$ rpki-client -vvf r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/352e38332e3231362e302f32342d3234203d3e20383334.roa File: 352e38332e3231362e302f32342d3234203d3e20383334.roa (raw, json) Hash identifier: Wa+i6ieqWaZnGXasiAWat4LS6V2R07CQYLTA4ccxHEw= Subject key identifier: AD:3D:08:FD:61:7D:63:20:67:74:AF:AB:42:52:8B:47:83:68:EF:8C Certificate issuer: /CN=2A2FB4DB0AA4D006958316872E467B554E0FD0BE Certificate serial: 56486D0E7924CF2EB7E97A404ECF85857A625A66 Authority key identifier: 2A:2F:B4:DB:0A:A4:D0:06:95:83:16:87:2E:46:7B:55:4E:0F:D0:BE Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.cer Subject info access: rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/352e38332e3231362e302f32342d3234203d3e20383334.roa Signing time: Sun 19 Apr 2026 03:53:40 +0000 ROA not before: Sun 19 Apr 2026 03:48:40 +0000 ROA not after: Sun 18 Apr 2027 03:53:40 +0000 asID: 834 IP address blocks: 5.83.216.0/24 maxlen: 24 Validation: OK Signature path: rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.crl rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.mft rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.cer rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.crl rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft rsync://rpki.ripe.net/repository/DEFAULT/RQLmPOAcrSOaw5e8K7Xmw0fc7uo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 19 Apr 2026 23:31:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 56:48:6d:0e:79:24:cf:2e:b7:e9:7a:40:4e:cf:85:85:7a:62:5a:66 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2A2FB4DB0AA4D006958316872E467B554E0FD0BE Validity Not Before: Apr 19 03:48:40 2026 GMT Not After : Apr 18 03:53:40 2027 GMT Subject: CN=AD3D08FD617D63206774AFAB42528B478368EF8C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:f3:61:88:82:93:b8:4c:27:5f:6f:cf:dc:15: 5b:29:18:aa:bb:03:aa:1d:f6:05:53:54:f1:e5:00: 49:25:2d:26:a8:89:10:28:87:d0:21:99:a5:de:05: 23:82:cc:d5:f4:ae:63:a3:d7:08:83:48:d9:f2:fc: 17:15:f5:46:f7:d9:a4:a3:8b:d2:ce:52:50:8d:66: 32:bf:8c:c4:61:4d:7a:11:28:db:9c:55:61:ca:2f: 43:13:c9:bf:43:8f:58:84:24:d1:f8:26:1f:d4:b0: 14:93:8e:c9:42:6d:13:55:e7:1e:5e:ac:1f:57:1c: 9a:2d:f5:3b:14:a8:c6:d0:b0:68:8c:4c:8f:6c:0e: 19:ca:c4:f5:60:d5:d0:de:39:a1:0f:9d:8e:e0:2d: 90:ea:15:01:6e:0d:df:37:96:e8:bf:da:fb:37:b6: d5:af:be:13:2c:bd:2f:31:8a:41:fc:96:55:43:80: e1:bc:1e:94:10:fe:a8:4d:fa:b2:70:57:0d:5a:b9: 07:d6:42:9e:7c:8f:b2:0b:fb:4c:98:f6:a5:af:75: e6:d5:00:93:94:ce:4e:97:3e:cf:f2:f6:ac:a0:09: 3c:58:d1:42:51:4e:2c:b0:e7:2b:24:84:65:9b:f7: f3:01:04:a1:d9:82:06:a3:d0:f8:cd:fb:2e:a1:59: 8c:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:3D:08:FD:61:7D:63:20:67:74:AF:AB:42:52:8B:47:83:68:EF:8C X509v3 Authority Key Identifier: keyid:2A:2F:B4:DB:0A:A4:D0:06:95:83:16:87:2E:46:7B:55:4E:0F:D0:BE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.cer Subject Information Access: Signed Object - URI:rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/352e38332e3231362e302f32342d3234203d3e20383334.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.83.216.0/24 Signature Algorithm: sha256WithRSAEncryption 97:f9:d4:46:66:a5:00:44:6d:9b:1c:60:92:b9:b2:e8:b5:46: 2e:dc:ed:ac:96:55:65:3d:63:b6:ca:03:a6:b0:d9:69:cc:b9: e7:96:43:35:df:3c:5e:da:82:8b:78:da:32:72:7f:36:31:9e: 35:00:f3:71:26:4c:3a:75:fc:5c:dd:0a:c5:66:8b:4b:20:c0: f4:b1:ca:0b:9d:b9:45:e0:06:97:f3:26:2d:8d:0b:d1:36:85: 59:00:3f:da:94:07:33:f6:f5:09:d7:53:51:01:e8:fc:05:f1: a5:ae:37:9b:99:13:f5:ad:d3:de:23:a2:ae:e5:3a:7a:2f:d1: 30:77:a9:ea:a8:63:78:2d:16:d3:67:5c:3c:cb:f4:cb:1c:f8: 8a:04:f5:1c:80:9f:c0:2e:6f:d1:b3:52:d0:ab:32:89:74:26: e8:66:60:1c:0a:4c:56:25:a5:b5:d0:d0:9c:a4:02:d3:ad:12: 33:0b:8e:7b:aa:9f:8a:c6:ec:08:b0:b0:66:cd:b3:04:bb:cc: dd:ef:97:39:cd:b2:66:77:89:a3:97:e2:f0:b4:46:41:a5:75: 08:97:d8:f0:94:34:37:2c:fd:5a:30:41:34:32:31:8d:20:85: 5e:b0:cd:b1:9e:4e:f3:28:42:4c:47:63:6c:f5:09:9e:cd:34: b9:ee:bc:ee -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUVkhtDnkkzy636XpATs+FhXpiWmYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkEyRkI0REIwQUE0RDAwNjk1ODMxNjg3MkU0NjdCNTU0 RTBGRDBCRTAeFw0yNjA0MTkwMzQ4NDBaFw0yNzA0MTgwMzUzNDBaMDMxMTAvBgNV BAMTKEFEM0QwOEZENjE3RDYzMjA2Nzc0QUZBQjQyNTI4QjQ3ODM2OEVGOEMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDl82GIgpO4TCdfb8/cFVspGKq7 A6od9gVTVPHlAEklLSaoiRAoh9AhmaXeBSOCzNX0rmOj1wiDSNny/BcV9Ub32aSj i9LOUlCNZjK/jMRhTXoRKNucVWHKL0MTyb9Dj1iEJNH4Jh/UsBSTjslCbRNV5x5e rB9XHJot9TsUqMbQsGiMTI9sDhnKxPVg1dDeOaEPnY7gLZDqFQFuDd83lui/2vs3 ttWvvhMsvS8xikH8llVDgOG8HpQQ/qhN+rJwVw1auQfWQp58j7IL+0yY9qWvdebV AJOUzk6XPs/y9qygCTxY0UJRTiyw5yskhGWb9/MBBKHZggaj0PjN+y6hWYxNAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUrT0I/WF9YyBndK+rQlKLR4No74wwHwYDVR0j BBgwFoAUKi+02wqk0AaVgxaHLkZ7VU4P0L4wDgYDVR0PAQH/BAQDAgeAMIGIBgNV HR8EgYAwfjB8oHqgeIZ2cnN5bmM6Ly9yLm1hZ2VsbGFuLmlweG8uY29tL3JlcG8v YTZmMjE0N2EtZGU4YS00NDQwLWJjYTItNmQ4YjdjODc2ZmRhLTAvMC8yQTJGQjRE QjBBQTREMDA2OTU4MzE2ODcyRTQ2N0I1NTRFMEZEMEJFLmNybDCBngYIKwYBBQUH AQEEgZEwgY4wgYsGCCsGAQUFBzAChn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5y aXBlLm5ldC9yZXBvc2l0b3J5LzlkZjMzYTU3LTdlNGYtNDg0NC04NGUyLWI3MTUz YjU1MTFiNC8wLzJBMkZCNERCMEFBNEQwMDY5NTgzMTY4NzJFNDY3QjU1NEUwRkQw QkUuY2VyMIGbBggrBgEFBQcBCwSBjjCBizCBiAYIKwYBBQUHMAuGfHJzeW5jOi8v ci5tYWdlbGxhbi5pcHhvLmNvbS9yZXBvL2E2ZjIxNDdhLWRlOGEtNDQ0MC1iY2Ey LTZkOGI3Yzg3NmZkYS0wLzAvMzUyZTM4MzMyZTMyMzEzNjJlMzAyZjMyMzQyZDMy MzQyMDNkM2UyMDM4MzMzNC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAAVT2DANBgkqhkiG9w0BAQsFAAOC AQEAl/nURmalAERtmxxgkrmy6LVGLtztrJZVZT1jtsoDprDZacy555ZDNd88XtqC i3jaMnJ/NjGeNQDzcSZMOnX8XN0KxWaLSyDA9LHKC525ReAGl/MmLY0L0TaFWQA/ 2pQHM/b1CddTUQHo/AXxpa43m5kT9a3T3iOiruU6ei/RMHep6qhjeC0W02dcPMv0 yxz4igT1HICfwC5v0bNS0KsyiXQm6GZgHApMViWltdDQnKQC060SMwuOe6qfisbs CLCwZs2zBLvM3e+XOc2yZneJo5fi8LRGQaV1CJfY8JQ0Nyz9WjBBNDIxjSCFXrDN sZ5O8yhCTEdjbPUJns00ue687g== -----END CERTIFICATE-----Generated at Sun Apr 19 10:30:55 2026 by rpki-client