$ rpki-client -vvf r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/33372e3233302e34392e302f32342d3234203d3e20323131343135.roa File: 33372e3233302e34392e302f32342d3234203d3e20323131343135.roa (raw, json) Hash identifier: j/U7cD0/F8VUBxGEtFyBdViOS+MB9seMi3JYIseBeKQ= Subject key identifier: A9:38:B7:DE:80:FC:5C:5E:9F:36:49:61:6D:ED:9D:99:FE:9B:8A:35 Certificate issuer: /CN=2A2FB4DB0AA4D006958316872E467B554E0FD0BE Certificate serial: 2FC427C2B8344D5FFCF99D09506811D896E25B31 Authority key identifier: 2A:2F:B4:DB:0A:A4:D0:06:95:83:16:87:2E:46:7B:55:4E:0F:D0:BE Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.cer Subject info access: rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/33372e3233302e34392e302f32342d3234203d3e20323131343135.roa Signing time: Wed 04 Feb 2026 14:55:36 +0000 ROA not before: Wed 04 Feb 2026 14:50:36 +0000 ROA not after: Wed 03 Feb 2027 14:55:36 +0000 asID: 211415 IP address blocks: 37.230.49.0/24 maxlen: 24 Validation: OK Signature path: rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.crl rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.mft rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.cer rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.crl rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft rsync://rpki.ripe.net/repository/DEFAULT/RQLmPOAcrSOaw5e8K7Xmw0fc7uo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 02 Mar 2026 07:38:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2f:c4:27:c2:b8:34:4d:5f:fc:f9:9d:09:50:68:11:d8:96:e2:5b:31 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2A2FB4DB0AA4D006958316872E467B554E0FD0BE Validity Not Before: Feb 4 14:50:36 2026 GMT Not After : Feb 3 14:55:36 2027 GMT Subject: CN=A938B7DE80FC5C5E9F3649616DED9D99FE9B8A35 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:01:3f:52:0f:d0:68:7e:bd:06:cd:d1:a7:7b: b4:b7:f9:27:62:2e:bd:f1:7e:fc:75:f6:53:6e:75: 15:c0:d5:f5:7d:5a:4b:db:3e:c5:86:6f:ed:3f:81: d1:10:04:a6:40:14:98:d6:36:0f:09:93:0f:96:ba: f5:7c:b7:01:03:45:c5:9f:1c:ce:06:e4:6d:36:59: 9d:30:87:a5:90:d5:7c:69:12:a8:33:e6:b4:c0:a7: 8e:80:75:8f:f7:35:6e:8a:a6:ac:76:a2:e0:f3:e5: ec:17:d5:01:2a:22:bd:60:7e:75:5b:b6:84:a3:f0: 23:ca:f4:18:14:b4:af:81:f6:6d:0b:3a:3d:da:c9: b3:ea:d2:47:14:f9:17:d3:40:30:f4:8e:bf:c3:75: 13:bd:c1:17:02:a8:28:a4:dd:26:52:b6:11:7c:2a: 8b:65:77:e4:7e:4c:2a:ce:98:27:5c:25:3f:d9:93: 7f:43:4c:24:7d:98:f6:8c:c7:03:6c:8f:cc:93:b3: 94:af:30:7a:fa:88:3f:ac:5c:c7:c7:e8:b9:52:74: 5e:f6:ad:47:cf:aa:78:aa:f2:b2:95:17:e7:87:c5: 7d:20:0f:4d:f7:6c:49:2a:2a:13:59:27:71:bd:1d: 7f:ac:2c:cf:67:ca:9d:4c:fb:de:c2:36:a4:fe:da: 1f:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:38:B7:DE:80:FC:5C:5E:9F:36:49:61:6D:ED:9D:99:FE:9B:8A:35 X509v3 Authority Key Identifier: keyid:2A:2F:B4:DB:0A:A4:D0:06:95:83:16:87:2E:46:7B:55:4E:0F:D0:BE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.cer Subject Information Access: Signed Object - URI:rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/33372e3233302e34392e302f32342d3234203d3e20323131343135.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 37.230.49.0/24 Signature Algorithm: sha256WithRSAEncryption 0b:c4:16:e2:0a:5b:ba:29:1f:78:f4:d9:0f:de:8b:5e:c6:00: 50:6c:53:c7:ac:e7:8b:cf:b1:e0:f5:2b:c6:d3:69:d4:95:be: f3:5b:2c:37:52:d2:77:49:ba:30:2e:ea:69:1a:00:2a:26:11: 68:25:a5:d6:8b:59:22:9c:90:f7:b7:9b:bb:e4:4f:e2:47:8c: 92:0a:3c:d9:85:bb:82:43:4c:87:c0:55:61:d2:06:5b:1c:75: 13:ea:8e:d0:d3:a9:a4:df:dc:8c:20:7d:d8:5e:64:2e:0d:95: 79:25:f7:8a:c0:38:27:0b:cd:c2:95:7a:a5:e6:f2:90:f4:5a: a4:9e:7b:c5:f1:34:62:3d:79:a4:86:15:94:a7:8d:78:67:36: 09:62:22:8d:83:45:5d:0c:69:58:f0:a8:0f:d4:bf:f5:08:73: 59:09:a9:82:6c:82:26:18:90:19:64:5b:23:17:d3:d9:ca:1d: a3:55:dc:3b:c4:8c:51:f7:3e:3d:59:aa:4d:71:00:b7:fb:3c: 9b:f2:97:19:c6:e5:f4:13:55:de:cc:15:0f:0b:bf:76:1a:8a: 35:2a:05:50:87:5a:0b:83:46:b5:64:bb:92:9e:a4:25:c2:c5: 79:bc:85:9d:c8:66:63:46:1d:f8:b7:c3:32:23:ce:c5:bd:90: df:1f:78:d3 -----BEGIN CERTIFICATE----- MIIFWDCCBECgAwIBAgIUL8Qnwrg0TV/8+Z0JUGgR2JbiWzEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkEyRkI0REIwQUE0RDAwNjk1ODMxNjg3MkU0NjdCNTU0 RTBGRDBCRTAeFw0yNjAyMDQxNDUwMzZaFw0yNzAyMDMxNDU1MzZaMDMxMTAvBgNV BAMTKEE5MzhCN0RFODBGQzVDNUU5RjM2NDk2MTZERUQ5RDk5RkU5QjhBMzUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCeAT9SD9Bofr0GzdGne7S3+Sdi Lr3xfvx19lNudRXA1fV9WkvbPsWGb+0/gdEQBKZAFJjWNg8Jkw+WuvV8twEDRcWf HM4G5G02WZ0wh6WQ1XxpEqgz5rTAp46AdY/3NW6Kpqx2ouDz5ewX1QEqIr1gfnVb toSj8CPK9BgUtK+B9m0LOj3aybPq0kcU+RfTQDD0jr/DdRO9wRcCqCik3SZSthF8 Kotld+R+TCrOmCdcJT/Zk39DTCR9mPaMxwNsj8yTs5SvMHr6iD+sXMfH6LlSdF72 rUfPqniq8rKVF+eHxX0gD033bEkqKhNZJ3G9HX+sLM9nyp1M+97CNqT+2h89AgMB AAGjggJiMIICXjAdBgNVHQ4EFgQUqTi33oD8XF6fNklhbe2dmf6bijUwHwYDVR0j BBgwFoAUKi+02wqk0AaVgxaHLkZ7VU4P0L4wDgYDVR0PAQH/BAQDAgeAMIGIBgNV HR8EgYAwfjB8oHqgeIZ2cnN5bmM6Ly9yLm1hZ2VsbGFuLmlweG8uY29tL3JlcG8v YTZmMjE0N2EtZGU4YS00NDQwLWJjYTItNmQ4YjdjODc2ZmRhLTAvMC8yQTJGQjRE QjBBQTREMDA2OTU4MzE2ODcyRTQ2N0I1NTRFMEZEMEJFLmNybDCBngYIKwYBBQUH AQEEgZEwgY4wgYsGCCsGAQUFBzAChn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5y aXBlLm5ldC9yZXBvc2l0b3J5LzlkZjMzYTU3LTdlNGYtNDg0NC04NGUyLWI3MTUz YjU1MTFiNC8wLzJBMkZCNERCMEFBNEQwMDY5NTgzMTY4NzJFNDY3QjU1NEUwRkQw QkUuY2VyMIGkBggrBgEFBQcBCwSBlzCBlDCBkQYIKwYBBQUHMAuGgYRyc3luYzov L3IubWFnZWxsYW4uaXB4by5jb20vcmVwby9hNmYyMTQ3YS1kZThhLTQ0NDAtYmNh Mi02ZDhiN2M4NzZmZGEtMC8wLzMzMzcyZTMyMzMzMDJlMzQzOTJlMzAyZjMyMzQy ZDMyMzQyMDNkM2UyMDMyMzEzMTM0MzEzNS5yb2EwGAYDVR0gAQH/BA4wDDAKBggr BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEACXmMTANBgkqhkiG 9w0BAQsFAAOCAQEAC8QW4gpbuikfePTZD96LXsYAUGxTx6zni8+x4PUrxtNp1JW+ 81ssN1LSd0m6MC7qaRoAKiYRaCWl1otZIpyQ97ebu+RP4keMkgo82YW7gkNMh8BV YdIGWxx1E+qO0NOppN/cjCB92F5kLg2VeSX3isA4JwvNwpV6pebykPRapJ57xfE0 Yj15pIYVlKeNeGc2CWIijYNFXQxpWPCoD9S/9QhzWQmpgmyCJhiQGWRbIxfT2cod o1XcO8SMUfc+PVmqTXEAt/s8m/KXGcbl9BNV3swVDwu/dhqKNSoFUIdaC4NGtWS7 kp6kJcLFebyFnchmY0Yd+LfDMiPOxb2Q3x940w== -----END CERTIFICATE-----Generated at Sun Mar 1 22:10:16 2026 by rpki-client