$ rpki-client -vvf r.magellan.ipxo.com/repo/ddd1818b-9fbf-440c-aaec-44a4d1590f87-0/0/3130392e37322e3131392e302f32342d3234203d3e20323633373032.roa File: 3130392e37322e3131392e302f32342d3234203d3e20323633373032.roa (raw, json) Hash identifier: e3WSJJYbIVrKQRz90yc6D6qJJefkpkpIF9rVPv1tlm8= Subject key identifier: F1:50:58:6E:B4:B3:0E:33:16:DE:20:1E:78:79:1F:AD:6C:74:C3:77 Certificate issuer: /CN=C972E8671DEDC43FE908B548531C969A051CD34C Certificate serial: 36181AA6929537896A90B3AA3FF22EF5AE958963 Authority key identifier: C9:72:E8:67:1D:ED:C4:3F:E9:08:B5:48:53:1C:96:9A:05:1C:D3:4C Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/2/C972E8671DEDC43FE908B548531C969A051CD34C.cer Subject info access: rsync://r.magellan.ipxo.com/repo/ddd1818b-9fbf-440c-aaec-44a4d1590f87-0/0/3130392e37322e3131392e302f32342d3234203d3e20323633373032.roa Signing time: Mon 23 Feb 2026 15:06:26 +0000 ROA not before: Mon 23 Feb 2026 15:01:26 +0000 ROA not after: Mon 22 Feb 2027 15:06:26 +0000 asID: 263702 IP address blocks: 109.72.119.0/24 maxlen: 24 Validation: OK Signature path: rsync://r.magellan.ipxo.com/repo/ddd1818b-9fbf-440c-aaec-44a4d1590f87-0/0/C972E8671DEDC43FE908B548531C969A051CD34C.crl rsync://r.magellan.ipxo.com/repo/ddd1818b-9fbf-440c-aaec-44a4d1590f87-0/0/C972E8671DEDC43FE908B548531C969A051CD34C.mft rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/2/C972E8671DEDC43FE908B548531C969A051CD34C.cer rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/2/CF0631D33A3C9DC5C45424D55C3E7663838657A3.crl rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/2/CF0631D33A3C9DC5C45424D55C3E7663838657A3.mft rsync://rpki.ripe.net/repository/DEFAULT/zwYx0zo8ncXEVCTVXD52Y4OGV6M.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 02 Mar 2026 08:56:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 36:18:1a:a6:92:95:37:89:6a:90:b3:aa:3f:f2:2e:f5:ae:95:89:63 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C972E8671DEDC43FE908B548531C969A051CD34C Validity Not Before: Feb 23 15:01:26 2026 GMT Not After : Feb 22 15:06:26 2027 GMT Subject: CN=F150586EB4B30E3316DE201E78791FAD6C74C377 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:9b:f4:93:79:0e:fd:28:3d:d6:f7:d7:1f:94: e4:b0:10:ef:c3:5f:67:2b:60:f1:d9:44:94:d5:93: 98:4c:60:f4:0f:0b:01:73:5e:d8:9a:79:23:f9:9b: b5:43:79:4f:b7:14:0d:83:ac:17:fa:4a:83:16:d7: df:da:af:6b:42:44:ac:66:b2:22:54:9e:eb:14:2c: cf:7b:89:09:5a:51:95:d0:7c:3e:15:f9:af:35:e3: 9c:a4:86:3c:45:45:2f:2f:58:89:dc:25:c1:33:de: 90:1f:cb:23:5a:0c:12:69:7f:2e:2c:3d:0d:e8:e0: e0:a7:81:cf:48:28:fc:13:84:f8:3c:ef:99:22:73: f7:62:6e:9e:06:29:34:c8:74:a9:a6:85:6e:88:0f: e9:07:57:d8:7b:b1:ea:4f:40:6c:24:06:52:90:78: 37:2c:3f:89:97:69:30:0c:63:1d:29:c0:f4:10:2f: 63:44:54:05:ff:31:ae:1c:d1:0c:49:48:fc:9a:09: 79:51:2a:ce:fc:05:08:df:bb:67:2a:c2:54:24:0e: 47:40:73:34:2e:cd:ae:b6:ab:3b:cf:c2:32:d9:1d: 70:2d:d4:0d:05:48:d7:96:ed:7b:9d:26:f7:7f:e1: 9a:ab:bb:22:9f:76:23:94:fe:a3:81:46:ea:38:49: 21:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:50:58:6E:B4:B3:0E:33:16:DE:20:1E:78:79:1F:AD:6C:74:C3:77 X509v3 Authority Key Identifier: keyid:C9:72:E8:67:1D:ED:C4:3F:E9:08:B5:48:53:1C:96:9A:05:1C:D3:4C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://r.magellan.ipxo.com/repo/ddd1818b-9fbf-440c-aaec-44a4d1590f87-0/0/C972E8671DEDC43FE908B548531C969A051CD34C.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/2/C972E8671DEDC43FE908B548531C969A051CD34C.cer Subject Information Access: Signed Object - URI:rsync://r.magellan.ipxo.com/repo/ddd1818b-9fbf-440c-aaec-44a4d1590f87-0/0/3130392e37322e3131392e302f32342d3234203d3e20323633373032.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 109.72.119.0/24 Signature Algorithm: sha256WithRSAEncryption 94:8f:c2:eb:79:20:86:3d:40:32:24:6d:65:73:59:53:ca:49: 0c:6b:9f:74:fc:00:e0:ac:3a:be:9c:78:18:a4:b1:0f:c2:fa: 5b:2c:3c:77:8d:a2:21:4a:1e:09:28:27:24:b9:0d:91:b9:a9: ab:67:b0:5b:53:ec:52:93:13:8a:8c:e5:0f:4f:60:69:93:76: e1:c8:c9:66:bb:3c:16:d0:0c:73:aa:6a:d6:a6:30:0b:75:76: 98:02:c8:06:fe:58:a2:08:aa:13:5c:e6:88:41:fe:54:d9:dc: c3:e8:63:35:f3:50:2d:00:6b:b9:bb:57:03:75:ea:cd:99:05: 4b:ed:46:a4:6e:1b:62:7f:b0:99:cb:56:27:15:48:04:f2:af: 3f:27:ea:20:6d:6f:42:6a:3d:88:57:3c:b6:93:17:e5:d3:c1: 26:3e:1f:a7:55:ab:b5:55:4c:81:9e:d7:43:a3:31:ab:18:0a: b4:43:07:e8:8a:e6:5c:84:a8:20:86:8a:8c:c0:36:bf:b3:1c: 0c:b2:7a:13:22:e8:0b:fd:98:33:9d:81:96:ef:1a:12:63:50: 58:2f:ab:9b:da:1f:12:59:0e:da:55:da:32:3c:a0:3d:12:e6: 28:99:c5:4f:40:0c:31:3c:a8:fe:b8:f7:44:66:2a:cc:b9:11: 62:54:4d:d4 -----BEGIN CERTIFICATE----- MIIFWjCCBEKgAwIBAgIUNhgappKVN4lqkLOqP/Iu9a6ViWMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzk3MkU4NjcxREVEQzQzRkU5MDhCNTQ4NTMxQzk2OUEw NTFDRDM0QzAeFw0yNjAyMjMxNTAxMjZaFw0yNzAyMjIxNTA2MjZaMDMxMTAvBgNV BAMTKEYxNTA1ODZFQjRCMzBFMzMxNkRFMjAxRTc4NzkxRkFENkM3NEMzNzcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCom/STeQ79KD3W99cflOSwEO/D X2crYPHZRJTVk5hMYPQPCwFzXtiaeSP5m7VDeU+3FA2DrBf6SoMW19/ar2tCRKxm siJUnusULM97iQlaUZXQfD4V+a8145ykhjxFRS8vWIncJcEz3pAfyyNaDBJpfy4s PQ3o4OCngc9IKPwThPg875kic/dibp4GKTTIdKmmhW6ID+kHV9h7sepPQGwkBlKQ eDcsP4mXaTAMYx0pwPQQL2NEVAX/Ma4c0QxJSPyaCXlRKs78BQjfu2cqwlQkDkdA czQuza62qzvPwjLZHXAt1A0FSNeW7XudJvd/4ZqruyKfdiOU/qOBRuo4SSEtAgMB AAGjggJkMIICYDAdBgNVHQ4EFgQU8VBYbrSzDjMW3iAeeHkfrWx0w3cwHwYDVR0j BBgwFoAUyXLoZx3txD/pCLVIUxyWmgUc00wwDgYDVR0PAQH/BAQDAgeAMIGIBgNV HR8EgYAwfjB8oHqgeIZ2cnN5bmM6Ly9yLm1hZ2VsbGFuLmlweG8uY29tL3JlcG8v ZGRkMTgxOGItOWZiZi00NDBjLWFhZWMtNDRhNGQxNTkwZjg3LTAvMC9DOTcyRTg2 NzFERURDNDNGRTkwOEI1NDg1MzFDOTY5QTA1MUNEMzRDLmNybDCBngYIKwYBBQUH AQEEgZEwgY4wgYsGCCsGAQUFBzAChn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5y aXBlLm5ldC9yZXBvc2l0b3J5LzYxNzA4YTZiLTZjM2EtNDBhMC1hMzAyLTU5NWVj YzE3ODQ4Yy8yL0M5NzJFODY3MURFREM0M0ZFOTA4QjU0ODUzMUM5NjlBMDUxQ0Qz NEMuY2VyMIGmBggrBgEFBQcBCwSBmTCBljCBkwYIKwYBBQUHMAuGgYZyc3luYzov L3IubWFnZWxsYW4uaXB4by5jb20vcmVwby9kZGQxODE4Yi05ZmJmLTQ0MGMtYWFl Yy00NGE0ZDE1OTBmODctMC8wLzMxMzAzOTJlMzczMjJlMzEzMTM5MmUzMDJmMzIz NDJkMzIzNDIwM2QzZTIwMzIzNjMzMzczMDMyLnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAbUh3MA0GCSqG SIb3DQEBCwUAA4IBAQCUj8LreSCGPUAyJG1lc1lTykkMa590/ADgrDq+nHgYpLEP wvpbLDx3jaIhSh4JKCckuQ2RuamrZ7BbU+xSkxOKjOUPT2Bpk3bhyMlmuzwW0Axz qmrWpjALdXaYAsgG/liiCKoTXOaIQf5U2dzD6GM181AtAGu5u1cDderNmQVL7Uak bhtif7CZy1YnFUgE8q8/J+ogbW9Caj2IVzy2kxfl08EmPh+nVau1VUyBntdDozGr GAq0QwfoiuZchKgghoqMwDa/sxwMsnoTIugL/ZgznYGW7xoSY1BYL6ub2h8SWQ7a VdoyPKA9EuYomcVPQAwxPKj+uPdEZirMuRFiVE3U -----END CERTIFICATE-----Generated at Mon Mar 2 02:44:59 2026 by rpki-client