$ rpki-client -vvvf r.magellan.ipxo.com/repo/ddd1818b-9fbf-440c-aaec-44a4d1590f87-0/0/3130392e37322e3131382e302f32342d3234203d3e20383334.roa File: 3130392e37322e3131382e302f32342d3234203d3e20383334.roa (raw, json) Hash identifier: BcHsg4/QY/zDWrYMMjokJewPYYO8N+xLx35cnb1I9zw= Subject key identifier: A0:D4:E4:D1:35:38:47:7A:3D:41:50:6D:B7:F5:81:2A:0C:2C:C9:ED Certificate issuer: /CN=C972E8671DEDC43FE908B548531C969A051CD34C Certificate serial: 33128576B08AAD15A0513483F7B4C4BB1EB2EE31 Authority key identifier: C9:72:E8:67:1D:ED:C4:3F:E9:08:B5:48:53:1C:96:9A:05:1C:D3:4C Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/2/C972E8671DEDC43FE908B548531C969A051CD34C.cer Subject info access: rsync://r.magellan.ipxo.com/repo/ddd1818b-9fbf-440c-aaec-44a4d1590f87-0/0/3130392e37322e3131382e302f32342d3234203d3e20383334.roa Signing time: Tue 22 Sep 2026 00:02:37 +0000 ROA not before: Mon 21 Sep 2026 23:57:37 +0000 ROA not after: Tue 21 Sep 2027 00:02:37 +0000 asID: 834 IP address blocks: 109.72.118.0/24 maxlen: 24 Validation: OK Signature path: rsync://r.magellan.ipxo.com/repo/ddd1818b-9fbf-440c-aaec-44a4d1590f87-0/0/C972E8671DEDC43FE908B548531C969A051CD34C.crl rsync://r.magellan.ipxo.com/repo/ddd1818b-9fbf-440c-aaec-44a4d1590f87-0/0/C972E8671DEDC43FE908B548531C969A051CD34C.mft rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/2/C972E8671DEDC43FE908B548531C969A051CD34C.cer rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/2/CF0631D33A3C9DC5C45424D55C3E7663838657A3.crl rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/2/CF0631D33A3C9DC5C45424D55C3E7663838657A3.mft rsync://rpki.ripe.net/repository/DEFAULT/zwYx0zo8ncXEVCTVXD52Y4OGV6M.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 25 Sep 2026 07:56:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 33:12:85:76:b0:8a:ad:15:a0:51:34:83:f7:b4:c4:bb:1e:b2:ee:31 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C972E8671DEDC43FE908B548531C969A051CD34C Validity Not Before: Sep 21 23:57:37 2026 GMT Not After : Sep 21 00:02:37 2027 GMT Subject: CN=A0D4E4D13538477A3D41506DB7F5812A0C2CC9ED Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:07:74:34:ae:e2:8a:4d:26:29:0e:17:04:e8: 40:cf:72:73:2b:5d:e2:77:dd:e1:e1:d8:e7:0b:50: 92:77:e1:d5:88:ee:74:01:44:d8:cf:f4:86:d4:10: c1:a9:61:ef:59:c6:6b:31:fa:6f:36:d8:ac:e7:08: a5:70:f8:6c:ac:e0:83:25:fa:f0:41:80:ea:ab:1a: b3:0d:4d:a9:c5:c2:f3:33:32:31:91:17:00:ee:ec: 21:d8:5f:79:72:21:4c:10:c2:02:2c:21:fd:c9:31: 2d:ee:79:fe:d1:14:e6:5a:72:ec:79:d7:49:47:bd: a8:33:83:de:fe:a5:8b:d3:bc:29:c7:91:83:7b:c8: c4:9b:08:7e:92:87:9c:21:7e:07:18:71:c7:4c:5d: db:e5:53:7c:6a:21:f5:df:dc:da:a3:76:24:b8:1b: 22:1d:2c:bd:95:01:e7:04:94:19:dc:6a:ec:31:d4: 46:2c:d8:9c:1b:66:b5:b6:28:d9:86:25:ac:f2:f5: 6b:f3:88:9f:5d:85:e3:dd:07:fc:c0:7e:2d:9c:c8: 3f:ec:72:cc:bf:72:12:0b:b7:44:43:de:b7:d0:07: 09:49:6f:ac:bb:3c:38:1e:d5:75:8d:81:1c:38:89: af:ea:5e:1c:12:3c:d2:40:ca:46:3a:16:97:af:e2: 37:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:D4:E4:D1:35:38:47:7A:3D:41:50:6D:B7:F5:81:2A:0C:2C:C9:ED X509v3 Authority Key Identifier: keyid:C9:72:E8:67:1D:ED:C4:3F:E9:08:B5:48:53:1C:96:9A:05:1C:D3:4C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://r.magellan.ipxo.com/repo/ddd1818b-9fbf-440c-aaec-44a4d1590f87-0/0/C972E8671DEDC43FE908B548531C969A051CD34C.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/2/C972E8671DEDC43FE908B548531C969A051CD34C.cer Subject Information Access: Signed Object - URI:rsync://r.magellan.ipxo.com/repo/ddd1818b-9fbf-440c-aaec-44a4d1590f87-0/0/3130392e37322e3131382e302f32342d3234203d3e20383334.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 109.72.118.0/24 Signature Algorithm: sha256WithRSAEncryption 5a:18:94:6b:dd:bf:a1:95:36:67:50:e9:ba:0c:09:e2:10:4e: f3:ac:37:a2:33:26:e7:7e:ab:bb:ab:b4:b6:9b:6c:9e:31:39: cd:7f:52:ab:27:92:9c:fa:18:53:5d:78:dc:09:3d:f2:44:ca: 5e:2c:2d:c6:78:b2:35:77:11:56:bc:22:fc:62:83:2b:8b:f4: e6:df:09:85:03:6d:75:2e:fd:86:58:2e:93:80:8b:2c:ec:79: 87:58:f7:7f:6b:b4:59:73:9e:c2:f3:fd:9a:78:ae:80:35:97: 10:1c:6f:22:aa:95:6b:51:78:84:fe:3e:f8:d9:d0:e5:77:92: df:47:e8:bc:fb:70:77:8a:36:b5:cd:5f:9e:ac:1c:b0:e8:41: 69:66:1d:32:e7:0a:a0:a4:ac:04:0c:5d:37:a0:05:18:34:26: f4:54:f9:d2:e1:0c:2f:9a:9d:50:3c:2e:d7:dc:3d:3c:2e:e1: 92:09:12:ed:f2:5f:f2:f7:94:a7:78:36:40:42:07:5e:dd:13: 08:12:21:67:c3:aa:71:c3:10:cb:c6:67:eb:8e:5a:7a:9b:fe: a6:7d:3e:6c:e7:22:9f:c3:56:32:d3:20:be:1d:b0:8b:7e:fa: 0a:b7:e6:36:59:ae:74:5d:01:59:ce:43:69:5e:65:c1:9b:2d: f9:74:ee:4b -----BEGIN CERTIFICATE----- MIIFVDCCBDygAwIBAgIUMxKFdrCKrRWgUTSD97TEux6y7jEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzk3MkU4NjcxREVEQzQzRkU5MDhCNTQ4NTMxQzk2OUEw NTFDRDM0QzAeFw0yNjA5MjEyMzU3MzdaFw0yNzA5MjEwMDAyMzdaMDMxMTAvBgNV BAMTKEEwRDRFNEQxMzUzODQ3N0EzRDQxNTA2REI3RjU4MTJBMEMyQ0M5RUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDhB3Q0ruKKTSYpDhcE6EDPcnMr XeJ33eHh2OcLUJJ34dWI7nQBRNjP9IbUEMGpYe9Zxmsx+m822KznCKVw+Gys4IMl +vBBgOqrGrMNTanFwvMzMjGRFwDu7CHYX3lyIUwQwgIsIf3JMS3uef7RFOZacux5 10lHvagzg97+pYvTvCnHkYN7yMSbCH6Sh5whfgcYccdMXdvlU3xqIfXf3NqjdiS4 GyIdLL2VAecElBncauwx1EYs2JwbZrW2KNmGJazy9WvziJ9dhePdB/zAfi2cyD/s csy/chILt0RD3rfQBwlJb6y7PDge1XWNgRw4ia/qXhwSPNJAykY6Fpev4jf3AgMB AAGjggJeMIICWjAdBgNVHQ4EFgQUoNTk0TU4R3o9QVBtt/WBKgwsye0wHwYDVR0j BBgwFoAUyXLoZx3txD/pCLVIUxyWmgUc00wwDgYDVR0PAQH/BAQDAgeAMIGIBgNV HR8EgYAwfjB8oHqgeIZ2cnN5bmM6Ly9yLm1hZ2VsbGFuLmlweG8uY29tL3JlcG8v ZGRkMTgxOGItOWZiZi00NDBjLWFhZWMtNDRhNGQxNTkwZjg3LTAvMC9DOTcyRTg2 NzFERURDNDNGRTkwOEI1NDg1MzFDOTY5QTA1MUNEMzRDLmNybDCBngYIKwYBBQUH AQEEgZEwgY4wgYsGCCsGAQUFBzAChn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5y aXBlLm5ldC9yZXBvc2l0b3J5LzYxNzA4YTZiLTZjM2EtNDBhMC1hMzAyLTU5NWVj YzE3ODQ4Yy8yL0M5NzJFODY3MURFREM0M0ZFOTA4QjU0ODUzMUM5NjlBMDUxQ0Qz NEMuY2VyMIGgBggrBgEFBQcBCwSBkzCBkDCBjQYIKwYBBQUHMAuGgYByc3luYzov L3IubWFnZWxsYW4uaXB4by5jb20vcmVwby9kZGQxODE4Yi05ZmJmLTQ0MGMtYWFl Yy00NGE0ZDE1OTBmODctMC8wLzMxMzAzOTJlMzczMjJlMzEzMTM4MmUzMDJmMzIz NDJkMzIzNDIwM2QzZTIwMzgzMzM0LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAbUh2MA0GCSqGSIb3DQEB CwUAA4IBAQBaGJRr3b+hlTZnUOm6DAniEE7zrDeiMybnfqu7q7S2m2yeMTnNf1Kr J5Kc+hhTXXjcCT3yRMpeLC3GeLI1dxFWvCL8YoMri/Tm3wmFA211Lv2GWC6TgIss 7HmHWPd/a7RZc57C8/2aeK6ANZcQHG8iqpVrUXiE/j742dDld5LfR+i8+3B3ija1 zV+erByw6EFpZh0y5wqgpKwEDF03oAUYNCb0VPnS4Qwvmp1QPC7X3D08LuGSCRLt 8l/y95SneDZAQgde3RMIEiFnw6pxwxDLxmfrjlp6m/6mfT5s5yKfw1Yy0yC+HbCL fvoKt+Y2Wa50XQFZzkNpXmXBmy35dO5L -----END CERTIFICATE-----Generated at Thu Sep 24 14:54:04 2026 by rpki-client