$ rpki-client -vvf r.magellan.ipxo.com/repo/ddd1818b-9fbf-440c-aaec-44a4d1590f87-0/0/38392e3138352e32382e302f32322d3234203d3e20343031343334.roa File: 38392e3138352e32382e302f32322d3234203d3e20343031343334.roa (raw, json) Hash identifier: sH6ailgNfxjkwc1xeLPjx6dpTCWF0B+TIscC1YeF6BM= Subject key identifier: D0:E3:38:AF:56:F9:84:19:ED:DC:55:C3:87:42:8C:C5:25:5B:16:24 Certificate issuer: /CN=C972E8671DEDC43FE908B548531C969A051CD34C Certificate serial: 7BD584E2E92EC108DDC7842CF7A9EECB32D9BEE1 Authority key identifier: C9:72:E8:67:1D:ED:C4:3F:E9:08:B5:48:53:1C:96:9A:05:1C:D3:4C Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/2/C972E8671DEDC43FE908B548531C969A051CD34C.cer Subject info access: rsync://r.magellan.ipxo.com/repo/ddd1818b-9fbf-440c-aaec-44a4d1590f87-0/0/38392e3138352e32382e302f32322d3234203d3e20343031343334.roa Signing time: Mon 23 Feb 2026 15:06:36 +0000 ROA not before: Mon 23 Feb 2026 15:01:36 +0000 ROA not after: Mon 22 Feb 2027 15:06:36 +0000 asID: 401434 IP address blocks: 89.185.28.0/22 maxlen: 24 Validation: OK Signature path: rsync://r.magellan.ipxo.com/repo/ddd1818b-9fbf-440c-aaec-44a4d1590f87-0/0/C972E8671DEDC43FE908B548531C969A051CD34C.crl rsync://r.magellan.ipxo.com/repo/ddd1818b-9fbf-440c-aaec-44a4d1590f87-0/0/C972E8671DEDC43FE908B548531C969A051CD34C.mft rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/2/C972E8671DEDC43FE908B548531C969A051CD34C.cer rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/2/CF0631D33A3C9DC5C45424D55C3E7663838657A3.crl rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/2/CF0631D33A3C9DC5C45424D55C3E7663838657A3.mft rsync://rpki.ripe.net/repository/DEFAULT/zwYx0zo8ncXEVCTVXD52Y4OGV6M.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 02 Mar 2026 18:00:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7b:d5:84:e2:e9:2e:c1:08:dd:c7:84:2c:f7:a9:ee:cb:32:d9:be:e1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C972E8671DEDC43FE908B548531C969A051CD34C Validity Not Before: Feb 23 15:01:36 2026 GMT Not After : Feb 22 15:06:36 2027 GMT Subject: CN=D0E338AF56F98419EDDC55C387428CC5255B1624 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:dc:f8:7c:95:ce:81:f6:a6:48:de:c4:0b:8c: a5:36:d2:d4:e3:ea:90:13:8b:e2:ca:79:a4:c2:cf: 4a:af:4b:bf:f8:7d:d0:e0:17:af:cf:69:72:58:3b: 27:2c:d1:97:49:31:74:a6:42:ff:f4:61:a5:58:1e: fe:3b:09:43:ba:5a:74:d1:9d:89:d2:1b:f7:86:89: cd:47:b4:82:78:c6:7f:43:22:d9:06:1d:2a:f9:52: 98:f0:13:6e:83:f5:4d:b2:24:93:e9:6e:96:2b:56: 1c:2e:15:00:3c:8e:3c:9e:41:7a:9a:ee:e3:bd:0c: 61:b8:16:13:11:0b:89:51:32:6b:0d:a1:60:69:5e: ff:d8:60:d9:40:b6:93:12:b2:55:e0:95:a6:9d:22: e1:54:c9:cf:cc:7b:78:3d:9a:81:32:ad:2f:5d:5b: 29:55:0a:74:b6:06:5f:bc:41:b8:3c:ec:de:3f:90: 2b:87:c9:35:e1:b8:b5:85:e7:ad:49:9a:41:22:ad: c9:eb:b4:ef:66:de:9b:b1:cb:8a:eb:e0:a9:bb:3a: 3d:be:b8:36:f0:bb:6a:9b:53:8e:cd:3b:23:09:81: 07:ab:e5:b2:c4:98:d1:da:d7:ce:0e:14:51:d3:d5: ae:2d:4b:02:00:07:82:4f:5d:df:6d:16:cf:02:d5: a7:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:E3:38:AF:56:F9:84:19:ED:DC:55:C3:87:42:8C:C5:25:5B:16:24 X509v3 Authority Key Identifier: keyid:C9:72:E8:67:1D:ED:C4:3F:E9:08:B5:48:53:1C:96:9A:05:1C:D3:4C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://r.magellan.ipxo.com/repo/ddd1818b-9fbf-440c-aaec-44a4d1590f87-0/0/C972E8671DEDC43FE908B548531C969A051CD34C.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/2/C972E8671DEDC43FE908B548531C969A051CD34C.cer Subject Information Access: Signed Object - URI:rsync://r.magellan.ipxo.com/repo/ddd1818b-9fbf-440c-aaec-44a4d1590f87-0/0/38392e3138352e32382e302f32322d3234203d3e20343031343334.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 89.185.28.0/22 Signature Algorithm: sha256WithRSAEncryption 43:d2:f6:28:2f:ee:22:f3:89:50:d6:bf:0e:f1:16:56:ef:81: a3:d1:ea:b8:3c:cf:78:f4:53:03:9a:68:27:81:0b:9c:b0:50: 1a:48:45:cf:bd:5d:09:28:c0:64:91:1d:30:dd:66:3b:d0:22: ff:08:52:ec:67:c9:b1:24:8e:9c:19:8c:49:b8:6b:7f:1e:59: 38:7e:83:96:a1:45:6e:b9:73:ad:1c:f6:36:90:08:16:68:7d: dc:89:5d:f6:ca:2a:be:3e:1e:f0:34:da:1e:5d:d4:80:95:99: ce:08:73:a1:fb:52:35:2f:ad:51:a8:97:b7:0d:e4:cc:ff:ce: c6:40:92:a8:56:97:56:06:a7:2a:1f:94:c2:44:8a:e0:15:66: 25:9e:5d:a6:06:4b:8a:93:75:51:c6:e1:8a:9f:8a:81:ac:66: b6:c8:c0:9c:30:1a:65:c7:6d:37:4e:e6:58:a9:43:20:84:9e: 50:01:9b:4f:af:2f:c2:dd:fc:7e:7e:a5:c7:2a:f7:47:18:d1: a8:83:f4:29:57:e4:26:ae:c8:f1:a6:df:9d:05:9f:7b:be:b4: 49:3b:e5:38:41:13:1c:92:b0:45:68:cc:19:53:62:ab:42:e0: 34:b3:17:33:95:21:ff:da:ff:2c:0c:a4:56:e8:5f:8a:a1:14: 03:67:f6:26 -----BEGIN CERTIFICATE----- MIIFWDCCBECgAwIBAgIUe9WE4ukuwQjdx4Qs96nuyzLZvuEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzk3MkU4NjcxREVEQzQzRkU5MDhCNTQ4NTMxQzk2OUEw NTFDRDM0QzAeFw0yNjAyMjMxNTAxMzZaFw0yNzAyMjIxNTA2MzZaMDMxMTAvBgNV BAMTKEQwRTMzOEFGNTZGOTg0MTlFRERDNTVDMzg3NDI4Q0M1MjU1QjE2MjQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCV3Ph8lc6B9qZI3sQLjKU20tTj 6pATi+LKeaTCz0qvS7/4fdDgF6/PaXJYOycs0ZdJMXSmQv/0YaVYHv47CUO6WnTR nYnSG/eGic1HtIJ4xn9DItkGHSr5UpjwE26D9U2yJJPpbpYrVhwuFQA8jjyeQXqa 7uO9DGG4FhMRC4lRMmsNoWBpXv/YYNlAtpMSslXglaadIuFUyc/Me3g9moEyrS9d WylVCnS2Bl+8Qbg87N4/kCuHyTXhuLWF561JmkEircnrtO9m3puxy4rr4Km7Oj2+ uDbwu2qbU47NOyMJgQer5bLEmNHa184OFFHT1a4tSwIAB4JPXd9tFs8C1aeVAgMB AAGjggJiMIICXjAdBgNVHQ4EFgQU0OM4r1b5hBnt3FXDh0KMxSVbFiQwHwYDVR0j BBgwFoAUyXLoZx3txD/pCLVIUxyWmgUc00wwDgYDVR0PAQH/BAQDAgeAMIGIBgNV HR8EgYAwfjB8oHqgeIZ2cnN5bmM6Ly9yLm1hZ2VsbGFuLmlweG8uY29tL3JlcG8v ZGRkMTgxOGItOWZiZi00NDBjLWFhZWMtNDRhNGQxNTkwZjg3LTAvMC9DOTcyRTg2 NzFERURDNDNGRTkwOEI1NDg1MzFDOTY5QTA1MUNEMzRDLmNybDCBngYIKwYBBQUH AQEEgZEwgY4wgYsGCCsGAQUFBzAChn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5y aXBlLm5ldC9yZXBvc2l0b3J5LzYxNzA4YTZiLTZjM2EtNDBhMC1hMzAyLTU5NWVj YzE3ODQ4Yy8yL0M5NzJFODY3MURFREM0M0ZFOTA4QjU0ODUzMUM5NjlBMDUxQ0Qz NEMuY2VyMIGkBggrBgEFBQcBCwSBlzCBlDCBkQYIKwYBBQUHMAuGgYRyc3luYzov L3IubWFnZWxsYW4uaXB4by5jb20vcmVwby9kZGQxODE4Yi05ZmJmLTQ0MGMtYWFl Yy00NGE0ZDE1OTBmODctMC8wLzM4MzkyZTMxMzgzNTJlMzIzODJlMzAyZjMyMzIy ZDMyMzQyMDNkM2UyMDM0MzAzMTM0MzMzNC5yb2EwGAYDVR0gAQH/BA4wDDAKBggr BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAlm5HDANBgkqhkiG 9w0BAQsFAAOCAQEAQ9L2KC/uIvOJUNa/DvEWVu+Bo9HquDzPePRTA5poJ4ELnLBQ GkhFz71dCSjAZJEdMN1mO9Ai/whS7GfJsSSOnBmMSbhrfx5ZOH6DlqFFbrlzrRz2 NpAIFmh93Ild9soqvj4e8DTaHl3UgJWZzghzoftSNS+tUaiXtw3kzP/OxkCSqFaX VganKh+UwkSK4BVmJZ5dpgZLipN1Ucbhip+KgaxmtsjAnDAaZcdtN07mWKlDIISe UAGbT68vwt38fn6lxyr3RxjRqIP0KVfkJq7I8abfnQWfe760STvlOEETHJKwRWjM GVNiq0LgNLMXM5Uh/9r/LAykVuhfiqEUA2f2Jg== -----END CERTIFICATE-----Generated at Mon Mar 2 04:25:02 2026 by rpki-client