$ rpki-client -vvf r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/3136392e34302e3136302e302f32322d3234203d3e203536363535.roa File: 3136392e34302e3136302e302f32322d3234203d3e203536363535.roa (raw, json) Hash identifier: kknvArcybXLFSwEx1fKsURFLUsI8hSDzRuzmsxGTXIc= Subject key identifier: FB:53:B1:94:74:04:51:C7:41:11:AC:5D:9A:79:F0:C9:87:EC:A6:3E Certificate issuer: /CN=AEF766F103B2EF99DF8C71978A7FE519D730B155 Certificate serial: 5FF5B5D63AD380F3A46AF34471AD11FA611F6C94 Authority key identifier: AE:F7:66:F1:03:B2:EF:99:DF:8C:71:97:8A:7F:E5:19:D7:30:B1:55 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AEF766F103B2EF99DF8C71978A7FE519D730B155.cer Subject info access: rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/3136392e34302e3136302e302f32322d3234203d3e203536363535.roa Signing time: Thu 12 Feb 2026 01:05:05 +0000 ROA not before: Thu 12 Feb 2026 01:00:05 +0000 ROA not after: Thu 11 Feb 2027 01:05:05 +0000 asID: 56655 IP address blocks: 169.40.160.0/22 maxlen: 24 Validation: OK Signature path: rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AEF766F103B2EF99DF8C71978A7FE519D730B155.crl rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AEF766F103B2EF99DF8C71978A7FE519D730B155.mft rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AEF766F103B2EF99DF8C71978A7FE519D730B155.cer rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 02 Mar 2026 14:28:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5f:f5:b5:d6:3a:d3:80:f3:a4:6a:f3:44:71:ad:11:fa:61:1f:6c:94 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AEF766F103B2EF99DF8C71978A7FE519D730B155 Validity Not Before: Feb 12 01:00:05 2026 GMT Not After : Feb 11 01:05:05 2027 GMT Subject: CN=FB53B194740451C74111AC5D9A79F0C987ECA63E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:88:c4:2b:49:46:e9:cd:64:38:20:54:79:88: 89:27:75:8a:da:e9:15:72:f8:48:6b:5e:9b:6a:f0: f2:d5:26:58:cd:55:75:8f:e4:8f:b1:7a:bc:06:29: c9:99:0b:8c:59:6d:9b:a1:d7:e3:cf:c5:14:06:2b: a8:49:8d:a3:de:6e:ea:fd:0a:8d:22:e3:55:2f:c4: fe:11:a1:df:07:96:6d:a5:fc:f0:62:10:50:3e:ac: 22:3e:70:8b:38:5c:f0:d7:46:d4:28:2d:14:c3:32: eb:0f:c9:f3:f2:49:fa:45:dd:9e:a5:9b:9e:63:e0: b3:71:b7:6b:1a:93:11:b0:9b:1a:f9:d7:ba:c0:6a: 2b:4c:0f:41:82:33:12:50:76:fb:61:c0:ab:73:5b: ba:05:55:77:5d:0c:bb:eb:5c:3e:64:94:06:b1:63: 2f:26:4b:c9:7d:9d:dd:d7:c4:25:d8:a5:be:88:07: 62:3f:b7:8c:58:d2:e0:ff:60:c2:be:09:ba:67:58: 15:b7:db:39:3b:b4:f3:d0:e5:78:35:ee:80:01:e8: 00:7a:b9:a8:63:ff:09:46:be:33:90:f5:67:92:eb: 58:4a:95:af:ac:a2:b7:7b:e2:c1:46:57:69:7c:06: f7:dd:84:e0:5c:da:c6:b2:0a:e5:e8:b4:6c:23:38: 35:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:53:B1:94:74:04:51:C7:41:11:AC:5D:9A:79:F0:C9:87:EC:A6:3E X509v3 Authority Key Identifier: keyid:AE:F7:66:F1:03:B2:EF:99:DF:8C:71:97:8A:7F:E5:19:D7:30:B1:55 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AEF766F103B2EF99DF8C71978A7FE519D730B155.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AEF766F103B2EF99DF8C71978A7FE519D730B155.cer Subject Information Access: Signed Object - URI:rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/3136392e34302e3136302e302f32322d3234203d3e203536363535.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 169.40.160.0/22 Signature Algorithm: sha256WithRSAEncryption 9d:1b:7f:30:0b:41:01:f6:47:68:af:33:c0:37:69:a2:e3:b6: b2:9c:46:a6:c0:be:48:49:f1:72:08:5d:90:ff:5e:0a:37:e8: 57:e7:d8:d1:78:24:76:07:34:fa:25:d5:ac:84:6c:23:b5:7e: c3:a5:3a:46:81:21:96:67:7c:79:9a:0d:b0:25:a2:c5:64:5e: cd:91:71:51:6c:e5:44:61:cd:ab:a6:8a:70:09:f5:2e:1f:69: b2:64:7e:de:d4:0a:3c:8e:f4:0a:8a:b0:cb:6b:b1:18:12:ad: 46:b1:14:a0:ea:00:ae:15:7b:ec:a7:57:f6:a8:d8:06:38:d8: 25:10:8a:58:63:d2:f9:8d:13:93:34:57:cf:90:4e:13:5f:17: e4:40:61:31:d7:66:a5:ae:74:87:15:bd:a0:af:47:5a:23:6b: 3c:21:a0:1c:12:ca:71:27:8f:77:0a:31:27:22:63:25:a7:06: 1b:c4:fc:ac:e4:52:11:d4:38:11:d6:bd:40:f2:b4:16:59:50: 77:c6:5a:50:6a:ba:b3:4e:9e:1e:10:73:86:fc:ae:ba:fb:82: 2b:96:0e:87:4d:a6:47:85:d8:16:16:3a:45:35:50:81:d5:8b: 7c:dc:4f:ac:ec:37:34:1e:b0:f3:3b:d4:a3:ac:6e:8b:75:37: 64:0b:7a:77 -----BEGIN CERTIFICATE----- MIIFWDCCBECgAwIBAgIUX/W11jrTgPOkavNEca0R+mEfbJQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUVGNzY2RjEwM0IyRUY5OURGOEM3MTk3OEE3RkU1MTlE NzMwQjE1NTAeFw0yNjAyMTIwMTAwMDVaFw0yNzAyMTEwMTA1MDVaMDMxMTAvBgNV BAMTKEZCNTNCMTk0NzQwNDUxQzc0MTExQUM1RDlBNzlGMEM5ODdFQ0E2M0UwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCQiMQrSUbpzWQ4IFR5iIkndYra 6RVy+EhrXptq8PLVJljNVXWP5I+xerwGKcmZC4xZbZuh1+PPxRQGK6hJjaPebur9 Co0i41UvxP4Rod8Hlm2l/PBiEFA+rCI+cIs4XPDXRtQoLRTDMusPyfPySfpF3Z6l m55j4LNxt2sakxGwmxr517rAaitMD0GCMxJQdvthwKtzW7oFVXddDLvrXD5klAax Yy8mS8l9nd3XxCXYpb6IB2I/t4xY0uD/YMK+CbpnWBW32zk7tPPQ5Xg17oAB6AB6 uahj/wlGvjOQ9WeS61hKla+sord74sFGV2l8BvfdhOBc2sayCuXotGwjODVPAgMB AAGjggJiMIICXjAdBgNVHQ4EFgQU+1OxlHQEUcdBEaxdmnnwyYfspj4wHwYDVR0j BBgwFoAUrvdm8QOy75nfjHGXin/lGdcwsVUwDgYDVR0PAQH/BAQDAgeAMIGIBgNV HR8EgYAwfjB8oHqgeIZ2cnN5bmM6Ly9yLm1hZ2VsbGFuLmlweG8uY29tL3JlcG8v MzAzMjdiOWUtMjI3YS00ZWJkLTgyNWItM2I5ODA5NWRjOTI3LTAvMC9BRUY3NjZG MTAzQjJFRjk5REY4QzcxOTc4QTdGRTUxOUQ3MzBCMTU1LmNybDCBngYIKwYBBQUH AQEEgZEwgY4wgYsGCCsGAQUFBzAChn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5y aXBlLm5ldC9yZXBvc2l0b3J5L2ZlMzcwOGEwLTY3ZDUtNGFjMi1hYmM0LWEzMzI1 OTBiOTlhZi80L0FFRjc2NkYxMDNCMkVGOTlERjhDNzE5NzhBN0ZFNTE5RDczMEIx NTUuY2VyMIGkBggrBgEFBQcBCwSBlzCBlDCBkQYIKwYBBQUHMAuGgYRyc3luYzov L3IubWFnZWxsYW4uaXB4by5jb20vcmVwby8zMDMyN2I5ZS0yMjdhLTRlYmQtODI1 Yi0zYjk4MDk1ZGM5MjctMC8wLzMxMzYzOTJlMzQzMDJlMzEzNjMwMmUzMDJmMzIz MjJkMzIzNDIwM2QzZTIwMzUzNjM2MzUzNS5yb2EwGAYDVR0gAQH/BA4wDDAKBggr BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAqkooDANBgkqhkiG 9w0BAQsFAAOCAQEAnRt/MAtBAfZHaK8zwDdpouO2spxGpsC+SEnxcghdkP9eCjfo V+fY0Xgkdgc0+iXVrIRsI7V+w6U6RoEhlmd8eZoNsCWixWRezZFxUWzlRGHNq6aK cAn1Lh9psmR+3tQKPI70Coqwy2uxGBKtRrEUoOoArhV77KdX9qjYBjjYJRCKWGPS +Y0TkzRXz5BOE18X5EBhMddmpa50hxW9oK9HWiNrPCGgHBLKcSePdwoxJyJjJacG G8T8rORSEdQ4Eda9QPK0FllQd8ZaUGq6s06eHhBzhvyuuvuCK5YOh02mR4XYFhY6 RTVQgdWLfNxPrOw3NB6w8zvUo6xui3U3ZAt6dw== -----END CERTIFICATE-----Generated at Mon Mar 2 07:44:33 2026 by rpki-client