$ rpki-client -vvf r.magellan.ipxo.com/repo/ddd1818b-9fbf-440c-aaec-44a4d1590f87-0/0/38392e3138352e302e302f32322d3234203d3e20383334.roa File: 38392e3138352e302e302f32322d3234203d3e20383334.roa (raw, json) Hash identifier: VQW7HXfK5gZ/6k5WWRajmeNtJ69Ij55BTAcrZLrahFM= Subject key identifier: 8F:32:C9:FE:A2:33:8B:DA:F2:7D:F3:31:97:7B:15:8E:94:E2:0F:01 Certificate issuer: /CN=C972E8671DEDC43FE908B548531C969A051CD34C Certificate serial: 7D12E6D7DF244E144400915C585AA25A43F72008 Authority key identifier: C9:72:E8:67:1D:ED:C4:3F:E9:08:B5:48:53:1C:96:9A:05:1C:D3:4C Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/2/C972E8671DEDC43FE908B548531C969A051CD34C.cer Subject info access: rsync://r.magellan.ipxo.com/repo/ddd1818b-9fbf-440c-aaec-44a4d1590f87-0/0/38392e3138352e302e302f32322d3234203d3e20383334.roa Signing time: Mon 23 Feb 2026 15:06:33 +0000 ROA not before: Mon 23 Feb 2026 15:01:33 +0000 ROA not after: Mon 22 Feb 2027 15:06:33 +0000 asID: 834 IP address blocks: 89.185.0.0/22 maxlen: 24 Validation: OK Signature path: rsync://r.magellan.ipxo.com/repo/ddd1818b-9fbf-440c-aaec-44a4d1590f87-0/0/C972E8671DEDC43FE908B548531C969A051CD34C.crl rsync://r.magellan.ipxo.com/repo/ddd1818b-9fbf-440c-aaec-44a4d1590f87-0/0/C972E8671DEDC43FE908B548531C969A051CD34C.mft rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/2/C972E8671DEDC43FE908B548531C969A051CD34C.cer rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/2/CF0631D33A3C9DC5C45424D55C3E7663838657A3.crl rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/2/CF0631D33A3C9DC5C45424D55C3E7663838657A3.mft rsync://rpki.ripe.net/repository/DEFAULT/zwYx0zo8ncXEVCTVXD52Y4OGV6M.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 02 Mar 2026 08:56:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7d:12:e6:d7:df:24:4e:14:44:00:91:5c:58:5a:a2:5a:43:f7:20:08 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C972E8671DEDC43FE908B548531C969A051CD34C Validity Not Before: Feb 23 15:01:33 2026 GMT Not After : Feb 22 15:06:33 2027 GMT Subject: CN=8F32C9FEA2338BDAF27DF331977B158E94E20F01 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:aa:df:9d:06:d5:18:ff:74:ef:03:03:fc:67: 22:1f:89:d6:2a:82:1f:73:5f:98:f9:eb:6a:11:20: b7:c1:fd:8f:5a:cd:15:f3:75:7b:cb:19:75:be:12: d6:d4:c6:9b:d0:68:57:37:39:59:ac:36:3e:c4:6c: 18:a1:0b:97:e7:7f:ac:05:35:95:ae:9c:43:67:4d: 9f:92:47:c1:89:36:20:52:cc:b4:d5:52:0f:d7:98: 64:db:f0:de:54:09:d1:b1:64:fc:1b:3c:bf:fc:68: 33:ab:66:c5:92:e3:90:10:72:42:18:46:97:58:34: e8:28:e2:a5:24:6f:11:84:d5:f9:5e:08:44:b3:40: 8a:44:b5:31:17:91:12:98:57:d5:3b:37:61:47:87: bb:1c:9d:4f:e8:b3:8f:f8:b5:14:81:f8:37:60:b9: 42:a5:fb:11:4e:c1:33:bb:a9:63:7c:50:b9:59:4d: 49:b5:e4:dd:e3:83:82:34:b6:19:bf:6c:d6:ea:2e: 87:84:a8:a7:2e:77:82:a6:a9:13:73:b7:a7:47:e4: 46:82:2b:74:ab:4b:1e:d2:b6:8d:86:b7:01:cc:ef: a0:61:e9:d8:07:ce:fe:b0:e2:9d:d8:06:d2:99:0f: 90:2f:fb:bb:cb:c6:fd:7e:08:48:b3:50:64:74:65: e8:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:32:C9:FE:A2:33:8B:DA:F2:7D:F3:31:97:7B:15:8E:94:E2:0F:01 X509v3 Authority Key Identifier: keyid:C9:72:E8:67:1D:ED:C4:3F:E9:08:B5:48:53:1C:96:9A:05:1C:D3:4C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://r.magellan.ipxo.com/repo/ddd1818b-9fbf-440c-aaec-44a4d1590f87-0/0/C972E8671DEDC43FE908B548531C969A051CD34C.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/2/C972E8671DEDC43FE908B548531C969A051CD34C.cer Subject Information Access: Signed Object - URI:rsync://r.magellan.ipxo.com/repo/ddd1818b-9fbf-440c-aaec-44a4d1590f87-0/0/38392e3138352e302e302f32322d3234203d3e20383334.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 89.185.0.0/22 Signature Algorithm: sha256WithRSAEncryption 17:4b:fb:c2:de:bf:be:af:0d:b1:19:36:71:d4:2b:37:45:b0: 9f:fa:3b:f9:6e:46:54:67:e7:ee:d7:ae:fb:27:5c:c8:f9:b1: 16:77:da:4a:c3:fe:b2:10:78:90:7f:ef:69:fe:f8:1d:e0:a8: 7f:ae:5e:7c:50:2f:1f:1f:70:8c:6a:56:d7:11:e3:97:58:19: 0e:3b:2c:78:a0:db:1d:bf:84:e9:d4:11:25:eb:5a:4b:f6:73: 43:af:f9:1b:e2:c4:e0:21:5f:f9:33:02:ca:42:2d:b4:d5:17: 66:39:bd:5d:33:83:48:e6:25:8e:6b:4e:45:41:6c:0d:0b:46: 78:74:c5:c9:32:33:dd:a1:2f:b0:17:15:6a:fc:79:20:50:e0: 4c:52:e0:2e:b9:ad:52:62:6c:6a:91:88:69:1b:a2:5b:25:76: 79:02:e7:64:a3:60:b3:7c:70:bf:a0:e4:dd:c6:bf:19:9e:36: 85:88:d0:96:69:ec:37:bb:c8:30:82:47:b9:aa:85:3c:bb:30: 04:31:ba:f5:a6:ab:1f:6c:66:ef:d7:df:a1:08:5c:10:1e:9d: 08:d3:0a:01:be:c5:52:5b:39:0a:6f:46:04:9d:65:02:2f:d9: 83:a4:fb:28:a2:cd:2e:e6:e5:46:02:6c:b4:b5:9a:de:23:a6: 08:41:44:b9 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUfRLm198kThREAJFcWFqiWkP3IAgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzk3MkU4NjcxREVEQzQzRkU5MDhCNTQ4NTMxQzk2OUEw NTFDRDM0QzAeFw0yNjAyMjMxNTAxMzNaFw0yNzAyMjIxNTA2MzNaMDMxMTAvBgNV BAMTKDhGMzJDOUZFQTIzMzhCREFGMjdERjMzMTk3N0IxNThFOTRFMjBGMDEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDEqt+dBtUY/3TvAwP8ZyIfidYq gh9zX5j562oRILfB/Y9azRXzdXvLGXW+EtbUxpvQaFc3OVmsNj7EbBihC5fnf6wF NZWunENnTZ+SR8GJNiBSzLTVUg/XmGTb8N5UCdGxZPwbPL/8aDOrZsWS45AQckIY RpdYNOgo4qUkbxGE1fleCESzQIpEtTEXkRKYV9U7N2FHh7scnU/os4/4tRSB+Ddg uUKl+xFOwTO7qWN8ULlZTUm15N3jg4I0thm/bNbqLoeEqKcud4KmqRNzt6dH5EaC K3SrSx7Sto2GtwHM76Bh6dgHzv6w4p3YBtKZD5Av+7vLxv1+CEizUGR0ZehTAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUjzLJ/qIzi9ryffMxl3sVjpTiDwEwHwYDVR0j BBgwFoAUyXLoZx3txD/pCLVIUxyWmgUc00wwDgYDVR0PAQH/BAQDAgeAMIGIBgNV HR8EgYAwfjB8oHqgeIZ2cnN5bmM6Ly9yLm1hZ2VsbGFuLmlweG8uY29tL3JlcG8v ZGRkMTgxOGItOWZiZi00NDBjLWFhZWMtNDRhNGQxNTkwZjg3LTAvMC9DOTcyRTg2 NzFERURDNDNGRTkwOEI1NDg1MzFDOTY5QTA1MUNEMzRDLmNybDCBngYIKwYBBQUH AQEEgZEwgY4wgYsGCCsGAQUFBzAChn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5y aXBlLm5ldC9yZXBvc2l0b3J5LzYxNzA4YTZiLTZjM2EtNDBhMC1hMzAyLTU5NWVj YzE3ODQ4Yy8yL0M5NzJFODY3MURFREM0M0ZFOTA4QjU0ODUzMUM5NjlBMDUxQ0Qz NEMuY2VyMIGbBggrBgEFBQcBCwSBjjCBizCBiAYIKwYBBQUHMAuGfHJzeW5jOi8v ci5tYWdlbGxhbi5pcHhvLmNvbS9yZXBvL2RkZDE4MThiLTlmYmYtNDQwYy1hYWVj LTQ0YTRkMTU5MGY4Ny0wLzAvMzgzOTJlMzEzODM1MmUzMDJlMzAyZjMyMzIyZDMy MzQyMDNkM2UyMDM4MzMzNC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAlm5ADANBgkqhkiG9w0BAQsFAAOC AQEAF0v7wt6/vq8NsRk2cdQrN0Wwn/o7+W5GVGfn7teu+ydcyPmxFnfaSsP+shB4 kH/vaf74HeCof65efFAvHx9wjGpW1xHjl1gZDjsseKDbHb+E6dQRJetaS/ZzQ6/5 G+LE4CFf+TMCykIttNUXZjm9XTODSOYljmtORUFsDQtGeHTFyTIz3aEvsBcVavx5 IFDgTFLgLrmtUmJsapGIaRuiWyV2eQLnZKNgs3xwv6Dk3ca/GZ42hYjQlmnsN7vI MIJHuaqFPLswBDG69aarH2xm79ffoQhcEB6dCNMKAb7FUls5Cm9GBJ1lAi/Zg6T7 KKLNLublRgJstLWa3iOmCEFEuQ== -----END CERTIFICATE-----Generated at Mon Mar 2 02:43:07 2026 by rpki-client