$ rpki-client -vvf r.magellan.ipxo.com/repo/ddd1818b-9fbf-440c-aaec-44a4d1590f87-0/0/38312e32322e3133362e302f32342d3234203d3e20313938323530.roa File: 38312e32322e3133362e302f32342d3234203d3e20313938323530.roa (raw, json) Hash identifier: LXQ3H2WqJghHxdtCVyaC5dVEq16PyQ83ovRPejGq1wQ= Subject key identifier: 3F:6F:7F:B9:77:37:67:18:10:DC:84:32:CC:85:15:8B:61:76:9F:C0 Certificate issuer: /CN=C972E8671DEDC43FE908B548531C969A051CD34C Certificate serial: 08D35B2A75B4650ACC23707B0E6A84C563101707 Authority key identifier: C9:72:E8:67:1D:ED:C4:3F:E9:08:B5:48:53:1C:96:9A:05:1C:D3:4C Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/2/C972E8671DEDC43FE908B548531C969A051CD34C.cer Subject info access: rsync://r.magellan.ipxo.com/repo/ddd1818b-9fbf-440c-aaec-44a4d1590f87-0/0/38312e32322e3133362e302f32342d3234203d3e20313938323530.roa Signing time: Sun 12 Apr 2026 14:38:16 +0000 ROA not before: Sun 12 Apr 2026 14:33:16 +0000 ROA not after: Sun 11 Apr 2027 14:38:16 +0000 asID: 198250 IP address blocks: 81.22.136.0/24 maxlen: 24 Validation: OK Signature path: rsync://r.magellan.ipxo.com/repo/ddd1818b-9fbf-440c-aaec-44a4d1590f87-0/0/C972E8671DEDC43FE908B548531C969A051CD34C.crl rsync://r.magellan.ipxo.com/repo/ddd1818b-9fbf-440c-aaec-44a4d1590f87-0/0/C972E8671DEDC43FE908B548531C969A051CD34C.mft rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/2/C972E8671DEDC43FE908B548531C969A051CD34C.cer rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/2/CF0631D33A3C9DC5C45424D55C3E7663838657A3.crl rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/2/CF0631D33A3C9DC5C45424D55C3E7663838657A3.mft rsync://rpki.ripe.net/repository/DEFAULT/zwYx0zo8ncXEVCTVXD52Y4OGV6M.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 20 Apr 2026 02:00:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 08:d3:5b:2a:75:b4:65:0a:cc:23:70:7b:0e:6a:84:c5:63:10:17:07 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C972E8671DEDC43FE908B548531C969A051CD34C Validity Not Before: Apr 12 14:33:16 2026 GMT Not After : Apr 11 14:38:16 2027 GMT Subject: CN=3F6F7FB97737671810DC8432CC85158B61769FC0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:ba:79:c4:fd:62:fc:d6:69:c2:b0:1c:d7:dc: cf:72:b4:f8:5c:a0:78:37:da:b8:b6:5a:9b:7b:bb: 06:2c:2a:c0:e6:c1:02:57:47:d8:3e:73:4f:71:8c: d0:8f:ae:aa:26:31:7f:ac:e8:60:a5:ed:24:2e:5f: b8:ed:49:4f:2a:07:34:44:df:52:c5:e8:98:11:8d: d1:43:26:09:0e:98:a2:14:22:5e:56:5a:22:89:47: 49:78:83:b5:f3:4c:be:dc:c8:5e:3e:a2:c4:88:7c: bb:33:81:c8:87:a7:dd:c5:92:3a:6a:8d:cf:08:2d: 73:05:c3:86:01:fc:6c:ba:72:57:00:ae:2b:c3:5d: 12:15:bd:a7:97:c1:24:50:77:27:33:f2:90:7e:fa: 03:41:fb:7c:4c:7a:e1:c2:a5:d7:67:1d:22:a4:ac: c6:8e:3d:37:3d:b8:9f:8b:df:69:2f:c4:94:b2:16: d6:22:ed:96:50:51:19:7d:78:ba:ea:43:8c:8b:46: 29:5c:71:cc:e4:11:94:37:48:7f:9a:0d:9b:fb:f0: c7:bb:11:47:4a:a5:ef:92:c6:3f:f4:eb:00:55:0c: f7:e8:57:1e:58:01:ab:cd:52:bb:ca:c9:68:ea:c4: dd:07:7e:14:a7:63:09:62:a2:3f:71:d2:03:85:8a: 1b:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:6F:7F:B9:77:37:67:18:10:DC:84:32:CC:85:15:8B:61:76:9F:C0 X509v3 Authority Key Identifier: keyid:C9:72:E8:67:1D:ED:C4:3F:E9:08:B5:48:53:1C:96:9A:05:1C:D3:4C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://r.magellan.ipxo.com/repo/ddd1818b-9fbf-440c-aaec-44a4d1590f87-0/0/C972E8671DEDC43FE908B548531C969A051CD34C.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/2/C972E8671DEDC43FE908B548531C969A051CD34C.cer Subject Information Access: Signed Object - URI:rsync://r.magellan.ipxo.com/repo/ddd1818b-9fbf-440c-aaec-44a4d1590f87-0/0/38312e32322e3133362e302f32342d3234203d3e20313938323530.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 81.22.136.0/24 Signature Algorithm: sha256WithRSAEncryption 3d:c7:29:51:20:80:39:3d:2e:19:b5:93:06:e4:01:0e:70:2a: cf:ec:3d:8a:fe:5c:72:9e:bf:c1:64:6f:94:99:d3:ea:15:b5: f0:7b:5d:66:35:ac:40:69:57:ca:fb:3a:f3:d5:3d:29:33:44: cd:11:8b:fe:f8:26:c6:36:ba:ee:63:df:88:9a:e4:88:91:46: 3a:02:57:36:3c:3b:d4:29:b8:b5:e5:ae:69:16:b0:4d:d5:0f: c6:19:ae:17:ee:38:ff:c3:a5:f3:c1:75:91:77:37:aa:17:c3: 32:3c:f6:7e:a6:e0:71:11:9b:e3:80:19:c9:e7:03:82:6b:bf: 48:7e:e6:13:42:45:70:96:74:1e:1f:ad:44:a3:9f:e0:5e:78: ba:62:52:bf:87:78:4a:c8:3c:68:1e:47:6b:61:fb:cf:51:f8: 5e:ac:03:38:5e:ae:a0:23:68:d5:9c:e6:df:a2:13:ef:76:d4: fc:77:06:28:c2:56:b1:e3:44:97:4f:e5:3d:5b:4b:33:fa:28: 71:03:0e:02:32:1a:69:72:a9:98:b9:4c:51:c1:c4:1f:6b:a0: 42:ae:92:be:8b:2a:c6:2f:a4:bd:d4:c4:f1:57:20:f2:c0:ec: 94:10:61:d2:76:e5:40:30:ab:9f:5a:3b:0d:b5:f5:e7:58:14: e8:ee:1f:a3 -----BEGIN CERTIFICATE----- MIIFWDCCBECgAwIBAgIUCNNbKnW0ZQrMI3B7DmqExWMQFwcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzk3MkU4NjcxREVEQzQzRkU5MDhCNTQ4NTMxQzk2OUEw NTFDRDM0QzAeFw0yNjA0MTIxNDMzMTZaFw0yNzA0MTExNDM4MTZaMDMxMTAvBgNV BAMTKDNGNkY3RkI5NzczNzY3MTgxMERDODQzMkNDODUxNThCNjE3NjlGQzAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0unnE/WL81mnCsBzX3M9ytPhc oHg32ri2Wpt7uwYsKsDmwQJXR9g+c09xjNCPrqomMX+s6GCl7SQuX7jtSU8qBzRE 31LF6JgRjdFDJgkOmKIUIl5WWiKJR0l4g7XzTL7cyF4+osSIfLszgciHp93Fkjpq jc8ILXMFw4YB/Gy6clcArivDXRIVvaeXwSRQdycz8pB++gNB+3xMeuHCpddnHSKk rMaOPTc9uJ+L32kvxJSyFtYi7ZZQURl9eLrqQ4yLRilccczkEZQ3SH+aDZv78Me7 EUdKpe+Sxj/06wBVDPfoVx5YAavNUrvKyWjqxN0HfhSnYwlioj9x0gOFihuZAgMB AAGjggJiMIICXjAdBgNVHQ4EFgQUP29/uXc3ZxgQ3IQyzIUVi2F2n8AwHwYDVR0j BBgwFoAUyXLoZx3txD/pCLVIUxyWmgUc00wwDgYDVR0PAQH/BAQDAgeAMIGIBgNV HR8EgYAwfjB8oHqgeIZ2cnN5bmM6Ly9yLm1hZ2VsbGFuLmlweG8uY29tL3JlcG8v ZGRkMTgxOGItOWZiZi00NDBjLWFhZWMtNDRhNGQxNTkwZjg3LTAvMC9DOTcyRTg2 NzFERURDNDNGRTkwOEI1NDg1MzFDOTY5QTA1MUNEMzRDLmNybDCBngYIKwYBBQUH AQEEgZEwgY4wgYsGCCsGAQUFBzAChn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5y aXBlLm5ldC9yZXBvc2l0b3J5LzYxNzA4YTZiLTZjM2EtNDBhMC1hMzAyLTU5NWVj YzE3ODQ4Yy8yL0M5NzJFODY3MURFREM0M0ZFOTA4QjU0ODUzMUM5NjlBMDUxQ0Qz NEMuY2VyMIGkBggrBgEFBQcBCwSBlzCBlDCBkQYIKwYBBQUHMAuGgYRyc3luYzov L3IubWFnZWxsYW4uaXB4by5jb20vcmVwby9kZGQxODE4Yi05ZmJmLTQ0MGMtYWFl Yy00NGE0ZDE1OTBmODctMC8wLzM4MzEyZTMyMzIyZTMxMzMzNjJlMzAyZjMyMzQy ZDMyMzQyMDNkM2UyMDMxMzkzODMyMzUzMC5yb2EwGAYDVR0gAQH/BA4wDDAKBggr BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAFEWiDANBgkqhkiG 9w0BAQsFAAOCAQEAPccpUSCAOT0uGbWTBuQBDnAqz+w9iv5ccp6/wWRvlJnT6hW1 8HtdZjWsQGlXyvs689U9KTNEzRGL/vgmxja67mPfiJrkiJFGOgJXNjw71Cm4teWu aRawTdUPxhmuF+44/8Ol88F1kXc3qhfDMjz2fqbgcRGb44AZyecDgmu/SH7mE0JF cJZ0Hh+tRKOf4F54umJSv4d4Ssg8aB5Ha2H7z1H4XqwDOF6uoCNo1Zzm36IT73bU /HcGKMJWseNEl0/lPVtLM/oocQMOAjIaaXKpmLlMUcHEH2ugQq6Svosqxi+kvdTE 8Vcg8sDslBBh0nblQDCrn1o7DbX151gU6O4fow== -----END CERTIFICATE-----Generated at Sun Apr 19 11:36:47 2026 by rpki-client