$ rpki-client -vvf r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/352e38332e3230382e302f32342d3234203d3e20323132323338.roa File: 352e38332e3230382e302f32342d3234203d3e20323132323338.roa (raw, json) Hash identifier: myfptG84wnUJCSoXDKsOPmHDM4PeIHHYICtL6Ui1RYQ= Subject key identifier: 8A:92:58:B2:2E:4A:AF:AA:46:60:BE:04:79:EE:CA:D8:B0:87:57:73 Certificate issuer: /CN=2A2FB4DB0AA4D006958316872E467B554E0FD0BE Certificate serial: 2458F51B98541EFF2787908852FB436C5CEAC8B0 Authority key identifier: 2A:2F:B4:DB:0A:A4:D0:06:95:83:16:87:2E:46:7B:55:4E:0F:D0:BE Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.cer Subject info access: rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/352e38332e3230382e302f32342d3234203d3e20323132323338.roa Signing time: Sun 05 Apr 2026 15:47:00 +0000 ROA not before: Sun 05 Apr 2026 15:42:00 +0000 ROA not after: Sun 04 Apr 2027 15:47:00 +0000 asID: 212238 IP address blocks: 5.83.208.0/24 maxlen: 24 Validation: OK Signature path: rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.crl rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.mft rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.cer rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.crl rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft rsync://rpki.ripe.net/repository/DEFAULT/RQLmPOAcrSOaw5e8K7Xmw0fc7uo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 17 Apr 2026 17:46:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 24:58:f5:1b:98:54:1e:ff:27:87:90:88:52:fb:43:6c:5c:ea:c8:b0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2A2FB4DB0AA4D006958316872E467B554E0FD0BE Validity Not Before: Apr 5 15:42:00 2026 GMT Not After : Apr 4 15:47:00 2027 GMT Subject: CN=8A9258B22E4AAFAA4660BE0479EECAD8B0875773 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:50:2c:5f:95:cf:e5:cc:e9:66:1b:05:20:41: 91:43:da:10:cc:9c:ad:33:24:1a:16:e2:f4:4c:ac: f5:45:81:55:df:86:70:00:fa:a1:e7:f5:40:4d:e6: a3:f1:5d:b3:76:8b:ef:92:e5:d6:33:a4:25:c7:42: 42:68:68:21:8a:97:3a:1c:0c:7f:03:1f:75:ab:7d: 75:9f:77:f7:6b:b6:a4:dc:ad:3a:96:d0:73:a3:7d: 8b:71:e1:7a:9b:26:30:b7:d7:77:86:e9:24:35:69: 7b:1e:64:64:45:46:a6:79:59:9b:b5:bd:a4:8e:25: 60:7a:18:a7:6a:10:e3:74:53:83:25:6c:e6:54:23: be:c3:d7:4f:db:ff:ee:17:05:ee:62:98:6b:35:78: 9c:70:43:fe:ab:c9:13:e5:68:f1:a6:2e:a0:38:af: d9:b7:79:3f:c1:1e:a4:40:3a:98:23:d3:bd:84:92: ac:62:d9:a7:23:9e:b0:93:73:1f:fc:f8:33:6c:30: 92:91:8c:98:37:91:cf:c6:68:32:13:4b:36:95:e1: 34:92:1a:aa:36:a0:d6:ca:ff:98:58:76:ca:92:fd: 0e:78:bf:f0:ec:74:cc:31:55:b1:38:4d:57:f2:f5: 47:b8:d1:41:54:a1:9b:8a:63:b4:36:8b:eb:eb:b1: d5:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:92:58:B2:2E:4A:AF:AA:46:60:BE:04:79:EE:CA:D8:B0:87:57:73 X509v3 Authority Key Identifier: keyid:2A:2F:B4:DB:0A:A4:D0:06:95:83:16:87:2E:46:7B:55:4E:0F:D0:BE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.cer Subject Information Access: Signed Object - URI:rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/352e38332e3230382e302f32342d3234203d3e20323132323338.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.83.208.0/24 Signature Algorithm: sha256WithRSAEncryption 9e:c9:0d:1b:9a:9a:18:43:f1:4b:00:0a:72:24:4c:ed:5a:34: e2:cc:d3:47:93:9b:4c:b9:54:85:b4:06:4e:aa:ff:b0:05:69: ad:32:c0:c9:fd:73:82:ec:3c:d9:5c:7a:ac:7b:92:8b:02:1d: 3f:d7:5a:f2:98:ee:c8:6c:dd:30:92:99:57:e6:6a:75:52:3b: a3:b0:c2:e6:ed:4a:19:4d:97:47:31:d6:13:e5:45:ee:5b:19: 7d:df:45:a6:87:5a:29:89:be:25:d7:39:2f:0c:eb:01:fa:59: 7a:32:6f:53:44:13:cf:4f:38:37:9a:20:2e:01:3d:11:43:e7: 08:8e:92:a5:a0:75:2a:f3:41:bb:cc:a2:e7:21:5b:51:1c:51: b2:ef:f6:e6:7f:08:d3:89:9b:d4:de:f7:b1:3f:1e:47:c4:59: 62:d9:55:bb:86:0c:06:c6:f0:a0:22:2b:6d:d5:d1:35:1f:08: 89:c2:8d:8f:b7:33:f8:e1:99:3e:ce:7a:94:af:2e:cb:bb:8a: 83:37:44:89:88:8c:f3:ff:c5:68:f4:10:cf:ee:6c:81:d7:8b: 93:f9:a4:28:75:32:9e:ee:30:14:aa:94:54:87:1b:57:8b:0b: 71:a4:5a:44:c0:9b:ed:e2:77:a9:35:f6:e2:d1:0a:06:db:06: 96:9b:b2:b1 -----BEGIN CERTIFICATE----- MIIFVjCCBD6gAwIBAgIUJFj1G5hUHv8nh5CIUvtDbFzqyLAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkEyRkI0REIwQUE0RDAwNjk1ODMxNjg3MkU0NjdCNTU0 RTBGRDBCRTAeFw0yNjA0MDUxNTQyMDBaFw0yNzA0MDQxNTQ3MDBaMDMxMTAvBgNV BAMTKDhBOTI1OEIyMkU0QUFGQUE0NjYwQkUwNDc5RUVDQUQ4QjA4NzU3NzMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDRUCxflc/lzOlmGwUgQZFD2hDM nK0zJBoW4vRMrPVFgVXfhnAA+qHn9UBN5qPxXbN2i++S5dYzpCXHQkJoaCGKlzoc DH8DH3WrfXWfd/drtqTcrTqW0HOjfYtx4XqbJjC313eG6SQ1aXseZGRFRqZ5WZu1 vaSOJWB6GKdqEON0U4MlbOZUI77D10/b/+4XBe5imGs1eJxwQ/6ryRPlaPGmLqA4 r9m3eT/BHqRAOpgj072Ekqxi2acjnrCTcx/8+DNsMJKRjJg3kc/GaDITSzaV4TSS Gqo2oNbK/5hYdsqS/Q54v/DsdMwxVbE4TVfy9Ue40UFUoZuKY7Q2i+vrsdVfAgMB AAGjggJgMIICXDAdBgNVHQ4EFgQUipJYsi5Kr6pGYL4Eee7K2LCHV3MwHwYDVR0j BBgwFoAUKi+02wqk0AaVgxaHLkZ7VU4P0L4wDgYDVR0PAQH/BAQDAgeAMIGIBgNV HR8EgYAwfjB8oHqgeIZ2cnN5bmM6Ly9yLm1hZ2VsbGFuLmlweG8uY29tL3JlcG8v YTZmMjE0N2EtZGU4YS00NDQwLWJjYTItNmQ4YjdjODc2ZmRhLTAvMC8yQTJGQjRE QjBBQTREMDA2OTU4MzE2ODcyRTQ2N0I1NTRFMEZEMEJFLmNybDCBngYIKwYBBQUH AQEEgZEwgY4wgYsGCCsGAQUFBzAChn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5y aXBlLm5ldC9yZXBvc2l0b3J5LzlkZjMzYTU3LTdlNGYtNDg0NC04NGUyLWI3MTUz YjU1MTFiNC8wLzJBMkZCNERCMEFBNEQwMDY5NTgzMTY4NzJFNDY3QjU1NEUwRkQw QkUuY2VyMIGiBggrBgEFBQcBCwSBlTCBkjCBjwYIKwYBBQUHMAuGgYJyc3luYzov L3IubWFnZWxsYW4uaXB4by5jb20vcmVwby9hNmYyMTQ3YS1kZThhLTQ0NDAtYmNh Mi02ZDhiN2M4NzZmZGEtMC8wLzM1MmUzODMzMmUzMjMwMzgyZTMwMmYzMjM0MmQz MjM0MjAzZDNlMjAzMjMxMzIzMjMzMzgucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYB BQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAAFU9AwDQYJKoZIhvcN AQELBQADggEBAJ7JDRuamhhD8UsACnIkTO1aNOLM00eTm0y5VIW0Bk6q/7AFaa0y wMn9c4LsPNlceqx7kosCHT/XWvKY7shs3TCSmVfmanVSO6OwwubtShlNl0cx1hPl Re5bGX3fRaaHWimJviXXOS8M6wH6WXoyb1NEE89PODeaIC4BPRFD5wiOkqWgdSrz QbvMouchW1EcUbLv9uZ/CNOJm9Te97E/HkfEWWLZVbuGDAbG8KAiK23V0TUfCInC jY+3M/jhmT7OepSvLsu7ioM3RImIjPP/xWj0EM/ubIHXi5P5pCh1Mp7uMBSqlFSH G1eLC3GkWkTAm+3id6k19uLRCgbbBpabsrE= -----END CERTIFICATE-----Generated at Fri Apr 17 08:21:13 2026 by rpki-client