$ rpki-client -vvf r.magellan.ipxo.com/repo/ddd1818b-9fbf-440c-aaec-44a4d1590f87-0/0/38392e3138352e332e302f32342d3234203d3e203239383032.roa File: 38392e3138352e332e302f32342d3234203d3e203239383032.roa (raw, json) Hash identifier: QNVTEuGQTZZ2ZnVnei75eo7Ki3rOfTGPTx2gUt7pljg= Subject key identifier: F4:B2:0F:C5:35:BB:2D:0E:29:B7:C9:DA:59:B2:04:1C:B1:41:9C:6E Certificate issuer: /CN=C972E8671DEDC43FE908B548531C969A051CD34C Certificate serial: 2D22F8C77D79B4D1DCAA89A27781789F03539AA5 Authority key identifier: C9:72:E8:67:1D:ED:C4:3F:E9:08:B5:48:53:1C:96:9A:05:1C:D3:4C Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/2/C972E8671DEDC43FE908B548531C969A051CD34C.cer Subject info access: rsync://r.magellan.ipxo.com/repo/ddd1818b-9fbf-440c-aaec-44a4d1590f87-0/0/38392e3138352e332e302f32342d3234203d3e203239383032.roa Signing time: Mon 23 Feb 2026 15:06:34 +0000 ROA not before: Mon 23 Feb 2026 15:01:34 +0000 ROA not after: Mon 22 Feb 2027 15:06:34 +0000 asID: 29802 IP address blocks: 89.185.3.0/24 maxlen: 24 Validation: OK Signature path: rsync://r.magellan.ipxo.com/repo/ddd1818b-9fbf-440c-aaec-44a4d1590f87-0/0/C972E8671DEDC43FE908B548531C969A051CD34C.crl rsync://r.magellan.ipxo.com/repo/ddd1818b-9fbf-440c-aaec-44a4d1590f87-0/0/C972E8671DEDC43FE908B548531C969A051CD34C.mft rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/2/C972E8671DEDC43FE908B548531C969A051CD34C.cer rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/2/CF0631D33A3C9DC5C45424D55C3E7663838657A3.crl rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/2/CF0631D33A3C9DC5C45424D55C3E7663838657A3.mft rsync://rpki.ripe.net/repository/DEFAULT/zwYx0zo8ncXEVCTVXD52Y4OGV6M.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 02 Mar 2026 08:56:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2d:22:f8:c7:7d:79:b4:d1:dc:aa:89:a2:77:81:78:9f:03:53:9a:a5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C972E8671DEDC43FE908B548531C969A051CD34C Validity Not Before: Feb 23 15:01:34 2026 GMT Not After : Feb 22 15:06:34 2027 GMT Subject: CN=F4B20FC535BB2D0E29B7C9DA59B2041CB1419C6E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:4b:f1:34:41:4e:1e:66:c4:38:e5:d6:97:23: 2d:aa:19:b7:f3:7b:7a:73:f7:3b:3c:6a:26:3f:00: fa:28:c4:2b:05:b0:49:9d:48:5b:20:1f:2f:d7:fa: 89:fe:4b:2a:53:22:29:f0:f8:0d:5a:13:70:ed:2c: 55:ea:4c:d8:bc:c7:c6:95:e4:57:18:8e:8d:c2:a8: d8:27:23:e9:c7:ea:63:be:4e:77:f2:81:fe:2c:13: 6a:7c:52:e6:a2:36:8c:c8:e2:fe:bf:7e:03:3e:7d: 11:c9:41:e5:df:00:1f:12:e6:ab:7a:c9:61:a9:6c: d3:b9:b8:16:f1:ad:d1:5c:81:ed:09:3e:ef:47:2d: bd:80:a1:19:16:7f:5c:b5:93:84:76:5f:29:f5:cf: eb:a6:5c:1a:8a:92:11:eb:2a:4a:ab:96:b3:0d:52: db:79:65:29:bc:fb:1b:e4:c8:d3:ff:7f:b6:57:39: e8:29:eb:0f:ee:a7:76:b9:5a:2f:3f:48:ca:a1:0f: 39:fd:92:76:81:b3:80:04:5e:40:82:d4:3c:01:7a: c1:70:b5:ce:07:9d:2c:e2:67:85:44:63:74:ca:93: eb:38:e0:23:05:61:cc:3e:7c:f0:39:3d:2b:99:38: 5d:02:e8:3d:86:89:93:56:2e:31:af:43:27:d5:a2: 21:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:B2:0F:C5:35:BB:2D:0E:29:B7:C9:DA:59:B2:04:1C:B1:41:9C:6E X509v3 Authority Key Identifier: keyid:C9:72:E8:67:1D:ED:C4:3F:E9:08:B5:48:53:1C:96:9A:05:1C:D3:4C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://r.magellan.ipxo.com/repo/ddd1818b-9fbf-440c-aaec-44a4d1590f87-0/0/C972E8671DEDC43FE908B548531C969A051CD34C.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/2/C972E8671DEDC43FE908B548531C969A051CD34C.cer Subject Information Access: Signed Object - URI:rsync://r.magellan.ipxo.com/repo/ddd1818b-9fbf-440c-aaec-44a4d1590f87-0/0/38392e3138352e332e302f32342d3234203d3e203239383032.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 89.185.3.0/24 Signature Algorithm: sha256WithRSAEncryption 1a:55:ff:f4:50:c3:ff:c4:17:4d:cf:2a:43:7d:6f:ff:0c:1e: 9f:ac:a1:72:0b:88:a0:64:7f:a1:fc:09:60:0d:49:e0:cc:c8: 68:73:8b:f9:52:10:f8:aa:1f:89:4c:55:40:f4:17:5d:ed:7e: 07:84:df:fa:05:f1:bb:14:7a:06:5e:72:4b:cb:1e:60:80:de: 7c:e9:d0:dc:78:41:6a:b8:41:90:3a:21:73:6a:d9:20:0b:9d: 5f:17:fd:9b:a9:4b:0b:41:16:67:77:17:7c:7e:fc:24:af:f3: 68:af:c3:95:54:26:9f:31:9e:54:f5:93:9a:7b:ae:bb:4b:78: a5:40:c2:c6:a9:8b:1f:b9:bc:85:7b:ea:dc:5d:5f:bf:bc:5d: 59:a7:1c:9a:ff:73:31:30:d3:10:66:bf:e9:8c:0a:31:10:0a: 9b:9a:f4:b9:3d:e6:d8:c0:ed:42:fe:6a:a1:a6:9f:92:59:f8: ff:e9:db:e7:72:75:49:16:a4:fb:8f:d3:e1:86:12:a0:96:64: 94:f1:a9:60:43:d6:77:e7:9a:83:39:64:b5:06:c8:19:e5:d2: ce:94:f9:9e:51:17:64:d8:e3:3e:ad:8c:2c:34:e8:13:56:67: 04:a2:72:de:1a:6c:e4:47:2c:68:ae:60:37:60:60:d1:63:e5: 27:a4:68:23 -----BEGIN CERTIFICATE----- MIIFVDCCBDygAwIBAgIULSL4x315tNHcqomid4F4nwNTmqUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzk3MkU4NjcxREVEQzQzRkU5MDhCNTQ4NTMxQzk2OUEw NTFDRDM0QzAeFw0yNjAyMjMxNTAxMzRaFw0yNzAyMjIxNTA2MzRaMDMxMTAvBgNV BAMTKEY0QjIwRkM1MzVCQjJEMEUyOUI3QzlEQTU5QjIwNDFDQjE0MTlDNkUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4S/E0QU4eZsQ45daXIy2qGbfz e3pz9zs8aiY/APooxCsFsEmdSFsgHy/X+on+SypTIinw+A1aE3DtLFXqTNi8x8aV 5FcYjo3CqNgnI+nH6mO+Tnfygf4sE2p8UuaiNozI4v6/fgM+fRHJQeXfAB8S5qt6 yWGpbNO5uBbxrdFcge0JPu9HLb2AoRkWf1y1k4R2Xyn1z+umXBqKkhHrKkqrlrMN Utt5ZSm8+xvkyNP/f7ZXOegp6w/up3a5Wi8/SMqhDzn9knaBs4AEXkCC1DwBesFw tc4HnSziZ4VEY3TKk+s44CMFYcw+fPA5PSuZOF0C6D2GiZNWLjGvQyfVoiHtAgMB AAGjggJeMIICWjAdBgNVHQ4EFgQU9LIPxTW7LQ4pt8naWbIEHLFBnG4wHwYDVR0j BBgwFoAUyXLoZx3txD/pCLVIUxyWmgUc00wwDgYDVR0PAQH/BAQDAgeAMIGIBgNV HR8EgYAwfjB8oHqgeIZ2cnN5bmM6Ly9yLm1hZ2VsbGFuLmlweG8uY29tL3JlcG8v ZGRkMTgxOGItOWZiZi00NDBjLWFhZWMtNDRhNGQxNTkwZjg3LTAvMC9DOTcyRTg2 NzFERURDNDNGRTkwOEI1NDg1MzFDOTY5QTA1MUNEMzRDLmNybDCBngYIKwYBBQUH AQEEgZEwgY4wgYsGCCsGAQUFBzAChn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5y aXBlLm5ldC9yZXBvc2l0b3J5LzYxNzA4YTZiLTZjM2EtNDBhMC1hMzAyLTU5NWVj YzE3ODQ4Yy8yL0M5NzJFODY3MURFREM0M0ZFOTA4QjU0ODUzMUM5NjlBMDUxQ0Qz NEMuY2VyMIGgBggrBgEFBQcBCwSBkzCBkDCBjQYIKwYBBQUHMAuGgYByc3luYzov L3IubWFnZWxsYW4uaXB4by5jb20vcmVwby9kZGQxODE4Yi05ZmJmLTQ0MGMtYWFl Yy00NGE0ZDE1OTBmODctMC8wLzM4MzkyZTMxMzgzNTJlMzMyZTMwMmYzMjM0MmQz MjM0MjAzZDNlMjAzMjM5MzgzMDMyLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAWbkDMA0GCSqGSIb3DQEB CwUAA4IBAQAaVf/0UMP/xBdNzypDfW//DB6frKFyC4igZH+h/AlgDUngzMhoc4v5 UhD4qh+JTFVA9Bdd7X4HhN/6BfG7FHoGXnJLyx5ggN586dDceEFquEGQOiFzatkg C51fF/2bqUsLQRZndxd8fvwkr/Nor8OVVCafMZ5U9ZOae667S3ilQMLGqYsfubyF e+rcXV+/vF1Zpxya/3MxMNMQZr/pjAoxEAqbmvS5PebYwO1C/mqhpp+SWfj/6dvn cnVJFqT7j9PhhhKglmSU8algQ9Z355qDOWS1BsgZ5dLOlPmeURdk2OM+rYwsNOgT VmcEonLeGmzkRyxormA3YGDRY+UnpGgj -----END CERTIFICATE-----Generated at Mon Mar 2 00:58:32 2026 by rpki-client