$ rpki-client -vvf r.magellan.ipxo.com/repo/ddd1818b-9fbf-440c-aaec-44a4d1590f87-0/0/3130392e37322e3131372e302f32342d3234203d3e203631333137.roa File: 3130392e37322e3131372e302f32342d3234203d3e203631333137.roa (raw, json) Hash identifier: 7yg/77b6vGtwHFWWySPMikKuNL7utKy/uq0HM7k0vJA= Subject key identifier: 8E:09:41:5F:08:39:E7:73:91:FC:26:60:40:2E:50:66:EF:B0:D7:9E Certificate issuer: /CN=C972E8671DEDC43FE908B548531C969A051CD34C Certificate serial: 1C3D3DC768E283FBC703108FFD9DF42BD69E9727 Authority key identifier: C9:72:E8:67:1D:ED:C4:3F:E9:08:B5:48:53:1C:96:9A:05:1C:D3:4C Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/2/C972E8671DEDC43FE908B548531C969A051CD34C.cer Subject info access: rsync://r.magellan.ipxo.com/repo/ddd1818b-9fbf-440c-aaec-44a4d1590f87-0/0/3130392e37322e3131372e302f32342d3234203d3e203631333137.roa Signing time: Mon 23 Feb 2026 15:06:26 +0000 ROA not before: Mon 23 Feb 2026 15:01:26 +0000 ROA not after: Mon 22 Feb 2027 15:06:26 +0000 asID: 61317 IP address blocks: 109.72.117.0/24 maxlen: 24 Validation: OK Signature path: rsync://r.magellan.ipxo.com/repo/ddd1818b-9fbf-440c-aaec-44a4d1590f87-0/0/C972E8671DEDC43FE908B548531C969A051CD34C.crl rsync://r.magellan.ipxo.com/repo/ddd1818b-9fbf-440c-aaec-44a4d1590f87-0/0/C972E8671DEDC43FE908B548531C969A051CD34C.mft rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/2/C972E8671DEDC43FE908B548531C969A051CD34C.cer rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/2/CF0631D33A3C9DC5C45424D55C3E7663838657A3.crl rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/2/CF0631D33A3C9DC5C45424D55C3E7663838657A3.mft rsync://rpki.ripe.net/repository/DEFAULT/zwYx0zo8ncXEVCTVXD52Y4OGV6M.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 02 Mar 2026 08:56:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1c:3d:3d:c7:68:e2:83:fb:c7:03:10:8f:fd:9d:f4:2b:d6:9e:97:27 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C972E8671DEDC43FE908B548531C969A051CD34C Validity Not Before: Feb 23 15:01:26 2026 GMT Not After : Feb 22 15:06:26 2027 GMT Subject: CN=8E09415F0839E77391FC2660402E5066EFB0D79E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:c9:11:14:6c:3c:93:f5:ec:d0:22:dd:c2:35: a8:ed:6b:1a:58:84:c3:e0:62:85:6c:76:6c:28:26: 4d:6b:1f:67:33:84:15:3c:e2:65:e0:6d:84:4f:6c: fe:ce:b5:79:85:0a:ce:c2:6d:35:4e:05:b5:27:f6: ef:35:19:84:d8:4f:e1:11:34:08:d9:ff:8c:0e:61: 2e:1b:b6:73:7d:d3:ab:4c:2e:fb:05:16:4a:91:44: d7:d8:6b:37:c5:1b:6a:3b:0e:58:ed:a1:c9:e1:b4: f0:6e:27:2d:a6:7c:6b:90:78:44:e1:99:6d:59:dc: 18:74:7c:28:6e:a9:8b:3d:db:46:79:ae:b4:7c:f5: e8:2f:d6:cb:24:7f:aa:7e:a8:41:70:e4:af:05:cb: 02:15:5b:46:fc:c4:1f:1c:25:68:da:de:71:dd:a4: 05:9c:2a:b9:1e:0a:72:b0:8b:0e:d7:8d:e4:35:f5: ce:6c:c5:f7:a6:06:52:11:bb:f7:b4:ed:84:67:77: 18:4d:d9:37:dc:11:b3:e1:db:e6:80:c6:d0:14:a2: 19:45:e2:7c:f8:9a:41:5d:7b:d9:d6:a4:84:13:03: 2b:f3:28:67:ac:85:66:aa:f1:06:1c:f5:2e:e1:ae: 44:77:27:e2:0f:b8:a0:c1:f4:91:33:97:bf:25:44: eb:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:09:41:5F:08:39:E7:73:91:FC:26:60:40:2E:50:66:EF:B0:D7:9E X509v3 Authority Key Identifier: keyid:C9:72:E8:67:1D:ED:C4:3F:E9:08:B5:48:53:1C:96:9A:05:1C:D3:4C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://r.magellan.ipxo.com/repo/ddd1818b-9fbf-440c-aaec-44a4d1590f87-0/0/C972E8671DEDC43FE908B548531C969A051CD34C.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/2/C972E8671DEDC43FE908B548531C969A051CD34C.cer Subject Information Access: Signed Object - URI:rsync://r.magellan.ipxo.com/repo/ddd1818b-9fbf-440c-aaec-44a4d1590f87-0/0/3130392e37322e3131372e302f32342d3234203d3e203631333137.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 109.72.117.0/24 Signature Algorithm: sha256WithRSAEncryption 00:1c:08:82:80:93:a0:8d:1d:18:2f:7f:64:23:a3:ef:ce:38: 9b:55:11:c0:01:e0:04:d9:50:55:15:37:02:0c:2a:44:8d:32: 6a:1a:5b:57:f4:44:c7:11:3d:0c:bf:87:0e:b6:5d:a4:83:b0: 54:0f:54:c4:1c:ce:8f:36:ad:84:b5:51:f2:45:c1:bb:58:e9: f9:27:ea:e8:de:7b:ec:6d:b6:83:fe:d9:22:4b:eb:12:8c:ae: 83:13:54:09:39:04:47:3e:09:8f:95:ad:ed:fa:fe:07:14:f4: 7a:49:b4:81:4d:09:41:aa:19:59:ec:37:34:66:e9:04:a4:ae: 7d:28:d7:a8:f7:66:24:03:d4:22:2f:35:08:97:68:dd:e4:cd: c9:c5:ec:4c:fb:9f:4d:9d:f4:da:81:7d:42:8d:d7:06:53:da: 4d:f3:8a:8b:6a:32:02:87:e5:57:52:83:e2:d0:82:34:00:a0: 27:4c:f2:11:04:d3:15:57:36:85:6c:93:e1:96:85:e9:dc:56: 4b:e9:da:32:2e:76:47:66:d2:be:bf:3c:27:e8:75:5a:c9:63: 95:38:4e:4c:74:d6:7f:84:56:d4:ec:c3:a2:9f:f0:d0:47:8c: 90:3f:31:80:92:0a:47:8c:02:de:be:0d:b4:59:7b:7f:91:e1: cc:d3:4b:9b -----BEGIN CERTIFICATE----- MIIFWDCCBECgAwIBAgIUHD09x2jig/vHAxCP/Z30K9aelycwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzk3MkU4NjcxREVEQzQzRkU5MDhCNTQ4NTMxQzk2OUEw NTFDRDM0QzAeFw0yNjAyMjMxNTAxMjZaFw0yNzAyMjIxNTA2MjZaMDMxMTAvBgNV BAMTKDhFMDk0MTVGMDgzOUU3NzM5MUZDMjY2MDQwMkU1MDY2RUZCMEQ3OUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDsyREUbDyT9ezQIt3CNajtaxpY hMPgYoVsdmwoJk1rH2czhBU84mXgbYRPbP7OtXmFCs7CbTVOBbUn9u81GYTYT+ER NAjZ/4wOYS4btnN906tMLvsFFkqRRNfYazfFG2o7DljtocnhtPBuJy2mfGuQeETh mW1Z3Bh0fChuqYs920Z5rrR89egv1sskf6p+qEFw5K8FywIVW0b8xB8cJWja3nHd pAWcKrkeCnKwiw7XjeQ19c5sxfemBlIRu/e07YRndxhN2TfcEbPh2+aAxtAUohlF 4nz4mkFde9nWpIQTAyvzKGeshWaq8QYc9S7hrkR3J+IPuKDB9JEzl78lROs1AgMB AAGjggJiMIICXjAdBgNVHQ4EFgQUjglBXwg553OR/CZgQC5QZu+w154wHwYDVR0j BBgwFoAUyXLoZx3txD/pCLVIUxyWmgUc00wwDgYDVR0PAQH/BAQDAgeAMIGIBgNV HR8EgYAwfjB8oHqgeIZ2cnN5bmM6Ly9yLm1hZ2VsbGFuLmlweG8uY29tL3JlcG8v ZGRkMTgxOGItOWZiZi00NDBjLWFhZWMtNDRhNGQxNTkwZjg3LTAvMC9DOTcyRTg2 NzFERURDNDNGRTkwOEI1NDg1MzFDOTY5QTA1MUNEMzRDLmNybDCBngYIKwYBBQUH AQEEgZEwgY4wgYsGCCsGAQUFBzAChn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5y aXBlLm5ldC9yZXBvc2l0b3J5LzYxNzA4YTZiLTZjM2EtNDBhMC1hMzAyLTU5NWVj YzE3ODQ4Yy8yL0M5NzJFODY3MURFREM0M0ZFOTA4QjU0ODUzMUM5NjlBMDUxQ0Qz NEMuY2VyMIGkBggrBgEFBQcBCwSBlzCBlDCBkQYIKwYBBQUHMAuGgYRyc3luYzov L3IubWFnZWxsYW4uaXB4by5jb20vcmVwby9kZGQxODE4Yi05ZmJmLTQ0MGMtYWFl Yy00NGE0ZDE1OTBmODctMC8wLzMxMzAzOTJlMzczMjJlMzEzMTM3MmUzMDJmMzIz NDJkMzIzNDIwM2QzZTIwMzYzMTMzMzEzNy5yb2EwGAYDVR0gAQH/BA4wDDAKBggr BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAG1IdTANBgkqhkiG 9w0BAQsFAAOCAQEAABwIgoCToI0dGC9/ZCOj7844m1URwAHgBNlQVRU3AgwqRI0y ahpbV/RExxE9DL+HDrZdpIOwVA9UxBzOjzathLVR8kXBu1jp+Sfq6N577G22g/7Z IkvrEoyugxNUCTkERz4Jj5Wt7fr+BxT0ekm0gU0JQaoZWew3NGbpBKSufSjXqPdm JAPUIi81CJdo3eTNycXsTPufTZ302oF9Qo3XBlPaTfOKi2oyAoflV1KD4tCCNACg J0zyEQTTFVc2hWyT4ZaF6dxWS+naMi52R2bSvr88J+h1WsljlThOTHTWf4RW1OzD op/w0EeMkD8xgJIKR4wC3r4NtFl7f5HhzNNLmw== -----END CERTIFICATE-----Generated at Sun Mar 1 23:18:04 2026 by rpki-client