$ rpki-client -vvf r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/33372e312e3232382e302f32342d3234203d3e203239383032.roa File: 33372e312e3232382e302f32342d3234203d3e203239383032.roa (raw, json) Hash identifier: 9P5jnTBENTUvZciD4zr0l2zPZKLUvBx9MpAulHqe7Uk= Subject key identifier: 71:0A:DB:1E:BC:FC:49:B4:79:6E:F8:B3:1D:C9:2E:C4:41:24:32:BB Certificate issuer: /CN=2A2FB4DB0AA4D006958316872E467B554E0FD0BE Certificate serial: 216885202A1F21ECB09C0707B8D93DE31D0072A2 Authority key identifier: 2A:2F:B4:DB:0A:A4:D0:06:95:83:16:87:2E:46:7B:55:4E:0F:D0:BE Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.cer Subject info access: rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/33372e312e3232382e302f32342d3234203d3e203239383032.roa Signing time: Tue 10 Feb 2026 00:15:56 +0000 ROA not before: Tue 10 Feb 2026 00:10:56 +0000 ROA not after: Tue 09 Feb 2027 00:15:56 +0000 asID: 29802 IP address blocks: 37.1.228.0/24 maxlen: 24 Validation: OK Signature path: rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.crl rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.mft rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.cer rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.crl rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft rsync://rpki.ripe.net/repository/DEFAULT/RQLmPOAcrSOaw5e8K7Xmw0fc7uo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 02 Mar 2026 07:38:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 21:68:85:20:2a:1f:21:ec:b0:9c:07:07:b8:d9:3d:e3:1d:00:72:a2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2A2FB4DB0AA4D006958316872E467B554E0FD0BE Validity Not Before: Feb 10 00:10:56 2026 GMT Not After : Feb 9 00:15:56 2027 GMT Subject: CN=710ADB1EBCFC49B4796EF8B31DC92EC4412432BB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:ac:3c:82:44:e0:75:7c:7e:75:00:54:11:6c: 86:96:d0:37:67:7a:73:37:26:3d:fb:93:2f:86:c9: 24:ef:32:82:19:70:82:a6:58:fb:ab:2c:23:22:10: 63:20:cc:8b:ce:fa:38:ab:84:cd:31:ce:ce:eb:2f: 22:56:a4:52:f7:f2:74:1c:65:6c:c5:8a:c1:f9:b8: a6:3b:d2:92:9b:5b:48:67:e5:af:fe:26:60:b8:ea: 3d:8a:b0:e7:60:b7:17:00:29:a6:11:a2:05:1a:d1: a5:83:fb:01:96:7c:79:3d:b4:52:29:e5:ef:76:98: bf:4f:06:0d:dd:63:99:ab:cf:7e:77:7b:63:0f:1a: f0:b7:38:0c:a6:c5:06:f9:a5:ea:57:19:e8:e7:b3: d1:d5:fa:6d:1a:fd:06:73:f8:17:ac:23:c2:08:53: 04:ac:59:d4:0c:ab:a0:b8:d0:98:3b:fa:7f:96:c4: 57:b2:4c:1f:5a:a5:dc:e2:4d:90:9b:5d:07:76:87: 48:16:d3:df:9c:de:39:15:82:79:05:dd:11:c0:84: 27:b3:a8:d8:fd:5e:4e:63:32:ab:e8:f1:04:31:27: 95:65:da:f4:c6:0d:d6:c6:0b:81:47:70:ee:bb:4d: 1f:d0:99:79:bd:b5:df:0f:2c:f5:1e:69:b6:1c:cb: 1f:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:0A:DB:1E:BC:FC:49:B4:79:6E:F8:B3:1D:C9:2E:C4:41:24:32:BB X509v3 Authority Key Identifier: keyid:2A:2F:B4:DB:0A:A4:D0:06:95:83:16:87:2E:46:7B:55:4E:0F:D0:BE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.cer Subject Information Access: Signed Object - URI:rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/33372e312e3232382e302f32342d3234203d3e203239383032.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 37.1.228.0/24 Signature Algorithm: sha256WithRSAEncryption 6b:3c:8e:d2:8d:09:fc:1b:9e:62:1f:c6:28:5b:7d:00:4c:3e: 78:25:5c:19:11:aa:05:b8:32:dd:12:39:a2:9c:84:42:52:0c: 8c:63:e4:5c:20:64:b4:43:03:38:72:19:e6:b3:06:2f:2e:49: 89:95:ef:f3:9c:7a:84:5e:9b:a2:df:50:31:58:2d:fb:90:37: 48:0c:62:34:79:80:3e:50:7b:64:1f:03:4e:f3:7a:22:95:76: 86:1d:b3:d1:de:95:fe:eb:b4:d5:3d:97:ee:e2:08:42:ad:9b: f9:4f:b7:e5:2e:94:b7:0e:72:99:ed:93:60:fd:ce:76:30:af: e2:b8:a0:9b:4e:d9:37:ab:47:43:2a:56:e9:37:d3:39:8b:dc: 59:f5:a2:9f:3e:31:70:69:cf:5f:c3:52:6d:89:97:d5:16:05: 49:cd:c2:9c:33:e0:4e:0e:4f:e3:9e:d9:ae:f9:d0:bb:84:44: d4:2b:d0:d0:61:2e:9b:76:b6:f5:aa:65:ae:d0:97:98:04:fe: 8d:82:61:68:24:21:87:a3:79:c9:7b:04:93:6e:ad:54:60:b2: cd:be:17:09:90:bf:60:67:c5:dc:3f:aa:d2:2a:11:75:84:62: 3c:c7:75:4d:c1:04:7f:ec:13:a7:9c:a1:f4:32:32:8e:30:05: b0:5f:ff:52 -----BEGIN CERTIFICATE----- MIIFVDCCBDygAwIBAgIUIWiFICofIeywnAcHuNk94x0AcqIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkEyRkI0REIwQUE0RDAwNjk1ODMxNjg3MkU0NjdCNTU0 RTBGRDBCRTAeFw0yNjAyMTAwMDEwNTZaFw0yNzAyMDkwMDE1NTZaMDMxMTAvBgNV BAMTKDcxMEFEQjFFQkNGQzQ5QjQ3OTZFRjhCMzFEQzkyRUM0NDEyNDMyQkIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2rDyCROB1fH51AFQRbIaW0Ddn enM3Jj37ky+GySTvMoIZcIKmWPurLCMiEGMgzIvO+jirhM0xzs7rLyJWpFL38nQc ZWzFisH5uKY70pKbW0hn5a/+JmC46j2KsOdgtxcAKaYRogUa0aWD+wGWfHk9tFIp 5e92mL9PBg3dY5mrz353e2MPGvC3OAymxQb5pepXGejns9HV+m0a/QZz+BesI8II UwSsWdQMq6C40Jg7+n+WxFeyTB9apdziTZCbXQd2h0gW09+c3jkVgnkF3RHAhCez qNj9Xk5jMqvo8QQxJ5Vl2vTGDdbGC4FHcO67TR/QmXm9td8PLPUeabYcyx9xAgMB AAGjggJeMIICWjAdBgNVHQ4EFgQUcQrbHrz8SbR5bvizHckuxEEkMrswHwYDVR0j BBgwFoAUKi+02wqk0AaVgxaHLkZ7VU4P0L4wDgYDVR0PAQH/BAQDAgeAMIGIBgNV HR8EgYAwfjB8oHqgeIZ2cnN5bmM6Ly9yLm1hZ2VsbGFuLmlweG8uY29tL3JlcG8v YTZmMjE0N2EtZGU4YS00NDQwLWJjYTItNmQ4YjdjODc2ZmRhLTAvMC8yQTJGQjRE QjBBQTREMDA2OTU4MzE2ODcyRTQ2N0I1NTRFMEZEMEJFLmNybDCBngYIKwYBBQUH AQEEgZEwgY4wgYsGCCsGAQUFBzAChn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5y aXBlLm5ldC9yZXBvc2l0b3J5LzlkZjMzYTU3LTdlNGYtNDg0NC04NGUyLWI3MTUz YjU1MTFiNC8wLzJBMkZCNERCMEFBNEQwMDY5NTgzMTY4NzJFNDY3QjU1NEUwRkQw QkUuY2VyMIGgBggrBgEFBQcBCwSBkzCBkDCBjQYIKwYBBQUHMAuGgYByc3luYzov L3IubWFnZWxsYW4uaXB4by5jb20vcmVwby9hNmYyMTQ3YS1kZThhLTQ0NDAtYmNh Mi02ZDhiN2M4NzZmZGEtMC8wLzMzMzcyZTMxMmUzMjMyMzgyZTMwMmYzMjM0MmQz MjM0MjAzZDNlMjAzMjM5MzgzMDMyLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAJQHkMA0GCSqGSIb3DQEB CwUAA4IBAQBrPI7SjQn8G55iH8YoW30ATD54JVwZEaoFuDLdEjminIRCUgyMY+Rc IGS0QwM4chnmswYvLkmJle/znHqEXpui31AxWC37kDdIDGI0eYA+UHtkHwNO83oi lXaGHbPR3pX+67TVPZfu4ghCrZv5T7flLpS3DnKZ7ZNg/c52MK/iuKCbTtk3q0dD KlbpN9M5i9xZ9aKfPjFwac9fw1JtiZfVFgVJzcKcM+BODk/jntmu+dC7hETUK9DQ YS6bdrb1qmWu0JeYBP6NgmFoJCGHo3nJewSTbq1UYLLNvhcJkL9gZ8XcP6rSKhF1 hGI8x3VNwQR/7BOnnKH0MjKOMAWwX/9S -----END CERTIFICATE-----Generated at Sun Mar 1 18:33:49 2026 by rpki-client