$ rpki-client -vvf r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/33372e3233302e35342e302f32342d3234203d3e20323135323632.roa File: 33372e3233302e35342e302f32342d3234203d3e20323135323632.roa (raw, json) Hash identifier: t+IkZcRG+CB4joG8b0Epzgb16A3H1KxCOkGLGaaSTaQ= Subject key identifier: C1:2D:77:67:25:75:27:95:F5:56:DF:78:72:02:60:5E:03:7B:4C:69 Certificate issuer: /CN=2A2FB4DB0AA4D006958316872E467B554E0FD0BE Certificate serial: 6CDDF971DE9AA3BF1C9B02DC101474387C316B3E Authority key identifier: 2A:2F:B4:DB:0A:A4:D0:06:95:83:16:87:2E:46:7B:55:4E:0F:D0:BE Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.cer Subject info access: rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/33372e3233302e35342e302f32342d3234203d3e20323135323632.roa Signing time: Thu 30 Oct 2025 16:25:18 +0000 ROA not before: Thu 30 Oct 2025 16:20:18 +0000 ROA not after: Thu 29 Oct 2026 16:25:18 +0000 asID: 215262 IP address blocks: 37.230.54.0/24 maxlen: 24 Validation: OK Signature path: rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.crl rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.mft rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.cer rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.crl rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft rsync://rpki.ripe.net/repository/DEFAULT/RQLmPOAcrSOaw5e8K7Xmw0fc7uo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 05 Nov 2025 15:11:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6c:dd:f9:71:de:9a:a3:bf:1c:9b:02:dc:10:14:74:38:7c:31:6b:3e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2A2FB4DB0AA4D006958316872E467B554E0FD0BE Validity Not Before: Oct 30 16:20:18 2025 GMT Not After : Oct 29 16:25:18 2026 GMT Subject: CN=C12D776725752795F556DF787202605E037B4C69 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:4f:c5:52:10:fa:87:44:d9:1f:fb:d8:d4:e7: d0:d8:2d:b4:31:01:79:7a:4f:80:64:94:84:51:6e: d8:1c:66:0f:9a:82:19:84:59:d3:89:67:da:11:74: 08:3d:9d:7b:02:d4:26:1d:0c:d6:24:94:08:4f:ba: 1f:1e:ff:b9:50:43:9f:f5:2b:84:44:a2:2f:bb:04: 4c:62:31:77:9d:a4:d0:2b:6a:b0:3c:b3:3d:91:9f: 35:2e:72:98:a7:5b:d6:92:d3:81:40:4c:14:e6:34: 6f:4a:33:c8:ea:ad:58:e4:43:1e:92:1d:c0:58:64: ae:06:17:a0:a2:4c:72:a1:58:b1:d0:3c:f8:a8:99: 55:01:98:d6:81:10:d7:0a:fb:2b:ec:01:94:00:4f: 25:be:26:2c:13:4b:65:4b:56:c5:fd:fb:32:5a:ef: 3f:28:9d:fa:9d:ed:81:e6:7a:68:86:9f:f4:a4:98: 44:dc:61:19:4a:62:f6:88:28:7a:b9:30:75:46:79: fe:ee:2a:f6:7d:ec:51:75:30:7c:58:da:8c:6e:cb: 41:ba:0c:9d:da:f5:6d:13:1d:1e:bc:6b:33:41:61: 2b:82:83:1d:44:dc:31:ac:73:b6:2f:77:1f:3b:2d: b0:d8:38:f9:68:c1:24:57:de:e2:3f:18:97:24:5f: f8:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:2D:77:67:25:75:27:95:F5:56:DF:78:72:02:60:5E:03:7B:4C:69 X509v3 Authority Key Identifier: keyid:2A:2F:B4:DB:0A:A4:D0:06:95:83:16:87:2E:46:7B:55:4E:0F:D0:BE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.cer Subject Information Access: Signed Object - URI:rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/33372e3233302e35342e302f32342d3234203d3e20323135323632.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 37.230.54.0/24 Signature Algorithm: sha256WithRSAEncryption 7d:c0:f0:4c:09:7d:b0:bb:aa:8e:54:3c:94:a2:50:0f:57:46: 30:d1:ae:42:c0:ef:7d:95:51:39:b8:45:b0:3f:91:0c:3e:54: df:49:84:cf:31:03:74:c8:0a:bb:8b:52:53:54:b9:d6:7f:2b: 8d:25:95:36:0e:d0:52:c3:e9:80:1d:ef:0d:e0:75:53:9d:fc: 86:8d:01:0b:85:18:ee:8a:88:ad:72:01:44:8f:03:9d:5d:61: ee:55:19:e3:5c:83:3b:89:6e:25:ae:4d:52:68:46:4f:8e:4f: f9:35:7d:1c:ee:62:33:73:b3:f8:6c:53:68:30:91:71:80:1d: f6:f2:2e:0e:78:ad:8e:62:0b:e3:66:fb:a8:a7:e3:b1:b3:1d: 32:cc:94:3f:c5:87:90:82:bc:6c:f5:e8:a4:19:1d:8a:cc:5c: 43:19:03:7c:cb:aa:75:3f:19:89:05:92:d5:48:fc:3a:f7:a6: 59:f1:03:5e:10:91:2d:64:ba:a5:d9:87:68:f6:fb:6d:63:8a: 00:21:7c:f3:84:9c:14:0c:6f:6c:00:ad:6f:63:ca:44:17:b2: b5:61:96:7b:07:d5:f7:65:50:6f:65:3c:db:f2:20:10:b9:5f: 3d:5f:eb:e1:e9:3d:a1:f5:1d:02:45:bf:9b:08:7a:28:2b:34: 14:bc:1e:82 -----BEGIN CERTIFICATE----- MIIFWDCCBECgAwIBAgIUbN35cd6ao78cmwLcEBR0OHwxaz4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkEyRkI0REIwQUE0RDAwNjk1ODMxNjg3MkU0NjdCNTU0 RTBGRDBCRTAeFw0yNTEwMzAxNjIwMThaFw0yNjEwMjkxNjI1MThaMDMxMTAvBgNV BAMTKEMxMkQ3NzY3MjU3NTI3OTVGNTU2REY3ODcyMDI2MDVFMDM3QjRDNjkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCuT8VSEPqHRNkf+9jU59DYLbQx AXl6T4BklIRRbtgcZg+aghmEWdOJZ9oRdAg9nXsC1CYdDNYklAhPuh8e/7lQQ5/1 K4REoi+7BExiMXedpNArarA8sz2RnzUucpinW9aS04FATBTmNG9KM8jqrVjkQx6S HcBYZK4GF6CiTHKhWLHQPPiomVUBmNaBENcK+yvsAZQATyW+JiwTS2VLVsX9+zJa 7z8onfqd7YHmemiGn/SkmETcYRlKYvaIKHq5MHVGef7uKvZ97FF1MHxY2oxuy0G6 DJ3a9W0THR68azNBYSuCgx1E3DGsc7Yvdx87LbDYOPlowSRX3uI/GJckX/i/AgMB AAGjggJiMIICXjAdBgNVHQ4EFgQUwS13ZyV1J5X1Vt94cgJgXgN7TGkwHwYDVR0j BBgwFoAUKi+02wqk0AaVgxaHLkZ7VU4P0L4wDgYDVR0PAQH/BAQDAgeAMIGIBgNV HR8EgYAwfjB8oHqgeIZ2cnN5bmM6Ly9yLm1hZ2VsbGFuLmlweG8uY29tL3JlcG8v YTZmMjE0N2EtZGU4YS00NDQwLWJjYTItNmQ4YjdjODc2ZmRhLTAvMC8yQTJGQjRE QjBBQTREMDA2OTU4MzE2ODcyRTQ2N0I1NTRFMEZEMEJFLmNybDCBngYIKwYBBQUH AQEEgZEwgY4wgYsGCCsGAQUFBzAChn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5y aXBlLm5ldC9yZXBvc2l0b3J5LzlkZjMzYTU3LTdlNGYtNDg0NC04NGUyLWI3MTUz YjU1MTFiNC8wLzJBMkZCNERCMEFBNEQwMDY5NTgzMTY4NzJFNDY3QjU1NEUwRkQw QkUuY2VyMIGkBggrBgEFBQcBCwSBlzCBlDCBkQYIKwYBBQUHMAuGgYRyc3luYzov L3IubWFnZWxsYW4uaXB4by5jb20vcmVwby9hNmYyMTQ3YS1kZThhLTQ0NDAtYmNh Mi02ZDhiN2M4NzZmZGEtMC8wLzMzMzcyZTMyMzMzMDJlMzUzNDJlMzAyZjMyMzQy ZDMyMzQyMDNkM2UyMDMyMzEzNTMyMzYzMi5yb2EwGAYDVR0gAQH/BA4wDDAKBggr BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEACXmNjANBgkqhkiG 9w0BAQsFAAOCAQEAfcDwTAl9sLuqjlQ8lKJQD1dGMNGuQsDvfZVRObhFsD+RDD5U 30mEzzEDdMgKu4tSU1S51n8rjSWVNg7QUsPpgB3vDeB1U538ho0BC4UY7oqIrXIB RI8DnV1h7lUZ41yDO4luJa5NUmhGT45P+TV9HO5iM3Oz+GxTaDCRcYAd9vIuDnit jmIL42b7qKfjsbMdMsyUP8WHkIK8bPXopBkdisxcQxkDfMuqdT8ZiQWS1Uj8Ovem WfEDXhCRLWS6pdmHaPb7bWOKACF884ScFAxvbACtb2PKRBeytWGWewfV92VQb2U8 2/IgELlfPV/r4ek9ofUdAkW/mwh6KCs0FLwegg== -----END CERTIFICATE-----Generated at Wed Nov 5 00:02:59 2025 by rpki-client