$ rpki-client -vvf r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/37372e37352e3139372e302f32342d3234203d3e203332303433.roa File: 37372e37352e3139372e302f32342d3234203d3e203332303433.roa (raw, json) Hash identifier: Dq6I/f/v11NDbuLH8Gh4yuqxu17lyRSEwYpJ3VJe1Co= Subject key identifier: FF:D0:25:48:C6:25:20:D2:FB:13:48:93:61:1C:6E:AF:DB:41:F2:F0 Certificate issuer: /CN=2A2FB4DB0AA4D006958316872E467B554E0FD0BE Certificate serial: B08A4D32F78AAA5FE4137A23D7581B8ECDA0B7 Authority key identifier: 2A:2F:B4:DB:0A:A4:D0:06:95:83:16:87:2E:46:7B:55:4E:0F:D0:BE Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.cer Subject info access: rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/37372e37352e3139372e302f32342d3234203d3e203332303433.roa Signing time: Mon 13 Apr 2026 16:47:05 +0000 ROA not before: Mon 13 Apr 2026 16:42:05 +0000 ROA not after: Mon 12 Apr 2027 16:47:05 +0000 asID: 32043 IP address blocks: 77.75.197.0/24 maxlen: 24 Validation: OK Signature path: rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.crl rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.mft rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.cer rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.crl rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft rsync://rpki.ripe.net/repository/DEFAULT/RQLmPOAcrSOaw5e8K7Xmw0fc7uo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 19 Apr 2026 23:31:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: b0:8a:4d:32:f7:8a:aa:5f:e4:13:7a:23:d7:58:1b:8e:cd:a0:b7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2A2FB4DB0AA4D006958316872E467B554E0FD0BE Validity Not Before: Apr 13 16:42:05 2026 GMT Not After : Apr 12 16:47:05 2027 GMT Subject: CN=FFD02548C62520D2FB134893611C6EAFDB41F2F0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:e4:ee:a4:8a:cf:52:f0:50:af:bc:32:a1:a8: e8:3d:e5:b3:58:7f:03:be:cf:b7:e9:e1:55:11:da: a5:7b:f0:b9:fe:eb:70:ff:43:88:98:54:e2:22:28: 39:9f:bb:c3:27:7c:36:e0:1f:28:4c:b9:8a:3a:29: 1f:8e:80:14:83:c2:40:12:bc:89:0e:b4:14:7f:1e: e6:76:00:18:35:a8:31:86:e0:1e:5e:68:44:03:2f: 6b:1f:2b:f3:ce:20:7c:6d:ec:07:ef:24:73:5b:bf: ce:8f:23:73:ae:78:54:6f:4e:7a:f7:45:30:f7:3e: f7:56:f6:f3:c9:a6:19:f7:4c:27:02:40:35:8e:01: 04:6e:97:b3:1a:a3:d7:f4:18:25:c3:b4:4c:50:ec: 7d:0b:a8:fd:0c:40:61:f4:c7:40:e8:f7:42:a3:dc: 4a:94:c2:a2:4d:19:7c:ea:e1:0e:e2:63:94:5d:5c: 05:69:72:33:64:8c:a1:43:c2:1b:6e:01:08:8d:08: fa:b0:78:2a:a2:57:92:c8:ef:d7:7a:3f:ff:8c:c9: 9e:d5:51:27:19:a7:44:c1:21:e4:65:ca:b2:a7:b3: 63:0e:6e:8d:df:62:f7:06:3d:e4:16:0f:9e:cc:e7: c0:5f:c7:93:98:9a:4d:9d:da:7a:8c:57:1e:bb:84: 3e:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:D0:25:48:C6:25:20:D2:FB:13:48:93:61:1C:6E:AF:DB:41:F2:F0 X509v3 Authority Key Identifier: keyid:2A:2F:B4:DB:0A:A4:D0:06:95:83:16:87:2E:46:7B:55:4E:0F:D0:BE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.cer Subject Information Access: Signed Object - URI:rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/37372e37352e3139372e302f32342d3234203d3e203332303433.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 77.75.197.0/24 Signature Algorithm: sha256WithRSAEncryption 43:09:58:80:84:88:cb:84:a9:c0:0a:21:64:dd:4a:90:1f:be: f6:31:ab:d6:73:61:94:17:57:51:f8:8f:e8:bc:40:9d:74:57: 95:89:d1:ea:af:f1:24:49:58:64:07:86:04:ee:b5:2a:2e:91: 69:04:3d:18:62:f0:5c:3b:00:b9:50:68:e5:02:64:9e:8c:81: 99:47:9b:83:af:02:80:b3:6a:79:ad:32:27:61:04:27:7f:1b: e8:89:85:99:b0:05:54:0b:bd:b6:3f:88:ff:34:0c:9f:1d:97: f0:5f:71:f0:29:80:4f:6b:09:50:d2:93:0b:86:0a:00:66:e0: f5:b9:81:84:09:13:dc:15:3b:55:1b:88:66:3b:40:3b:11:0d: 2d:3d:88:17:b7:9c:ef:27:b8:1c:36:ea:13:4b:47:13:04:18: 8a:ba:24:76:da:57:c8:f1:f4:cb:e7:b7:21:af:6b:f1:fd:fc: 1d:06:7c:0b:0a:e3:fc:1e:88:7c:68:5d:84:9a:62:b6:a4:13: de:78:ab:51:32:bf:e2:58:f7:f5:8a:6e:42:ed:ad:a1:fd:d5: 97:b7:02:7d:58:d5:58:7f:54:ca:d3:e7:18:44:8b:3a:27:0b: bc:e2:ef:01:b0:a9:eb:51:fa:c9:dd:69:70:5c:c4:10:3a:d4: 27:a9:ea:c9 -----BEGIN CERTIFICATE----- MIIFVjCCBD6gAwIBAgIUALCKTTL3iqpf5BN6I9dYG47NoLcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkEyRkI0REIwQUE0RDAwNjk1ODMxNjg3MkU0NjdCNTU0 RTBGRDBCRTAeFw0yNjA0MTMxNjQyMDVaFw0yNzA0MTIxNjQ3MDVaMDMxMTAvBgNV BAMTKEZGRDAyNTQ4QzYyNTIwRDJGQjEzNDg5MzYxMUM2RUFGREI0MUYyRjAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCv5O6kis9S8FCvvDKhqOg95bNY fwO+z7fp4VUR2qV78Ln+63D/Q4iYVOIiKDmfu8MnfDbgHyhMuYo6KR+OgBSDwkAS vIkOtBR/HuZ2ABg1qDGG4B5eaEQDL2sfK/POIHxt7AfvJHNbv86PI3OueFRvTnr3 RTD3PvdW9vPJphn3TCcCQDWOAQRul7Mao9f0GCXDtExQ7H0LqP0MQGH0x0Do90Kj 3EqUwqJNGXzq4Q7iY5RdXAVpcjNkjKFDwhtuAQiNCPqweCqiV5LI79d6P/+MyZ7V UScZp0TBIeRlyrKns2MObo3fYvcGPeQWD57M58Bfx5OYmk2d2nqMVx67hD6NAgMB AAGjggJgMIICXDAdBgNVHQ4EFgQU/9AlSMYlINL7E0iTYRxur9tB8vAwHwYDVR0j BBgwFoAUKi+02wqk0AaVgxaHLkZ7VU4P0L4wDgYDVR0PAQH/BAQDAgeAMIGIBgNV HR8EgYAwfjB8oHqgeIZ2cnN5bmM6Ly9yLm1hZ2VsbGFuLmlweG8uY29tL3JlcG8v YTZmMjE0N2EtZGU4YS00NDQwLWJjYTItNmQ4YjdjODc2ZmRhLTAvMC8yQTJGQjRE QjBBQTREMDA2OTU4MzE2ODcyRTQ2N0I1NTRFMEZEMEJFLmNybDCBngYIKwYBBQUH AQEEgZEwgY4wgYsGCCsGAQUFBzAChn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5y aXBlLm5ldC9yZXBvc2l0b3J5LzlkZjMzYTU3LTdlNGYtNDg0NC04NGUyLWI3MTUz YjU1MTFiNC8wLzJBMkZCNERCMEFBNEQwMDY5NTgzMTY4NzJFNDY3QjU1NEUwRkQw QkUuY2VyMIGiBggrBgEFBQcBCwSBlTCBkjCBjwYIKwYBBQUHMAuGgYJyc3luYzov L3IubWFnZWxsYW4uaXB4by5jb20vcmVwby9hNmYyMTQ3YS1kZThhLTQ0NDAtYmNh Mi02ZDhiN2M4NzZmZGEtMC8wLzM3MzcyZTM3MzUyZTMxMzkzNzJlMzAyZjMyMzQy ZDMyMzQyMDNkM2UyMDMzMzIzMDM0MzMucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYB BQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABNS8UwDQYJKoZIhvcN AQELBQADggEBAEMJWICEiMuEqcAKIWTdSpAfvvYxq9ZzYZQXV1H4j+i8QJ10V5WJ 0eqv8SRJWGQHhgTutSoukWkEPRhi8Fw7ALlQaOUCZJ6MgZlHm4OvAoCzanmtMidh BCd/G+iJhZmwBVQLvbY/iP80DJ8dl/BfcfApgE9rCVDSkwuGCgBm4PW5gYQJE9wV O1UbiGY7QDsRDS09iBe3nO8nuBw26hNLRxMEGIq6JHbaV8jx9MvntyGva/H9/B0G fAsK4/weiHxoXYSaYrakE954q1Eyv+JY9/WKbkLtraH91Ze3An1Y1Vh/VMrT5xhE izonC7zi7wGwqetR+sndaXBcxBA61Cep6sk= -----END CERTIFICATE-----Generated at Sun Apr 19 10:30:52 2026 by rpki-client