$ rpki-client -vvf r.magellan.ipxo.com/repo/ddd1818b-9fbf-440c-aaec-44a4d1590f87-0/0/38312e32322e3133382e302f32342d3234203d3e2037303138.roa File: 38312e32322e3133382e302f32342d3234203d3e2037303138.roa (raw, json) Hash identifier: uRqCr9vILewBtE8cGRw1Aq8qZnx+qMpB2uKIfe8KFz8= Subject key identifier: 76:1C:7B:66:94:70:21:50:6A:3E:44:DD:F3:9B:D4:0D:46:64:9B:E5 Certificate issuer: /CN=C972E8671DEDC43FE908B548531C969A051CD34C Certificate serial: 3F036A90E6EB4358559F82C4701A9DA2BF316B1D Authority key identifier: C9:72:E8:67:1D:ED:C4:3F:E9:08:B5:48:53:1C:96:9A:05:1C:D3:4C Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/2/C972E8671DEDC43FE908B548531C969A051CD34C.cer Subject info access: rsync://r.magellan.ipxo.com/repo/ddd1818b-9fbf-440c-aaec-44a4d1590f87-0/0/38312e32322e3133382e302f32342d3234203d3e2037303138.roa Signing time: Mon 23 Feb 2026 15:06:31 +0000 ROA not before: Mon 23 Feb 2026 15:01:31 +0000 ROA not after: Mon 22 Feb 2027 15:06:31 +0000 asID: 7018 IP address blocks: 81.22.138.0/24 maxlen: 24 Validation: OK Signature path: rsync://r.magellan.ipxo.com/repo/ddd1818b-9fbf-440c-aaec-44a4d1590f87-0/0/C972E8671DEDC43FE908B548531C969A051CD34C.crl rsync://r.magellan.ipxo.com/repo/ddd1818b-9fbf-440c-aaec-44a4d1590f87-0/0/C972E8671DEDC43FE908B548531C969A051CD34C.mft rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/2/C972E8671DEDC43FE908B548531C969A051CD34C.cer rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/2/CF0631D33A3C9DC5C45424D55C3E7663838657A3.crl rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/2/CF0631D33A3C9DC5C45424D55C3E7663838657A3.mft rsync://rpki.ripe.net/repository/DEFAULT/zwYx0zo8ncXEVCTVXD52Y4OGV6M.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 02 Mar 2026 08:56:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3f:03:6a:90:e6:eb:43:58:55:9f:82:c4:70:1a:9d:a2:bf:31:6b:1d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C972E8671DEDC43FE908B548531C969A051CD34C Validity Not Before: Feb 23 15:01:31 2026 GMT Not After : Feb 22 15:06:31 2027 GMT Subject: CN=761C7B66947021506A3E44DDF39BD40D46649BE5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:4a:7b:de:0f:7f:4b:8a:0e:a5:93:99:35:9e: 78:1a:00:a0:b8:d7:2f:a3:dd:d1:95:48:37:3c:31: e2:bb:1c:85:c5:2b:1d:a0:5d:02:bf:e8:91:22:98: 4c:0d:fe:3e:b7:14:4e:dc:2d:0b:fb:da:59:fd:a7: f0:3c:b2:e6:53:0b:5d:01:ce:cb:2c:67:9d:b7:85: 04:cb:98:29:ca:9e:a2:66:27:e2:4c:f2:c1:08:f8: 7d:eb:77:9e:7d:33:6d:27:2c:57:71:01:33:1b:44: 2c:1d:42:69:43:1c:f7:17:17:ae:ff:f2:49:e3:ab: 1e:b1:59:c6:ef:25:c8:e8:ad:91:00:d8:2a:94:83: 12:19:57:8a:a0:ee:25:ee:b5:c2:c9:52:f8:6a:ec: d0:47:9d:5a:96:5e:8f:11:ef:aa:79:b6:e7:c1:4b: 37:d9:d7:0d:38:69:53:87:cb:f9:32:a4:56:97:92: 61:39:ca:39:d2:66:4a:1e:f1:46:69:ca:44:c0:3e: 9e:7a:d1:f0:27:fc:35:7f:e6:52:dd:39:c9:50:6d: f9:e3:fe:32:92:d5:97:a3:af:78:13:28:88:73:1b: 86:48:65:ee:f2:96:b9:59:79:5e:3f:d2:c3:1c:c4: 1d:cc:23:ac:c9:69:73:1a:c3:63:c1:8c:87:39:bf: d8:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:1C:7B:66:94:70:21:50:6A:3E:44:DD:F3:9B:D4:0D:46:64:9B:E5 X509v3 Authority Key Identifier: keyid:C9:72:E8:67:1D:ED:C4:3F:E9:08:B5:48:53:1C:96:9A:05:1C:D3:4C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://r.magellan.ipxo.com/repo/ddd1818b-9fbf-440c-aaec-44a4d1590f87-0/0/C972E8671DEDC43FE908B548531C969A051CD34C.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/2/C972E8671DEDC43FE908B548531C969A051CD34C.cer Subject Information Access: Signed Object - URI:rsync://r.magellan.ipxo.com/repo/ddd1818b-9fbf-440c-aaec-44a4d1590f87-0/0/38312e32322e3133382e302f32342d3234203d3e2037303138.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 81.22.138.0/24 Signature Algorithm: sha256WithRSAEncryption 4e:ef:0d:56:32:ee:81:f7:a6:81:e7:e5:73:37:83:01:64:6a: 57:51:52:86:3e:67:43:b5:67:60:81:bd:a1:5a:6c:66:35:b3: 83:a3:79:56:ff:9c:6e:c8:35:6a:c6:8b:3e:de:b0:f6:41:5a: a1:18:06:fb:2c:44:1d:13:af:d6:89:1d:41:27:ee:e9:e4:0a: 04:8b:f0:60:b1:cb:62:f5:95:ce:8d:16:0d:4c:a1:50:62:1e: f9:83:0c:48:62:64:b8:a3:61:fd:6d:af:e3:10:39:75:da:19: 9f:55:88:65:22:fc:84:12:d7:9f:55:2e:83:7a:a4:e4:d3:8d: 25:a3:20:fb:c6:08:38:2a:c3:4f:b2:0c:b0:00:b0:a1:13:ec: f0:38:24:fc:3c:59:c1:48:d2:c0:5e:c9:ef:43:5e:d3:e9:40: 95:12:bb:27:eb:0a:98:5c:39:39:b1:c9:0e:e3:51:eb:20:79: 8f:fe:24:f3:03:6a:27:49:fe:ec:74:86:80:99:87:88:39:a5: d3:82:97:c0:0b:d1:8d:9c:d7:5b:9c:a2:55:e1:88:15:f5:90: 10:98:21:b3:a9:0f:c0:51:30:79:d1:20:35:7a:db:79:da:2b: 77:a9:bd:d4:06:a2:56:73:7e:8b:90:e1:0c:7f:88:dd:68:46: b4:f2:0b:22 -----BEGIN CERTIFICATE----- MIIFVDCCBDygAwIBAgIUPwNqkObrQ1hVn4LEcBqdor8xax0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzk3MkU4NjcxREVEQzQzRkU5MDhCNTQ4NTMxQzk2OUEw NTFDRDM0QzAeFw0yNjAyMjMxNTAxMzFaFw0yNzAyMjIxNTA2MzFaMDMxMTAvBgNV BAMTKDc2MUM3QjY2OTQ3MDIxNTA2QTNFNDREREYzOUJENDBENDY2NDlCRTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCsSnveD39Lig6lk5k1nngaAKC4 1y+j3dGVSDc8MeK7HIXFKx2gXQK/6JEimEwN/j63FE7cLQv72ln9p/A8suZTC10B zsssZ523hQTLmCnKnqJmJ+JM8sEI+H3rd559M20nLFdxATMbRCwdQmlDHPcXF67/ 8knjqx6xWcbvJcjorZEA2CqUgxIZV4qg7iXutcLJUvhq7NBHnVqWXo8R76p5tufB SzfZ1w04aVOHy/kypFaXkmE5yjnSZkoe8UZpykTAPp560fAn/DV/5lLdOclQbfnj /jKS1Zejr3gTKIhzG4ZIZe7ylrlZeV4/0sMcxB3MI6zJaXMaw2PBjIc5v9gDAgMB AAGjggJeMIICWjAdBgNVHQ4EFgQUdhx7ZpRwIVBqPkTd85vUDUZkm+UwHwYDVR0j BBgwFoAUyXLoZx3txD/pCLVIUxyWmgUc00wwDgYDVR0PAQH/BAQDAgeAMIGIBgNV HR8EgYAwfjB8oHqgeIZ2cnN5bmM6Ly9yLm1hZ2VsbGFuLmlweG8uY29tL3JlcG8v ZGRkMTgxOGItOWZiZi00NDBjLWFhZWMtNDRhNGQxNTkwZjg3LTAvMC9DOTcyRTg2 NzFERURDNDNGRTkwOEI1NDg1MzFDOTY5QTA1MUNEMzRDLmNybDCBngYIKwYBBQUH AQEEgZEwgY4wgYsGCCsGAQUFBzAChn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5y aXBlLm5ldC9yZXBvc2l0b3J5LzYxNzA4YTZiLTZjM2EtNDBhMC1hMzAyLTU5NWVj YzE3ODQ4Yy8yL0M5NzJFODY3MURFREM0M0ZFOTA4QjU0ODUzMUM5NjlBMDUxQ0Qz NEMuY2VyMIGgBggrBgEFBQcBCwSBkzCBkDCBjQYIKwYBBQUHMAuGgYByc3luYzov L3IubWFnZWxsYW4uaXB4by5jb20vcmVwby9kZGQxODE4Yi05ZmJmLTQ0MGMtYWFl Yy00NGE0ZDE1OTBmODctMC8wLzM4MzEyZTMyMzIyZTMxMzMzODJlMzAyZjMyMzQy ZDMyMzQyMDNkM2UyMDM3MzAzMTM4LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAURaKMA0GCSqGSIb3DQEB CwUAA4IBAQBO7w1WMu6B96aB5+VzN4MBZGpXUVKGPmdDtWdggb2hWmxmNbODo3lW /5xuyDVqxos+3rD2QVqhGAb7LEQdE6/WiR1BJ+7p5AoEi/Bgscti9ZXOjRYNTKFQ Yh75gwxIYmS4o2H9ba/jEDl12hmfVYhlIvyEEtefVS6DeqTk040loyD7xgg4KsNP sgywALChE+zwOCT8PFnBSNLAXsnvQ17T6UCVErsn6wqYXDk5sckO41HrIHmP/iTz A2onSf7sdIaAmYeIOaXTgpfAC9GNnNdbnKJV4YgV9ZAQmCGzqQ/AUTB50SA1ett5 2it3qb3UBqJWc36LkOEMf4jdaEa08gsi -----END CERTIFICATE-----Generated at Mon Mar 2 00:58:21 2026 by rpki-client