$ rpki-client -vvf r.magellan.ipxo.com/repo/ddd1818b-9fbf-440c-aaec-44a4d1590f87-0/0/38392e3138352e32332e302f32342d3234203d3e20323132363039.roa File: 38392e3138352e32332e302f32342d3234203d3e20323132363039.roa (raw, json) Hash identifier: ld0aQiBH2nuiR6/ykDJWDEg2fxoyAzPQdbxkRGgMFIw= Subject key identifier: 94:7E:2F:A9:C9:CA:87:C0:73:C8:EC:04:25:73:92:D9:58:B3:DC:68 Certificate issuer: /CN=C972E8671DEDC43FE908B548531C969A051CD34C Certificate serial: 0763743088EC5BDD434272702410670C5BCFB6CA Authority key identifier: C9:72:E8:67:1D:ED:C4:3F:E9:08:B5:48:53:1C:96:9A:05:1C:D3:4C Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/2/C972E8671DEDC43FE908B548531C969A051CD34C.cer Subject info access: rsync://r.magellan.ipxo.com/repo/ddd1818b-9fbf-440c-aaec-44a4d1590f87-0/0/38392e3138352e32332e302f32342d3234203d3e20323132363039.roa Signing time: Mon 23 Feb 2026 15:06:34 +0000 ROA not before: Mon 23 Feb 2026 15:01:34 +0000 ROA not after: Mon 22 Feb 2027 15:06:34 +0000 asID: 212609 IP address blocks: 89.185.23.0/24 maxlen: 24 Validation: OK Signature path: rsync://r.magellan.ipxo.com/repo/ddd1818b-9fbf-440c-aaec-44a4d1590f87-0/0/C972E8671DEDC43FE908B548531C969A051CD34C.crl rsync://r.magellan.ipxo.com/repo/ddd1818b-9fbf-440c-aaec-44a4d1590f87-0/0/C972E8671DEDC43FE908B548531C969A051CD34C.mft rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/2/C972E8671DEDC43FE908B548531C969A051CD34C.cer rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/2/CF0631D33A3C9DC5C45424D55C3E7663838657A3.crl rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/2/CF0631D33A3C9DC5C45424D55C3E7663838657A3.mft rsync://rpki.ripe.net/repository/DEFAULT/zwYx0zo8ncXEVCTVXD52Y4OGV6M.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 02 Mar 2026 08:56:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 07:63:74:30:88:ec:5b:dd:43:42:72:70:24:10:67:0c:5b:cf:b6:ca Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C972E8671DEDC43FE908B548531C969A051CD34C Validity Not Before: Feb 23 15:01:34 2026 GMT Not After : Feb 22 15:06:34 2027 GMT Subject: CN=947E2FA9C9CA87C073C8EC04257392D958B3DC68 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:df:d0:ef:9d:a1:09:e0:6b:96:48:50:8a:c5: ec:5d:7d:00:08:a8:ad:00:43:f9:07:4a:eb:89:9f: 53:e2:6f:83:8f:42:32:d7:d1:dc:33:ca:3d:57:53: 18:f6:2c:37:78:ba:88:97:f7:1f:73:eb:f3:cd:bc: 21:ec:ed:44:30:d3:33:18:88:9c:97:8a:45:9c:36: 75:96:a9:32:f9:d6:f9:ed:0b:00:fd:7d:a1:fa:fb: 4d:11:04:5e:77:a6:86:36:06:85:27:84:9e:c7:cf: 84:06:72:88:1d:08:c7:e1:2a:14:21:55:54:35:ab: ac:d5:e8:39:35:53:fa:71:d7:ef:50:e5:d8:3a:e7: 77:fb:cb:9a:54:19:52:97:97:96:a0:7a:d3:d4:e0: fb:85:6c:50:94:90:90:97:ad:69:28:65:85:69:72: d1:6d:08:9b:ab:23:2c:96:55:36:49:35:28:46:a5: 73:11:1c:96:a5:2a:59:e9:13:c7:82:c6:74:69:8b: ae:f9:cd:c2:e9:02:f1:db:2c:28:81:3f:43:15:74: ad:db:6e:c6:16:0b:18:17:0d:16:52:8a:a0:35:1a: a9:2e:45:58:37:08:a7:3d:fe:3b:5f:ae:7d:60:75: 95:3f:66:3a:cb:70:34:5a:07:71:93:dd:ca:e9:a0: 03:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:7E:2F:A9:C9:CA:87:C0:73:C8:EC:04:25:73:92:D9:58:B3:DC:68 X509v3 Authority Key Identifier: keyid:C9:72:E8:67:1D:ED:C4:3F:E9:08:B5:48:53:1C:96:9A:05:1C:D3:4C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://r.magellan.ipxo.com/repo/ddd1818b-9fbf-440c-aaec-44a4d1590f87-0/0/C972E8671DEDC43FE908B548531C969A051CD34C.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/2/C972E8671DEDC43FE908B548531C969A051CD34C.cer Subject Information Access: Signed Object - URI:rsync://r.magellan.ipxo.com/repo/ddd1818b-9fbf-440c-aaec-44a4d1590f87-0/0/38392e3138352e32332e302f32342d3234203d3e20323132363039.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 89.185.23.0/24 Signature Algorithm: sha256WithRSAEncryption 1d:2a:54:32:10:d3:ee:f4:eb:3b:b4:6a:03:f2:04:c9:a9:b3: 0c:46:df:79:46:db:0f:3b:b1:8c:05:a3:e1:2f:f2:a1:4e:98: 69:5d:ba:5c:89:a9:c2:18:90:99:d9:f1:62:28:98:a1:1d:c4: b4:78:d8:72:cb:0b:bd:99:ad:df:09:3d:76:80:30:5b:4f:49: 35:31:e5:64:57:82:36:2b:31:a8:16:3d:4d:95:19:43:bb:97: 2c:4f:74:74:d4:71:5c:7b:50:f2:55:60:45:0f:d9:2e:55:b6: 55:0c:50:e7:f0:f9:31:32:c2:9d:d0:cd:ec:f1:48:eb:dd:ba: e0:d5:ea:78:b6:22:db:11:40:e8:39:c2:57:16:b9:5b:8a:c4: 2b:90:a2:58:ec:18:2f:43:08:bb:2c:63:32:2d:04:fc:fe:66: 61:2d:a8:cc:9c:86:8b:57:a1:40:13:a1:c9:b8:ed:2d:f3:c1: 77:65:a6:40:a4:83:8a:6e:64:7e:8b:9a:e6:a9:64:a1:a6:06: 3b:68:7f:a4:8a:eb:a0:b9:93:72:f1:7b:44:55:ad:ca:99:1d: 8a:20:d4:3e:8f:10:06:dd:40:14:cd:b8:75:7e:ff:78:d1:01: 07:e4:1d:ab:0a:89:05:22:15:ff:a6:8b:87:53:bb:10:02:88: af:a2:14:a9 -----BEGIN CERTIFICATE----- MIIFWDCCBECgAwIBAgIUB2N0MIjsW91DQnJwJBBnDFvPtsowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzk3MkU4NjcxREVEQzQzRkU5MDhCNTQ4NTMxQzk2OUEw NTFDRDM0QzAeFw0yNjAyMjMxNTAxMzRaFw0yNzAyMjIxNTA2MzRaMDMxMTAvBgNV BAMTKDk0N0UyRkE5QzlDQTg3QzA3M0M4RUMwNDI1NzM5MkQ5NThCM0RDNjgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC639DvnaEJ4GuWSFCKxexdfQAI qK0AQ/kHSuuJn1Pib4OPQjLX0dwzyj1XUxj2LDd4uoiX9x9z6/PNvCHs7UQw0zMY iJyXikWcNnWWqTL51vntCwD9faH6+00RBF53poY2BoUnhJ7Hz4QGcogdCMfhKhQh VVQ1q6zV6Dk1U/px1+9Q5dg653f7y5pUGVKXl5agetPU4PuFbFCUkJCXrWkoZYVp ctFtCJurIyyWVTZJNShGpXMRHJalKlnpE8eCxnRpi675zcLpAvHbLCiBP0MVdK3b bsYWCxgXDRZSiqA1GqkuRVg3CKc9/jtfrn1gdZU/ZjrLcDRaB3GT3crpoAMhAgMB AAGjggJiMIICXjAdBgNVHQ4EFgQUlH4vqcnKh8BzyOwEJXOS2Viz3GgwHwYDVR0j BBgwFoAUyXLoZx3txD/pCLVIUxyWmgUc00wwDgYDVR0PAQH/BAQDAgeAMIGIBgNV HR8EgYAwfjB8oHqgeIZ2cnN5bmM6Ly9yLm1hZ2VsbGFuLmlweG8uY29tL3JlcG8v ZGRkMTgxOGItOWZiZi00NDBjLWFhZWMtNDRhNGQxNTkwZjg3LTAvMC9DOTcyRTg2 NzFERURDNDNGRTkwOEI1NDg1MzFDOTY5QTA1MUNEMzRDLmNybDCBngYIKwYBBQUH AQEEgZEwgY4wgYsGCCsGAQUFBzAChn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5y aXBlLm5ldC9yZXBvc2l0b3J5LzYxNzA4YTZiLTZjM2EtNDBhMC1hMzAyLTU5NWVj YzE3ODQ4Yy8yL0M5NzJFODY3MURFREM0M0ZFOTA4QjU0ODUzMUM5NjlBMDUxQ0Qz NEMuY2VyMIGkBggrBgEFBQcBCwSBlzCBlDCBkQYIKwYBBQUHMAuGgYRyc3luYzov L3IubWFnZWxsYW4uaXB4by5jb20vcmVwby9kZGQxODE4Yi05ZmJmLTQ0MGMtYWFl Yy00NGE0ZDE1OTBmODctMC8wLzM4MzkyZTMxMzgzNTJlMzIzMzJlMzAyZjMyMzQy ZDMyMzQyMDNkM2UyMDMyMzEzMjM2MzAzOS5yb2EwGAYDVR0gAQH/BA4wDDAKBggr BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAFm5FzANBgkqhkiG 9w0BAQsFAAOCAQEAHSpUMhDT7vTrO7RqA/IEyamzDEbfeUbbDzuxjAWj4S/yoU6Y aV26XImpwhiQmdnxYiiYoR3EtHjYcssLvZmt3wk9doAwW09JNTHlZFeCNisxqBY9 TZUZQ7uXLE90dNRxXHtQ8lVgRQ/ZLlW2VQxQ5/D5MTLCndDN7PFI69264NXqeLYi 2xFA6DnCVxa5W4rEK5CiWOwYL0MIuyxjMi0E/P5mYS2ozJyGi1ehQBOhybjtLfPB d2WmQKSDim5kfoua5qlkoaYGO2h/pIrroLmTcvF7RFWtypkdiiDUPo8QBt1AFM24 dX7/eNEBB+QdqwqJBSIV/6aLh1O7EAKIr6IUqQ== -----END CERTIFICATE-----Generated at Sun Mar 1 22:15:43 2026 by rpki-client