$ rpki-client -vvf r.magellan.ipxo.com/repo/ddd1818b-9fbf-440c-aaec-44a4d1590f87-0/0/3130392e37322e3132332e302f32342d3234203d3e20333938343635.roa File: 3130392e37322e3132332e302f32342d3234203d3e20333938343635.roa (raw, json) Hash identifier: lyHBUrVQsiMDDlJAOxYU6hGmq1L9T45sM5UYoPlPJwk= Subject key identifier: 2A:27:C9:FD:82:83:25:00:8C:D1:A1:B6:38:B7:DA:1A:AB:EA:A8:94 Certificate issuer: /CN=C972E8671DEDC43FE908B548531C969A051CD34C Certificate serial: 6CCC8E5CDBF621948E2F741E343AD001C949CA6A Authority key identifier: C9:72:E8:67:1D:ED:C4:3F:E9:08:B5:48:53:1C:96:9A:05:1C:D3:4C Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/2/C972E8671DEDC43FE908B548531C969A051CD34C.cer Subject info access: rsync://r.magellan.ipxo.com/repo/ddd1818b-9fbf-440c-aaec-44a4d1590f87-0/0/3130392e37322e3132332e302f32342d3234203d3e20333938343635.roa Signing time: Mon 23 Feb 2026 15:06:28 +0000 ROA not before: Mon 23 Feb 2026 15:01:28 +0000 ROA not after: Mon 22 Feb 2027 15:06:28 +0000 asID: 398465 IP address blocks: 109.72.123.0/24 maxlen: 24 Validation: OK Signature path: rsync://r.magellan.ipxo.com/repo/ddd1818b-9fbf-440c-aaec-44a4d1590f87-0/0/C972E8671DEDC43FE908B548531C969A051CD34C.crl rsync://r.magellan.ipxo.com/repo/ddd1818b-9fbf-440c-aaec-44a4d1590f87-0/0/C972E8671DEDC43FE908B548531C969A051CD34C.mft rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/2/C972E8671DEDC43FE908B548531C969A051CD34C.cer rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/2/CF0631D33A3C9DC5C45424D55C3E7663838657A3.crl rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/2/CF0631D33A3C9DC5C45424D55C3E7663838657A3.mft rsync://rpki.ripe.net/repository/DEFAULT/zwYx0zo8ncXEVCTVXD52Y4OGV6M.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 02 Mar 2026 08:56:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6c:cc:8e:5c:db:f6:21:94:8e:2f:74:1e:34:3a:d0:01:c9:49:ca:6a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C972E8671DEDC43FE908B548531C969A051CD34C Validity Not Before: Feb 23 15:01:28 2026 GMT Not After : Feb 22 15:06:28 2027 GMT Subject: CN=2A27C9FD828325008CD1A1B638B7DA1AABEAA894 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:cd:bb:5b:4c:27:44:7f:4b:13:be:82:f3:34: 85:0f:93:ec:00:c1:0f:67:ff:e9:67:f8:7b:6e:f6: 92:ea:6f:bc:41:47:df:f7:68:5f:b8:ed:2d:aa:14: 1b:3f:b1:b2:5c:71:70:16:0d:f0:08:63:9e:7d:6e: bd:7d:33:a5:c1:23:2d:61:df:69:f1:03:1d:55:93: 5b:68:38:d7:89:7e:42:83:4f:07:bc:d1:d1:6b:ee: 21:ca:43:09:cb:4a:b6:4a:b5:56:35:0a:bd:aa:04: 32:40:fe:38:01:e8:44:aa:e3:ef:4e:32:0f:29:dc: ef:d1:4f:ce:57:8a:30:dd:1c:70:94:52:c6:86:22: 36:79:5c:6e:8f:41:ee:d3:b8:91:aa:92:e1:33:01: de:6b:de:69:80:f6:34:a3:b3:12:3b:34:37:ef:d4: f2:57:d5:b0:92:50:e2:b3:af:93:fb:b1:39:9a:54: e0:15:f9:14:d1:e8:cc:90:25:1b:bd:b3:d1:35:f9: 9a:5f:b5:fd:4f:97:41:e1:5b:73:67:e1:44:7b:ea: 0a:ce:94:54:3c:4c:ad:50:7b:c3:46:24:34:21:ab: e1:ae:2d:a3:f0:7e:40:46:37:d5:6f:16:5b:39:fd: 25:5c:24:5c:79:84:bb:17:aa:4c:6c:e4:d9:06:63: 0c:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:27:C9:FD:82:83:25:00:8C:D1:A1:B6:38:B7:DA:1A:AB:EA:A8:94 X509v3 Authority Key Identifier: keyid:C9:72:E8:67:1D:ED:C4:3F:E9:08:B5:48:53:1C:96:9A:05:1C:D3:4C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://r.magellan.ipxo.com/repo/ddd1818b-9fbf-440c-aaec-44a4d1590f87-0/0/C972E8671DEDC43FE908B548531C969A051CD34C.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/2/C972E8671DEDC43FE908B548531C969A051CD34C.cer Subject Information Access: Signed Object - URI:rsync://r.magellan.ipxo.com/repo/ddd1818b-9fbf-440c-aaec-44a4d1590f87-0/0/3130392e37322e3132332e302f32342d3234203d3e20333938343635.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 109.72.123.0/24 Signature Algorithm: sha256WithRSAEncryption 70:b2:db:e0:53:45:de:8f:fa:e8:e4:40:f4:7d:4c:ab:23:27: 30:92:9b:b9:33:63:d9:8b:f8:fa:9e:78:6a:fa:a3:0b:34:fe: 51:8b:27:ed:6e:6e:2c:a5:ce:f1:22:30:c3:4f:cb:18:b7:f4: e2:6c:78:ae:6a:01:ef:af:cf:ed:24:e8:e3:62:79:c3:73:44: 3f:01:f7:e8:fc:7f:4c:20:10:dc:45:3f:88:12:58:06:b5:e4: 92:3d:25:a4:0b:f0:04:ce:f9:77:fc:53:11:75:3a:52:5e:c1: 67:a7:72:a1:0d:40:d0:b9:be:6f:1e:69:f2:19:88:8c:31:58: 65:e0:a1:63:76:45:69:95:a5:ca:40:0b:62:4a:c4:09:7c:24: f3:1c:27:ec:0f:3f:51:c9:cb:8e:35:c4:eb:d0:64:f4:22:27: 04:2c:27:bb:eb:2d:e8:ff:e5:1d:3d:21:79:ad:8c:bc:6d:ba: e7:e9:f4:dc:b6:f5:7d:26:71:9a:7b:a5:b7:0c:be:14:18:c5: d4:ab:57:a7:b1:26:5c:f3:57:90:34:fe:6d:88:9a:0a:00:d9: 08:79:d7:31:41:6a:34:c1:b8:b9:95:ec:4c:7f:32:ad:09:45: b4:59:db:6a:2b:78:7d:a6:26:a0:da:5d:72:5d:46:2d:16:ab: 43:af:9e:10 -----BEGIN CERTIFICATE----- MIIFWjCCBEKgAwIBAgIUbMyOXNv2IZSOL3QeNDrQAclJymowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzk3MkU4NjcxREVEQzQzRkU5MDhCNTQ4NTMxQzk2OUEw NTFDRDM0QzAeFw0yNjAyMjMxNTAxMjhaFw0yNzAyMjIxNTA2MjhaMDMxMTAvBgNV BAMTKDJBMjdDOUZEODI4MzI1MDA4Q0QxQTFCNjM4QjdEQTFBQUJFQUE4OTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDTzbtbTCdEf0sTvoLzNIUPk+wA wQ9n/+ln+Htu9pLqb7xBR9/3aF+47S2qFBs/sbJccXAWDfAIY559br19M6XBIy1h 32nxAx1Vk1toONeJfkKDTwe80dFr7iHKQwnLSrZKtVY1Cr2qBDJA/jgB6ESq4+9O Mg8p3O/RT85XijDdHHCUUsaGIjZ5XG6PQe7TuJGqkuEzAd5r3mmA9jSjsxI7NDfv 1PJX1bCSUOKzr5P7sTmaVOAV+RTR6MyQJRu9s9E1+Zpftf1Pl0HhW3Nn4UR76grO lFQ8TK1Qe8NGJDQhq+GuLaPwfkBGN9VvFls5/SVcJFx5hLsXqkxs5NkGYwz5AgMB AAGjggJkMIICYDAdBgNVHQ4EFgQUKifJ/YKDJQCM0aG2OLfaGqvqqJQwHwYDVR0j BBgwFoAUyXLoZx3txD/pCLVIUxyWmgUc00wwDgYDVR0PAQH/BAQDAgeAMIGIBgNV HR8EgYAwfjB8oHqgeIZ2cnN5bmM6Ly9yLm1hZ2VsbGFuLmlweG8uY29tL3JlcG8v ZGRkMTgxOGItOWZiZi00NDBjLWFhZWMtNDRhNGQxNTkwZjg3LTAvMC9DOTcyRTg2 NzFERURDNDNGRTkwOEI1NDg1MzFDOTY5QTA1MUNEMzRDLmNybDCBngYIKwYBBQUH AQEEgZEwgY4wgYsGCCsGAQUFBzAChn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5y aXBlLm5ldC9yZXBvc2l0b3J5LzYxNzA4YTZiLTZjM2EtNDBhMC1hMzAyLTU5NWVj YzE3ODQ4Yy8yL0M5NzJFODY3MURFREM0M0ZFOTA4QjU0ODUzMUM5NjlBMDUxQ0Qz NEMuY2VyMIGmBggrBgEFBQcBCwSBmTCBljCBkwYIKwYBBQUHMAuGgYZyc3luYzov L3IubWFnZWxsYW4uaXB4by5jb20vcmVwby9kZGQxODE4Yi05ZmJmLTQ0MGMtYWFl Yy00NGE0ZDE1OTBmODctMC8wLzMxMzAzOTJlMzczMjJlMzEzMjMzMmUzMDJmMzIz NDJkMzIzNDIwM2QzZTIwMzMzOTM4MzQzNjM1LnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAbUh7MA0GCSqG SIb3DQEBCwUAA4IBAQBwstvgU0Xej/ro5ED0fUyrIycwkpu5M2PZi/j6nnhq+qML NP5Riyftbm4spc7xIjDDT8sYt/TibHiuagHvr8/tJOjjYnnDc0Q/Affo/H9MIBDc RT+IElgGteSSPSWkC/AEzvl3/FMRdTpSXsFnp3KhDUDQub5vHmnyGYiMMVhl4KFj dkVplaXKQAtiSsQJfCTzHCfsDz9RycuONcTr0GT0IicELCe76y3o/+UdPSF5rYy8 bbrn6fTctvV9JnGae6W3DL4UGMXUq1ensSZc81eQNP5tiJoKANkIedcxQWo0wbi5 lexMfzKtCUW0WdtqK3h9piag2l1yXUYtFqtDr54Q -----END CERTIFICATE-----Generated at Mon Mar 2 00:02:50 2026 by rpki-client