$ rpki-client -vvf r.magellan.ipxo.com/repo/ddd1818b-9fbf-440c-aaec-44a4d1590f87-0/0/38392e3138352e312e302f32342d3234203d3e203239383032.roa File: 38392e3138352e312e302f32342d3234203d3e203239383032.roa (raw, json) Hash identifier: YUq4lu2p0oDOIbftIed5RYntbmbzYkjtOZAj/FHMBU0= Subject key identifier: 68:26:AE:57:83:AF:5D:A1:58:60:17:27:79:84:88:42:34:FC:84:7A Certificate issuer: /CN=C972E8671DEDC43FE908B548531C969A051CD34C Certificate serial: 74DD76DCEEFC6BA09B360E53AF1100B68B1FA745 Authority key identifier: C9:72:E8:67:1D:ED:C4:3F:E9:08:B5:48:53:1C:96:9A:05:1C:D3:4C Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/2/C972E8671DEDC43FE908B548531C969A051CD34C.cer Subject info access: rsync://r.magellan.ipxo.com/repo/ddd1818b-9fbf-440c-aaec-44a4d1590f87-0/0/38392e3138352e312e302f32342d3234203d3e203239383032.roa Signing time: Mon 23 Feb 2026 15:06:34 +0000 ROA not before: Mon 23 Feb 2026 15:01:34 +0000 ROA not after: Mon 22 Feb 2027 15:06:34 +0000 asID: 29802 IP address blocks: 89.185.1.0/24 maxlen: 24 Validation: OK Signature path: rsync://r.magellan.ipxo.com/repo/ddd1818b-9fbf-440c-aaec-44a4d1590f87-0/0/C972E8671DEDC43FE908B548531C969A051CD34C.crl rsync://r.magellan.ipxo.com/repo/ddd1818b-9fbf-440c-aaec-44a4d1590f87-0/0/C972E8671DEDC43FE908B548531C969A051CD34C.mft rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/2/C972E8671DEDC43FE908B548531C969A051CD34C.cer rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/2/CF0631D33A3C9DC5C45424D55C3E7663838657A3.crl rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/2/CF0631D33A3C9DC5C45424D55C3E7663838657A3.mft rsync://rpki.ripe.net/repository/DEFAULT/zwYx0zo8ncXEVCTVXD52Y4OGV6M.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 02 Mar 2026 08:56:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 74:dd:76:dc:ee:fc:6b:a0:9b:36:0e:53:af:11:00:b6:8b:1f:a7:45 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C972E8671DEDC43FE908B548531C969A051CD34C Validity Not Before: Feb 23 15:01:34 2026 GMT Not After : Feb 22 15:06:34 2027 GMT Subject: CN=6826AE5783AF5DA1586017277984884234FC847A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:b3:af:38:bd:e8:5b:b2:ec:c1:04:10:6e:ad: 2b:3e:46:7f:cf:39:c8:0d:e3:7f:2e:fa:ea:1f:5f: e0:f3:66:45:7f:6a:38:c3:00:cb:36:1e:8f:71:38: 5f:34:5b:7d:69:f0:d9:06:9d:13:44:0b:ac:fb:34: 90:b6:79:81:70:8a:1a:b4:58:59:6c:40:b4:56:1b: 90:6b:9b:71:46:93:e8:33:97:f9:38:db:ba:c6:2e: 53:9c:41:b6:a1:de:c5:c9:6d:5f:18:34:22:55:5b: 46:34:c2:59:cf:a2:99:4b:72:cc:e9:17:22:ed:58: d1:4e:25:0a:38:b4:d8:51:7e:10:28:83:f9:9a:33: 6d:3a:ea:ab:0a:bf:ee:8d:db:d9:08:d7:00:f0:09: 00:9d:e3:7b:59:b4:86:bd:f4:76:5b:fa:82:b4:8f: b3:a9:89:f0:2d:f8:ac:8f:45:bc:27:40:4f:1f:f5: 3b:d8:10:ae:2d:03:d1:ca:ee:91:4d:25:29:20:90: f2:6e:55:bd:4a:c5:9d:2f:5f:6a:6f:a5:17:e6:99: 1c:fb:4b:39:5f:b6:1a:4b:bd:a6:a6:9f:ff:78:bd: 99:70:4f:11:47:bf:26:6e:89:6f:44:b5:95:ad:7e: 3b:13:20:08:3b:0a:2a:97:08:aa:34:5c:82:e6:50: fa:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:26:AE:57:83:AF:5D:A1:58:60:17:27:79:84:88:42:34:FC:84:7A X509v3 Authority Key Identifier: keyid:C9:72:E8:67:1D:ED:C4:3F:E9:08:B5:48:53:1C:96:9A:05:1C:D3:4C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://r.magellan.ipxo.com/repo/ddd1818b-9fbf-440c-aaec-44a4d1590f87-0/0/C972E8671DEDC43FE908B548531C969A051CD34C.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/2/C972E8671DEDC43FE908B548531C969A051CD34C.cer Subject Information Access: Signed Object - URI:rsync://r.magellan.ipxo.com/repo/ddd1818b-9fbf-440c-aaec-44a4d1590f87-0/0/38392e3138352e312e302f32342d3234203d3e203239383032.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 89.185.1.0/24 Signature Algorithm: sha256WithRSAEncryption 27:38:b2:91:11:c5:f1:0b:72:f6:9f:4e:44:43:fc:6a:ae:07: 37:6f:95:3f:bf:ec:9e:91:47:61:49:b9:a5:7d:3a:86:7e:9a: a9:31:22:5a:29:44:fd:f3:d3:2a:0c:52:a0:ba:69:68:29:f3: b1:28:3e:ad:19:0a:3e:f6:5b:c4:ed:49:b0:74:98:a7:8f:5c: 93:20:69:dd:2b:e0:f2:2b:51:27:f6:78:81:3e:ce:b4:67:cc: 81:57:a4:75:39:ca:93:0d:7f:da:60:9f:6b:db:75:87:7c:20: aa:d8:6a:db:89:57:12:f0:72:e1:12:44:41:df:1a:c8:6b:6f: 9f:a5:8d:2c:32:62:6e:94:7c:66:3e:e9:82:8b:e3:7e:52:42: 37:37:63:cd:7c:3e:2f:8d:1b:86:03:aa:7b:39:40:2d:b6:1e: d5:a7:98:c8:77:8b:2d:45:7c:bd:1a:b8:e9:43:66:6c:d4:19: c4:75:0b:f4:22:2f:59:33:6c:11:ef:b8:69:94:28:ea:0c:61: 7a:61:04:51:1e:99:e8:53:05:c9:98:c0:a0:54:5f:46:22:4a: c4:b9:27:18:d7:99:12:15:33:d1:db:1a:f0:1a:53:c3:c1:f8: a1:f8:b1:70:10:c2:5e:1b:7c:ed:91:ae:d5:b1:59:72:64:48: c7:06:d5:33 -----BEGIN CERTIFICATE----- MIIFVDCCBDygAwIBAgIUdN123O78a6CbNg5TrxEAtosfp0UwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzk3MkU4NjcxREVEQzQzRkU5MDhCNTQ4NTMxQzk2OUEw NTFDRDM0QzAeFw0yNjAyMjMxNTAxMzRaFw0yNzAyMjIxNTA2MzRaMDMxMTAvBgNV BAMTKDY4MjZBRTU3ODNBRjVEQTE1ODYwMTcyNzc5ODQ4ODQyMzRGQzg0N0EwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCYs684vehbsuzBBBBurSs+Rn/P OcgN438u+uofX+DzZkV/ajjDAMs2Ho9xOF80W31p8NkGnRNEC6z7NJC2eYFwihq0 WFlsQLRWG5Brm3FGk+gzl/k427rGLlOcQbah3sXJbV8YNCJVW0Y0wlnPoplLcszp FyLtWNFOJQo4tNhRfhAog/maM2066qsKv+6N29kI1wDwCQCd43tZtIa99HZb+oK0 j7OpifAt+KyPRbwnQE8f9TvYEK4tA9HK7pFNJSkgkPJuVb1KxZ0vX2pvpRfmmRz7 SzlfthpLvaamn/94vZlwTxFHvyZuiW9EtZWtfjsTIAg7CiqXCKo0XILmUPrfAgMB AAGjggJeMIICWjAdBgNVHQ4EFgQUaCauV4OvXaFYYBcneYSIQjT8hHowHwYDVR0j BBgwFoAUyXLoZx3txD/pCLVIUxyWmgUc00wwDgYDVR0PAQH/BAQDAgeAMIGIBgNV HR8EgYAwfjB8oHqgeIZ2cnN5bmM6Ly9yLm1hZ2VsbGFuLmlweG8uY29tL3JlcG8v ZGRkMTgxOGItOWZiZi00NDBjLWFhZWMtNDRhNGQxNTkwZjg3LTAvMC9DOTcyRTg2 NzFERURDNDNGRTkwOEI1NDg1MzFDOTY5QTA1MUNEMzRDLmNybDCBngYIKwYBBQUH AQEEgZEwgY4wgYsGCCsGAQUFBzAChn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5y aXBlLm5ldC9yZXBvc2l0b3J5LzYxNzA4YTZiLTZjM2EtNDBhMC1hMzAyLTU5NWVj YzE3ODQ4Yy8yL0M5NzJFODY3MURFREM0M0ZFOTA4QjU0ODUzMUM5NjlBMDUxQ0Qz NEMuY2VyMIGgBggrBgEFBQcBCwSBkzCBkDCBjQYIKwYBBQUHMAuGgYByc3luYzov L3IubWFnZWxsYW4uaXB4by5jb20vcmVwby9kZGQxODE4Yi05ZmJmLTQ0MGMtYWFl Yy00NGE0ZDE1OTBmODctMC8wLzM4MzkyZTMxMzgzNTJlMzEyZTMwMmYzMjM0MmQz MjM0MjAzZDNlMjAzMjM5MzgzMDMyLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAWbkBMA0GCSqGSIb3DQEB CwUAA4IBAQAnOLKREcXxC3L2n05EQ/xqrgc3b5U/v+yekUdhSbmlfTqGfpqpMSJa KUT989MqDFKgumloKfOxKD6tGQo+9lvE7UmwdJinj1yTIGndK+DyK1En9niBPs60 Z8yBV6R1OcqTDX/aYJ9r23WHfCCq2GrbiVcS8HLhEkRB3xrIa2+fpY0sMmJulHxm PumCi+N+UkI3N2PNfD4vjRuGA6p7OUAtth7Vp5jId4stRXy9GrjpQ2Zs1BnEdQv0 Ii9ZM2wR77hplCjqDGF6YQRRHpnoUwXJmMCgVF9GIkrEuScY15kSFTPR2xrwGlPD wfih+LFwEMJeG3ztka7VsVlyZEjHBtUz -----END CERTIFICATE-----Generated at Mon Mar 2 00:58:37 2026 by rpki-client