$ rpki-client -vvf r.magellan.ipxo.com/repo/ddd1818b-9fbf-440c-aaec-44a4d1590f87-0/0/3130392e37322e3132342e302f32342d3234203d3e20323133303230.roa File: 3130392e37322e3132342e302f32342d3234203d3e20323133303230.roa (raw, json) Hash identifier: tT6Crpii69tUpo0MoScrPdSQP1zlAaUuZm/VvFxLACg= Subject key identifier: D6:08:63:8A:3C:83:75:F7:44:82:11:13:B8:F7:B1:64:E8:D1:38:BF Certificate issuer: /CN=C972E8671DEDC43FE908B548531C969A051CD34C Certificate serial: 317D785042C82AF0FF2D51CD3EA0E59810C92F14 Authority key identifier: C9:72:E8:67:1D:ED:C4:3F:E9:08:B5:48:53:1C:96:9A:05:1C:D3:4C Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/2/C972E8671DEDC43FE908B548531C969A051CD34C.cer Subject info access: rsync://r.magellan.ipxo.com/repo/ddd1818b-9fbf-440c-aaec-44a4d1590f87-0/0/3130392e37322e3132342e302f32342d3234203d3e20323133303230.roa Signing time: Mon 23 Feb 2026 15:06:28 +0000 ROA not before: Mon 23 Feb 2026 15:01:28 +0000 ROA not after: Mon 22 Feb 2027 15:06:28 +0000 asID: 213020 IP address blocks: 109.72.124.0/24 maxlen: 24 Validation: OK Signature path: rsync://r.magellan.ipxo.com/repo/ddd1818b-9fbf-440c-aaec-44a4d1590f87-0/0/C972E8671DEDC43FE908B548531C969A051CD34C.crl rsync://r.magellan.ipxo.com/repo/ddd1818b-9fbf-440c-aaec-44a4d1590f87-0/0/C972E8671DEDC43FE908B548531C969A051CD34C.mft rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/2/C972E8671DEDC43FE908B548531C969A051CD34C.cer rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/2/CF0631D33A3C9DC5C45424D55C3E7663838657A3.crl rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/2/CF0631D33A3C9DC5C45424D55C3E7663838657A3.mft rsync://rpki.ripe.net/repository/DEFAULT/zwYx0zo8ncXEVCTVXD52Y4OGV6M.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 02 Mar 2026 08:56:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 31:7d:78:50:42:c8:2a:f0:ff:2d:51:cd:3e:a0:e5:98:10:c9:2f:14 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C972E8671DEDC43FE908B548531C969A051CD34C Validity Not Before: Feb 23 15:01:28 2026 GMT Not After : Feb 22 15:06:28 2027 GMT Subject: CN=D608638A3C8375F744821113B8F7B164E8D138BF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:46:12:1c:4a:35:e9:30:31:f1:ad:8d:4e:4c: a5:79:8b:11:8c:ba:8b:05:8b:67:41:be:1e:5f:76: 1d:ef:49:19:6d:2f:e0:93:72:7c:21:2c:8f:5d:15: 31:6a:05:02:ea:6f:db:71:e5:72:eb:23:c6:b8:41: 2e:f4:ec:ab:3a:7b:04:b4:65:2e:3c:99:03:16:3b: 5e:ec:9b:8d:ad:43:41:ac:14:97:24:80:47:16:bb: 83:34:ef:2c:91:0b:44:a6:90:64:49:6c:0b:62:93: 75:2d:ab:fa:a4:c8:30:64:9e:e9:b8:65:7e:95:04: 52:67:21:58:be:49:89:b5:73:04:86:34:d4:25:e3: 21:d2:53:2e:a4:c4:a3:b3:26:e5:47:0f:8c:f8:1e: 1b:0b:8e:d4:35:ec:0c:17:8c:cb:7b:de:10:c8:e4: eb:e6:32:a3:28:38:2a:13:ac:e5:a7:43:5c:25:53: d5:49:a3:ba:4f:d9:88:80:b3:07:40:0a:b4:26:d8: 81:1e:d1:9c:0c:0c:53:ac:79:ba:08:e8:a9:e2:45: c7:d7:8b:d2:00:ff:bb:54:03:c4:d2:25:45:34:0a: e8:ee:9d:34:da:32:5b:f6:e4:9e:35:4a:97:8b:37: f8:83:b2:df:1b:43:17:c8:b1:ac:74:45:a8:0f:ec: 93:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:08:63:8A:3C:83:75:F7:44:82:11:13:B8:F7:B1:64:E8:D1:38:BF X509v3 Authority Key Identifier: keyid:C9:72:E8:67:1D:ED:C4:3F:E9:08:B5:48:53:1C:96:9A:05:1C:D3:4C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://r.magellan.ipxo.com/repo/ddd1818b-9fbf-440c-aaec-44a4d1590f87-0/0/C972E8671DEDC43FE908B548531C969A051CD34C.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/2/C972E8671DEDC43FE908B548531C969A051CD34C.cer Subject Information Access: Signed Object - URI:rsync://r.magellan.ipxo.com/repo/ddd1818b-9fbf-440c-aaec-44a4d1590f87-0/0/3130392e37322e3132342e302f32342d3234203d3e20323133303230.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 109.72.124.0/24 Signature Algorithm: sha256WithRSAEncryption 9e:ef:58:15:71:3c:79:95:43:f4:c8:1f:f3:88:6a:75:56:36: c4:e8:2e:b2:ff:c6:38:6c:11:6f:3f:62:8d:89:70:da:f0:86: 75:dc:75:52:b1:ae:72:7e:38:ef:22:02:b0:fc:bf:85:94:ec: 54:19:99:ed:0c:00:42:60:2e:ae:88:18:81:de:a4:27:65:9b: 74:24:18:6f:44:ae:b4:2c:75:62:0e:99:b0:82:eb:81:06:07: 1d:21:b8:07:22:f9:e5:17:46:90:95:02:d7:1b:9e:0f:16:fb: 75:fc:77:f7:ce:ff:62:66:22:9e:77:4b:bf:7a:36:e8:04:06: f1:46:0d:5e:34:88:3f:67:56:3e:e3:16:ef:95:97:52:b0:5b: cd:78:06:42:cd:89:33:6e:a1:09:d3:0f:d7:22:70:0b:0a:48: d9:29:3d:c0:e9:f0:80:74:01:75:4c:9c:a8:92:8d:09:87:8f: cc:36:36:af:90:89:dd:ab:d8:cb:4f:72:f8:9a:59:ef:ae:05: a2:f5:16:27:38:c0:5c:5e:dc:0d:64:59:9b:80:08:cf:e8:7c: fc:30:d5:27:83:ca:7a:91:00:eb:3e:f2:96:1b:cd:06:f2:59: 68:76:0e:c2:ce:81:57:e0:b8:3e:29:a7:f9:38:94:25:09:f2: b3:3f:89:ba -----BEGIN CERTIFICATE----- MIIFWjCCBEKgAwIBAgIUMX14UELIKvD/LVHNPqDlmBDJLxQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzk3MkU4NjcxREVEQzQzRkU5MDhCNTQ4NTMxQzk2OUEw NTFDRDM0QzAeFw0yNjAyMjMxNTAxMjhaFw0yNzAyMjIxNTA2MjhaMDMxMTAvBgNV BAMTKEQ2MDg2MzhBM0M4Mzc1Rjc0NDgyMTExM0I4RjdCMTY0RThEMTM4QkYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCfRhIcSjXpMDHxrY1OTKV5ixGM uosFi2dBvh5fdh3vSRltL+CTcnwhLI9dFTFqBQLqb9tx5XLrI8a4QS707Ks6ewS0 ZS48mQMWO17sm42tQ0GsFJckgEcWu4M07yyRC0SmkGRJbAtik3Utq/qkyDBknum4 ZX6VBFJnIVi+SYm1cwSGNNQl4yHSUy6kxKOzJuVHD4z4HhsLjtQ17AwXjMt73hDI 5OvmMqMoOCoTrOWnQ1wlU9VJo7pP2YiAswdACrQm2IEe0ZwMDFOseboI6KniRcfX i9IA/7tUA8TSJUU0CujunTTaMlv25J41SpeLN/iDst8bQxfIsax0RagP7JPZAgMB AAGjggJkMIICYDAdBgNVHQ4EFgQU1ghjijyDdfdEghETuPexZOjROL8wHwYDVR0j BBgwFoAUyXLoZx3txD/pCLVIUxyWmgUc00wwDgYDVR0PAQH/BAQDAgeAMIGIBgNV HR8EgYAwfjB8oHqgeIZ2cnN5bmM6Ly9yLm1hZ2VsbGFuLmlweG8uY29tL3JlcG8v ZGRkMTgxOGItOWZiZi00NDBjLWFhZWMtNDRhNGQxNTkwZjg3LTAvMC9DOTcyRTg2 NzFERURDNDNGRTkwOEI1NDg1MzFDOTY5QTA1MUNEMzRDLmNybDCBngYIKwYBBQUH AQEEgZEwgY4wgYsGCCsGAQUFBzAChn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5y aXBlLm5ldC9yZXBvc2l0b3J5LzYxNzA4YTZiLTZjM2EtNDBhMC1hMzAyLTU5NWVj YzE3ODQ4Yy8yL0M5NzJFODY3MURFREM0M0ZFOTA4QjU0ODUzMUM5NjlBMDUxQ0Qz NEMuY2VyMIGmBggrBgEFBQcBCwSBmTCBljCBkwYIKwYBBQUHMAuGgYZyc3luYzov L3IubWFnZWxsYW4uaXB4by5jb20vcmVwby9kZGQxODE4Yi05ZmJmLTQ0MGMtYWFl Yy00NGE0ZDE1OTBmODctMC8wLzMxMzAzOTJlMzczMjJlMzEzMjM0MmUzMDJmMzIz NDJkMzIzNDIwM2QzZTIwMzIzMTMzMzAzMjMwLnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAbUh8MA0GCSqG SIb3DQEBCwUAA4IBAQCe71gVcTx5lUP0yB/ziGp1VjbE6C6y/8Y4bBFvP2KNiXDa 8IZ13HVSsa5yfjjvIgKw/L+FlOxUGZntDABCYC6uiBiB3qQnZZt0JBhvRK60LHVi DpmwguuBBgcdIbgHIvnlF0aQlQLXG54PFvt1/Hf3zv9iZiKed0u/ejboBAbxRg1e NIg/Z1Y+4xbvlZdSsFvNeAZCzYkzbqEJ0w/XInALCkjZKT3A6fCAdAF1TJyoko0J h4/MNjavkIndq9jLT3L4mlnvrgWi9RYnOMBcXtwNZFmbgAjP6Hz8MNUng8p6kQDr PvKWG80G8llodg7CzoFX4Lg+Kaf5OJQlCfKzP4m6 -----END CERTIFICATE-----Generated at Mon Mar 2 01:28:41 2026 by rpki-client