4:9c:3e:be:d0:59:1e:28: 6e:4d:e8:e8:a7:af:73:75:86:99:bf:ef:b3:6d:b5: 54:b3:1b:5d:cd:3c:4c:31:a1:93:3e:3d:59:45:dd: 57:8e:c5:44:3a:68:50:be:ed:7b:c7:41:c6:14:f1: 63:b5:4a:c5:c7:d8:e3:23:a8:25:41:12:41:83:f3: 1c:84:5f:e9:ea:73:12:53:2e:8c:db:1b:94:ed:f7: ed:24:46:9b:3b:a1:81:f8:91:39:07:04:bf:b9:d7: 3a:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:B2:B3:C5:24:7C:12:C4:8E:CA:2B:28:86:5A:F4:B4:D1:31:B0:80 X509v3 Authority Key Identifier: keyid:2A:2F:B4:DB:0A:A4:D0:06:95:83:16:87:2E:46:7B:55:4E:0F:D0:BE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.cer Subject Information Access: Signed Object - URI:rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/3130392e3130372e34382e302f32312d3231203d3e20333935373933.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 109.107.48.0/21 Signature Algorithm: sha256WithRSAEncryption 80:c5:43:7c:fa:2d:89:2b:d7:0f:60:c2:a0:d4:6c:16:4c:c9: 00:cb:68:9c:2d:24:2f:b7:ef:f5:94:14:9e:2c:73:2e:70:d6: cc:fe:a9:44:bf:41:1c:07:d6:17:fd:a5:c5:12:5b:b4:18:56: c7:02:65:66:c8:f8:8a:9a:8f:3c:b8:43:fa:dd:c0:a6:dc:0b: 47:96:11:ac:ea:d9:54:79:e5:5b:bd:19:e3:be:a9:c9:fc:8a: bb:85:8e:c1:fe:dd:28:28:df:6a:bd:d7:47:da:e0:95:6f:78: 46:7e:d8:57:00:de:b3:07:8d:c3:df:0e:db:cc:93:e8:0d:85: 6e:3b:cd:d6:53:d4:a4:01:3e:9b:23:c3:a3:4d:06:58:a1:20: 0e:40:12:a2:32:db:6c:eb:2d:98:db:04:23:b9:01:20:8e:37: 71:0b:13:d3:3e:9d:eb:e3:38:fa:b2:4e:3b:57:a6:f7:6d:e5: 09:ab:b4:e3:86:db:13:71:e4:44:3e:c8:25:73:a8:bd:df:21: d2:eb:db:36:1a:c5:62:26:6c:b4:93:c4:84:74:b5:d2:10:04: e7:45:1d:cb:56:e4:f3:70:a4:bc:12:7c:c4:f5:a6:64:38:0c: 95:25:99:e4:09:51:7c:ba:14:60:43:7b:d6:6f:e9:23:f8:85: 97:df:4e:79 -----BEGIN CERTIFICATE----- MIIFWjCCBEKgAwIBAgIUELaCtXeNhCl+j/k4XmwmogX6vP8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkEyRkI0REIwQUE0RDAwNjk1ODMxNjg3MkU0NjdCNTU0 RTBGRDBCRTAeFw0yNTA2MTcxNzQ5MzdaFw0yNjA2MTYxNzU0MzdaMDMxMTAvBgNV BAMTKEU4QjJCM0M1MjQ3QzEyQzQ4RUNBMkIyODg2NUFGNEI0RDEzMUIwODAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6DjjfdSF6m6FuScvtAgMnEiqS Vkj4I/WDnbY9RrxrguZC9ZNSGwKhT6xngVbIGJ0aCA/tvjjWYfn/eCsvFQoGGCL+ ZHObhKkZgqxIL2bwxKwawrcMXXuMEeS9y2fYIWvPDYzStoKqiYS9ij6L83Kn4koo CtymeiTSCtmdeW1bDIGHADxdwG96nbnHHb2vgIZppE0CSr3xF0pxenbknD6+0Fke KG5N6Oinr3N1hpm/77NttVSzG13NPEwxoZM+PVlF3VeOxUQ6aFC+7XvHQcYU8WO1 SsXH2OMjqCVBEkGD8xyEX+nqcxJTLozbG5Tt9+0kRps7oYH4kTkHBL+51zoFAgMB AAGjggJkMIICYDAdBgNVHQ4EFgQU6LKzxSR8EsSOyisohlr0tNExsIAwHwYDVR0j BBgwFoAUKi+02wqk0AaVgxaHLkZ7VU4P0L4wDgYDVR0PAQH/BAQDAgeAMIGIBgNV HR8EgYAwfjB8oHqgeIZ2cnN5bmM6Ly9yLm1hZ2VsbGFuLmlweG8uY29tL3JlcG8v YTZmMjE0N2EtZGU4YS00NDQwLWJjYTItNmQ4YjdjODc2ZmRhLTAvMC8yQTJGQjRE QjBBQTREMDA2OTU4MzE2ODcyRTQ2N0I1NTRFMEZEMEJFLmNybDCBngYIKwYBBQUH AQEEgZEwgY4wgYsGCCsGAQUFBzAChn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5y aXBlLm5ldC9yZXBvc2l0b3J5LzlkZjMzYTU3LTdlNGYtNDg0NC04NGUyLWI3MTUz YjU1MTFiNC8wLzJBMkZCNERCMEFBNEQwMDY5NTgzMTY4NzJFNDY3QjU1NEUwRkQw QkUuY2VyMIGmBggrBgEFBQcBCwSBmTCBljCBkwYIKwYBBQUHMAuGgYZyc3luYzov L3IubWFnZWxsYW4uaXB4by5jb20vcmVwby9hNmYyMTQ3YS1kZThhLTQ0NDAtYmNh Mi02ZDhiN2M4NzZmZGEtMC8wLzMxMzAzOTJlMzEzMDM3MmUzNDM4MmUzMDJmMzIz MTJkMzIzMTIwM2QzZTIwMzMzOTM1MzczOTMzLnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDbWswMA0GCSqG SIb3DQEBCwUAA4IBAQCAxUN8+i2JK9cPYMKg1GwWTMkAy2icLSQvt+/1lBSeLHMu cNbM/qlEv0EcB9YX/aXFElu0GFbHAmVmyPiKmo88uEP63cCm3AtHlhGs6tlUeeVb vRnjvqnJ/Iq7hY7B/t0oKN9qvddH2uCVb3hGfthXAN6zB43D3w7bzJPoDYVuO83W U9SkAT6bI8OjTQZYoSAOQBKiMtts6y2Y2wQjuQEgjjdxCxPTPp3r4zj6sk47V6b3 beUJq7TjhtsTceREPsglc6i93yHS69s2GsViJmy0k8SEdLXSEATnRR3LVuTzcKS8 EnzE9aZkOAyVJZnkCVF8uhRgQ3vWb+kj+IWX3055 -----END CERTIFICATE-----Generated at Mon Jun 23 03:14:25 2025 by rpki-client