$ rpki-client -vvf r.magellan.ipxo.com/repo/ddd1818b-9fbf-440c-aaec-44a4d1590f87-0/0/3130392e37322e3132372e302f32342d3234203d3e203631333137.roa File: 3130392e37322e3132372e302f32342d3234203d3e203631333137.roa (raw, json) Hash identifier: 3NcSpAZI/AHfrEKOPPOXSqUdoDS8Jfg5RqZc84+BncU= Subject key identifier: 67:12:5A:12:94:72:88:94:3B:B7:70:21:F0:81:DC:83:21:69:48:C7 Certificate issuer: /CN=C972E8671DEDC43FE908B548531C969A051CD34C Certificate serial: 1A2DC91AC50DDA323E04DCB449D571EACF259612 Authority key identifier: C9:72:E8:67:1D:ED:C4:3F:E9:08:B5:48:53:1C:96:9A:05:1C:D3:4C Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/2/C972E8671DEDC43FE908B548531C969A051CD34C.cer Subject info access: rsync://r.magellan.ipxo.com/repo/ddd1818b-9fbf-440c-aaec-44a4d1590f87-0/0/3130392e37322e3132372e302f32342d3234203d3e203631333137.roa Signing time: Mon 23 Feb 2026 15:06:28 +0000 ROA not before: Mon 23 Feb 2026 15:01:28 +0000 ROA not after: Mon 22 Feb 2027 15:06:28 +0000 asID: 61317 IP address blocks: 109.72.127.0/24 maxlen: 24 Validation: OK Signature path: rsync://r.magellan.ipxo.com/repo/ddd1818b-9fbf-440c-aaec-44a4d1590f87-0/0/C972E8671DEDC43FE908B548531C969A051CD34C.crl rsync://r.magellan.ipxo.com/repo/ddd1818b-9fbf-440c-aaec-44a4d1590f87-0/0/C972E8671DEDC43FE908B548531C969A051CD34C.mft rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/2/C972E8671DEDC43FE908B548531C969A051CD34C.cer rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/2/CF0631D33A3C9DC5C45424D55C3E7663838657A3.crl rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/2/CF0631D33A3C9DC5C45424D55C3E7663838657A3.mft rsync://rpki.ripe.net/repository/DEFAULT/zwYx0zo8ncXEVCTVXD52Y4OGV6M.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 02 Mar 2026 08:56:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1a:2d:c9:1a:c5:0d:da:32:3e:04:dc:b4:49:d5:71:ea:cf:25:96:12 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C972E8671DEDC43FE908B548531C969A051CD34C Validity Not Before: Feb 23 15:01:28 2026 GMT Not After : Feb 22 15:06:28 2027 GMT Subject: CN=67125A12947288943BB77021F081DC83216948C7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:e9:5e:87:9a:92:82:a9:af:a9:cb:ea:6d:fa: aa:7d:40:d1:ac:76:fb:41:e2:02:bf:12:5b:10:e2: fd:03:47:c4:52:04:65:d4:1f:26:37:cd:12:c6:14: e2:e9:e0:49:65:d3:47:07:25:9b:0b:18:45:80:7d: 9f:b1:54:c9:3e:4b:50:e9:9c:b9:19:ce:60:65:99: c8:e9:14:81:46:04:f0:74:e2:1d:ec:4b:58:ba:58: 9e:9c:37:16:93:28:b5:0d:82:0b:cc:6f:9c:3e:0b: 60:12:97:b3:25:7a:57:03:52:d4:93:5d:db:6c:3e: 9f:5b:dc:6c:f1:2c:02:21:dc:25:c6:40:2e:92:ae: 90:39:38:71:89:fe:b4:be:e9:f4:32:37:81:75:3e: 80:d2:66:ae:bf:c5:e4:2b:a5:a8:3f:bb:c8:78:56: 86:bd:6f:98:b4:79:1f:15:0f:09:d4:20:b6:00:1a: 5d:9b:62:78:21:a4:d6:33:28:bc:e3:e9:50:25:4c: ff:32:6a:d9:93:12:a7:8c:be:ae:cf:89:07:9a:0b: 70:3c:63:07:17:31:41:07:97:54:19:5a:f0:e3:1e: 00:90:59:b4:b2:31:c7:15:18:f2:2d:be:ee:11:52: b4:d4:68:ae:5c:96:36:ee:fb:c8:2f:c7:73:1b:99: 43:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:12:5A:12:94:72:88:94:3B:B7:70:21:F0:81:DC:83:21:69:48:C7 X509v3 Authority Key Identifier: keyid:C9:72:E8:67:1D:ED:C4:3F:E9:08:B5:48:53:1C:96:9A:05:1C:D3:4C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://r.magellan.ipxo.com/repo/ddd1818b-9fbf-440c-aaec-44a4d1590f87-0/0/C972E8671DEDC43FE908B548531C969A051CD34C.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/2/C972E8671DEDC43FE908B548531C969A051CD34C.cer Subject Information Access: Signed Object - URI:rsync://r.magellan.ipxo.com/repo/ddd1818b-9fbf-440c-aaec-44a4d1590f87-0/0/3130392e37322e3132372e302f32342d3234203d3e203631333137.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 109.72.127.0/24 Signature Algorithm: sha256WithRSAEncryption b9:f5:8a:cd:af:6a:53:df:5f:a6:3f:c6:84:53:d0:a3:56:bf: 8c:29:4a:8a:30:d2:07:42:8d:29:3b:f7:a2:9f:f6:d0:15:70: 55:b2:15:09:14:8c:4c:7b:a8:48:36:0c:7c:6f:2e:52:a4:aa: c7:8c:77:bf:a0:ba:bd:26:4f:d4:fd:24:3b:1d:2a:0f:68:e8: dd:0e:a6:64:19:5e:8b:a1:3d:c2:b6:31:5d:0a:63:1f:26:1e: e7:94:7b:05:4f:96:6b:18:f6:74:c2:1f:2d:96:b5:2a:c9:eb: a2:fd:0d:5d:06:82:6e:ca:3f:cd:f2:e1:14:34:8b:9b:e2:14: 1e:8f:9a:00:e7:a7:84:13:8b:ff:f7:2a:a3:e7:a7:98:d1:2a: 82:13:90:ba:9a:85:87:92:16:d1:fa:30:85:00:bf:11:c8:34: f3:ae:91:e9:26:82:ba:a0:6b:76:2d:bf:34:b1:80:cf:1d:b2: 9d:26:67:b6:a0:f6:a4:e6:c0:b1:50:b4:ca:2f:db:35:9f:f5: ce:1f:4b:21:5d:62:1a:bf:f2:cb:6d:3f:07:61:4c:98:24:23: 39:7b:12:c5:ef:77:9d:c6:71:23:96:be:c8:80:9b:3d:d5:47: 90:a5:8e:1c:cb:09:4c:a8:56:0d:7d:72:15:3b:de:2c:d1:a3: ef:53:9e:ff -----BEGIN CERTIFICATE----- MIIFWDCCBECgAwIBAgIUGi3JGsUN2jI+BNy0SdVx6s8llhIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzk3MkU4NjcxREVEQzQzRkU5MDhCNTQ4NTMxQzk2OUEw NTFDRDM0QzAeFw0yNjAyMjMxNTAxMjhaFw0yNzAyMjIxNTA2MjhaMDMxMTAvBgNV BAMTKDY3MTI1QTEyOTQ3Mjg4OTQzQkI3NzAyMUYwODFEQzgzMjE2OTQ4QzcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCy6V6HmpKCqa+py+pt+qp9QNGs dvtB4gK/ElsQ4v0DR8RSBGXUHyY3zRLGFOLp4Ell00cHJZsLGEWAfZ+xVMk+S1Dp nLkZzmBlmcjpFIFGBPB04h3sS1i6WJ6cNxaTKLUNggvMb5w+C2ASl7MlelcDUtST XdtsPp9b3GzxLAIh3CXGQC6SrpA5OHGJ/rS+6fQyN4F1PoDSZq6/xeQrpag/u8h4 Voa9b5i0eR8VDwnUILYAGl2bYnghpNYzKLzj6VAlTP8yatmTEqeMvq7PiQeaC3A8 YwcXMUEHl1QZWvDjHgCQWbSyMccVGPItvu4RUrTUaK5cljbu+8gvx3MbmUNxAgMB AAGjggJiMIICXjAdBgNVHQ4EFgQUZxJaEpRyiJQ7t3Ah8IHcgyFpSMcwHwYDVR0j BBgwFoAUyXLoZx3txD/pCLVIUxyWmgUc00wwDgYDVR0PAQH/BAQDAgeAMIGIBgNV HR8EgYAwfjB8oHqgeIZ2cnN5bmM6Ly9yLm1hZ2VsbGFuLmlweG8uY29tL3JlcG8v ZGRkMTgxOGItOWZiZi00NDBjLWFhZWMtNDRhNGQxNTkwZjg3LTAvMC9DOTcyRTg2 NzFERURDNDNGRTkwOEI1NDg1MzFDOTY5QTA1MUNEMzRDLmNybDCBngYIKwYBBQUH AQEEgZEwgY4wgYsGCCsGAQUFBzAChn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5y aXBlLm5ldC9yZXBvc2l0b3J5LzYxNzA4YTZiLTZjM2EtNDBhMC1hMzAyLTU5NWVj YzE3ODQ4Yy8yL0M5NzJFODY3MURFREM0M0ZFOTA4QjU0ODUzMUM5NjlBMDUxQ0Qz NEMuY2VyMIGkBggrBgEFBQcBCwSBlzCBlDCBkQYIKwYBBQUHMAuGgYRyc3luYzov L3IubWFnZWxsYW4uaXB4by5jb20vcmVwby9kZGQxODE4Yi05ZmJmLTQ0MGMtYWFl Yy00NGE0ZDE1OTBmODctMC8wLzMxMzAzOTJlMzczMjJlMzEzMjM3MmUzMDJmMzIz NDJkMzIzNDIwM2QzZTIwMzYzMTMzMzEzNy5yb2EwGAYDVR0gAQH/BA4wDDAKBggr BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAG1IfzANBgkqhkiG 9w0BAQsFAAOCAQEAufWKza9qU99fpj/GhFPQo1a/jClKijDSB0KNKTv3op/20BVw VbIVCRSMTHuoSDYMfG8uUqSqx4x3v6C6vSZP1P0kOx0qD2jo3Q6mZBlei6E9wrYx XQpjHyYe55R7BU+Waxj2dMIfLZa1Ksnrov0NXQaCbso/zfLhFDSLm+IUHo+aAOen hBOL//cqo+enmNEqghOQupqFh5IW0fowhQC/Ecg0866R6SaCuqBrdi2/NLGAzx2y nSZntqD2pObAsVC0yi/bNZ/1zh9LIV1iGr/yy20/B2FMmCQjOXsSxe93ncZxI5a+ yICbPdVHkKWOHMsJTKhWDX1yFTveLNGj71Oe/w== -----END CERTIFICATE-----Generated at Sun Mar 1 23:18:05 2026 by rpki-client