$ rpki-client -vvf r.magellan.ipxo.com/repo/ddd1818b-9fbf-440c-aaec-44a4d1590f87-0/0/38392e3138352e302e302f32342d3234203d3e20333938343635.roa File: 38392e3138352e302e302f32342d3234203d3e20333938343635.roa (raw, json) Hash identifier: 1sRU0ich592F6CIx7ykXRGqmsWN8fL64HcHkFGpAMYU= Subject key identifier: 62:46:DA:FD:A1:91:01:76:7B:8A:D8:2F:A8:BF:88:2F:A0:63:54:6E Certificate issuer: /CN=C972E8671DEDC43FE908B548531C969A051CD34C Certificate serial: 34AE1EBBC10005176A0AC01BAE8A28E35977EA44 Authority key identifier: C9:72:E8:67:1D:ED:C4:3F:E9:08:B5:48:53:1C:96:9A:05:1C:D3:4C Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/2/C972E8671DEDC43FE908B548531C969A051CD34C.cer Subject info access: rsync://r.magellan.ipxo.com/repo/ddd1818b-9fbf-440c-aaec-44a4d1590f87-0/0/38392e3138352e302e302f32342d3234203d3e20333938343635.roa Signing time: Mon 23 Feb 2026 15:06:33 +0000 ROA not before: Mon 23 Feb 2026 15:01:33 +0000 ROA not after: Mon 22 Feb 2027 15:06:33 +0000 asID: 398465 IP address blocks: 89.185.0.0/24 maxlen: 24 Validation: OK Signature path: rsync://r.magellan.ipxo.com/repo/ddd1818b-9fbf-440c-aaec-44a4d1590f87-0/0/C972E8671DEDC43FE908B548531C969A051CD34C.crl rsync://r.magellan.ipxo.com/repo/ddd1818b-9fbf-440c-aaec-44a4d1590f87-0/0/C972E8671DEDC43FE908B548531C969A051CD34C.mft rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/2/C972E8671DEDC43FE908B548531C969A051CD34C.cer rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/2/CF0631D33A3C9DC5C45424D55C3E7663838657A3.crl rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/2/CF0631D33A3C9DC5C45424D55C3E7663838657A3.mft rsync://rpki.ripe.net/repository/DEFAULT/zwYx0zo8ncXEVCTVXD52Y4OGV6M.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 02 Mar 2026 21:40:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 34:ae:1e:bb:c1:00:05:17:6a:0a:c0:1b:ae:8a:28:e3:59:77:ea:44 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C972E8671DEDC43FE908B548531C969A051CD34C Validity Not Before: Feb 23 15:01:33 2026 GMT Not After : Feb 22 15:06:33 2027 GMT Subject: CN=6246DAFDA19101767B8AD82FA8BF882FA063546E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:78:6a:31:cc:42:af:aa:3d:ca:6c:cd:5d:0b: 3d:28:cd:b7:24:16:63:52:17:5a:88:2a:85:45:b9: 95:98:e2:b9:8b:04:92:18:63:df:57:7a:ed:37:4c: 4c:53:1a:62:d1:e0:45:78:01:42:fa:05:40:94:cd: 03:3f:33:3d:5b:d2:d4:8b:71:a3:c3:33:a9:ef:0a: d2:82:c5:bc:71:83:58:e6:03:d1:bd:c2:52:90:84: ce:8d:b2:96:bc:44:8d:63:6f:23:a1:8b:0f:48:17: e2:08:df:ef:99:d0:1b:d1:f4:ca:37:4b:0c:69:94: fd:01:03:3f:22:b3:77:78:81:1e:fc:82:8c:aa:68: 95:75:41:f9:2d:98:eb:aa:18:6e:21:b4:1e:bd:83: 58:ab:5a:c7:7a:83:59:35:21:56:8d:0b:75:a9:98: 98:2a:86:e0:ae:f9:8d:b6:90:9e:16:1d:2a:bc:92: 57:9f:d1:92:6b:ae:f1:56:2f:3d:b4:41:86:e7:49: 17:b6:4f:90:27:66:57:90:51:c1:f7:35:0d:6b:96: 91:1a:fa:5e:aa:39:00:da:2e:eb:e8:3c:69:f3:dd: a9:e4:63:ba:d3:3b:fb:82:cd:04:77:68:ef:07:44: 86:31:f7:b3:a5:d5:b0:f5:49:01:49:5d:45:d9:fc: 0f:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:46:DA:FD:A1:91:01:76:7B:8A:D8:2F:A8:BF:88:2F:A0:63:54:6E X509v3 Authority Key Identifier: keyid:C9:72:E8:67:1D:ED:C4:3F:E9:08:B5:48:53:1C:96:9A:05:1C:D3:4C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://r.magellan.ipxo.com/repo/ddd1818b-9fbf-440c-aaec-44a4d1590f87-0/0/C972E8671DEDC43FE908B548531C969A051CD34C.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/2/C972E8671DEDC43FE908B548531C969A051CD34C.cer Subject Information Access: Signed Object - URI:rsync://r.magellan.ipxo.com/repo/ddd1818b-9fbf-440c-aaec-44a4d1590f87-0/0/38392e3138352e302e302f32342d3234203d3e20333938343635.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 89.185.0.0/24 Signature Algorithm: sha256WithRSAEncryption 47:04:f0:5d:f7:b3:eb:e1:04:f3:14:93:17:43:c3:29:91:c8: 40:eb:f3:bc:5b:ac:45:f5:37:bd:88:34:87:7b:43:66:c0:74: 4c:ff:fc:f6:9b:a6:39:ec:82:f5:a9:66:18:63:5d:e4:ce:f6: c4:2a:bd:f0:ab:75:ab:b4:59:e3:8e:46:4c:4f:17:35:66:ab: 51:ba:fc:fa:73:88:72:98:9a:ea:2e:b7:ec:bb:bc:60:3d:ef: c7:d0:4a:50:22:0a:aa:52:6b:75:57:34:6a:56:28:52:c6:e3: b6:91:c3:e0:00:ef:91:dc:7b:c6:f6:2d:56:c1:0b:67:6a:36: f9:08:fe:b9:68:1b:ad:f1:4a:93:e1:1a:66:af:04:3e:ce:ed: 43:6f:4e:c3:28:e3:eb:98:dd:43:61:c4:a8:88:a3:bf:e8:42: 9b:04:5e:3d:16:2c:2a:4b:ce:59:f7:f3:75:63:42:87:f8:21: 43:01:03:f0:d7:55:69:95:b5:57:8b:b9:14:96:6a:97:01:d2: a6:78:0e:90:dc:39:8a:40:ff:c0:76:1d:70:65:66:37:b2:2e: 19:8f:8b:b0:2d:14:0e:55:75:d4:60:e5:f3:34:24:6d:43:ef: ae:e1:1b:30:a5:08:be:23:6c:9a:ec:e4:c1:60:76:f4:96:90: 33:c7:97:cf -----BEGIN CERTIFICATE----- MIIFVjCCBD6gAwIBAgIUNK4eu8EABRdqCsAbrooo41l36kQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzk3MkU4NjcxREVEQzQzRkU5MDhCNTQ4NTMxQzk2OUEw NTFDRDM0QzAeFw0yNjAyMjMxNTAxMzNaFw0yNzAyMjIxNTA2MzNaMDMxMTAvBgNV BAMTKDYyNDZEQUZEQTE5MTAxNzY3QjhBRDgyRkE4QkY4ODJGQTA2MzU0NkUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDDeGoxzEKvqj3KbM1dCz0ozbck FmNSF1qIKoVFuZWY4rmLBJIYY99Xeu03TExTGmLR4EV4AUL6BUCUzQM/Mz1b0tSL caPDM6nvCtKCxbxxg1jmA9G9wlKQhM6Nspa8RI1jbyOhiw9IF+II3++Z0BvR9Mo3 SwxplP0BAz8is3d4gR78goyqaJV1QfktmOuqGG4htB69g1irWsd6g1k1IVaNC3Wp mJgqhuCu+Y22kJ4WHSq8klef0ZJrrvFWLz20QYbnSRe2T5AnZleQUcH3NQ1rlpEa +l6qOQDaLuvoPGnz3ankY7rTO/uCzQR3aO8HRIYx97Ol1bD1SQFJXUXZ/A95AgMB AAGjggJgMIICXDAdBgNVHQ4EFgQUYkba/aGRAXZ7itgvqL+IL6BjVG4wHwYDVR0j BBgwFoAUyXLoZx3txD/pCLVIUxyWmgUc00wwDgYDVR0PAQH/BAQDAgeAMIGIBgNV HR8EgYAwfjB8oHqgeIZ2cnN5bmM6Ly9yLm1hZ2VsbGFuLmlweG8uY29tL3JlcG8v ZGRkMTgxOGItOWZiZi00NDBjLWFhZWMtNDRhNGQxNTkwZjg3LTAvMC9DOTcyRTg2 NzFERURDNDNGRTkwOEI1NDg1MzFDOTY5QTA1MUNEMzRDLmNybDCBngYIKwYBBQUH AQEEgZEwgY4wgYsGCCsGAQUFBzAChn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5y aXBlLm5ldC9yZXBvc2l0b3J5LzYxNzA4YTZiLTZjM2EtNDBhMC1hMzAyLTU5NWVj YzE3ODQ4Yy8yL0M5NzJFODY3MURFREM0M0ZFOTA4QjU0ODUzMUM5NjlBMDUxQ0Qz NEMuY2VyMIGiBggrBgEFBQcBCwSBlTCBkjCBjwYIKwYBBQUHMAuGgYJyc3luYzov L3IubWFnZWxsYW4uaXB4by5jb20vcmVwby9kZGQxODE4Yi05ZmJmLTQ0MGMtYWFl Yy00NGE0ZDE1OTBmODctMC8wLzM4MzkyZTMxMzgzNTJlMzAyZTMwMmYzMjM0MmQz MjM0MjAzZDNlMjAzMzM5MzgzNDM2MzUucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYB BQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABZuQAwDQYJKoZIhvcN AQELBQADggEBAEcE8F33s+vhBPMUkxdDwymRyEDr87xbrEX1N72INId7Q2bAdEz/ /PabpjnsgvWpZhhjXeTO9sQqvfCrdau0WeOORkxPFzVmq1G6/PpziHKYmuout+y7 vGA978fQSlAiCqpSa3VXNGpWKFLG47aRw+AA75Hce8b2LVbBC2dqNvkI/rloG63x SpPhGmavBD7O7UNvTsMo4+uY3UNhxKiIo7/oQpsEXj0WLCpLzln383VjQof4IUMB A/DXVWmVtVeLuRSWapcB0qZ4DpDcOYpA/8B2HXBlZjeyLhmPi7AtFA5VddRg5fM0 JG1D767hGzClCL4jbJrs5MFgdvSWkDPHl88= -----END CERTIFICATE-----Generated at Mon Mar 2 11:28:32 2026 by rpki-client