$ rpki-client -vvf r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/352e38332e3231362e302f32332d3234203d3e20383334.roa File: 352e38332e3231362e302f32332d3234203d3e20383334.roa (raw, json) Hash identifier: GMKEEVcG3GltkfRsnqWB1PolLV8ck6UdS2Wydu1DqAk= Subject key identifier: 53:D7:65:E7:49:73:E2:02:0C:1C:70:7C:AC:7F:48:B2:F4:C8:BE:30 Certificate issuer: /CN=2A2FB4DB0AA4D006958316872E467B554E0FD0BE Certificate serial: 10160DFBB5C85DB207E53EB43AA3A4F717C770AD Authority key identifier: 2A:2F:B4:DB:0A:A4:D0:06:95:83:16:87:2E:46:7B:55:4E:0F:D0:BE Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.cer Subject info access: rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/352e38332e3231362e302f32332d3234203d3e20383334.roa Signing time: Fri 24 Jul 2026 12:30:50 +0000 ROA not before: Fri 24 Jul 2026 12:25:50 +0000 ROA not after: Fri 23 Jul 2027 12:30:50 +0000 asID: 834 IP address blocks: 5.83.216.0/23 maxlen: 24 Validation: OK Signature path: rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.crl rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.mft rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.cer rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.crl rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft rsync://rpki.ripe.net/repository/DEFAULT/RQLmPOAcrSOaw5e8K7Xmw0fc7uo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 29 Jul 2026 08:15:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10:16:0d:fb:b5:c8:5d:b2:07:e5:3e:b4:3a:a3:a4:f7:17:c7:70:ad Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2A2FB4DB0AA4D006958316872E467B554E0FD0BE Validity Not Before: Jul 24 12:25:50 2026 GMT Not After : Jul 23 12:30:50 2027 GMT Subject: CN=53D765E74973E2020C1C707CAC7F48B2F4C8BE30 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:c0:a4:b7:0d:a9:e5:e9:44:02:9a:f6:46:bd: 3c:ed:a7:6f:ca:a0:ed:71:52:d1:5b:65:d2:97:cb: f1:6c:a9:69:2a:27:53:b5:1b:92:f4:df:ca:17:47: ee:8c:4b:db:31:01:be:b9:ac:55:ac:06:b5:54:59: 51:0d:a9:a5:94:f9:29:42:55:c1:b4:ca:c7:b7:9e: b8:d0:53:e5:51:3a:69:cc:24:80:ee:53:de:48:f8: 96:51:90:24:26:93:d1:e3:2f:b0:dc:cd:47:d0:12: 14:b5:fa:ab:46:4c:a7:be:0f:8c:84:71:67:ab:7b: 53:54:44:f2:3b:52:76:86:07:ee:7a:16:d3:5a:34: 82:3e:f2:0e:d5:97:48:a9:06:02:e5:0b:ed:00:34: a7:03:fd:71:63:ac:d5:ce:37:5e:b1:25:54:20:49: 58:5b:46:20:8b:d2:6d:68:49:34:a8:fb:e1:a6:e8: 50:1b:d3:ad:45:78:a0:5a:ae:f6:84:9e:df:bb:67: 1f:e7:a6:ee:55:80:80:6c:cc:31:88:22:8a:e3:3a: f5:a5:43:cc:60:bc:f1:c4:ea:7b:d3:4c:3d:f7:01: 9b:73:e6:bd:c5:0b:06:9f:9b:a0:b1:45:7e:88:c6: 78:44:a9:d0:f7:9f:4a:16:5f:d1:0d:9c:66:1d:f0: 36:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:D7:65:E7:49:73:E2:02:0C:1C:70:7C:AC:7F:48:B2:F4:C8:BE:30 X509v3 Authority Key Identifier: keyid:2A:2F:B4:DB:0A:A4:D0:06:95:83:16:87:2E:46:7B:55:4E:0F:D0:BE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.cer Subject Information Access: Signed Object - URI:rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/352e38332e3231362e302f32332d3234203d3e20383334.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.83.216.0/23 Signature Algorithm: sha256WithRSAEncryption 99:db:1a:80:75:6d:23:a6:03:7f:dd:28:3e:23:59:14:d7:3b: 4e:dd:94:8f:eb:15:74:e3:16:02:c8:bb:d3:09:a3:92:c6:f0: 92:82:b0:e5:c8:25:63:db:8b:ca:1d:7e:cb:b0:57:1f:98:07: bc:31:b9:2c:29:50:01:09:45:22:47:39:22:d8:b4:ae:cc:f8: 04:ee:6b:8e:c3:8c:3c:8f:48:4e:82:7e:e9:ac:5f:31:c7:0d: 12:8a:6f:a4:98:27:74:df:f8:9b:b9:12:18:a6:74:b3:63:01: 21:38:fb:ea:39:31:6a:5c:b0:d3:cd:2c:b8:33:69:dc:dd:04: 05:23:60:92:09:e1:e8:ab:f8:fb:0b:f7:58:7b:7a:4b:a0:8b: 0a:41:b6:b9:1f:a0:cb:d6:d3:ab:57:04:94:cc:77:e1:15:6c: c1:e1:30:fd:8c:8a:57:f7:30:e6:e4:17:92:13:45:b8:08:07: 11:52:3d:8c:31:81:9c:a5:e2:37:59:a5:c7:77:7d:53:16:6c: 4e:3f:92:1d:ba:f2:48:b3:38:83:d3:b1:3d:32:dc:d9:7c:65: ed:90:ab:b4:1d:c7:8e:1f:af:7b:7c:e1:16:e1:52:71:1b:32: 20:1a:b9:2c:39:dc:b9:d0:b3:fe:1b:96:4a:00:36:74:af:85: 26:85:85:fd -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUEBYN+7XIXbIH5T60OqOk9xfHcK0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkEyRkI0REIwQUE0RDAwNjk1ODMxNjg3MkU0NjdCNTU0 RTBGRDBCRTAeFw0yNjA3MjQxMjI1NTBaFw0yNzA3MjMxMjMwNTBaMDMxMTAvBgNV BAMTKDUzRDc2NUU3NDk3M0UyMDIwQzFDNzA3Q0FDN0Y0OEIyRjRDOEJFMzAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCbwKS3Danl6UQCmvZGvTztp2/K oO1xUtFbZdKXy/FsqWkqJ1O1G5L038oXR+6MS9sxAb65rFWsBrVUWVENqaWU+SlC VcG0yse3nrjQU+VROmnMJIDuU95I+JZRkCQmk9HjL7DczUfQEhS1+qtGTKe+D4yE cWere1NURPI7UnaGB+56FtNaNII+8g7Vl0ipBgLlC+0ANKcD/XFjrNXON16xJVQg SVhbRiCL0m1oSTSo++Gm6FAb061FeKBarvaEnt+7Zx/npu5VgIBszDGIIorjOvWl Q8xgvPHE6nvTTD33AZtz5r3FCwafm6CxRX6IxnhEqdD3n0oWX9ENnGYd8DZ7AgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUU9dl50lz4gIMHHB8rH9IsvTIvjAwHwYDVR0j BBgwFoAUKi+02wqk0AaVgxaHLkZ7VU4P0L4wDgYDVR0PAQH/BAQDAgeAMIGIBgNV HR8EgYAwfjB8oHqgeIZ2cnN5bmM6Ly9yLm1hZ2VsbGFuLmlweG8uY29tL3JlcG8v YTZmMjE0N2EtZGU4YS00NDQwLWJjYTItNmQ4YjdjODc2ZmRhLTAvMC8yQTJGQjRE QjBBQTREMDA2OTU4MzE2ODcyRTQ2N0I1NTRFMEZEMEJFLmNybDCBngYIKwYBBQUH AQEEgZEwgY4wgYsGCCsGAQUFBzAChn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5y aXBlLm5ldC9yZXBvc2l0b3J5LzlkZjMzYTU3LTdlNGYtNDg0NC04NGUyLWI3MTUz YjU1MTFiNC8wLzJBMkZCNERCMEFBNEQwMDY5NTgzMTY4NzJFNDY3QjU1NEUwRkQw QkUuY2VyMIGbBggrBgEFBQcBCwSBjjCBizCBiAYIKwYBBQUHMAuGfHJzeW5jOi8v ci5tYWdlbGxhbi5pcHhvLmNvbS9yZXBvL2E2ZjIxNDdhLWRlOGEtNDQ0MC1iY2Ey LTZkOGI3Yzg3NmZkYS0wLzAvMzUyZTM4MzMyZTMyMzEzNjJlMzAyZjMyMzMyZDMy MzQyMDNkM2UyMDM4MzMzNC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAQVT2DANBgkqhkiG9w0BAQsFAAOC AQEAmdsagHVtI6YDf90oPiNZFNc7Tt2Uj+sVdOMWAsi70wmjksbwkoKw5cglY9uL yh1+y7BXH5gHvDG5LClQAQlFIkc5Iti0rsz4BO5rjsOMPI9IToJ+6axfMccNEopv pJgndN/4m7kSGKZ0s2MBITj76jkxalyw080suDNp3N0EBSNgkgnh6Kv4+wv3WHt6 S6CLCkG2uR+gy9bTq1cElMx34RVsweEw/YyKV/cw5uQXkhNFuAgHEVI9jDGBnKXi N1mlx3d9UxZsTj+SHbrySLM4g9OxPTLc2Xxl7ZCrtB3Hjh+ve3zhFuFScRsyIBq5 LDncudCz/huWSgA2dK+FJoWF/Q== -----END CERTIFICATE-----Generated at Tue Jul 28 19:22:26 2026 by rpki-client