$ rpki-client -vvf r.magellan.ipxo.com/repo/ddd1818b-9fbf-440c-aaec-44a4d1590f87-0/0/38392e3138352e32392e302f32342d3234203d3e20343031343334.roa File: 38392e3138352e32392e302f32342d3234203d3e20343031343334.roa (raw, json) Hash identifier: 3mTgOO/GWkLEGZhHchYa5M2iCgl860xtZ5R4Iz71xjw= Subject key identifier: BF:72:FB:8F:98:64:B4:B2:7B:73:47:A2:4E:33:D9:5F:8F:17:75:D6 Certificate issuer: /CN=C972E8671DEDC43FE908B548531C969A051CD34C Certificate serial: 0E2E13468C8F2A145ED70E4BA49C54089742D0BC Authority key identifier: C9:72:E8:67:1D:ED:C4:3F:E9:08:B5:48:53:1C:96:9A:05:1C:D3:4C Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/2/C972E8671DEDC43FE908B548531C969A051CD34C.cer Subject info access: rsync://r.magellan.ipxo.com/repo/ddd1818b-9fbf-440c-aaec-44a4d1590f87-0/0/38392e3138352e32392e302f32342d3234203d3e20343031343334.roa Signing time: Mon 23 Feb 2026 15:06:36 +0000 ROA not before: Mon 23 Feb 2026 15:01:36 +0000 ROA not after: Mon 22 Feb 2027 15:06:36 +0000 asID: 401434 IP address blocks: 89.185.29.0/24 maxlen: 24 Validation: OK Signature path: rsync://r.magellan.ipxo.com/repo/ddd1818b-9fbf-440c-aaec-44a4d1590f87-0/0/C972E8671DEDC43FE908B548531C969A051CD34C.crl rsync://r.magellan.ipxo.com/repo/ddd1818b-9fbf-440c-aaec-44a4d1590f87-0/0/C972E8671DEDC43FE908B548531C969A051CD34C.mft rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/2/C972E8671DEDC43FE908B548531C969A051CD34C.cer rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/2/CF0631D33A3C9DC5C45424D55C3E7663838657A3.crl rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/2/CF0631D33A3C9DC5C45424D55C3E7663838657A3.mft rsync://rpki.ripe.net/repository/DEFAULT/zwYx0zo8ncXEVCTVXD52Y4OGV6M.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 02 Mar 2026 18:00:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0e:2e:13:46:8c:8f:2a:14:5e:d7:0e:4b:a4:9c:54:08:97:42:d0:bc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C972E8671DEDC43FE908B548531C969A051CD34C Validity Not Before: Feb 23 15:01:36 2026 GMT Not After : Feb 22 15:06:36 2027 GMT Subject: CN=BF72FB8F9864B4B27B7347A24E33D95F8F1775D6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:39:07:7d:13:51:a2:bc:7a:b6:d8:d7:f1:77: 5f:bf:8f:4e:af:38:af:c6:e2:27:e9:29:6e:18:fa: c0:a2:a8:bc:90:de:3f:96:e4:a0:21:6b:0a:68:f5: ab:29:71:be:a5:c2:75:0d:5f:ea:17:a3:4e:9a:d4: d5:0a:bb:74:b4:60:74:4d:6a:05:e4:c2:22:8e:1a: 92:5a:14:8c:55:98:b0:99:8a:69:30:aa:cd:8c:47: db:c6:95:d9:c7:7a:5c:f3:17:d9:2b:cc:4c:da:a5: 22:1d:a6:c4:94:d5:e3:ec:2d:0b:85:86:a0:7f:5c: 73:8c:78:d5:83:30:87:91:a9:9e:7e:9c:d6:f9:a8: 04:c3:dc:bb:ea:18:e5:21:19:10:96:0c:8c:5e:a2: 2e:1c:93:97:51:9f:b2:89:fe:52:c4:fd:9b:e6:74: 67:07:ef:e1:ab:14:e9:0b:b1:fd:3d:8d:b6:4e:2b: 24:12:b1:f9:45:df:fb:e3:1d:0b:47:5c:9b:a3:24: 87:98:8a:ef:e5:8c:5e:25:b2:53:b8:27:cb:d2:4f: 68:71:21:8f:e7:86:14:34:b0:9c:ce:eb:f6:88:a6: 7a:7b:b7:14:45:c2:57:27:a4:0c:5f:ce:50:01:26: 2a:52:81:5f:e0:45:1f:20:f9:b7:0f:6f:9e:80:b1: 6a:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:72:FB:8F:98:64:B4:B2:7B:73:47:A2:4E:33:D9:5F:8F:17:75:D6 X509v3 Authority Key Identifier: keyid:C9:72:E8:67:1D:ED:C4:3F:E9:08:B5:48:53:1C:96:9A:05:1C:D3:4C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://r.magellan.ipxo.com/repo/ddd1818b-9fbf-440c-aaec-44a4d1590f87-0/0/C972E8671DEDC43FE908B548531C969A051CD34C.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/2/C972E8671DEDC43FE908B548531C969A051CD34C.cer Subject Information Access: Signed Object - URI:rsync://r.magellan.ipxo.com/repo/ddd1818b-9fbf-440c-aaec-44a4d1590f87-0/0/38392e3138352e32392e302f32342d3234203d3e20343031343334.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 89.185.29.0/24 Signature Algorithm: sha256WithRSAEncryption 5e:6e:a7:95:a0:f1:e8:42:a6:17:d1:3d:bb:e3:f4:8d:d1:3f: b2:9c:7e:61:73:44:a3:e6:69:08:ff:bf:ab:4d:b1:31:ab:d2: 47:b4:a8:96:c2:10:8a:14:e5:ac:63:b5:ba:8a:cd:e2:97:11: 3d:e3:05:9a:0e:ea:91:c1:a3:81:07:a6:8e:83:64:7f:f3:ca: 69:f8:d3:f0:91:7b:2a:f8:5d:a7:09:c3:a4:4a:80:13:2b:38: 7b:2a:32:0a:c1:25:bc:d0:48:2e:c2:1f:8d:b8:5e:40:bb:7e: 41:36:b0:4f:23:ce:07:14:0a:02:48:03:05:6e:46:d8:a3:77: f4:fb:6c:c9:96:7f:1b:d1:82:f2:8c:53:06:eb:a7:42:78:ef: 06:05:30:d6:f0:13:d5:40:6b:b2:a8:19:74:43:c6:fd:a0:15: 82:aa:3e:d2:19:f2:5a:f2:0c:84:5f:ad:43:38:ea:e6:77:74: 9c:15:98:9c:23:5b:1a:99:3b:b1:57:3d:56:74:c9:b4:33:53: c5:24:72:ba:d2:5f:5e:51:5d:c9:52:2f:e1:4e:9c:3a:13:29: 0c:64:22:33:9d:4a:06:0e:d5:8a:94:78:1d:43:a3:64:d7:36: d9:c2:a1:13:21:d3:11:2e:97:10:4e:a3:41:6e:de:df:6f:76: dc:b2:fc:86 -----BEGIN CERTIFICATE----- MIIFWDCCBECgAwIBAgIUDi4TRoyPKhRe1w5LpJxUCJdC0LwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzk3MkU4NjcxREVEQzQzRkU5MDhCNTQ4NTMxQzk2OUEw NTFDRDM0QzAeFw0yNjAyMjMxNTAxMzZaFw0yNzAyMjIxNTA2MzZaMDMxMTAvBgNV BAMTKEJGNzJGQjhGOTg2NEI0QjI3QjczNDdBMjRFMzNEOTVGOEYxNzc1RDYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDkOQd9E1GivHq22Nfxd1+/j06v OK/G4ifpKW4Y+sCiqLyQ3j+W5KAhawpo9aspcb6lwnUNX+oXo06a1NUKu3S0YHRN agXkwiKOGpJaFIxVmLCZimkwqs2MR9vGldnHelzzF9krzEzapSIdpsSU1ePsLQuF hqB/XHOMeNWDMIeRqZ5+nNb5qATD3LvqGOUhGRCWDIxeoi4ck5dRn7KJ/lLE/Zvm dGcH7+GrFOkLsf09jbZOKyQSsflF3/vjHQtHXJujJIeYiu/ljF4lslO4J8vST2hx IY/nhhQ0sJzO6/aIpnp7txRFwlcnpAxfzlABJipSgV/gRR8g+bcPb56AsWphAgMB AAGjggJiMIICXjAdBgNVHQ4EFgQUv3L7j5hktLJ7c0eiTjPZX48XddYwHwYDVR0j BBgwFoAUyXLoZx3txD/pCLVIUxyWmgUc00wwDgYDVR0PAQH/BAQDAgeAMIGIBgNV HR8EgYAwfjB8oHqgeIZ2cnN5bmM6Ly9yLm1hZ2VsbGFuLmlweG8uY29tL3JlcG8v ZGRkMTgxOGItOWZiZi00NDBjLWFhZWMtNDRhNGQxNTkwZjg3LTAvMC9DOTcyRTg2 NzFERURDNDNGRTkwOEI1NDg1MzFDOTY5QTA1MUNEMzRDLmNybDCBngYIKwYBBQUH AQEEgZEwgY4wgYsGCCsGAQUFBzAChn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5y aXBlLm5ldC9yZXBvc2l0b3J5LzYxNzA4YTZiLTZjM2EtNDBhMC1hMzAyLTU5NWVj YzE3ODQ4Yy8yL0M5NzJFODY3MURFREM0M0ZFOTA4QjU0ODUzMUM5NjlBMDUxQ0Qz NEMuY2VyMIGkBggrBgEFBQcBCwSBlzCBlDCBkQYIKwYBBQUHMAuGgYRyc3luYzov L3IubWFnZWxsYW4uaXB4by5jb20vcmVwby9kZGQxODE4Yi05ZmJmLTQ0MGMtYWFl Yy00NGE0ZDE1OTBmODctMC8wLzM4MzkyZTMxMzgzNTJlMzIzOTJlMzAyZjMyMzQy ZDMyMzQyMDNkM2UyMDM0MzAzMTM0MzMzNC5yb2EwGAYDVR0gAQH/BA4wDDAKBggr BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAFm5HTANBgkqhkiG 9w0BAQsFAAOCAQEAXm6nlaDx6EKmF9E9u+P0jdE/spx+YXNEo+ZpCP+/q02xMavS R7SolsIQihTlrGO1uorN4pcRPeMFmg7qkcGjgQemjoNkf/PKafjT8JF7KvhdpwnD pEqAEys4eyoyCsElvNBILsIfjbheQLt+QTawTyPOBxQKAkgDBW5G2KN39PtsyZZ/ G9GC8oxTBuunQnjvBgUw1vAT1UBrsqgZdEPG/aAVgqo+0hnyWvIMhF+tQzjq5nd0 nBWYnCNbGpk7sVc9VnTJtDNTxSRyutJfXlFdyVIv4U6cOhMpDGQiM51KBg7VipR4 HUOjZNc22cKhEyHTES6XEE6jQW7e32923LL8hg== -----END CERTIFICATE-----Generated at Mon Mar 2 04:25:17 2026 by rpki-client