$ rpki-client -vvf r.magellan.ipxo.com/repo/ddd1818b-9fbf-440c-aaec-44a4d1590f87-0/0/38392e3138352e32322e302f32342d3234203d3e20313335343032.roa File: 38392e3138352e32322e302f32342d3234203d3e20313335343032.roa (raw, json) Hash identifier: 0MqduRtWkpyKiPLI/HLEJpeCCqgtouaxgFUqV8rfHFA= Subject key identifier: 4D:BB:D8:7B:1A:0A:2A:08:94:92:E2:83:38:50:56:ED:9E:2A:86:43 Certificate issuer: /CN=C972E8671DEDC43FE908B548531C969A051CD34C Certificate serial: 173B42FB9B91D5CBC7F78A07FD6CB1E7A2264ECF Authority key identifier: C9:72:E8:67:1D:ED:C4:3F:E9:08:B5:48:53:1C:96:9A:05:1C:D3:4C Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/2/C972E8671DEDC43FE908B548531C969A051CD34C.cer Subject info access: rsync://r.magellan.ipxo.com/repo/ddd1818b-9fbf-440c-aaec-44a4d1590f87-0/0/38392e3138352e32322e302f32342d3234203d3e20313335343032.roa Signing time: Mon 23 Feb 2026 15:06:34 +0000 ROA not before: Mon 23 Feb 2026 15:01:34 +0000 ROA not after: Mon 22 Feb 2027 15:06:34 +0000 asID: 135402 IP address blocks: 89.185.22.0/24 maxlen: 24 Validation: OK Signature path: rsync://r.magellan.ipxo.com/repo/ddd1818b-9fbf-440c-aaec-44a4d1590f87-0/0/C972E8671DEDC43FE908B548531C969A051CD34C.crl rsync://r.magellan.ipxo.com/repo/ddd1818b-9fbf-440c-aaec-44a4d1590f87-0/0/C972E8671DEDC43FE908B548531C969A051CD34C.mft rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/2/C972E8671DEDC43FE908B548531C969A051CD34C.cer rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/2/CF0631D33A3C9DC5C45424D55C3E7663838657A3.crl rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/2/CF0631D33A3C9DC5C45424D55C3E7663838657A3.mft rsync://rpki.ripe.net/repository/DEFAULT/zwYx0zo8ncXEVCTVXD52Y4OGV6M.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 02 Mar 2026 08:56:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 17:3b:42:fb:9b:91:d5:cb:c7:f7:8a:07:fd:6c:b1:e7:a2:26:4e:cf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C972E8671DEDC43FE908B548531C969A051CD34C Validity Not Before: Feb 23 15:01:34 2026 GMT Not After : Feb 22 15:06:34 2027 GMT Subject: CN=4DBBD87B1A0A2A089492E283385056ED9E2A8643 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:9d:d3:dc:e8:85:54:49:52:75:e1:e5:e9:18: a0:35:a4:97:fa:1a:42:1d:f1:b9:25:ee:83:e9:a9: 39:bd:aa:5d:a9:d7:e0:28:7a:99:84:ca:5e:d3:db: 0e:e4:93:75:3c:d1:31:73:7a:da:2c:3e:bd:af:87: 9d:8e:a3:b2:be:b5:01:d6:4c:f7:66:2b:dd:52:12: 11:be:72:ad:3d:15:51:97:8d:30:24:5b:6f:41:9b: 87:7a:6e:1d:4e:5c:56:dd:cc:5a:6d:8f:e9:40:82: 40:e6:4d:45:cb:e2:04:e9:9e:49:eb:b7:51:e4:12: 35:13:7f:17:20:d4:b8:e1:1c:a4:04:98:ed:72:72: 5e:b8:98:2f:a2:f4:62:60:65:ac:ae:f4:44:fd:a4: 68:08:19:f9:38:ae:d4:8c:3f:d9:2e:e2:04:8a:5c: 3a:93:ce:08:c4:bf:f6:e6:71:c7:6b:92:cf:71:92: 3e:a7:d7:d2:b4:c5:e4:e1:ed:e0:74:c5:74:2c:de: ec:e1:42:06:76:01:d6:b0:e2:ee:aa:bf:60:53:52: 70:ce:a4:58:5b:e1:9a:f1:71:ee:5e:f9:62:51:aa: c5:47:7c:6e:e0:4d:3a:55:09:25:08:c4:d9:30:b5: 9b:6d:3f:d9:46:e3:a2:cc:c8:7f:9b:d2:af:80:b8: 9a:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:BB:D8:7B:1A:0A:2A:08:94:92:E2:83:38:50:56:ED:9E:2A:86:43 X509v3 Authority Key Identifier: keyid:C9:72:E8:67:1D:ED:C4:3F:E9:08:B5:48:53:1C:96:9A:05:1C:D3:4C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://r.magellan.ipxo.com/repo/ddd1818b-9fbf-440c-aaec-44a4d1590f87-0/0/C972E8671DEDC43FE908B548531C969A051CD34C.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/2/C972E8671DEDC43FE908B548531C969A051CD34C.cer Subject Information Access: Signed Object - URI:rsync://r.magellan.ipxo.com/repo/ddd1818b-9fbf-440c-aaec-44a4d1590f87-0/0/38392e3138352e32322e302f32342d3234203d3e20313335343032.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 89.185.22.0/24 Signature Algorithm: sha256WithRSAEncryption 4f:19:46:7f:3d:53:d8:70:86:d4:c4:80:c3:d5:d5:dc:fa:fb: 07:71:a6:f0:9f:92:f3:11:f3:c6:60:49:98:c8:5d:3a:fe:7a: c4:f4:c1:aa:31:4f:b7:16:f8:61:47:2e:9d:c4:98:83:b8:7c: b6:8a:92:c0:f4:d1:f9:b0:ee:7b:29:fd:52:eb:38:a9:45:b9: ff:e6:80:e4:b8:43:64:db:0d:2b:35:22:d4:c2:c9:71:6f:59: 40:34:57:f4:51:56:3c:c9:6a:a2:8a:46:2b:f0:aa:63:5d:5c: 31:90:0c:3f:b5:bd:6a:57:8b:45:1c:9f:71:d0:b1:8c:8b:41: 87:a8:d3:3b:18:04:b3:af:c6:f6:1c:3e:25:29:67:3c:79:b5: bf:8c:0f:17:b3:a1:94:cf:12:7b:30:e9:f8:a4:cc:cb:fd:63: ee:65:1c:88:ab:1a:a3:b5:af:73:7f:7c:f0:83:bf:11:10:59: 46:15:ff:af:54:8e:a3:6d:32:f0:6e:7a:ed:c8:26:90:4c:41: 2f:b3:3d:39:e1:bd:00:cc:6e:5a:9a:e2:fb:f4:93:38:36:c1: 91:f9:3f:f2:3a:d5:78:03:47:ae:90:fb:cd:af:fa:c6:b9:e5: 69:17:db:9d:f2:8f:35:e5:f1:d1:74:d0:4f:0a:1a:9f:49:f9: a2:26:0c:58 -----BEGIN CERTIFICATE----- MIIFWDCCBECgAwIBAgIUFztC+5uR1cvH94oH/Wyx56ImTs8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzk3MkU4NjcxREVEQzQzRkU5MDhCNTQ4NTMxQzk2OUEw NTFDRDM0QzAeFw0yNjAyMjMxNTAxMzRaFw0yNzAyMjIxNTA2MzRaMDMxMTAvBgNV BAMTKDREQkJEODdCMUEwQTJBMDg5NDkyRTI4MzM4NTA1NkVEOUUyQTg2NDMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCyndPc6IVUSVJ14eXpGKA1pJf6 GkId8bkl7oPpqTm9ql2p1+AoepmEyl7T2w7kk3U80TFzetosPr2vh52Oo7K+tQHW TPdmK91SEhG+cq09FVGXjTAkW29Bm4d6bh1OXFbdzFptj+lAgkDmTUXL4gTpnknr t1HkEjUTfxcg1LjhHKQEmO1ycl64mC+i9GJgZayu9ET9pGgIGfk4rtSMP9ku4gSK XDqTzgjEv/bmccdrks9xkj6n19K0xeTh7eB0xXQs3uzhQgZ2Adaw4u6qv2BTUnDO pFhb4Zrxce5e+WJRqsVHfG7gTTpVCSUIxNkwtZttP9lG46LMyH+b0q+AuJp/AgMB AAGjggJiMIICXjAdBgNVHQ4EFgQUTbvYexoKKgiUkuKDOFBW7Z4qhkMwHwYDVR0j BBgwFoAUyXLoZx3txD/pCLVIUxyWmgUc00wwDgYDVR0PAQH/BAQDAgeAMIGIBgNV HR8EgYAwfjB8oHqgeIZ2cnN5bmM6Ly9yLm1hZ2VsbGFuLmlweG8uY29tL3JlcG8v ZGRkMTgxOGItOWZiZi00NDBjLWFhZWMtNDRhNGQxNTkwZjg3LTAvMC9DOTcyRTg2 NzFERURDNDNGRTkwOEI1NDg1MzFDOTY5QTA1MUNEMzRDLmNybDCBngYIKwYBBQUH AQEEgZEwgY4wgYsGCCsGAQUFBzAChn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5y aXBlLm5ldC9yZXBvc2l0b3J5LzYxNzA4YTZiLTZjM2EtNDBhMC1hMzAyLTU5NWVj YzE3ODQ4Yy8yL0M5NzJFODY3MURFREM0M0ZFOTA4QjU0ODUzMUM5NjlBMDUxQ0Qz NEMuY2VyMIGkBggrBgEFBQcBCwSBlzCBlDCBkQYIKwYBBQUHMAuGgYRyc3luYzov L3IubWFnZWxsYW4uaXB4by5jb20vcmVwby9kZGQxODE4Yi05ZmJmLTQ0MGMtYWFl Yy00NGE0ZDE1OTBmODctMC8wLzM4MzkyZTMxMzgzNTJlMzIzMjJlMzAyZjMyMzQy ZDMyMzQyMDNkM2UyMDMxMzMzNTM0MzAzMi5yb2EwGAYDVR0gAQH/BA4wDDAKBggr BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAFm5FjANBgkqhkiG 9w0BAQsFAAOCAQEATxlGfz1T2HCG1MSAw9XV3Pr7B3Gm8J+S8xHzxmBJmMhdOv56 xPTBqjFPtxb4YUcuncSYg7h8toqSwPTR+bDueyn9Uus4qUW5/+aA5LhDZNsNKzUi 1MLJcW9ZQDRX9FFWPMlqoopGK/CqY11cMZAMP7W9aleLRRyfcdCxjItBh6jTOxgE s6/G9hw+JSlnPHm1v4wPF7OhlM8SezDp+KTMy/1j7mUciKsao7Wvc3988IO/ERBZ RhX/r1SOo20y8G567cgmkExBL7M9OeG9AMxuWpri+/STODbBkfk/8jrVeANHrpD7 za/6xrnlaRfbnfKPNeXx0XTQTwoan0n5oiYMWA== -----END CERTIFICATE-----Generated at Mon Mar 2 00:02:40 2026 by rpki-client