$ rpki-client -vvf r.magellan.ipxo.com/repo/ddd1818b-9fbf-440c-aaec-44a4d1590f87-0/0/38392e3138352e32342e302f32322d3234203d3e20323032363632.roa File: 38392e3138352e32342e302f32322d3234203d3e20323032363632.roa (raw, json) Hash identifier: hFw3J/G29QAT72N9Jur3xtd2WGQp9GdM8QD/z0MyZL0= Subject key identifier: 00:98:58:24:53:FF:D7:6A:A9:A7:69:A5:02:79:0A:90:55:E1:BA:F5 Certificate issuer: /CN=C972E8671DEDC43FE908B548531C969A051CD34C Certificate serial: 6B94AF680C3EC818592FD534E77A878189E30870 Authority key identifier: C9:72:E8:67:1D:ED:C4:3F:E9:08:B5:48:53:1C:96:9A:05:1C:D3:4C Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/2/C972E8671DEDC43FE908B548531C969A051CD34C.cer Subject info access: rsync://r.magellan.ipxo.com/repo/ddd1818b-9fbf-440c-aaec-44a4d1590f87-0/0/38392e3138352e32342e302f32322d3234203d3e20323032363632.roa Signing time: Mon 23 Feb 2026 15:06:35 +0000 ROA not before: Mon 23 Feb 2026 15:01:35 +0000 ROA not after: Mon 22 Feb 2027 15:06:35 +0000 asID: 202662 IP address blocks: 89.185.24.0/22 maxlen: 24 Validation: OK Signature path: rsync://r.magellan.ipxo.com/repo/ddd1818b-9fbf-440c-aaec-44a4d1590f87-0/0/C972E8671DEDC43FE908B548531C969A051CD34C.crl rsync://r.magellan.ipxo.com/repo/ddd1818b-9fbf-440c-aaec-44a4d1590f87-0/0/C972E8671DEDC43FE908B548531C969A051CD34C.mft rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/2/C972E8671DEDC43FE908B548531C969A051CD34C.cer rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/2/CF0631D33A3C9DC5C45424D55C3E7663838657A3.crl rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/2/CF0631D33A3C9DC5C45424D55C3E7663838657A3.mft rsync://rpki.ripe.net/repository/DEFAULT/zwYx0zo8ncXEVCTVXD52Y4OGV6M.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 02 Mar 2026 08:56:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6b:94:af:68:0c:3e:c8:18:59:2f:d5:34:e7:7a:87:81:89:e3:08:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C972E8671DEDC43FE908B548531C969A051CD34C Validity Not Before: Feb 23 15:01:35 2026 GMT Not After : Feb 22 15:06:35 2027 GMT Subject: CN=0098582453FFD76AA9A769A502790A9055E1BAF5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:12:ca:ae:45:47:4a:d3:ef:a5:e1:a0:2e:67: 8a:54:dc:a6:38:94:8a:19:0f:ff:79:df:59:6b:10: b8:dd:fe:e0:e7:c5:ea:6c:dd:55:e3:78:a8:7d:55: ef:ed:9e:2a:ed:aa:40:13:f8:28:c8:d9:07:75:53: 5e:63:93:62:ad:52:09:6c:70:04:09:02:c0:fd:b0: c0:4a:ac:be:63:14:c1:91:8f:e2:dc:88:d6:84:b9: b5:e5:b8:76:70:ca:ee:24:99:1e:20:44:d2:f7:4f: 50:3b:51:85:c8:88:8a:e0:45:ea:fc:9d:54:45:87: 6c:bc:af:83:7a:5f:a8:fd:85:d4:5c:6c:ce:3d:84: b7:c5:af:8b:a2:41:e8:52:88:7d:9b:f6:02:19:c2: 8f:60:e1:5f:86:7b:8e:db:ea:0b:51:25:ca:3d:b7: c1:73:23:eb:21:29:0d:87:4f:38:58:98:b5:7f:55: c8:3c:2b:5f:16:2a:d7:0e:d5:90:49:48:04:41:bc: 0f:60:13:6b:3d:44:c6:25:cb:e5:5a:1f:6f:e7:a3: 0d:d9:f1:23:68:6c:6e:9c:36:23:55:af:ae:c9:97: 78:ce:e2:9c:89:e6:55:ef:9a:ed:81:22:e6:3b:19: 84:20:c5:fc:c1:98:57:d6:dd:29:2c:6c:cd:c7:43: be:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:98:58:24:53:FF:D7:6A:A9:A7:69:A5:02:79:0A:90:55:E1:BA:F5 X509v3 Authority Key Identifier: keyid:C9:72:E8:67:1D:ED:C4:3F:E9:08:B5:48:53:1C:96:9A:05:1C:D3:4C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://r.magellan.ipxo.com/repo/ddd1818b-9fbf-440c-aaec-44a4d1590f87-0/0/C972E8671DEDC43FE908B548531C969A051CD34C.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/2/C972E8671DEDC43FE908B548531C969A051CD34C.cer Subject Information Access: Signed Object - URI:rsync://r.magellan.ipxo.com/repo/ddd1818b-9fbf-440c-aaec-44a4d1590f87-0/0/38392e3138352e32342e302f32322d3234203d3e20323032363632.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 89.185.24.0/22 Signature Algorithm: sha256WithRSAEncryption 34:cc:f9:61:df:ae:c1:84:65:4e:1f:4c:91:06:61:de:db:96: 91:ec:69:ab:4d:00:88:bb:c0:9b:21:0a:8a:2d:97:68:2b:88: a4:79:9d:5f:27:22:5f:87:86:54:16:ee:29:f9:fe:a1:bf:af: c5:46:26:d9:50:06:74:cf:5b:cc:00:f0:26:b5:01:59:f7:7d: 3f:bc:16:07:a6:2b:49:49:a1:0a:70:75:4b:9a:d7:28:5d:be: 39:d0:22:dd:a2:6b:bf:b0:62:e0:9e:32:76:18:f8:f7:78:f8: 26:d7:b2:72:1c:2d:16:85:18:ce:e5:0b:4f:05:48:76:98:24: 97:81:fb:dc:85:5b:4c:6f:96:09:dd:27:99:1f:fa:29:ba:77: dd:95:02:65:d5:70:44:d4:f4:f0:4b:5d:dd:86:08:26:e8:e8: 23:28:0a:f6:69:d9:5a:24:85:de:73:1a:a8:d0:72:d5:d5:a9: 29:48:89:a8:12:30:15:6c:b4:28:5f:7e:02:53:0e:3a:ae:e8: d2:82:60:2a:66:cf:9c:30:5d:e8:89:5c:6a:11:e3:d6:3f:d8: 5a:d3:1f:e4:9c:bf:8f:aa:2f:bd:d6:c2:21:b3:b3:b2:47:a9: f4:8b:0d:23:28:1e:3e:8c:92:f8:c5:62:36:15:5e:ff:92:65: f3:3e:8c:4d -----BEGIN CERTIFICATE----- MIIFWDCCBECgAwIBAgIUa5SvaAw+yBhZL9U053qHgYnjCHAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzk3MkU4NjcxREVEQzQzRkU5MDhCNTQ4NTMxQzk2OUEw NTFDRDM0QzAeFw0yNjAyMjMxNTAxMzVaFw0yNzAyMjIxNTA2MzVaMDMxMTAvBgNV BAMTKDAwOTg1ODI0NTNGRkQ3NkFBOUE3NjlBNTAyNzkwQTkwNTVFMUJBRjUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCeEsquRUdK0++l4aAuZ4pU3KY4 lIoZD/9531lrELjd/uDnxeps3VXjeKh9Ve/tnirtqkAT+CjI2Qd1U15jk2KtUgls cAQJAsD9sMBKrL5jFMGRj+LciNaEubXluHZwyu4kmR4gRNL3T1A7UYXIiIrgRer8 nVRFh2y8r4N6X6j9hdRcbM49hLfFr4uiQehSiH2b9gIZwo9g4V+Ge47b6gtRJco9 t8FzI+shKQ2HTzhYmLV/Vcg8K18WKtcO1ZBJSARBvA9gE2s9RMYly+VaH2/now3Z 8SNobG6cNiNVr67Jl3jO4pyJ5lXvmu2BIuY7GYQgxfzBmFfW3SksbM3HQ77lAgMB AAGjggJiMIICXjAdBgNVHQ4EFgQUAJhYJFP/12qpp2mlAnkKkFXhuvUwHwYDVR0j BBgwFoAUyXLoZx3txD/pCLVIUxyWmgUc00wwDgYDVR0PAQH/BAQDAgeAMIGIBgNV HR8EgYAwfjB8oHqgeIZ2cnN5bmM6Ly9yLm1hZ2VsbGFuLmlweG8uY29tL3JlcG8v ZGRkMTgxOGItOWZiZi00NDBjLWFhZWMtNDRhNGQxNTkwZjg3LTAvMC9DOTcyRTg2 NzFERURDNDNGRTkwOEI1NDg1MzFDOTY5QTA1MUNEMzRDLmNybDCBngYIKwYBBQUH AQEEgZEwgY4wgYsGCCsGAQUFBzAChn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5y aXBlLm5ldC9yZXBvc2l0b3J5LzYxNzA4YTZiLTZjM2EtNDBhMC1hMzAyLTU5NWVj YzE3ODQ4Yy8yL0M5NzJFODY3MURFREM0M0ZFOTA4QjU0ODUzMUM5NjlBMDUxQ0Qz NEMuY2VyMIGkBggrBgEFBQcBCwSBlzCBlDCBkQYIKwYBBQUHMAuGgYRyc3luYzov L3IubWFnZWxsYW4uaXB4by5jb20vcmVwby9kZGQxODE4Yi05ZmJmLTQ0MGMtYWFl Yy00NGE0ZDE1OTBmODctMC8wLzM4MzkyZTMxMzgzNTJlMzIzNDJlMzAyZjMyMzIy ZDMyMzQyMDNkM2UyMDMyMzAzMjM2MzYzMi5yb2EwGAYDVR0gAQH/BA4wDDAKBggr BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAlm5GDANBgkqhkiG 9w0BAQsFAAOCAQEANMz5Yd+uwYRlTh9MkQZh3tuWkexpq00AiLvAmyEKii2XaCuI pHmdXyciX4eGVBbuKfn+ob+vxUYm2VAGdM9bzADwJrUBWfd9P7wWB6YrSUmhCnB1 S5rXKF2+OdAi3aJrv7Bi4J4ydhj493j4JteychwtFoUYzuULTwVIdpgkl4H73IVb TG+WCd0nmR/6Kbp33ZUCZdVwRNT08Etd3YYIJujoIygK9mnZWiSF3nMaqNBy1dWp KUiJqBIwFWy0KF9+AlMOOq7o0oJgKmbPnDBd6IlcahHj1j/YWtMf5Jy/j6ovvdbC IbOzskep9IsNIygePoyS+MViNhVe/5Jl8z6MTQ== -----END CERTIFICATE-----Generated at Mon Mar 2 01:29:04 2026 by rpki-client