$ rpki-client -vvf r.magellan.ipxo.com/repo/ddd1818b-9fbf-440c-aaec-44a4d1590f87-0/0/38312e32322e3133372e302f32342d3234203d3e20333937343233.roa File: 38312e32322e3133372e302f32342d3234203d3e20333937343233.roa (raw, json) Hash identifier: d03HFMVmtg+Y4a+hyLzVWSeBakAFT7ju3twmvXHsydk= Subject key identifier: 77:98:20:74:26:36:75:BE:45:F2:CE:5B:48:7B:32:CB:21:30:9F:FE Certificate issuer: /CN=C972E8671DEDC43FE908B548531C969A051CD34C Certificate serial: 52353C7D62EFF8ECF7F6ECC95D85122604B5BC7B Authority key identifier: C9:72:E8:67:1D:ED:C4:3F:E9:08:B5:48:53:1C:96:9A:05:1C:D3:4C Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/2/C972E8671DEDC43FE908B548531C969A051CD34C.cer Subject info access: rsync://r.magellan.ipxo.com/repo/ddd1818b-9fbf-440c-aaec-44a4d1590f87-0/0/38312e32322e3133372e302f32342d3234203d3e20333937343233.roa Signing time: Mon 23 Feb 2026 15:06:31 +0000 ROA not before: Mon 23 Feb 2026 15:01:31 +0000 ROA not after: Mon 22 Feb 2027 15:06:31 +0000 asID: 397423 IP address blocks: 81.22.137.0/24 maxlen: 24 Validation: OK Signature path: rsync://r.magellan.ipxo.com/repo/ddd1818b-9fbf-440c-aaec-44a4d1590f87-0/0/C972E8671DEDC43FE908B548531C969A051CD34C.crl rsync://r.magellan.ipxo.com/repo/ddd1818b-9fbf-440c-aaec-44a4d1590f87-0/0/C972E8671DEDC43FE908B548531C969A051CD34C.mft rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/2/C972E8671DEDC43FE908B548531C969A051CD34C.cer rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/2/CF0631D33A3C9DC5C45424D55C3E7663838657A3.crl rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/2/CF0631D33A3C9DC5C45424D55C3E7663838657A3.mft rsync://rpki.ripe.net/repository/DEFAULT/zwYx0zo8ncXEVCTVXD52Y4OGV6M.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 02 Mar 2026 08:56:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 52:35:3c:7d:62:ef:f8:ec:f7:f6:ec:c9:5d:85:12:26:04:b5:bc:7b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C972E8671DEDC43FE908B548531C969A051CD34C Validity Not Before: Feb 23 15:01:31 2026 GMT Not After : Feb 22 15:06:31 2027 GMT Subject: CN=77982074263675BE45F2CE5B487B32CB21309FFE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:7b:19:90:fe:86:ed:8f:61:e2:3b:a7:22:e6: 8a:ee:68:59:8d:65:06:a9:1d:f7:79:bf:00:19:ee: ef:0b:4f:a3:73:4c:d6:ab:09:85:c8:ed:6a:81:d8: 5c:bf:56:33:f3:74:50:1a:0c:20:89:ff:8d:3d:05: 29:46:62:5d:64:b6:d3:ab:db:84:be:7c:1e:02:1f: 1b:ea:27:b2:9a:96:7f:f4:02:db:c7:cf:89:01:6b: a5:cb:9b:14:b4:0e:d1:08:59:65:71:11:51:ff:4c: ee:37:f9:90:01:74:dc:6f:aa:83:5e:b0:6b:e0:36: 1c:63:68:06:c3:dc:dd:77:99:02:5a:e6:71:fd:64: 0c:42:e6:84:97:31:29:0f:f6:13:57:de:b1:85:c4: 01:22:dc:b6:33:fe:05:00:29:f0:9a:db:7e:82:c7: 6f:7c:34:4e:90:b1:db:19:df:0b:90:91:44:cd:cb: c3:1b:8c:f3:2a:21:7e:4e:81:1f:f1:2c:b2:5f:1f: 3f:0a:bf:8a:6e:f6:ce:a2:2c:0b:01:85:0f:ab:51: c6:48:ce:85:33:51:e7:69:c9:e1:dc:ea:91:56:de: 2b:31:28:85:26:b8:19:2c:01:64:2c:16:48:fe:85: 7c:0d:7e:34:54:e2:d9:d5:68:03:e4:ad:ef:e9:f0: 60:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:98:20:74:26:36:75:BE:45:F2:CE:5B:48:7B:32:CB:21:30:9F:FE X509v3 Authority Key Identifier: keyid:C9:72:E8:67:1D:ED:C4:3F:E9:08:B5:48:53:1C:96:9A:05:1C:D3:4C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://r.magellan.ipxo.com/repo/ddd1818b-9fbf-440c-aaec-44a4d1590f87-0/0/C972E8671DEDC43FE908B548531C969A051CD34C.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/2/C972E8671DEDC43FE908B548531C969A051CD34C.cer Subject Information Access: Signed Object - URI:rsync://r.magellan.ipxo.com/repo/ddd1818b-9fbf-440c-aaec-44a4d1590f87-0/0/38312e32322e3133372e302f32342d3234203d3e20333937343233.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 81.22.137.0/24 Signature Algorithm: sha256WithRSAEncryption a4:4b:cd:63:6a:90:43:6d:6b:06:dd:3f:33:87:eb:9a:15:aa: 96:ac:52:7c:d5:d2:f3:53:c8:48:21:ed:97:5d:60:69:09:5c: ad:3a:bf:90:d1:eb:5e:1e:04:4b:7a:8e:c8:84:0f:e0:c2:6a: cc:24:03:61:27:22:2f:9f:70:63:da:da:9c:dc:23:3a:e1:51: f1:59:2f:0d:c8:bc:5d:93:d4:f6:55:8b:d2:f8:c4:16:47:ea: c3:bb:cb:94:e8:6c:35:22:2b:b4:b2:c8:fa:74:a9:49:fd:9c: 7d:70:d4:80:7e:09:44:7b:57:b3:42:cf:6b:2e:6d:27:0a:2b: a7:c8:d6:52:a0:98:1f:ee:25:6a:f0:9b:ce:35:2d:95:4a:75: eb:0e:11:75:70:d4:97:70:d1:2b:84:1b:39:4b:5d:86:d7:0b: dd:c6:1d:d9:89:1f:b5:ea:4d:24:7c:80:3f:73:30:98:82:7c: 97:ff:aa:16:7a:f9:ae:9e:1b:43:91:08:ed:c0:53:e3:06:e8: 0b:cf:27:3f:7c:96:42:15:44:42:81:12:f3:5b:b5:4c:c5:6d: 91:85:df:09:6a:3d:40:5b:7f:9f:dc:45:60:19:9a:33:47:cc: 49:20:2f:4e:49:d4:47:c7:38:bc:72:99:28:2b:f1:df:75:0b: 97:d8:65:9b -----BEGIN CERTIFICATE----- MIIFWDCCBECgAwIBAgIUUjU8fWLv+Oz39uzJXYUSJgS1vHswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzk3MkU4NjcxREVEQzQzRkU5MDhCNTQ4NTMxQzk2OUEw NTFDRDM0QzAeFw0yNjAyMjMxNTAxMzFaFw0yNzAyMjIxNTA2MzFaMDMxMTAvBgNV BAMTKDc3OTgyMDc0MjYzNjc1QkU0NUYyQ0U1QjQ4N0IzMkNCMjEzMDlGRkUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCwexmQ/obtj2HiO6ci5oruaFmN ZQapHfd5vwAZ7u8LT6NzTNarCYXI7WqB2Fy/VjPzdFAaDCCJ/409BSlGYl1kttOr 24S+fB4CHxvqJ7Kaln/0AtvHz4kBa6XLmxS0DtEIWWVxEVH/TO43+ZABdNxvqoNe sGvgNhxjaAbD3N13mQJa5nH9ZAxC5oSXMSkP9hNX3rGFxAEi3LYz/gUAKfCa236C x298NE6QsdsZ3wuQkUTNy8MbjPMqIX5OgR/xLLJfHz8Kv4pu9s6iLAsBhQ+rUcZI zoUzUedpyeHc6pFW3isxKIUmuBksAWQsFkj+hXwNfjRU4tnVaAPkre/p8GA1AgMB AAGjggJiMIICXjAdBgNVHQ4EFgQUd5ggdCY2db5F8s5bSHsyyyEwn/4wHwYDVR0j BBgwFoAUyXLoZx3txD/pCLVIUxyWmgUc00wwDgYDVR0PAQH/BAQDAgeAMIGIBgNV HR8EgYAwfjB8oHqgeIZ2cnN5bmM6Ly9yLm1hZ2VsbGFuLmlweG8uY29tL3JlcG8v ZGRkMTgxOGItOWZiZi00NDBjLWFhZWMtNDRhNGQxNTkwZjg3LTAvMC9DOTcyRTg2 NzFERURDNDNGRTkwOEI1NDg1MzFDOTY5QTA1MUNEMzRDLmNybDCBngYIKwYBBQUH AQEEgZEwgY4wgYsGCCsGAQUFBzAChn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5y aXBlLm5ldC9yZXBvc2l0b3J5LzYxNzA4YTZiLTZjM2EtNDBhMC1hMzAyLTU5NWVj YzE3ODQ4Yy8yL0M5NzJFODY3MURFREM0M0ZFOTA4QjU0ODUzMUM5NjlBMDUxQ0Qz NEMuY2VyMIGkBggrBgEFBQcBCwSBlzCBlDCBkQYIKwYBBQUHMAuGgYRyc3luYzov L3IubWFnZWxsYW4uaXB4by5jb20vcmVwby9kZGQxODE4Yi05ZmJmLTQ0MGMtYWFl Yy00NGE0ZDE1OTBmODctMC8wLzM4MzEyZTMyMzIyZTMxMzMzNzJlMzAyZjMyMzQy ZDMyMzQyMDNkM2UyMDMzMzkzNzM0MzIzMy5yb2EwGAYDVR0gAQH/BA4wDDAKBggr BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAFEWiTANBgkqhkiG 9w0BAQsFAAOCAQEApEvNY2qQQ21rBt0/M4frmhWqlqxSfNXS81PISCHtl11gaQlc rTq/kNHrXh4ES3qOyIQP4MJqzCQDYSciL59wY9ranNwjOuFR8VkvDci8XZPU9lWL 0vjEFkfqw7vLlOhsNSIrtLLI+nSpSf2cfXDUgH4JRHtXs0LPay5tJworp8jWUqCY H+4lavCbzjUtlUp16w4RdXDUl3DRK4QbOUtdhtcL3cYd2YkftepNJHyAP3MwmIJ8 l/+qFnr5rp4bQ5EI7cBT4wboC88nP3yWQhVEQoES81u1TMVtkYXfCWo9QFt/n9xF YBmaM0fMSSAvTknUR8c4vHKZKCvx33ULl9hlmw== -----END CERTIFICATE-----Generated at Mon Mar 2 02:42:35 2026 by rpki-client