$ rpki-client -vvf r.magellan.ipxo.com/repo/ddd1818b-9fbf-440c-aaec-44a4d1590f87-0/0/3130392e37322e3132332e302f32342d3234203d3e2037303138.roa File: 3130392e37322e3132332e302f32342d3234203d3e2037303138.roa (raw, json) Hash identifier: Xio/1Tb4isDPhy+vtpIBF3kdGHSbJAtIErui240ZdJM= Subject key identifier: 8F:6B:81:D3:CA:02:D3:C5:E5:B2:96:99:2D:73:8C:69:AE:F8:5A:7A Certificate issuer: /CN=C972E8671DEDC43FE908B548531C969A051CD34C Certificate serial: 107387B9B18FE30FCC05AA0E53FCBC20F7AF6C21 Authority key identifier: C9:72:E8:67:1D:ED:C4:3F:E9:08:B5:48:53:1C:96:9A:05:1C:D3:4C Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/2/C972E8671DEDC43FE908B548531C969A051CD34C.cer Subject info access: rsync://r.magellan.ipxo.com/repo/ddd1818b-9fbf-440c-aaec-44a4d1590f87-0/0/3130392e37322e3132332e302f32342d3234203d3e2037303138.roa Signing time: Mon 23 Feb 2026 15:06:28 +0000 ROA not before: Mon 23 Feb 2026 15:01:28 +0000 ROA not after: Mon 22 Feb 2027 15:06:28 +0000 asID: 7018 IP address blocks: 109.72.123.0/24 maxlen: 24 Validation: OK Signature path: rsync://r.magellan.ipxo.com/repo/ddd1818b-9fbf-440c-aaec-44a4d1590f87-0/0/C972E8671DEDC43FE908B548531C969A051CD34C.crl rsync://r.magellan.ipxo.com/repo/ddd1818b-9fbf-440c-aaec-44a4d1590f87-0/0/C972E8671DEDC43FE908B548531C969A051CD34C.mft rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/2/C972E8671DEDC43FE908B548531C969A051CD34C.cer rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/2/CF0631D33A3C9DC5C45424D55C3E7663838657A3.crl rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/2/CF0631D33A3C9DC5C45424D55C3E7663838657A3.mft rsync://rpki.ripe.net/repository/DEFAULT/zwYx0zo8ncXEVCTVXD52Y4OGV6M.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 02 Mar 2026 21:40:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10:73:87:b9:b1:8f:e3:0f:cc:05:aa:0e:53:fc:bc:20:f7:af:6c:21 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C972E8671DEDC43FE908B548531C969A051CD34C Validity Not Before: Feb 23 15:01:28 2026 GMT Not After : Feb 22 15:06:28 2027 GMT Subject: CN=8F6B81D3CA02D3C5E5B296992D738C69AEF85A7A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f8:87:2d:86:0b:51:14:92:e3:ff:68:62:29:e2: e2:69:08:b7:de:f4:1d:fe:0a:16:75:ba:6b:cb:58: 2f:38:31:19:d4:7b:af:73:18:55:9d:69:94:8c:67: 65:3a:84:eb:64:14:84:fd:01:10:01:1e:e6:70:19: e9:29:8d:02:76:b9:ce:a2:84:90:32:d5:b3:01:fb: b2:56:5a:90:fa:8d:c3:49:fe:9b:29:b4:8b:fa:a4: 74:4b:e6:66:b7:c9:00:55:9c:97:f9:4b:8b:36:5a: 04:fb:e6:0c:ce:bd:69:13:fb:9b:12:69:e9:e6:29: 60:4d:68:45:9d:de:80:4a:d0:6d:f1:5d:63:17:8e: 10:87:2b:fc:32:2e:bd:64:53:5f:82:74:50:cb:be: dd:1f:91:15:45:53:83:2a:0a:2a:eb:ab:96:5e:8b: 5b:93:8a:f0:27:26:a1:a6:0d:93:c7:ac:8a:b9:67: ec:46:19:6f:4e:bb:d8:e9:a7:37:b3:0f:cf:41:17: 02:42:f1:cd:a0:b8:65:38:f4:b1:5b:d6:99:cd:fb: 6c:63:f5:a0:38:a3:35:fc:dd:9b:52:6e:ff:aa:3e: 60:1d:90:6b:f3:b7:cf:4a:d6:46:44:8b:cf:0f:5f: b1:01:99:32:07:3b:bf:c3:6d:8c:e4:33:92:0e:0e: e4:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:6B:81:D3:CA:02:D3:C5:E5:B2:96:99:2D:73:8C:69:AE:F8:5A:7A X509v3 Authority Key Identifier: keyid:C9:72:E8:67:1D:ED:C4:3F:E9:08:B5:48:53:1C:96:9A:05:1C:D3:4C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://r.magellan.ipxo.com/repo/ddd1818b-9fbf-440c-aaec-44a4d1590f87-0/0/C972E8671DEDC43FE908B548531C969A051CD34C.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/2/C972E8671DEDC43FE908B548531C969A051CD34C.cer Subject Information Access: Signed Object - URI:rsync://r.magellan.ipxo.com/repo/ddd1818b-9fbf-440c-aaec-44a4d1590f87-0/0/3130392e37322e3132332e302f32342d3234203d3e2037303138.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 109.72.123.0/24 Signature Algorithm: sha256WithRSAEncryption 2c:a6:bb:94:49:5e:3d:37:af:cc:16:51:21:6f:1a:54:6b:d0: 44:5c:1b:39:75:ee:d5:3e:7c:cd:22:f0:5a:da:63:07:8f:a9: 26:95:77:a0:ab:29:38:29:6f:ff:35:6b:aa:fa:2f:be:75:60: 61:c3:d1:89:ea:97:4b:41:c7:58:15:14:6e:c7:f0:14:e9:1a: b0:22:54:1f:05:1c:70:cc:6e:94:22:0f:83:65:2a:05:07:8a: 70:e3:85:83:c5:19:55:61:51:39:1d:f9:4b:7b:96:04:46:f1: 9a:47:2c:c2:57:87:c6:bb:b5:2c:81:92:94:9f:5f:30:d0:a5: 9a:a9:0f:54:36:79:da:8e:6d:0b:e6:84:6d:a0:0e:ca:8a:b7: 1a:78:93:89:73:df:d2:c8:32:23:c2:b6:03:16:d8:4c:a4:d7: 99:a2:a2:71:19:9b:81:47:d4:b3:b4:dd:77:16:09:6b:29:42: f5:7a:72:24:3c:24:09:00:d5:8b:f7:40:39:74:40:36:dd:f2: 89:82:d9:09:9f:22:1e:d3:ce:49:9d:84:cb:fd:06:b0:a1:f8: 8a:10:fe:a1:e4:46:66:7c:b0:c4:a3:d3:42:87:32:f4:ea:1d: 9d:bb:22:5b:9a:de:b3:30:fe:96:de:45:be:45:bd:be:ac:3e: cd:d3:7b:ee -----BEGIN CERTIFICATE----- MIIFVjCCBD6gAwIBAgIUEHOHubGP4w/MBaoOU/y8IPevbCEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzk3MkU4NjcxREVEQzQzRkU5MDhCNTQ4NTMxQzk2OUEw NTFDRDM0QzAeFw0yNjAyMjMxNTAxMjhaFw0yNzAyMjIxNTA2MjhaMDMxMTAvBgNV BAMTKDhGNkI4MUQzQ0EwMkQzQzVFNUIyOTY5OTJENzM4QzY5QUVGODVBN0EwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD4hy2GC1EUkuP/aGIp4uJpCLfe 9B3+ChZ1umvLWC84MRnUe69zGFWdaZSMZ2U6hOtkFIT9ARABHuZwGekpjQJ2uc6i hJAy1bMB+7JWWpD6jcNJ/psptIv6pHRL5ma3yQBVnJf5S4s2WgT75gzOvWkT+5sS aenmKWBNaEWd3oBK0G3xXWMXjhCHK/wyLr1kU1+CdFDLvt0fkRVFU4MqCirrq5Ze i1uTivAnJqGmDZPHrIq5Z+xGGW9Ou9jppzezD89BFwJC8c2guGU49LFb1pnN+2xj 9aA4ozX83ZtSbv+qPmAdkGvzt89K1kZEi88PX7EBmTIHO7/DbYzkM5IODuQRAgMB AAGjggJgMIICXDAdBgNVHQ4EFgQUj2uB08oC08XlspaZLXOMaa74WnowHwYDVR0j BBgwFoAUyXLoZx3txD/pCLVIUxyWmgUc00wwDgYDVR0PAQH/BAQDAgeAMIGIBgNV HR8EgYAwfjB8oHqgeIZ2cnN5bmM6Ly9yLm1hZ2VsbGFuLmlweG8uY29tL3JlcG8v ZGRkMTgxOGItOWZiZi00NDBjLWFhZWMtNDRhNGQxNTkwZjg3LTAvMC9DOTcyRTg2 NzFERURDNDNGRTkwOEI1NDg1MzFDOTY5QTA1MUNEMzRDLmNybDCBngYIKwYBBQUH AQEEgZEwgY4wgYsGCCsGAQUFBzAChn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5y aXBlLm5ldC9yZXBvc2l0b3J5LzYxNzA4YTZiLTZjM2EtNDBhMC1hMzAyLTU5NWVj YzE3ODQ4Yy8yL0M5NzJFODY3MURFREM0M0ZFOTA4QjU0ODUzMUM5NjlBMDUxQ0Qz NEMuY2VyMIGiBggrBgEFBQcBCwSBlTCBkjCBjwYIKwYBBQUHMAuGgYJyc3luYzov L3IubWFnZWxsYW4uaXB4by5jb20vcmVwby9kZGQxODE4Yi05ZmJmLTQ0MGMtYWFl Yy00NGE0ZDE1OTBmODctMC8wLzMxMzAzOTJlMzczMjJlMzEzMjMzMmUzMDJmMzIz NDJkMzIzNDIwM2QzZTIwMzczMDMxMzgucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYB BQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABtSHswDQYJKoZIhvcN AQELBQADggEBACymu5RJXj03r8wWUSFvGlRr0ERcGzl17tU+fM0i8FraYwePqSaV d6CrKTgpb/81a6r6L751YGHD0Ynql0tBx1gVFG7H8BTpGrAiVB8FHHDMbpQiD4Nl KgUHinDjhYPFGVVhUTkd+Ut7lgRG8ZpHLMJXh8a7tSyBkpSfXzDQpZqpD1Q2edqO bQvmhG2gDsqKtxp4k4lz39LIMiPCtgMW2Eyk15mionEZm4FH1LO03XcWCWspQvV6 ciQ8JAkA1Yv3QDl0QDbd8omC2QmfIh7TzkmdhMv9BrCh+IoQ/qHkRmZ8sMSj00KH MvTqHZ27Ilua3rMw/pbeRb5Fvb6sPs3Te+4= -----END CERTIFICATE-----Generated at Mon Mar 2 12:53:31 2026 by rpki-client