$ rpki-client -vvf r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/3130392e3130372e34382e302f32342d3234203d3e20333935373933.roa File: 3130392e3130372e34382e302f32342d3234203d3e20333935373933.roa (raw, json) Hash identifier: 9RzBpjom4pGkBk47+j+pyNZ8gkbt0XIQPWaBM6OIM/M= Subject key identifier: 18:74:39:17:A3:76:A5:5B:FF:70:7A:C4:27:6A:3A:3F:B9:DB:66:B3 Certificate issuer: /CN=2A2FB4DB0AA4D006958316872E467B554E0FD0BE Certificate serial: 70B1BE278F2CEDC214FD0FF95DE611E20520083E Authority key identifier: 2A:2F:B4:DB:0A:A4:D0:06:95:83:16:87:2E:46:7B:55:4E:0F:D0:BE Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.cer Subject info access: rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/3130392e3130372e34382e302f32342d3234203d3e20333935373933.roa Signing time: Thu 17 Jul 2025 10:37:18 +0000 ROA not before: Thu 17 Jul 2025 10:32:18 +0000 ROA not after: Thu 16 Jul 2026 10:37:18 +0000 asID: 395793 IP address blocks: 109.107.48.0/24 maxlen: 24 Validation: OK Signature path: rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.crl rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.mft rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.cer rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.crl rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft rsync://rpki.ripe.net/repository/DEFAULT/RQLmPOAcrSOaw5e8K7Xmw0fc7uo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 05 Nov 2025 15:11:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 70:b1:be:27:8f:2c:ed:c2:14:fd:0f:f9:5d:e6:11:e2:05:20:08:3e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2A2FB4DB0AA4D006958316872E467B554E0FD0BE Validity Not Before: Jul 17 10:32:18 2025 GMT Not After : Jul 16 10:37:18 2026 GMT Subject: CN=18743917A376A55BFF707AC4276A3A3FB9DB66B3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:38:9f:60:30:9d:34:a2:7e:99:ac:9d:54:c7: 37:e6:62:84:0c:32:73:68:ff:99:10:a5:45:ad:d7: b0:a5:4e:b0:15:f9:e6:72:5e:a6:e0:f9:c2:31:92: 8e:a3:a5:c0:63:39:05:92:3f:8c:ac:ab:f8:e2:11: 53:8c:8c:41:1b:80:d8:e2:a2:ad:d9:67:a4:af:1f: 4e:1d:a0:1f:2f:d1:0b:c6:58:0c:cd:ae:e8:91:69: b6:33:1f:b3:10:0a:3d:a5:bc:48:b3:63:63:12:aa: a7:08:3a:f9:b5:af:07:20:4a:a2:a5:d5:07:c6:de: 76:b9:68:c7:71:c7:f4:8d:84:fd:33:49:ec:81:a1: 59:4e:f0:b9:35:2c:10:fb:2e:35:99:69:35:23:7e: 6b:0d:ba:49:ac:94:30:c7:cc:6d:c0:35:b9:2c:77: e0:1b:21:0e:be:db:87:2c:ed:cd:2f:aa:07:15:59: ca:2b:3d:fb:fb:78:ce:3e:dd:67:74:47:c8:82:01: da:f3:dc:86:7d:01:dd:fd:7c:87:4f:02:43:88:01: e5:7d:82:87:53:b8:eb:af:d4:cc:dc:25:2d:e6:89: 91:a3:e5:fa:e0:77:8b:d5:ae:47:7e:07:f4:81:4d: bf:b1:9f:ee:e5:b9:a3:4a:c3:8d:b5:8a:d4:e7:86: 63:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:74:39:17:A3:76:A5:5B:FF:70:7A:C4:27:6A:3A:3F:B9:DB:66:B3 X509v3 Authority Key Identifier: keyid:2A:2F:B4:DB:0A:A4:D0:06:95:83:16:87:2E:46:7B:55:4E:0F:D0:BE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.cer Subject Information Access: Signed Object - URI:rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/3130392e3130372e34382e302f32342d3234203d3e20333935373933.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 109.107.48.0/24 Signature Algorithm: sha256WithRSAEncryption 38:00:c9:97:1d:71:df:35:01:b7:09:29:1e:de:68:e5:0f:30: ea:a1:52:49:aa:00:43:95:d4:56:49:37:7b:97:1f:9d:92:b9: de:18:16:fd:e0:2a:85:74:f7:3f:f9:1c:be:fc:65:4a:7b:b7: f5:4d:78:5b:67:ff:6f:e2:d4:56:64:20:22:00:54:d7:18:7f: ac:d5:41:0f:f8:df:80:85:a7:76:e1:1e:b8:7a:81:6f:37:01: da:b7:55:92:07:34:c0:91:6a:2a:7b:3e:5a:10:a8:e8:2e:d9: cd:27:73:f0:32:a9:9b:47:25:76:6e:d8:b8:bf:47:ea:60:d8: 10:78:cd:92:c8:5f:82:dc:4a:be:89:0e:f6:00:2d:77:7b:4f: 7f:a6:a0:24:2c:5c:f8:cf:8d:1e:32:5b:96:5e:af:3a:d2:56: 7b:55:1f:a9:e9:ab:04:e2:c2:ab:9d:b1:39:57:f3:e7:45:ab: 89:06:14:88:4b:4b:e8:b1:54:19:7c:7a:13:49:e9:83:1a:c1: 14:a2:b9:80:e3:3c:de:b5:2b:f5:6c:42:70:78:1c:33:2e:a5: a3:e1:e1:21:bf:b4:2a:e3:b3:00:22:9c:a9:c4:0f:d1:03:b8: c7:b9:8f:42:21:00:10:a0:8c:a8:95:16:9c:87:2b:d8:a1:1c: 90:cd:a2:61 -----BEGIN CERTIFICATE----- MIIFWjCCBEKgAwIBAgIUcLG+J48s7cIU/Q/5XeYR4gUgCD4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkEyRkI0REIwQUE0RDAwNjk1ODMxNjg3MkU0NjdCNTU0 RTBGRDBCRTAeFw0yNTA3MTcxMDMyMThaFw0yNjA3MTYxMDM3MThaMDMxMTAvBgNV BAMTKDE4NzQzOTE3QTM3NkE1NUJGRjcwN0FDNDI3NkEzQTNGQjlEQjY2QjMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+OJ9gMJ00on6ZrJ1UxzfmYoQM MnNo/5kQpUWt17ClTrAV+eZyXqbg+cIxko6jpcBjOQWSP4ysq/jiEVOMjEEbgNji oq3ZZ6SvH04doB8v0QvGWAzNruiRabYzH7MQCj2lvEizY2MSqqcIOvm1rwcgSqKl 1QfG3na5aMdxx/SNhP0zSeyBoVlO8Lk1LBD7LjWZaTUjfmsNukmslDDHzG3ANbks d+AbIQ6+24cs7c0vqgcVWcorPfv7eM4+3Wd0R8iCAdrz3IZ9Ad39fIdPAkOIAeV9 godTuOuv1MzcJS3miZGj5frgd4vVrkd+B/SBTb+xn+7luaNKw421itTnhmNpAgMB AAGjggJkMIICYDAdBgNVHQ4EFgQUGHQ5F6N2pVv/cHrEJ2o6P7nbZrMwHwYDVR0j BBgwFoAUKi+02wqk0AaVgxaHLkZ7VU4P0L4wDgYDVR0PAQH/BAQDAgeAMIGIBgNV HR8EgYAwfjB8oHqgeIZ2cnN5bmM6Ly9yLm1hZ2VsbGFuLmlweG8uY29tL3JlcG8v YTZmMjE0N2EtZGU4YS00NDQwLWJjYTItNmQ4YjdjODc2ZmRhLTAvMC8yQTJGQjRE QjBBQTREMDA2OTU4MzE2ODcyRTQ2N0I1NTRFMEZEMEJFLmNybDCBngYIKwYBBQUH AQEEgZEwgY4wgYsGCCsGAQUFBzAChn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5y aXBlLm5ldC9yZXBvc2l0b3J5LzlkZjMzYTU3LTdlNGYtNDg0NC04NGUyLWI3MTUz YjU1MTFiNC8wLzJBMkZCNERCMEFBNEQwMDY5NTgzMTY4NzJFNDY3QjU1NEUwRkQw QkUuY2VyMIGmBggrBgEFBQcBCwSBmTCBljCBkwYIKwYBBQUHMAuGgYZyc3luYzov L3IubWFnZWxsYW4uaXB4by5jb20vcmVwby9hNmYyMTQ3YS1kZThhLTQ0NDAtYmNh Mi02ZDhiN2M4NzZmZGEtMC8wLzMxMzAzOTJlMzEzMDM3MmUzNDM4MmUzMDJmMzIz NDJkMzIzNDIwM2QzZTIwMzMzOTM1MzczOTMzLnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAbWswMA0GCSqG SIb3DQEBCwUAA4IBAQA4AMmXHXHfNQG3CSke3mjlDzDqoVJJqgBDldRWSTd7lx+d krneGBb94CqFdPc/+Ry+/GVKe7f1TXhbZ/9v4tRWZCAiAFTXGH+s1UEP+N+Ahad2 4R64eoFvNwHat1WSBzTAkWoqez5aEKjoLtnNJ3PwMqmbRyV2bti4v0fqYNgQeM2S yF+C3Eq+iQ72AC13e09/pqAkLFz4z40eMluWXq860lZ7VR+p6asE4sKrnbE5V/Pn RauJBhSIS0vosVQZfHoTSemDGsEUormA4zzetSv1bEJweBwzLqWj4eEhv7Qq47MA IpypxA/RA7jHuY9CIQAQoIyolRachyvYoRyQzaJh -----END CERTIFICATE-----Generated at Wed Nov 5 00:24:01 2025 by rpki-client