$ rpki-client -vvf r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/3136392e34302e3133372e302f32342d3234203d3e203439353932.roa File: 3136392e34302e3133372e302f32342d3234203d3e203439353932.roa (raw, json) Hash identifier: bx9hylLpee5UTeS/0FKojcmPo24dYADyRwIGWQjKPbU= Subject key identifier: 68:0E:9F:E2:E2:35:52:45:24:0F:AF:4B:62:61:2E:C1:C3:EC:DE:38 Certificate issuer: /CN=AEF766F103B2EF99DF8C71978A7FE519D730B155 Certificate serial: 0D1E6D7C89A57012700E0B616A75AF9B85737DA9 Authority key identifier: AE:F7:66:F1:03:B2:EF:99:DF:8C:71:97:8A:7F:E5:19:D7:30:B1:55 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AEF766F103B2EF99DF8C71978A7FE519D730B155.cer Subject info access: rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/3136392e34302e3133372e302f32342d3234203d3e203439353932.roa Signing time: Thu 12 Feb 2026 01:05:06 +0000 ROA not before: Thu 12 Feb 2026 01:00:06 +0000 ROA not after: Thu 11 Feb 2027 01:05:06 +0000 asID: 49592 IP address blocks: 169.40.137.0/24 maxlen: 24 Validation: OK Signature path: rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AEF766F103B2EF99DF8C71978A7FE519D730B155.crl rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AEF766F103B2EF99DF8C71978A7FE519D730B155.mft rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AEF766F103B2EF99DF8C71978A7FE519D730B155.cer rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 02 Mar 2026 06:04:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0d:1e:6d:7c:89:a5:70:12:70:0e:0b:61:6a:75:af:9b:85:73:7d:a9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AEF766F103B2EF99DF8C71978A7FE519D730B155 Validity Not Before: Feb 12 01:00:06 2026 GMT Not After : Feb 11 01:05:06 2027 GMT Subject: CN=680E9FE2E2355245240FAF4B62612EC1C3ECDE38 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:83:03:ca:3a:76:ff:ec:a0:95:29:81:70:0d: 2c:5a:67:56:6b:76:03:96:61:3a:a8:3a:e6:02:3a: a6:ef:3d:25:e4:24:36:c8:cb:21:96:02:e5:ff:02: be:31:07:4c:9b:b8:fe:87:08:a0:d6:b0:92:59:56: 44:d7:13:7a:2e:56:32:f4:75:c5:d3:6a:fe:70:5b: df:d2:b7:42:39:09:b0:84:5a:c4:b2:7b:75:8c:5d: 91:ed:ca:a7:d4:9f:c5:96:f0:b8:6e:9b:90:ef:58: a8:e5:1a:8c:b1:81:dd:a4:80:6b:6b:17:14:20:2b: 26:c8:af:e9:cf:d7:1f:7c:29:ac:03:77:04:e2:3a: d5:39:96:a0:5e:b1:8f:bd:b3:6a:15:55:3a:a0:11: 57:d9:9d:2e:16:78:00:42:1d:34:33:37:6b:27:f3: 57:50:e7:3f:5c:43:33:49:df:fc:2a:c7:1d:49:3a: e3:11:bc:58:de:13:af:ae:3c:b2:81:9d:12:ff:ae: 76:99:c7:98:77:70:0f:18:87:bd:75:48:c7:bb:1e: 2d:83:19:07:bf:9a:12:f4:3b:9c:ce:d3:18:3f:10: b9:06:ce:d4:72:87:2b:b1:c0:4a:c4:08:ae:e7:24: 49:62:fb:1a:1f:22:00:24:04:a8:48:d6:7d:ee:17: 25:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:0E:9F:E2:E2:35:52:45:24:0F:AF:4B:62:61:2E:C1:C3:EC:DE:38 X509v3 Authority Key Identifier: keyid:AE:F7:66:F1:03:B2:EF:99:DF:8C:71:97:8A:7F:E5:19:D7:30:B1:55 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AEF766F103B2EF99DF8C71978A7FE519D730B155.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AEF766F103B2EF99DF8C71978A7FE519D730B155.cer Subject Information Access: Signed Object - URI:rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/3136392e34302e3133372e302f32342d3234203d3e203439353932.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 169.40.137.0/24 Signature Algorithm: sha256WithRSAEncryption 3e:18:1c:62:ed:d7:1e:9f:57:e8:0d:cb:f7:fb:bd:f7:83:d1: 09:33:1a:2d:5f:e8:56:78:ff:d6:e7:ed:9f:b1:48:3f:66:fc: b1:1d:a6:74:25:50:5f:69:90:9f:e7:19:f4:3c:a8:1e:51:b5: 3c:c1:aa:4e:02:0e:34:91:c9:f9:8d:6f:9b:d4:8f:8b:88:84: 6d:31:ed:4b:93:aa:99:c4:eb:19:ce:68:00:60:ad:e2:40:69: fc:c9:f0:db:db:1b:c4:92:8e:48:ec:e8:c1:c3:25:12:64:9a: 98:0d:b0:8f:20:9d:61:1e:58:11:09:8a:8c:16:40:74:94:7f: 1e:92:9b:8a:35:c8:99:d3:d6:cf:27:c7:49:28:24:ce:8f:19: cf:f2:bf:0e:dc:35:84:76:41:89:06:05:a9:46:67:10:fd:dc: 4f:ab:32:0c:62:25:60:bc:50:e7:70:5b:c3:75:62:44:6a:35: 60:29:46:7e:0b:11:7b:4c:2f:07:42:35:15:bf:88:e4:74:80: cd:c6:c1:52:17:ac:b9:a6:24:cc:e5:61:9e:c7:ad:d9:e5:48: 74:4e:b0:44:06:ca:42:65:94:2e:de:ec:94:45:f8:95:91:e3: 51:00:df:6f:e1:82:b1:db:cb:78:4a:76:9d:d2:1b:e5:ef:60: 4c:a9:50:69 -----BEGIN CERTIFICATE----- MIIFWDCCBECgAwIBAgIUDR5tfImlcBJwDgthanWvm4VzfakwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUVGNzY2RjEwM0IyRUY5OURGOEM3MTk3OEE3RkU1MTlE NzMwQjE1NTAeFw0yNjAyMTIwMTAwMDZaFw0yNzAyMTEwMTA1MDZaMDMxMTAvBgNV BAMTKDY4MEU5RkUyRTIzNTUyNDUyNDBGQUY0QjYyNjEyRUMxQzNFQ0RFMzgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCagwPKOnb/7KCVKYFwDSxaZ1Zr dgOWYTqoOuYCOqbvPSXkJDbIyyGWAuX/Ar4xB0ybuP6HCKDWsJJZVkTXE3ouVjL0 dcXTav5wW9/St0I5CbCEWsSye3WMXZHtyqfUn8WW8Lhum5DvWKjlGoyxgd2kgGtr FxQgKybIr+nP1x98KawDdwTiOtU5lqBesY+9s2oVVTqgEVfZnS4WeABCHTQzN2sn 81dQ5z9cQzNJ3/wqxx1JOuMRvFjeE6+uPLKBnRL/rnaZx5h3cA8Yh711SMe7Hi2D GQe/mhL0O5zO0xg/ELkGztRyhyuxwErECK7nJEli+xofIgAkBKhI1n3uFyUhAgMB AAGjggJiMIICXjAdBgNVHQ4EFgQUaA6f4uI1UkUkD69LYmEuwcPs3jgwHwYDVR0j BBgwFoAUrvdm8QOy75nfjHGXin/lGdcwsVUwDgYDVR0PAQH/BAQDAgeAMIGIBgNV HR8EgYAwfjB8oHqgeIZ2cnN5bmM6Ly9yLm1hZ2VsbGFuLmlweG8uY29tL3JlcG8v MzAzMjdiOWUtMjI3YS00ZWJkLTgyNWItM2I5ODA5NWRjOTI3LTAvMC9BRUY3NjZG MTAzQjJFRjk5REY4QzcxOTc4QTdGRTUxOUQ3MzBCMTU1LmNybDCBngYIKwYBBQUH AQEEgZEwgY4wgYsGCCsGAQUFBzAChn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5y aXBlLm5ldC9yZXBvc2l0b3J5L2ZlMzcwOGEwLTY3ZDUtNGFjMi1hYmM0LWEzMzI1 OTBiOTlhZi80L0FFRjc2NkYxMDNCMkVGOTlERjhDNzE5NzhBN0ZFNTE5RDczMEIx NTUuY2VyMIGkBggrBgEFBQcBCwSBlzCBlDCBkQYIKwYBBQUHMAuGgYRyc3luYzov L3IubWFnZWxsYW4uaXB4by5jb20vcmVwby8zMDMyN2I5ZS0yMjdhLTRlYmQtODI1 Yi0zYjk4MDk1ZGM5MjctMC8wLzMxMzYzOTJlMzQzMDJlMzEzMzM3MmUzMDJmMzIz NDJkMzIzNDIwM2QzZTIwMzQzOTM1MzkzMi5yb2EwGAYDVR0gAQH/BA4wDDAKBggr BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAKkoiTANBgkqhkiG 9w0BAQsFAAOCAQEAPhgcYu3XHp9X6A3L9/u994PRCTMaLV/oVnj/1uftn7FIP2b8 sR2mdCVQX2mQn+cZ9DyoHlG1PMGqTgIONJHJ+Y1vm9SPi4iEbTHtS5OqmcTrGc5o AGCt4kBp/Mnw29sbxJKOSOzowcMlEmSamA2wjyCdYR5YEQmKjBZAdJR/HpKbijXI mdPWzyfHSSgkzo8Zz/K/Dtw1hHZBiQYFqUZnEP3cT6syDGIlYLxQ53Bbw3ViRGo1 YClGfgsRe0wvB0I1Fb+I5HSAzcbBUhesuaYkzOVhnset2eVIdE6wRAbKQmWULt7s lEX4lZHjUQDfb+GCsdvLeEp2ndIb5e9gTKlQaQ== -----END CERTIFICATE-----Generated at Mon Mar 2 00:05:06 2026 by rpki-client