$ rpki-client -vvf r.magellan.ipxo.com/repo/ddd1818b-9fbf-440c-aaec-44a4d1590f87-0/0/38392e3138352e32352e302f32342d3234203d3e20323032363632.roa File: 38392e3138352e32352e302f32342d3234203d3e20323032363632.roa (raw, json) Hash identifier: WuIpbnWQjSZfUc0iun4D/+rmqrAaotsZPUkHgjlj5HY= Subject key identifier: 2A:04:9C:CF:95:F4:03:70:F8:D4:DA:33:B5:F4:90:07:83:11:FD:0E Certificate issuer: /CN=C972E8671DEDC43FE908B548531C969A051CD34C Certificate serial: 1E7B1636B4163B8FD72E6053B1D9B4315766C665 Authority key identifier: C9:72:E8:67:1D:ED:C4:3F:E9:08:B5:48:53:1C:96:9A:05:1C:D3:4C Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/2/C972E8671DEDC43FE908B548531C969A051CD34C.cer Subject info access: rsync://r.magellan.ipxo.com/repo/ddd1818b-9fbf-440c-aaec-44a4d1590f87-0/0/38392e3138352e32352e302f32342d3234203d3e20323032363632.roa Signing time: Mon 23 Feb 2026 15:06:35 +0000 ROA not before: Mon 23 Feb 2026 15:01:35 +0000 ROA not after: Mon 22 Feb 2027 15:06:35 +0000 asID: 202662 IP address blocks: 89.185.25.0/24 maxlen: 24 Validation: OK Signature path: rsync://r.magellan.ipxo.com/repo/ddd1818b-9fbf-440c-aaec-44a4d1590f87-0/0/C972E8671DEDC43FE908B548531C969A051CD34C.crl rsync://r.magellan.ipxo.com/repo/ddd1818b-9fbf-440c-aaec-44a4d1590f87-0/0/C972E8671DEDC43FE908B548531C969A051CD34C.mft rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/2/C972E8671DEDC43FE908B548531C969A051CD34C.cer rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/2/CF0631D33A3C9DC5C45424D55C3E7663838657A3.crl rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/2/CF0631D33A3C9DC5C45424D55C3E7663838657A3.mft rsync://rpki.ripe.net/repository/DEFAULT/zwYx0zo8ncXEVCTVXD52Y4OGV6M.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 02 Mar 2026 08:56:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1e:7b:16:36:b4:16:3b:8f:d7:2e:60:53:b1:d9:b4:31:57:66:c6:65 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C972E8671DEDC43FE908B548531C969A051CD34C Validity Not Before: Feb 23 15:01:35 2026 GMT Not After : Feb 22 15:06:35 2027 GMT Subject: CN=2A049CCF95F40370F8D4DA33B5F490078311FD0E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:ba:50:bd:d9:db:80:5d:4e:96:7c:00:ff:43: fb:a9:eb:13:33:50:38:a7:41:f3:24:35:10:cf:cc: e3:5c:68:5a:46:0c:b4:3a:1b:d3:04:ff:55:5c:3b: 62:d7:17:e1:5f:22:88:1c:d5:66:7c:35:0a:d7:50: 33:0f:27:0e:49:5d:25:ed:6a:11:7d:1a:1d:e6:6a: 46:39:b7:9d:21:24:13:77:a3:b3:d9:6f:c9:70:46: 41:38:be:fe:57:59:dd:63:9b:c5:c1:a4:58:ec:4f: f9:50:bc:0d:79:c3:83:96:e2:79:d2:54:10:5f:3a: 03:ef:57:66:47:93:14:e5:5a:74:ba:eb:08:70:15: ac:f6:4c:81:ef:2e:02:2e:fd:49:67:57:25:59:ff: d1:aa:5c:9c:2f:28:87:c5:1c:de:cc:56:f7:cb:91: 8b:ab:d5:93:7f:26:68:fe:59:5c:1e:0b:6e:70:8e: 04:e4:b3:47:6c:c4:c0:f6:1c:af:28:df:a8:55:0e: 39:5d:c4:2d:14:a9:f6:aa:45:29:4b:0f:5d:56:4b: 5d:e4:b1:87:81:69:a0:a0:74:fd:7d:c9:41:1f:5f: bb:2f:f2:d5:7d:82:7b:54:74:e3:eb:21:c4:23:e8: a2:e4:5f:e6:b0:36:5d:cc:d3:0f:b5:f3:b9:16:1f: e7:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:04:9C:CF:95:F4:03:70:F8:D4:DA:33:B5:F4:90:07:83:11:FD:0E X509v3 Authority Key Identifier: keyid:C9:72:E8:67:1D:ED:C4:3F:E9:08:B5:48:53:1C:96:9A:05:1C:D3:4C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://r.magellan.ipxo.com/repo/ddd1818b-9fbf-440c-aaec-44a4d1590f87-0/0/C972E8671DEDC43FE908B548531C969A051CD34C.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/2/C972E8671DEDC43FE908B548531C969A051CD34C.cer Subject Information Access: Signed Object - URI:rsync://r.magellan.ipxo.com/repo/ddd1818b-9fbf-440c-aaec-44a4d1590f87-0/0/38392e3138352e32352e302f32342d3234203d3e20323032363632.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 89.185.25.0/24 Signature Algorithm: sha256WithRSAEncryption ad:2b:36:e6:c9:e9:41:32:38:42:cb:9d:d5:1d:5e:cb:a8:15: a2:91:6c:f6:54:1d:7c:3e:50:af:ff:d4:88:41:da:52:50:74: 88:38:51:b1:bf:42:a7:98:2d:f9:85:56:bf:75:6b:82:87:dd: c7:92:c2:63:60:21:85:8c:da:46:61:6a:2f:eb:af:93:53:c8: 04:c6:a7:2d:24:e1:fd:c1:14:46:d4:24:35:79:5e:56:8f:56: d0:0a:2b:72:a2:b6:3e:3e:29:e7:83:39:a1:af:8d:f9:f0:1e: 2a:8b:a1:e3:36:28:3e:c2:03:9c:73:30:3b:c4:09:86:04:da: 33:29:08:05:1a:2c:53:0c:9d:99:b9:c5:e7:61:c7:11:eb:f8: b3:a8:17:e8:b8:25:09:dc:1b:69:34:95:6d:cd:a7:23:ce:ce: 03:00:41:fc:20:c7:3e:ef:ae:7b:7d:f6:ea:cf:30:89:b1:26: 1e:33:a5:74:9f:30:cd:cc:e7:db:80:90:d6:17:e3:d5:d7:09: 1e:94:62:54:3f:09:7f:30:3f:69:00:4f:0b:2a:3a:5e:f3:45: cc:5d:66:c5:a9:41:e6:b5:d6:c5:75:cc:f9:3a:ef:b3:ca:02: f6:07:ff:c0:f9:99:37:b9:38:55:3d:49:90:d7:74:5c:84:be: aa:41:d0:29 -----BEGIN CERTIFICATE----- MIIFWDCCBECgAwIBAgIUHnsWNrQWO4/XLmBTsdm0MVdmxmUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzk3MkU4NjcxREVEQzQzRkU5MDhCNTQ4NTMxQzk2OUEw NTFDRDM0QzAeFw0yNjAyMjMxNTAxMzVaFw0yNzAyMjIxNTA2MzVaMDMxMTAvBgNV BAMTKDJBMDQ5Q0NGOTVGNDAzNzBGOEQ0REEzM0I1RjQ5MDA3ODMxMUZEMEUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCmulC92duAXU6WfAD/Q/up6xMz UDinQfMkNRDPzONcaFpGDLQ6G9ME/1VcO2LXF+FfIogc1WZ8NQrXUDMPJw5JXSXt ahF9Gh3makY5t50hJBN3o7PZb8lwRkE4vv5XWd1jm8XBpFjsT/lQvA15w4OW4nnS VBBfOgPvV2ZHkxTlWnS66whwFaz2TIHvLgIu/UlnVyVZ/9GqXJwvKIfFHN7MVvfL kYur1ZN/Jmj+WVweC25wjgTks0dsxMD2HK8o36hVDjldxC0UqfaqRSlLD11WS13k sYeBaaCgdP19yUEfX7sv8tV9gntUdOPrIcQj6KLkX+awNl3M0w+187kWH+fLAgMB AAGjggJiMIICXjAdBgNVHQ4EFgQUKgScz5X0A3D41NoztfSQB4MR/Q4wHwYDVR0j BBgwFoAUyXLoZx3txD/pCLVIUxyWmgUc00wwDgYDVR0PAQH/BAQDAgeAMIGIBgNV HR8EgYAwfjB8oHqgeIZ2cnN5bmM6Ly9yLm1hZ2VsbGFuLmlweG8uY29tL3JlcG8v ZGRkMTgxOGItOWZiZi00NDBjLWFhZWMtNDRhNGQxNTkwZjg3LTAvMC9DOTcyRTg2 NzFERURDNDNGRTkwOEI1NDg1MzFDOTY5QTA1MUNEMzRDLmNybDCBngYIKwYBBQUH AQEEgZEwgY4wgYsGCCsGAQUFBzAChn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5y aXBlLm5ldC9yZXBvc2l0b3J5LzYxNzA4YTZiLTZjM2EtNDBhMC1hMzAyLTU5NWVj YzE3ODQ4Yy8yL0M5NzJFODY3MURFREM0M0ZFOTA4QjU0ODUzMUM5NjlBMDUxQ0Qz NEMuY2VyMIGkBggrBgEFBQcBCwSBlzCBlDCBkQYIKwYBBQUHMAuGgYRyc3luYzov L3IubWFnZWxsYW4uaXB4by5jb20vcmVwby9kZGQxODE4Yi05ZmJmLTQ0MGMtYWFl Yy00NGE0ZDE1OTBmODctMC8wLzM4MzkyZTMxMzgzNTJlMzIzNTJlMzAyZjMyMzQy ZDMyMzQyMDNkM2UyMDMyMzAzMjM2MzYzMi5yb2EwGAYDVR0gAQH/BA4wDDAKBggr BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAFm5GTANBgkqhkiG 9w0BAQsFAAOCAQEArSs25snpQTI4Qsud1R1ey6gVopFs9lQdfD5Qr//UiEHaUlB0 iDhRsb9Cp5gt+YVWv3Vrgofdx5LCY2AhhYzaRmFqL+uvk1PIBManLSTh/cEURtQk NXleVo9W0AorcqK2Pj4p54M5oa+N+fAeKouh4zYoPsIDnHMwO8QJhgTaMykIBRos UwydmbnF52HHEev4s6gX6LglCdwbaTSVbc2nI87OAwBB/CDHPu+ue3326s8wibEm HjOldJ8wzczn24CQ1hfj1dcJHpRiVD8JfzA/aQBPCyo6XvNFzF1mxalB5rXWxXXM +Trvs8oC9gf/wPmZN7k4VT1JkNd0XIS+qkHQKQ== -----END CERTIFICATE-----Generated at Mon Mar 2 01:29:26 2026 by rpki-client