$ rpki-client -vvf r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/33372e312e3232392e302f32342d3234203d3e203631333137.roa File: 33372e312e3232392e302f32342d3234203d3e203631333137.roa (raw, json) Hash identifier: ZgruGfToalAhRy4NNQtPKSbqW91ww0yeO5PE7ydS+9Y= Subject key identifier: D2:0B:3B:66:7B:98:F8:33:CC:E4:6C:77:F5:7D:42:2D:B5:57:30:A9 Certificate issuer: /CN=2A2FB4DB0AA4D006958316872E467B554E0FD0BE Certificate serial: 1FD47D52DC802AF1D88720CE912F68F9F70EBBDA Authority key identifier: 2A:2F:B4:DB:0A:A4:D0:06:95:83:16:87:2E:46:7B:55:4E:0F:D0:BE Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.cer Subject info access: rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/33372e312e3232392e302f32342d3234203d3e203631333137.roa Signing time: Tue 09 Sep 2025 11:55:00 +0000 ROA not before: Tue 09 Sep 2025 11:50:00 +0000 ROA not after: Tue 08 Sep 2026 11:55:00 +0000 asID: 61317 IP address blocks: 37.1.229.0/24 maxlen: 24 Validation: OK Signature path: rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.crl rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.mft rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.cer rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.crl rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft rsync://rpki.ripe.net/repository/DEFAULT/RQLmPOAcrSOaw5e8K7Xmw0fc7uo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 05 Nov 2025 09:00:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1f:d4:7d:52:dc:80:2a:f1:d8:87:20:ce:91:2f:68:f9:f7:0e:bb:da Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2A2FB4DB0AA4D006958316872E467B554E0FD0BE Validity Not Before: Sep 9 11:50:00 2025 GMT Not After : Sep 8 11:55:00 2026 GMT Subject: CN=D20B3B667B98F833CCE46C77F57D422DB55730A9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:79:cb:9a:58:1c:d5:2f:18:6c:a9:37:e9:84: 94:41:7f:b6:0b:6a:ab:07:c0:c8:3c:4a:6b:d5:20: bc:a0:73:13:14:17:91:14:51:58:a2:26:f7:2b:eb: 10:b3:1e:89:f1:d1:ae:f5:97:76:8c:0d:05:15:ef: 19:b5:40:59:9c:ed:e4:e7:24:10:39:f0:ad:38:c9: 1f:39:71:4c:d2:86:20:a8:3a:6d:be:32:bc:90:d2: 0a:47:fa:28:c0:92:91:4f:3b:c5:2a:cb:86:f0:1a: 55:ed:fd:38:26:ef:6b:1b:a9:39:a1:c5:47:02:32: fb:a7:82:38:c4:ac:e1:e8:2a:d0:3e:78:d2:f2:00: d7:d9:3c:62:7d:d1:eb:8b:d3:15:8f:dc:4c:93:42: e4:fa:11:8e:da:9c:f8:3e:ae:82:73:b8:29:28:ba: b1:ad:f3:25:c4:65:96:84:ba:9b:10:3c:9f:79:16: cb:0f:a0:9f:55:73:8b:a0:ec:69:76:cf:e6:ca:9f: 4e:01:49:d3:a8:a6:68:2c:e2:4d:e7:9f:cf:b3:df: 33:47:c7:26:dd:c5:c3:a2:6d:67:71:7e:10:4c:fe: fc:e2:52:70:58:ec:50:f7:c3:9a:31:ca:be:a1:e4: 53:2d:67:22:ba:a3:77:1f:ec:88:24:71:28:9f:79: 0d:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:0B:3B:66:7B:98:F8:33:CC:E4:6C:77:F5:7D:42:2D:B5:57:30:A9 X509v3 Authority Key Identifier: keyid:2A:2F:B4:DB:0A:A4:D0:06:95:83:16:87:2E:46:7B:55:4E:0F:D0:BE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.cer Subject Information Access: Signed Object - URI:rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/33372e312e3232392e302f32342d3234203d3e203631333137.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 37.1.229.0/24 Signature Algorithm: sha256WithRSAEncryption 1f:51:6c:80:aa:e6:9e:8c:e1:b5:2e:07:cc:c7:a2:c2:ee:99: 0d:11:86:06:b8:0c:7d:c4:96:f2:7b:35:5f:2d:c8:55:18:db: 53:d2:12:6d:05:f4:47:f2:e3:06:fc:9f:a4:04:29:79:f8:72: 6d:c6:40:22:45:f6:b0:d6:c1:9a:6a:d3:49:77:f6:c2:11:24: c0:b1:55:0f:d4:aa:cf:2a:cc:14:4a:50:22:c6:b7:0d:9e:22: c0:86:ba:89:f5:c2:d2:46:ad:e5:78:8f:11:5e:56:26:94:f4: 53:fe:b1:50:f3:e2:ec:5a:dd:51:41:f0:5d:c8:b0:47:2d:ee: 75:34:bf:34:18:30:cf:84:6c:9e:0f:dd:bd:26:2a:42:c0:e4: 5a:ed:56:ed:47:94:00:a5:4e:24:f6:a2:a3:de:fd:94:8e:03: a7:82:dc:ac:07:13:30:5c:24:89:fb:2a:55:3c:3a:cb:42:05: 78:30:be:a2:5e:43:67:87:97:d2:fc:9a:20:56:d7:1c:fc:a8: 70:f4:02:8e:01:b1:f1:e2:96:4b:6b:3f:51:44:47:35:cc:95: f3:4f:f6:0c:4e:39:c2:12:de:b4:20:98:a4:cf:3d:24:4d:a6: 21:8f:58:55:5d:f8:b5:a7:37:18:95:98:2e:2f:53:8a:23:7e: 09:b0:d4:32 -----BEGIN CERTIFICATE----- MIIFVDCCBDygAwIBAgIUH9R9UtyAKvHYhyDOkS9o+fcOu9owDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkEyRkI0REIwQUE0RDAwNjk1ODMxNjg3MkU0NjdCNTU0 RTBGRDBCRTAeFw0yNTA5MDkxMTUwMDBaFw0yNjA5MDgxMTU1MDBaMDMxMTAvBgNV BAMTKEQyMEIzQjY2N0I5OEY4MzNDQ0U0NkM3N0Y1N0Q0MjJEQjU1NzMwQTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCvecuaWBzVLxhsqTfphJRBf7YL aqsHwMg8SmvVILygcxMUF5EUUViiJvcr6xCzHonx0a71l3aMDQUV7xm1QFmc7eTn JBA58K04yR85cUzShiCoOm2+MryQ0gpH+ijAkpFPO8Uqy4bwGlXt/Tgm72sbqTmh xUcCMvungjjErOHoKtA+eNLyANfZPGJ90euL0xWP3EyTQuT6EY7anPg+roJzuCko urGt8yXEZZaEupsQPJ95FssPoJ9Vc4ug7Gl2z+bKn04BSdOopmgs4k3nn8+z3zNH xybdxcOibWdxfhBM/vziUnBY7FD3w5oxyr6h5FMtZyK6o3cf7IgkcSifeQ1rAgMB AAGjggJeMIICWjAdBgNVHQ4EFgQU0gs7ZnuY+DPM5Gx39X1CLbVXMKkwHwYDVR0j BBgwFoAUKi+02wqk0AaVgxaHLkZ7VU4P0L4wDgYDVR0PAQH/BAQDAgeAMIGIBgNV HR8EgYAwfjB8oHqgeIZ2cnN5bmM6Ly9yLm1hZ2VsbGFuLmlweG8uY29tL3JlcG8v YTZmMjE0N2EtZGU4YS00NDQwLWJjYTItNmQ4YjdjODc2ZmRhLTAvMC8yQTJGQjRE QjBBQTREMDA2OTU4MzE2ODcyRTQ2N0I1NTRFMEZEMEJFLmNybDCBngYIKwYBBQUH AQEEgZEwgY4wgYsGCCsGAQUFBzAChn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5y aXBlLm5ldC9yZXBvc2l0b3J5LzlkZjMzYTU3LTdlNGYtNDg0NC04NGUyLWI3MTUz YjU1MTFiNC8wLzJBMkZCNERCMEFBNEQwMDY5NTgzMTY4NzJFNDY3QjU1NEUwRkQw QkUuY2VyMIGgBggrBgEFBQcBCwSBkzCBkDCBjQYIKwYBBQUHMAuGgYByc3luYzov L3IubWFnZWxsYW4uaXB4by5jb20vcmVwby9hNmYyMTQ3YS1kZThhLTQ0NDAtYmNh Mi02ZDhiN2M4NzZmZGEtMC8wLzMzMzcyZTMxMmUzMjMyMzkyZTMwMmYzMjM0MmQz MjM0MjAzZDNlMjAzNjMxMzMzMTM3LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAJQHlMA0GCSqGSIb3DQEB CwUAA4IBAQAfUWyAquaejOG1LgfMx6LC7pkNEYYGuAx9xJbyezVfLchVGNtT0hJt BfRH8uMG/J+kBCl5+HJtxkAiRfaw1sGaatNJd/bCESTAsVUP1KrPKswUSlAixrcN niLAhrqJ9cLSRq3leI8RXlYmlPRT/rFQ8+LsWt1RQfBdyLBHLe51NL80GDDPhGye D929JipCwORa7VbtR5QApU4k9qKj3v2UjgOngtysBxMwXCSJ+ypVPDrLQgV4ML6i XkNnh5fS/JogVtcc/Khw9AKOAbHx4pZLaz9RREc1zJXzT/YMTjnCEt60IJikzz0k TaYhj1hVXfi1pzcYlZguL1OKI34JsNQy -----END CERTIFICATE-----Generated at Tue Nov 4 19:05:08 2025 by rpki-client