$ rpki-client -vvf r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/352e38332e3232302e302f32342d3234203d3e20383334.roa File: 352e38332e3232302e302f32342d3234203d3e20383334.roa (raw, json) Hash identifier: 1sgztqsgSrmWrOZ9bSnbUC/0yW+To68H8smv8Mhoaa8= Subject key identifier: 6A:00:4B:18:30:FA:63:6A:29:EB:C9:F6:5A:10:3F:FE:59:49:11:BA Certificate issuer: /CN=2A2FB4DB0AA4D006958316872E467B554E0FD0BE Certificate serial: 03BBB06546B4EFE53BB139BAE0EF215593A30C27 Authority key identifier: 2A:2F:B4:DB:0A:A4:D0:06:95:83:16:87:2E:46:7B:55:4E:0F:D0:BE Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.cer Subject info access: rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/352e38332e3232302e302f32342d3234203d3e20383334.roa Signing time: Wed 01 Apr 2026 00:24:28 +0000 ROA not before: Wed 01 Apr 2026 00:19:28 +0000 ROA not after: Wed 31 Mar 2027 00:24:28 +0000 asID: 834 IP address blocks: 5.83.220.0/24 maxlen: 24 Validation: OK Signature path: rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.crl rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.mft rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.cer rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.crl rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft rsync://rpki.ripe.net/repository/DEFAULT/RQLmPOAcrSOaw5e8K7Xmw0fc7uo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 17 Apr 2026 17:46:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 03:bb:b0:65:46:b4:ef:e5:3b:b1:39:ba:e0:ef:21:55:93:a3:0c:27 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2A2FB4DB0AA4D006958316872E467B554E0FD0BE Validity Not Before: Apr 1 00:19:28 2026 GMT Not After : Mar 31 00:24:28 2027 GMT Subject: CN=6A004B1830FA636A29EBC9F65A103FFE594911BA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:54:a1:93:2c:46:8a:5b:dd:64:e4:c9:b4:a6: a3:43:65:98:0b:e0:ed:48:73:8a:97:f9:86:61:d4: ff:ed:23:49:a3:83:cd:99:ef:18:1a:9e:f2:55:36: 2a:3e:78:45:5c:37:ee:db:45:4e:93:30:a1:bc:e5: 57:39:fc:0c:65:5f:e8:37:9a:34:db:82:d0:cc:79: e6:05:d6:9e:f9:13:6c:00:64:9e:7f:52:bc:95:c0: 47:0e:2d:f3:4b:83:3f:93:ea:61:c1:0c:1d:e3:db: 59:0e:b1:fa:a1:bb:f6:67:55:08:79:1b:90:f4:3e: 9b:a3:11:0c:3d:c0:2e:ec:82:06:6e:f6:01:f5:b9: d2:3a:76:df:56:a7:b2:82:08:28:a9:2c:b9:59:0a: f7:8e:5b:35:d1:05:8d:64:cd:32:09:f6:5d:ce:c1: a8:bc:66:ea:e4:13:bf:cd:25:78:1d:2f:24:43:d1: 63:7a:31:88:bf:26:49:df:11:a7:b4:85:39:d9:d2: 51:b2:6d:38:a7:37:17:a5:70:4a:74:b4:cb:a4:da: aa:55:3a:5a:a4:24:12:db:cf:60:7b:1e:c0:3c:a6: bc:e2:eb:85:22:f7:7f:38:6e:7e:d5:b1:48:4d:59: 86:8a:00:1e:20:7d:d0:1e:7f:15:88:30:11:23:7d: dc:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:00:4B:18:30:FA:63:6A:29:EB:C9:F6:5A:10:3F:FE:59:49:11:BA X509v3 Authority Key Identifier: keyid:2A:2F:B4:DB:0A:A4:D0:06:95:83:16:87:2E:46:7B:55:4E:0F:D0:BE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.cer Subject Information Access: Signed Object - URI:rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/352e38332e3232302e302f32342d3234203d3e20383334.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.83.220.0/24 Signature Algorithm: sha256WithRSAEncryption 48:40:42:aa:59:f5:c2:c6:70:66:e6:df:65:73:07:06:b2:c7: 9e:d6:86:f4:27:8a:5d:fc:b1:c2:23:c3:73:51:42:ab:31:6e: a3:de:a1:70:3d:d0:49:56:d9:80:d5:ea:b7:06:43:d5:e0:2d: 55:cc:6c:17:36:c7:ce:1a:03:c8:3a:f7:ed:09:f9:d2:5e:ac: c5:2a:9b:87:0e:19:43:ea:15:ee:d7:6f:af:63:6a:52:28:0b: 25:37:28:6a:64:9e:1d:67:da:24:a0:b8:96:f0:90:6b:2f:d4: 10:82:ab:87:7d:25:86:76:59:1a:fc:7d:b7:48:01:f4:6f:38: 4a:25:35:b6:c6:4e:44:97:46:eb:97:57:dd:56:ec:6e:a7:09: ad:14:1a:6f:55:3f:10:f1:71:b2:e1:03:d5:c9:a9:e9:13:40: de:aa:b3:f7:79:44:8a:aa:94:cb:93:1e:bb:b2:73:f2:45:3c: 70:11:b5:f5:69:e0:d4:9a:a5:75:4d:d9:f0:b4:2d:99:04:96: 5d:d2:3c:d1:fc:b5:2d:f2:06:bb:f9:d7:62:4f:c8:55:29:d2: 75:d0:5a:8e:ee:c7:e9:c5:b2:90:3a:4a:fd:bf:d8:db:47:10: 93:03:c3:f7:cf:c0:b3:2d:36:c2:03:fa:38:bb:44:79:26:da: 4b:45:38:5f -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUA7uwZUa07+U7sTm64O8hVZOjDCcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkEyRkI0REIwQUE0RDAwNjk1ODMxNjg3MkU0NjdCNTU0 RTBGRDBCRTAeFw0yNjA0MDEwMDE5MjhaFw0yNzAzMzEwMDI0MjhaMDMxMTAvBgNV BAMTKDZBMDA0QjE4MzBGQTYzNkEyOUVCQzlGNjVBMTAzRkZFNTk0OTExQkEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8VKGTLEaKW91k5Mm0pqNDZZgL 4O1Ic4qX+YZh1P/tI0mjg82Z7xganvJVNio+eEVcN+7bRU6TMKG85Vc5/AxlX+g3 mjTbgtDMeeYF1p75E2wAZJ5/UryVwEcOLfNLgz+T6mHBDB3j21kOsfqhu/ZnVQh5 G5D0PpujEQw9wC7sggZu9gH1udI6dt9Wp7KCCCipLLlZCveOWzXRBY1kzTIJ9l3O wai8ZurkE7/NJXgdLyRD0WN6MYi/JknfEae0hTnZ0lGybTinNxelcEp0tMuk2qpV OlqkJBLbz2B7HsA8przi64Ui9384bn7VsUhNWYaKAB4gfdAefxWIMBEjfdwzAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUagBLGDD6Y2op68n2WhA//llJEbowHwYDVR0j BBgwFoAUKi+02wqk0AaVgxaHLkZ7VU4P0L4wDgYDVR0PAQH/BAQDAgeAMIGIBgNV HR8EgYAwfjB8oHqgeIZ2cnN5bmM6Ly9yLm1hZ2VsbGFuLmlweG8uY29tL3JlcG8v YTZmMjE0N2EtZGU4YS00NDQwLWJjYTItNmQ4YjdjODc2ZmRhLTAvMC8yQTJGQjRE QjBBQTREMDA2OTU4MzE2ODcyRTQ2N0I1NTRFMEZEMEJFLmNybDCBngYIKwYBBQUH AQEEgZEwgY4wgYsGCCsGAQUFBzAChn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5y aXBlLm5ldC9yZXBvc2l0b3J5LzlkZjMzYTU3LTdlNGYtNDg0NC04NGUyLWI3MTUz YjU1MTFiNC8wLzJBMkZCNERCMEFBNEQwMDY5NTgzMTY4NzJFNDY3QjU1NEUwRkQw QkUuY2VyMIGbBggrBgEFBQcBCwSBjjCBizCBiAYIKwYBBQUHMAuGfHJzeW5jOi8v ci5tYWdlbGxhbi5pcHhvLmNvbS9yZXBvL2E2ZjIxNDdhLWRlOGEtNDQ0MC1iY2Ey LTZkOGI3Yzg3NmZkYS0wLzAvMzUyZTM4MzMyZTMyMzIzMDJlMzAyZjMyMzQyZDMy MzQyMDNkM2UyMDM4MzMzNC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAAVT3DANBgkqhkiG9w0BAQsFAAOC AQEASEBCqln1wsZwZubfZXMHBrLHntaG9CeKXfyxwiPDc1FCqzFuo96hcD3QSVbZ gNXqtwZD1eAtVcxsFzbHzhoDyDr37Qn50l6sxSqbhw4ZQ+oV7tdvr2NqUigLJTco amSeHWfaJKC4lvCQay/UEIKrh30lhnZZGvx9t0gB9G84SiU1tsZORJdG65dX3Vbs bqcJrRQab1U/EPFxsuED1cmp6RNA3qqz93lEiqqUy5Meu7Jz8kU8cBG19Wng1Jql dU3Z8LQtmQSWXdI80fy1LfIGu/nXYk/IVSnSddBaju7H6cWykDpK/b/Y20cQkwPD 98/Asy02wgP6OLtEeSbaS0U4Xw== -----END CERTIFICATE-----Generated at Fri Apr 17 05:48:48 2026 by rpki-client