$ rpki-client -vvf r.magellan.ipxo.com/repo/ddd1818b-9fbf-440c-aaec-44a4d1590f87-0/0/3130392e37322e3132342e302f32342d3234203d3e20323134303235.roa File: 3130392e37322e3132342e302f32342d3234203d3e20323134303235.roa (raw, json) Hash identifier: 4pCVQCKCkhyPqqYXKkY/5J3h36JoFGmqy9eB+DrOjso= Subject key identifier: B6:B5:7D:39:C2:BC:2A:06:D8:F8:E3:CF:81:55:9B:12:EC:7E:AF:14 Certificate issuer: /CN=C972E8671DEDC43FE908B548531C969A051CD34C Certificate serial: 3E393A1A138960A864EEBDE0E54BBEFC5D96FF33 Authority key identifier: C9:72:E8:67:1D:ED:C4:3F:E9:08:B5:48:53:1C:96:9A:05:1C:D3:4C Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/2/C972E8671DEDC43FE908B548531C969A051CD34C.cer Subject info access: rsync://r.magellan.ipxo.com/repo/ddd1818b-9fbf-440c-aaec-44a4d1590f87-0/0/3130392e37322e3132342e302f32342d3234203d3e20323134303235.roa Signing time: Thu 19 Mar 2026 12:12:02 +0000 ROA not before: Thu 19 Mar 2026 12:07:02 +0000 ROA not after: Thu 18 Mar 2027 12:12:02 +0000 asID: 214025 IP address blocks: 109.72.124.0/24 maxlen: 24 Validation: OK Signature path: rsync://r.magellan.ipxo.com/repo/ddd1818b-9fbf-440c-aaec-44a4d1590f87-0/0/C972E8671DEDC43FE908B548531C969A051CD34C.crl rsync://r.magellan.ipxo.com/repo/ddd1818b-9fbf-440c-aaec-44a4d1590f87-0/0/C972E8671DEDC43FE908B548531C969A051CD34C.mft rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/2/C972E8671DEDC43FE908B548531C969A051CD34C.cer rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/2/CF0631D33A3C9DC5C45424D55C3E7663838657A3.crl rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/2/CF0631D33A3C9DC5C45424D55C3E7663838657A3.mft rsync://rpki.ripe.net/repository/DEFAULT/zwYx0zo8ncXEVCTVXD52Y4OGV6M.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 26 Mar 2026 12:51:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3e:39:3a:1a:13:89:60:a8:64:ee:bd:e0:e5:4b:be:fc:5d:96:ff:33 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C972E8671DEDC43FE908B548531C969A051CD34C Validity Not Before: Mar 19 12:07:02 2026 GMT Not After : Mar 18 12:12:02 2027 GMT Subject: CN=B6B57D39C2BC2A06D8F8E3CF81559B12EC7EAF14 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:bb:ea:70:97:d7:30:cd:60:de:80:7a:0f:a3: f3:90:ef:af:44:0c:e9:aa:ab:ff:a1:9d:c6:35:f2: c0:d7:61:71:f0:37:01:1f:72:c9:54:f6:99:51:0f: 5b:5e:0b:83:fc:89:86:3e:9d:7c:29:71:26:ae:34: 1f:fd:7a:4f:15:b2:cf:6b:81:78:4f:14:db:65:4e: 11:e9:62:4c:c0:9f:85:f4:29:e2:41:7c:2c:5c:ea: c3:e1:43:f0:d1:4f:9f:7f:ce:71:8a:c8:f8:b3:76: d8:56:5a:15:47:8d:d1:c1:20:aa:14:69:2a:18:1f: 28:49:a2:82:a5:ee:fe:d8:83:e5:9f:5c:e6:ba:88: 7d:00:2b:86:8f:2b:68:87:9e:09:0d:5e:95:2f:b5: a0:e8:53:02:6c:12:62:3a:ef:16:d0:75:32:3b:04: 6c:8d:d0:37:9f:28:9c:08:b9:77:82:27:fb:0f:4d: 9c:cc:a3:2d:84:af:fb:92:a1:9c:44:37:fd:f4:c8: 94:7e:fa:6a:8a:8b:5e:6a:2d:ae:0d:1e:6b:32:a5: ad:74:8f:98:c2:12:5e:e0:3a:d3:ca:63:44:2a:ef: a7:d2:49:90:9d:24:d7:52:b4:7d:9c:5a:01:9b:f6: e2:87:2f:61:7d:22:d1:14:30:a2:66:a6:ed:32:2a: c8:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:B5:7D:39:C2:BC:2A:06:D8:F8:E3:CF:81:55:9B:12:EC:7E:AF:14 X509v3 Authority Key Identifier: keyid:C9:72:E8:67:1D:ED:C4:3F:E9:08:B5:48:53:1C:96:9A:05:1C:D3:4C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://r.magellan.ipxo.com/repo/ddd1818b-9fbf-440c-aaec-44a4d1590f87-0/0/C972E8671DEDC43FE908B548531C969A051CD34C.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/2/C972E8671DEDC43FE908B548531C969A051CD34C.cer Subject Information Access: Signed Object - URI:rsync://r.magellan.ipxo.com/repo/ddd1818b-9fbf-440c-aaec-44a4d1590f87-0/0/3130392e37322e3132342e302f32342d3234203d3e20323134303235.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 109.72.124.0/24 Signature Algorithm: sha256WithRSAEncryption 84:65:a4:c7:81:0c:e5:94:b2:44:5e:ee:12:8e:81:fb:13:dd: c4:46:8d:44:ec:27:b9:ed:9a:4d:44:73:55:6c:bc:e9:39:56: 35:84:ba:b7:4e:9e:d2:33:73:31:82:12:a0:dd:1e:2f:d1:52: 49:55:62:c0:9d:dd:87:f2:52:05:72:bc:9e:f5:02:cc:8e:8e: c5:91:cd:94:26:19:bd:d3:a1:3b:cd:c2:c0:e2:39:0e:a5:e0: 9f:32:d5:eb:12:e8:4c:ea:fd:08:72:2e:88:a9:98:18:ac:b3: 4e:b8:be:89:46:48:99:e6:bd:94:bb:bc:f2:07:6c:e8:52:bc: db:df:9d:17:25:eb:e9:e8:1f:af:76:ea:d1:42:5c:ac:8f:95: 8b:cc:af:bf:54:63:11:8d:40:fc:cb:16:40:53:bc:2c:5a:ad: 1d:1e:6e:64:9a:d6:ee:10:7f:65:af:94:36:92:49:89:42:e0: aa:63:04:62:7b:30:c9:8e:c2:7b:d4:af:13:34:6c:9b:aa:4c: 3c:86:33:b5:a0:fd:e0:de:15:1b:b1:e5:5e:23:33:d9:cb:ac: d6:64:8d:47:ff:85:8a:79:5f:10:7b:90:d9:35:25:4b:97:ce: b3:ee:d1:59:19:8d:3c:e6:f8:a8:6c:f7:93:c2:bd:a2:e5:21: 32:e5:2f:16 -----BEGIN CERTIFICATE----- MIIFWjCCBEKgAwIBAgIUPjk6GhOJYKhk7r3g5Uu+/F2W/zMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzk3MkU4NjcxREVEQzQzRkU5MDhCNTQ4NTMxQzk2OUEw NTFDRDM0QzAeFw0yNjAzMTkxMjA3MDJaFw0yNzAzMTgxMjEyMDJaMDMxMTAvBgNV BAMTKEI2QjU3RDM5QzJCQzJBMDZEOEY4RTNDRjgxNTU5QjEyRUM3RUFGMTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDtu+pwl9cwzWDegHoPo/OQ769E DOmqq/+hncY18sDXYXHwNwEfcslU9plRD1teC4P8iYY+nXwpcSauNB/9ek8Vss9r gXhPFNtlThHpYkzAn4X0KeJBfCxc6sPhQ/DRT59/znGKyPizdthWWhVHjdHBIKoU aSoYHyhJooKl7v7Yg+WfXOa6iH0AK4aPK2iHngkNXpUvtaDoUwJsEmI67xbQdTI7 BGyN0DefKJwIuXeCJ/sPTZzMoy2Er/uSoZxEN/30yJR++mqKi15qLa4NHmsypa10 j5jCEl7gOtPKY0Qq76fSSZCdJNdStH2cWgGb9uKHL2F9ItEUMKJmpu0yKsh9AgMB AAGjggJkMIICYDAdBgNVHQ4EFgQUtrV9OcK8KgbY+OPPgVWbEux+rxQwHwYDVR0j BBgwFoAUyXLoZx3txD/pCLVIUxyWmgUc00wwDgYDVR0PAQH/BAQDAgeAMIGIBgNV HR8EgYAwfjB8oHqgeIZ2cnN5bmM6Ly9yLm1hZ2VsbGFuLmlweG8uY29tL3JlcG8v ZGRkMTgxOGItOWZiZi00NDBjLWFhZWMtNDRhNGQxNTkwZjg3LTAvMC9DOTcyRTg2 NzFERURDNDNGRTkwOEI1NDg1MzFDOTY5QTA1MUNEMzRDLmNybDCBngYIKwYBBQUH AQEEgZEwgY4wgYsGCCsGAQUFBzAChn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5y aXBlLm5ldC9yZXBvc2l0b3J5LzYxNzA4YTZiLTZjM2EtNDBhMC1hMzAyLTU5NWVj YzE3ODQ4Yy8yL0M5NzJFODY3MURFREM0M0ZFOTA4QjU0ODUzMUM5NjlBMDUxQ0Qz NEMuY2VyMIGmBggrBgEFBQcBCwSBmTCBljCBkwYIKwYBBQUHMAuGgYZyc3luYzov L3IubWFnZWxsYW4uaXB4by5jb20vcmVwby9kZGQxODE4Yi05ZmJmLTQ0MGMtYWFl Yy00NGE0ZDE1OTBmODctMC8wLzMxMzAzOTJlMzczMjJlMzEzMjM0MmUzMDJmMzIz NDJkMzIzNDIwM2QzZTIwMzIzMTM0MzAzMjM1LnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAbUh8MA0GCSqG SIb3DQEBCwUAA4IBAQCEZaTHgQzllLJEXu4SjoH7E93ERo1E7Ce57ZpNRHNVbLzp OVY1hLq3Tp7SM3MxghKg3R4v0VJJVWLAnd2H8lIFcrye9QLMjo7Fkc2UJhm906E7 zcLA4jkOpeCfMtXrEuhM6v0Ici6IqZgYrLNOuL6JRkiZ5r2Uu7zyB2zoUrzb350X Jevp6B+vdurRQlysj5WLzK+/VGMRjUD8yxZAU7wsWq0dHm5kmtbuEH9lr5Q2kkmJ QuCqYwRiezDJjsJ71K8TNGybqkw8hjO1oP3g3hUbseVeIzPZy6zWZI1H/4WKeV8Q e5DZNSVLl86z7tFZGY085viobPeTwr2i5SEy5S8W -----END CERTIFICATE-----Generated at Thu Mar 26 03:13:43 2026 by rpki-client