$ rpki-client -vvf r.magellan.ipxo.com/repo/ddd1818b-9fbf-440c-aaec-44a4d1590f87-0/0/38312e32322e3132392e302f32342d3234203d3e2037303138.roa File: 38312e32322e3132392e302f32342d3234203d3e2037303138.roa (raw, json) Hash identifier: SRS7LkYl8lmTtxFJPnw8pklL+ca7ElkAl/l3wZI9Qgc= Subject key identifier: FE:33:0E:B3:E4:C5:76:05:17:48:C8:20:B6:01:14:60:78:8B:F4:36 Certificate issuer: /CN=C972E8671DEDC43FE908B548531C969A051CD34C Certificate serial: 3CBCEE217923029BE6751D3AF8D453B9110F3F76 Authority key identifier: C9:72:E8:67:1D:ED:C4:3F:E9:08:B5:48:53:1C:96:9A:05:1C:D3:4C Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/2/C972E8671DEDC43FE908B548531C969A051CD34C.cer Subject info access: rsync://r.magellan.ipxo.com/repo/ddd1818b-9fbf-440c-aaec-44a4d1590f87-0/0/38312e32322e3132392e302f32342d3234203d3e2037303138.roa Signing time: Mon 23 Feb 2026 15:06:29 +0000 ROA not before: Mon 23 Feb 2026 15:01:29 +0000 ROA not after: Mon 22 Feb 2027 15:06:29 +0000 asID: 7018 IP address blocks: 81.22.129.0/24 maxlen: 24 Validation: OK Signature path: rsync://r.magellan.ipxo.com/repo/ddd1818b-9fbf-440c-aaec-44a4d1590f87-0/0/C972E8671DEDC43FE908B548531C969A051CD34C.crl rsync://r.magellan.ipxo.com/repo/ddd1818b-9fbf-440c-aaec-44a4d1590f87-0/0/C972E8671DEDC43FE908B548531C969A051CD34C.mft rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/2/C972E8671DEDC43FE908B548531C969A051CD34C.cer rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/2/CF0631D33A3C9DC5C45424D55C3E7663838657A3.crl rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/2/CF0631D33A3C9DC5C45424D55C3E7663838657A3.mft rsync://rpki.ripe.net/repository/DEFAULT/zwYx0zo8ncXEVCTVXD52Y4OGV6M.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 02 Mar 2026 08:56:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3c:bc:ee:21:79:23:02:9b:e6:75:1d:3a:f8:d4:53:b9:11:0f:3f:76 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C972E8671DEDC43FE908B548531C969A051CD34C Validity Not Before: Feb 23 15:01:29 2026 GMT Not After : Feb 22 15:06:29 2027 GMT Subject: CN=FE330EB3E4C576051748C820B6011460788BF436 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:0e:5a:ab:04:64:bb:f2:40:ad:6d:ec:b1:5e: b8:1e:63:23:98:1d:81:3c:d1:07:5f:e5:15:59:8f: 79:f3:1f:cb:3c:35:71:d7:1e:7d:14:46:09:e8:7c: 5c:13:4e:c3:8a:01:8f:a1:4a:4d:76:62:f3:d7:17: cb:b4:45:e2:39:a9:70:4c:a9:2b:53:3a:99:07:0b: 6c:47:8e:d4:e5:0f:a2:a9:76:8c:3c:85:1a:4b:9a: 0f:62:58:9f:4e:f7:0e:ac:78:e7:7e:62:40:55:b4: 2e:8a:ab:63:6b:97:a9:60:fc:23:22:d5:ae:fb:ba: 60:04:70:71:56:da:bf:8f:a1:18:f2:d9:be:a2:d8: bb:0c:01:ec:14:24:9a:ca:0f:33:e4:4f:cd:75:c8: d5:ed:6d:b6:92:34:38:e1:1e:dc:14:f5:75:36:05: 45:41:1e:aa:6d:a1:19:8a:8c:bf:f5:f5:98:83:eb: e2:bb:aa:09:46:23:2f:03:e4:14:34:9c:af:68:5f: 4e:6a:b6:0d:b2:a8:da:95:86:1a:e5:67:80:6f:5d: 65:62:45:80:1f:7c:26:6f:8d:eb:cb:9f:60:6c:ae: a7:78:4e:46:4e:61:95:7e:ee:9d:5c:81:b5:3b:4c: af:b5:28:e4:12:dc:ab:f5:29:dd:06:0a:bd:16:be: a5:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:33:0E:B3:E4:C5:76:05:17:48:C8:20:B6:01:14:60:78:8B:F4:36 X509v3 Authority Key Identifier: keyid:C9:72:E8:67:1D:ED:C4:3F:E9:08:B5:48:53:1C:96:9A:05:1C:D3:4C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://r.magellan.ipxo.com/repo/ddd1818b-9fbf-440c-aaec-44a4d1590f87-0/0/C972E8671DEDC43FE908B548531C969A051CD34C.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/2/C972E8671DEDC43FE908B548531C969A051CD34C.cer Subject Information Access: Signed Object - URI:rsync://r.magellan.ipxo.com/repo/ddd1818b-9fbf-440c-aaec-44a4d1590f87-0/0/38312e32322e3132392e302f32342d3234203d3e2037303138.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 81.22.129.0/24 Signature Algorithm: sha256WithRSAEncryption b9:77:67:5b:0e:ba:5e:b0:92:7f:dc:06:57:38:d3:fe:6e:8c: 20:e2:94:68:44:af:4b:f1:e3:9d:67:da:8b:80:34:8e:0a:c7: 79:26:26:3b:e3:a9:b3:cc:42:30:80:01:d5:bb:87:40:47:56: af:fb:67:19:ba:cf:ea:47:24:18:0d:85:b9:60:55:ae:34:ef: 69:e8:80:9a:01:8d:27:6e:ba:00:39:e3:16:fe:1f:57:ab:cc: e5:57:b6:8f:a6:e4:20:34:e9:3f:31:58:b3:be:64:37:66:9f: 81:cf:8a:b6:90:3a:7c:21:4b:6f:e6:7d:c5:27:4b:ef:8c:69: e4:77:b2:b1:b1:27:a7:a2:d7:2c:2c:04:98:26:98:fd:df:92: b5:c2:aa:f7:31:44:2c:0b:7e:c9:67:a6:73:e8:8b:a6:82:2b: 46:62:3c:70:9e:71:87:ce:bb:35:ca:08:f4:7a:21:04:d4:93: e0:55:01:a8:b6:7a:fe:68:e5:5c:d4:13:e9:02:a7:29:50:df: e4:07:6c:16:68:36:60:09:9c:75:27:0f:96:15:6a:75:a9:a2: 77:d8:85:f5:50:27:d8:5f:da:90:40:55:74:b9:15:ab:d5:28: 72:04:2d:49:22:60:18:9b:7a:c0:33:a5:35:43:e2:a5:45:30: 41:01:f8:24 -----BEGIN CERTIFICATE----- MIIFVDCCBDygAwIBAgIUPLzuIXkjApvmdR06+NRTuREPP3YwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzk3MkU4NjcxREVEQzQzRkU5MDhCNTQ4NTMxQzk2OUEw NTFDRDM0QzAeFw0yNjAyMjMxNTAxMjlaFw0yNzAyMjIxNTA2MjlaMDMxMTAvBgNV BAMTKEZFMzMwRUIzRTRDNTc2MDUxNzQ4QzgyMEI2MDExNDYwNzg4QkY0MzYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCbDlqrBGS78kCtbeyxXrgeYyOY HYE80Qdf5RVZj3nzH8s8NXHXHn0URgnofFwTTsOKAY+hSk12YvPXF8u0ReI5qXBM qStTOpkHC2xHjtTlD6Kpdow8hRpLmg9iWJ9O9w6seOd+YkBVtC6Kq2Nrl6lg/CMi 1a77umAEcHFW2r+PoRjy2b6i2LsMAewUJJrKDzPkT811yNXtbbaSNDjhHtwU9XU2 BUVBHqptoRmKjL/19ZiD6+K7qglGIy8D5BQ0nK9oX05qtg2yqNqVhhrlZ4BvXWVi RYAffCZvjevLn2Bsrqd4TkZOYZV+7p1cgbU7TK+1KOQS3Kv1Kd0GCr0WvqXBAgMB AAGjggJeMIICWjAdBgNVHQ4EFgQU/jMOs+TFdgUXSMggtgEUYHiL9DYwHwYDVR0j BBgwFoAUyXLoZx3txD/pCLVIUxyWmgUc00wwDgYDVR0PAQH/BAQDAgeAMIGIBgNV HR8EgYAwfjB8oHqgeIZ2cnN5bmM6Ly9yLm1hZ2VsbGFuLmlweG8uY29tL3JlcG8v ZGRkMTgxOGItOWZiZi00NDBjLWFhZWMtNDRhNGQxNTkwZjg3LTAvMC9DOTcyRTg2 NzFERURDNDNGRTkwOEI1NDg1MzFDOTY5QTA1MUNEMzRDLmNybDCBngYIKwYBBQUH AQEEgZEwgY4wgYsGCCsGAQUFBzAChn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5y aXBlLm5ldC9yZXBvc2l0b3J5LzYxNzA4YTZiLTZjM2EtNDBhMC1hMzAyLTU5NWVj YzE3ODQ4Yy8yL0M5NzJFODY3MURFREM0M0ZFOTA4QjU0ODUzMUM5NjlBMDUxQ0Qz NEMuY2VyMIGgBggrBgEFBQcBCwSBkzCBkDCBjQYIKwYBBQUHMAuGgYByc3luYzov L3IubWFnZWxsYW4uaXB4by5jb20vcmVwby9kZGQxODE4Yi05ZmJmLTQ0MGMtYWFl Yy00NGE0ZDE1OTBmODctMC8wLzM4MzEyZTMyMzIyZTMxMzIzOTJlMzAyZjMyMzQy ZDMyMzQyMDNkM2UyMDM3MzAzMTM4LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAURaBMA0GCSqGSIb3DQEB CwUAA4IBAQC5d2dbDrpesJJ/3AZXONP+bowg4pRoRK9L8eOdZ9qLgDSOCsd5JiY7 46mzzEIwgAHVu4dAR1av+2cZus/qRyQYDYW5YFWuNO9p6ICaAY0nbroAOeMW/h9X q8zlV7aPpuQgNOk/MVizvmQ3Zp+Bz4q2kDp8IUtv5n3FJ0vvjGnkd7KxsSenotcs LASYJpj935K1wqr3MUQsC37JZ6Zz6IumgitGYjxwnnGHzrs1ygj0eiEE1JPgVQGo tnr+aOVc1BPpAqcpUN/kB2wWaDZgCZx1Jw+WFWp1qaJ32IX1UCfYX9qQQFV0uRWr 1ShyBC1JImAYm3rAM6U1Q+KlRTBBAfgk -----END CERTIFICATE-----Generated at Mon Mar 2 02:42:44 2026 by rpki-client