$ rpki-client -vvf r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/352e38332e3232302e302f32342d3234203d3e20383334.roa File: 352e38332e3232302e302f32342d3234203d3e20383334.roa (raw, json) Hash identifier: PKhr2fCI7i7J4M2igVPMKkXF7ogaWUhCJCXBDELoXbg= Subject key identifier: 8A:4D:65:85:AE:10:C5:0C:69:96:9A:92:59:EE:71:53:84:C0:9E:88 Certificate issuer: /CN=2A2FB4DB0AA4D006958316872E467B554E0FD0BE Certificate serial: 2A9252FFC893999CD3A249847A72C4582070BD61 Authority key identifier: 2A:2F:B4:DB:0A:A4:D0:06:95:83:16:87:2E:46:7B:55:4E:0F:D0:BE Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.cer Subject info access: rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/352e38332e3232302e302f32342d3234203d3e20383334.roa Signing time: Wed 20 May 2026 03:22:04 +0000 ROA not before: Wed 20 May 2026 03:17:04 +0000 ROA not after: Wed 19 May 2027 03:22:04 +0000 asID: 834 IP address blocks: 5.83.220.0/24 maxlen: 24 Validation: OK Signature path: rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.crl rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.mft rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.cer rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.crl rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft rsync://rpki.ripe.net/repository/DEFAULT/RQLmPOAcrSOaw5e8K7Xmw0fc7uo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 13 Jun 2026 13:48:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2a:92:52:ff:c8:93:99:9c:d3:a2:49:84:7a:72:c4:58:20:70:bd:61 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2A2FB4DB0AA4D006958316872E467B554E0FD0BE Validity Not Before: May 20 03:17:04 2026 GMT Not After : May 19 03:22:04 2027 GMT Subject: CN=8A4D6585AE10C50C69969A9259EE715384C09E88 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:13:59:cb:17:83:92:e2:0f:53:39:5b:73:29: 5f:83:16:73:aa:91:60:0e:69:ed:5f:d7:b6:2e:d5: 31:7f:27:b4:75:9a:b2:68:b1:7b:2d:18:c8:de:eb: 02:98:df:0e:b3:84:32:14:c2:b7:c8:39:32:27:ac: 74:da:fa:45:e8:94:ee:b5:4f:a6:cb:1c:61:aa:c0: 16:a5:3e:b2:63:1a:07:d0:38:2a:eb:80:19:a3:86: f6:b6:ff:92:3a:d6:f3:b4:64:c2:9b:b1:95:4e:fe: 7e:b3:51:72:b2:fb:11:46:41:a5:31:04:1b:88:69: ec:fa:ff:63:10:4b:3e:6a:7b:3e:db:a8:e4:94:4b: ca:6f:d0:0c:e8:43:a9:6f:bf:78:7a:43:af:3d:79: 33:0e:d4:70:41:cb:ad:38:32:62:be:51:8a:86:2f: 85:b9:b5:9f:6f:f4:22:46:c7:8c:24:f7:0e:54:14: c9:b2:a9:43:8d:c0:bf:57:92:0a:4d:c3:90:d4:02: 96:3f:6f:8e:2c:94:a7:2e:8a:73:84:12:a2:2f:83: 3b:b0:97:a4:21:f3:82:a8:0c:31:01:d5:32:ff:81: 74:64:32:74:df:6d:35:af:e7:2f:65:03:10:e1:1d: 56:9b:66:43:97:c6:4d:b5:6f:de:8b:26:6b:fb:52: a8:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:4D:65:85:AE:10:C5:0C:69:96:9A:92:59:EE:71:53:84:C0:9E:88 X509v3 Authority Key Identifier: keyid:2A:2F:B4:DB:0A:A4:D0:06:95:83:16:87:2E:46:7B:55:4E:0F:D0:BE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.cer Subject Information Access: Signed Object - URI:rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/352e38332e3232302e302f32342d3234203d3e20383334.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.83.220.0/24 Signature Algorithm: sha256WithRSAEncryption 69:fc:ce:d3:c5:df:02:0d:c2:4f:2d:60:fa:63:fa:eb:39:df: 05:dc:d1:59:68:e0:bc:84:ea:da:f8:a9:e7:a7:46:3a:4a:c3: 35:9c:a9:bc:a9:65:22:f9:eb:00:ca:26:c3:29:a1:d3:65:86: e1:92:e8:e1:fe:40:bb:3a:46:d6:d5:5b:0e:d6:3a:53:d1:08: 5d:de:28:d3:1f:e1:66:51:3c:90:d2:6f:06:0b:1b:46:8f:fd: 7c:03:e9:30:db:92:1a:4c:a7:2e:19:07:d4:17:4b:5a:44:03: 05:e4:fc:2f:c3:0d:e5:f4:85:73:48:a9:fa:58:f2:21:3c:99: 85:cf:da:9e:45:9b:5b:13:2b:bb:3b:a9:57:a4:6c:c7:1c:0b: fa:9e:d7:8d:96:d9:76:f9:27:ee:8f:0d:ef:59:db:61:4b:9f: 51:7d:c3:7a:1e:9f:30:29:41:dc:37:d5:79:6c:fa:c5:51:21: 45:6a:1a:43:8d:62:7e:3a:d6:5a:c8:cc:75:5d:3a:9b:a4:eb: 64:bc:74:09:92:2f:f1:50:14:8e:1f:09:e8:e1:f5:72:f3:12: 04:f4:4c:6d:60:2a:75:ac:45:63:dd:99:52:92:e3:14:08:e1: 54:df:f6:65:e6:0b:7a:b5:c6:6f:7c:b5:6b:38:fa:37:93:e8: 57:f6:62:b2 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUKpJS/8iTmZzTokmEenLEWCBwvWEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkEyRkI0REIwQUE0RDAwNjk1ODMxNjg3MkU0NjdCNTU0 RTBGRDBCRTAeFw0yNjA1MjAwMzE3MDRaFw0yNzA1MTkwMzIyMDRaMDMxMTAvBgNV BAMTKDhBNEQ2NTg1QUUxMEM1MEM2OTk2OUE5MjU5RUU3MTUzODRDMDlFODgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4E1nLF4OS4g9TOVtzKV+DFnOq kWAOae1f17Yu1TF/J7R1mrJosXstGMje6wKY3w6zhDIUwrfIOTInrHTa+kXolO61 T6bLHGGqwBalPrJjGgfQOCrrgBmjhva2/5I61vO0ZMKbsZVO/n6zUXKy+xFGQaUx BBuIaez6/2MQSz5qez7bqOSUS8pv0AzoQ6lvv3h6Q689eTMO1HBBy604MmK+UYqG L4W5tZ9v9CJGx4wk9w5UFMmyqUONwL9XkgpNw5DUApY/b44slKcuinOEEqIvgzuw l6Qh84KoDDEB1TL/gXRkMnTfbTWv5y9lAxDhHVabZkOXxk21b96LJmv7UqiBAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUik1lha4QxQxplpqSWe5xU4TAnogwHwYDVR0j BBgwFoAUKi+02wqk0AaVgxaHLkZ7VU4P0L4wDgYDVR0PAQH/BAQDAgeAMIGIBgNV HR8EgYAwfjB8oHqgeIZ2cnN5bmM6Ly9yLm1hZ2VsbGFuLmlweG8uY29tL3JlcG8v YTZmMjE0N2EtZGU4YS00NDQwLWJjYTItNmQ4YjdjODc2ZmRhLTAvMC8yQTJGQjRE QjBBQTREMDA2OTU4MzE2ODcyRTQ2N0I1NTRFMEZEMEJFLmNybDCBngYIKwYBBQUH AQEEgZEwgY4wgYsGCCsGAQUFBzAChn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5y aXBlLm5ldC9yZXBvc2l0b3J5LzlkZjMzYTU3LTdlNGYtNDg0NC04NGUyLWI3MTUz YjU1MTFiNC8wLzJBMkZCNERCMEFBNEQwMDY5NTgzMTY4NzJFNDY3QjU1NEUwRkQw QkUuY2VyMIGbBggrBgEFBQcBCwSBjjCBizCBiAYIKwYBBQUHMAuGfHJzeW5jOi8v ci5tYWdlbGxhbi5pcHhvLmNvbS9yZXBvL2E2ZjIxNDdhLWRlOGEtNDQ0MC1iY2Ey LTZkOGI3Yzg3NmZkYS0wLzAvMzUyZTM4MzMyZTMyMzIzMDJlMzAyZjMyMzQyZDMy MzQyMDNkM2UyMDM4MzMzNC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAAVT3DANBgkqhkiG9w0BAQsFAAOC AQEAafzO08XfAg3CTy1g+mP66znfBdzRWWjgvITq2vip56dGOkrDNZypvKllIvnr AMomwymh02WG4ZLo4f5AuzpG1tVbDtY6U9EIXd4o0x/hZlE8kNJvBgsbRo/9fAPp MNuSGkynLhkH1BdLWkQDBeT8L8MN5fSFc0ip+ljyITyZhc/ankWbWxMruzupV6Rs xxwL+p7XjZbZdvkn7o8N71nbYUufUX3Deh6fMClB3DfVeWz6xVEhRWoaQ41ifjrW WsjMdV06m6TrZLx0CZIv8VAUjh8J6OH1cvMSBPRMbWAqdaxFY92ZUpLjFAjhVN/2 ZeYLerXGb3y1azj6N5PoV/Zisg== -----END CERTIFICATE-----Generated at Sat Jun 13 05:42:26 2026 by rpki-client