$ rpki-client -vvf r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/37372e37352e3139352e302f32342d3234203d3e20313938323530.roa File: 37372e37352e3139352e302f32342d3234203d3e20313938323530.roa (raw, json) Hash identifier: +qsR/K2HtgXYN/t9Y8PUeQuYT6FIJ5apGt5ePCQ1Ej4= Subject key identifier: DA:E6:0A:A9:71:35:73:57:86:ED:BA:FC:48:75:C9:E0:1A:03:9E:48 Certificate issuer: /CN=2A2FB4DB0AA4D006958316872E467B554E0FD0BE Certificate serial: 357654818E0F647CE87AE60D11AC4ADC70397ACC Authority key identifier: 2A:2F:B4:DB:0A:A4:D0:06:95:83:16:87:2E:46:7B:55:4E:0F:D0:BE Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.cer Subject info access: rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/37372e37352e3139352e302f32342d3234203d3e20313938323530.roa Signing time: Fri 10 Apr 2026 03:18:34 +0000 ROA not before: Fri 10 Apr 2026 03:13:34 +0000 ROA not after: Fri 09 Apr 2027 03:18:34 +0000 asID: 198250 IP address blocks: 77.75.195.0/24 maxlen: 24 Validation: OK Signature path: rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.crl rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.mft rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.cer rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.crl rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft rsync://rpki.ripe.net/repository/DEFAULT/RQLmPOAcrSOaw5e8K7Xmw0fc7uo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 19 Apr 2026 23:31:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 35:76:54:81:8e:0f:64:7c:e8:7a:e6:0d:11:ac:4a:dc:70:39:7a:cc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2A2FB4DB0AA4D006958316872E467B554E0FD0BE Validity Not Before: Apr 10 03:13:34 2026 GMT Not After : Apr 9 03:18:34 2027 GMT Subject: CN=DAE60AA97135735786EDBAFC4875C9E01A039E48 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:b8:e1:a0:32:33:d7:af:1f:d0:25:62:4d:48: 34:8a:ac:02:d2:86:4d:2e:ee:78:63:93:9f:0e:26: 98:1e:2f:e4:12:8f:25:a5:76:80:ab:6b:1d:3f:64: 2e:9f:5a:1b:e1:61:06:11:60:91:c9:02:3e:f5:d0: 40:f8:1d:97:17:22:2b:a7:c5:7f:85:da:58:2f:14: d8:4a:80:22:f7:be:1c:59:cb:fd:01:b7:ba:cd:58: 91:99:b1:dc:e5:53:d8:f1:0e:30:81:db:39:55:eb: 64:da:3b:5e:67:50:a4:9f:48:4d:0a:ce:78:d1:c1: da:50:b8:a0:f2:05:b7:4e:06:ff:32:5c:63:1a:9b: 9b:a9:74:20:b7:5d:c5:98:cb:52:97:5d:6b:24:44: b8:ed:14:12:5a:b8:98:61:52:e2:b5:86:30:c9:db: 4e:c7:38:c2:f3:c4:d8:45:70:f5:13:0f:db:d7:57: 23:88:87:2a:53:a3:78:3f:12:fd:2a:fe:fa:05:4c: 15:da:e9:9c:b4:3b:e9:90:df:ca:28:12:be:7c:b2: 6d:96:66:56:8e:c0:4a:73:19:8f:9c:c6:de:16:dd: a1:53:e1:10:56:15:64:24:67:f6:90:86:ff:09:54: 91:50:4d:28:bc:92:39:5e:24:bd:fe:5d:5c:83:5d: 16:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:E6:0A:A9:71:35:73:57:86:ED:BA:FC:48:75:C9:E0:1A:03:9E:48 X509v3 Authority Key Identifier: keyid:2A:2F:B4:DB:0A:A4:D0:06:95:83:16:87:2E:46:7B:55:4E:0F:D0:BE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.cer Subject Information Access: Signed Object - URI:rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/37372e37352e3139352e302f32342d3234203d3e20313938323530.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 77.75.195.0/24 Signature Algorithm: sha256WithRSAEncryption 3b:67:ba:3f:7c:eb:b6:8e:83:c1:34:5c:fd:e1:78:a2:14:f0: 13:62:4f:c6:7c:7e:f9:0d:c7:b9:60:7d:5c:ac:c0:8c:b4:77: a2:24:25:4e:06:9b:eb:88:5b:bd:69:d1:99:57:2d:56:8e:77: b5:c7:af:1c:bc:be:8e:1a:55:0f:b5:58:de:f1:eb:94:ae:93: 0f:e6:8e:fa:5a:54:23:6b:05:31:2f:50:db:a3:86:4d:48:c9: 28:dc:90:29:bb:70:cd:2a:6e:39:10:2c:44:15:e1:01:b7:7a: b3:74:84:53:e9:dd:aa:94:f5:f7:07:0f:33:4c:d4:37:3c:00: d8:76:33:0e:38:0e:db:0a:b0:5b:e8:44:24:f9:f8:13:8e:b0: c7:f3:4a:05:1c:f5:9a:09:bf:ce:9e:d8:46:97:df:b5:9e:94: 7b:21:4b:81:ee:63:a4:f8:aa:e3:a8:8d:98:13:10:f3:04:72: 7e:de:30:29:11:5f:27:b0:c4:02:ce:ef:3b:af:0a:dc:3f:cc: b7:ca:e3:02:fe:54:c2:7c:9b:e0:fd:1c:0b:bc:01:b2:36:16: 21:03:50:54:8e:13:eb:06:f6:f9:0e:a6:72:22:09:47:4f:9a: e4:c7:29:fe:a6:1d:a4:94:eb:7e:e5:ba:49:f1:57:79:ea:18: 97:53:3a:b0 -----BEGIN CERTIFICATE----- MIIFWDCCBECgAwIBAgIUNXZUgY4PZHzoeuYNEaxK3HA5eswwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkEyRkI0REIwQUE0RDAwNjk1ODMxNjg3MkU0NjdCNTU0 RTBGRDBCRTAeFw0yNjA0MTAwMzEzMzRaFw0yNzA0MDkwMzE4MzRaMDMxMTAvBgNV BAMTKERBRTYwQUE5NzEzNTczNTc4NkVEQkFGQzQ4NzVDOUUwMUEwMzlFNDgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDduOGgMjPXrx/QJWJNSDSKrALS hk0u7nhjk58OJpgeL+QSjyWldoCrax0/ZC6fWhvhYQYRYJHJAj710ED4HZcXIiun xX+F2lgvFNhKgCL3vhxZy/0Bt7rNWJGZsdzlU9jxDjCB2zlV62TaO15nUKSfSE0K znjRwdpQuKDyBbdOBv8yXGMam5updCC3XcWYy1KXXWskRLjtFBJauJhhUuK1hjDJ 207HOMLzxNhFcPUTD9vXVyOIhypTo3g/Ev0q/voFTBXa6Zy0O+mQ38ooEr58sm2W ZlaOwEpzGY+cxt4W3aFT4RBWFWQkZ/aQhv8JVJFQTSi8kjleJL3+XVyDXRa1AgMB AAGjggJiMIICXjAdBgNVHQ4EFgQU2uYKqXE1c1eG7br8SHXJ4BoDnkgwHwYDVR0j BBgwFoAUKi+02wqk0AaVgxaHLkZ7VU4P0L4wDgYDVR0PAQH/BAQDAgeAMIGIBgNV HR8EgYAwfjB8oHqgeIZ2cnN5bmM6Ly9yLm1hZ2VsbGFuLmlweG8uY29tL3JlcG8v YTZmMjE0N2EtZGU4YS00NDQwLWJjYTItNmQ4YjdjODc2ZmRhLTAvMC8yQTJGQjRE QjBBQTREMDA2OTU4MzE2ODcyRTQ2N0I1NTRFMEZEMEJFLmNybDCBngYIKwYBBQUH AQEEgZEwgY4wgYsGCCsGAQUFBzAChn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5y aXBlLm5ldC9yZXBvc2l0b3J5LzlkZjMzYTU3LTdlNGYtNDg0NC04NGUyLWI3MTUz YjU1MTFiNC8wLzJBMkZCNERCMEFBNEQwMDY5NTgzMTY4NzJFNDY3QjU1NEUwRkQw QkUuY2VyMIGkBggrBgEFBQcBCwSBlzCBlDCBkQYIKwYBBQUHMAuGgYRyc3luYzov L3IubWFnZWxsYW4uaXB4by5jb20vcmVwby9hNmYyMTQ3YS1kZThhLTQ0NDAtYmNh Mi02ZDhiN2M4NzZmZGEtMC8wLzM3MzcyZTM3MzUyZTMxMzkzNTJlMzAyZjMyMzQy ZDMyMzQyMDNkM2UyMDMxMzkzODMyMzUzMC5yb2EwGAYDVR0gAQH/BA4wDDAKBggr BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAE1LwzANBgkqhkiG 9w0BAQsFAAOCAQEAO2e6P3zrto6DwTRc/eF4ohTwE2JPxnx++Q3HuWB9XKzAjLR3 oiQlTgab64hbvWnRmVctVo53tcevHLy+jhpVD7VY3vHrlK6TD+aO+lpUI2sFMS9Q 26OGTUjJKNyQKbtwzSpuORAsRBXhAbd6s3SEU+ndqpT19wcPM0zUNzwA2HYzDjgO 2wqwW+hEJPn4E46wx/NKBRz1mgm/zp7YRpfftZ6UeyFLge5jpPiq46iNmBMQ8wRy ft4wKRFfJ7DEAs7vO68K3D/Mt8rjAv5Uwnyb4P0cC7wBsjYWIQNQVI4T6wb2+Q6m ciIJR0+a5Mcp/qYdpJTrfuW6SfFXeeoYl1M6sA== -----END CERTIFICATE-----Generated at Sun Apr 19 10:24:59 2026 by rpki-client