$ rpki-client -vvf r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/3136392e34302e3130382e302f32342d3234203d3e20313734.roa File: 3136392e34302e3130382e302f32342d3234203d3e20313734.roa (raw, json) Hash identifier: xBb+g8i3bnrXdliN29nVhJeVMdzhd2wlsaJuKWvOOJ0= Subject key identifier: 3A:D1:C6:38:07:A0:C4:66:2B:BE:43:78:E5:59:B1:E6:83:DF:34:18 Certificate issuer: /CN=AEF766F103B2EF99DF8C71978A7FE519D730B155 Certificate serial: 1F18019FCB3B90F80DA73E0BC2567FA9621D1E7E Authority key identifier: AE:F7:66:F1:03:B2:EF:99:DF:8C:71:97:8A:7F:E5:19:D7:30:B1:55 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AEF766F103B2EF99DF8C71978A7FE519D730B155.cer Subject info access: rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/3136392e34302e3130382e302f32342d3234203d3e20313734.roa Signing time: Thu 12 Feb 2026 01:05:05 +0000 ROA not before: Thu 12 Feb 2026 01:00:05 +0000 ROA not after: Thu 11 Feb 2027 01:05:05 +0000 asID: 174 IP address blocks: 169.40.108.0/24 maxlen: 24 Validation: OK Signature path: rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AEF766F103B2EF99DF8C71978A7FE519D730B155.crl rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AEF766F103B2EF99DF8C71978A7FE519D730B155.mft rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AEF766F103B2EF99DF8C71978A7FE519D730B155.cer rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 26 Feb 2026 22:54:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1f:18:01:9f:cb:3b:90:f8:0d:a7:3e:0b:c2:56:7f:a9:62:1d:1e:7e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AEF766F103B2EF99DF8C71978A7FE519D730B155 Validity Not Before: Feb 12 01:00:05 2026 GMT Not After : Feb 11 01:05:05 2027 GMT Subject: CN=3AD1C63807A0C4662BBE4378E559B1E683DF3418 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:f6:0e:82:fb:ee:38:6d:6a:5e:c1:bd:6e:95: 15:6e:1e:87:f6:ee:53:56:e9:6a:e7:74:77:74:85: a1:9f:d9:26:9d:46:94:3a:51:c6:95:f1:99:78:df: ec:09:79:33:17:69:e8:df:72:ac:ff:42:e5:c1:a2: 71:e7:d0:36:25:7d:ce:64:70:c8:d7:c3:c6:28:27: b1:5e:e8:56:23:a8:67:fb:22:74:3d:61:8b:46:17: 8c:b8:3d:ff:83:b3:9f:32:f2:79:3c:fe:da:d9:14: b2:6b:70:4a:55:3a:1d:1a:02:cd:fe:4e:da:1b:73: 3d:d8:3c:db:0a:a2:86:63:d2:c0:53:a7:12:d4:50: 97:7d:0a:44:1f:87:2a:04:c7:19:2c:fd:7a:06:90: 2c:40:7e:3d:56:18:62:62:b5:b2:dc:65:74:c5:27: 94:b2:5f:f8:16:3e:92:b9:f8:37:c1:4a:69:c6:dd: 50:00:ac:25:93:94:76:28:de:4d:c4:6f:d3:b1:ea: bd:ea:93:c7:3b:c6:72:11:2e:f2:32:45:4d:0d:1d: 12:79:99:ca:41:75:e6:60:b1:12:2f:19:6f:10:43: 45:b7:d9:90:3c:ed:0d:f8:a1:63:a0:5a:9a:77:3f: 25:1e:7a:01:f2:a5:43:fd:7d:b5:7f:b6:da:35:40: 60:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:D1:C6:38:07:A0:C4:66:2B:BE:43:78:E5:59:B1:E6:83:DF:34:18 X509v3 Authority Key Identifier: keyid:AE:F7:66:F1:03:B2:EF:99:DF:8C:71:97:8A:7F:E5:19:D7:30:B1:55 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AEF766F103B2EF99DF8C71978A7FE519D730B155.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AEF766F103B2EF99DF8C71978A7FE519D730B155.cer Subject Information Access: Signed Object - URI:rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/3136392e34302e3130382e302f32342d3234203d3e20313734.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 169.40.108.0/24 Signature Algorithm: sha256WithRSAEncryption 86:1a:3d:4c:18:b7:46:df:d7:ce:64:60:f0:b6:15:bd:b9:f4: a0:1d:9f:1c:af:af:69:e6:d9:21:8a:06:ce:3e:d9:e5:8a:dc: 18:a4:b2:4a:40:94:c1:ef:fd:95:ca:13:37:ae:74:cb:4d:e3: 93:b3:ea:af:6c:7f:56:89:bd:9a:8d:e6:01:d5:2f:70:4c:c0: d8:55:96:bb:22:5a:39:1b:f6:d9:f7:d4:d5:92:c2:1e:a6:20: 1d:11:df:1f:de:7c:38:29:59:0a:c0:86:ea:05:49:07:4d:e7: 80:f1:a2:66:6d:e0:7e:d5:ad:f2:ff:93:e4:dc:a9:35:1c:03: 5f:e3:66:5f:e2:ba:7e:b4:e0:3b:78:2d:a3:30:3d:6c:09:70: 94:96:af:33:ef:a5:c3:68:05:f5:fa:b8:df:2c:be:c9:ca:6e: 10:51:d6:b9:13:a8:33:72:e9:e1:54:87:d0:b1:8b:bd:0f:b3: 43:43:d2:a1:7f:77:f9:ed:81:e3:18:15:ff:45:db:0a:24:d9: ec:4c:af:9c:50:6a:d9:14:b2:a1:97:34:66:88:cc:3a:37:c8: d3:f3:24:b8:52:ce:04:51:fa:ca:80:0e:03:12:ec:55:1f:e3: a4:95:15:d4:03:83:96:d9:34:80:04:cb:8d:f9:f4:1a:6b:8a: 26:b1:e1:77 -----BEGIN CERTIFICATE----- MIIFVDCCBDygAwIBAgIUHxgBn8s7kPgNpz4LwlZ/qWIdHn4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUVGNzY2RjEwM0IyRUY5OURGOEM3MTk3OEE3RkU1MTlE NzMwQjE1NTAeFw0yNjAyMTIwMTAwMDVaFw0yNzAyMTEwMTA1MDVaMDMxMTAvBgNV BAMTKDNBRDFDNjM4MDdBMEM0NjYyQkJFNDM3OEU1NTlCMUU2ODNERjM0MTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCe9g6C++44bWpewb1ulRVuHof2 7lNW6WrndHd0haGf2SadRpQ6UcaV8Zl43+wJeTMXaejfcqz/QuXBonHn0DYlfc5k cMjXw8YoJ7Fe6FYjqGf7InQ9YYtGF4y4Pf+Ds58y8nk8/trZFLJrcEpVOh0aAs3+ Ttobcz3YPNsKooZj0sBTpxLUUJd9CkQfhyoExxks/XoGkCxAfj1WGGJitbLcZXTF J5SyX/gWPpK5+DfBSmnG3VAArCWTlHYo3k3Eb9Ox6r3qk8c7xnIRLvIyRU0NHRJ5 mcpBdeZgsRIvGW8QQ0W32ZA87Q34oWOgWpp3PyUeegHypUP9fbV/tto1QGAvAgMB AAGjggJeMIICWjAdBgNVHQ4EFgQUOtHGOAegxGYrvkN45Vmx5oPfNBgwHwYDVR0j BBgwFoAUrvdm8QOy75nfjHGXin/lGdcwsVUwDgYDVR0PAQH/BAQDAgeAMIGIBgNV HR8EgYAwfjB8oHqgeIZ2cnN5bmM6Ly9yLm1hZ2VsbGFuLmlweG8uY29tL3JlcG8v MzAzMjdiOWUtMjI3YS00ZWJkLTgyNWItM2I5ODA5NWRjOTI3LTAvMC9BRUY3NjZG MTAzQjJFRjk5REY4QzcxOTc4QTdGRTUxOUQ3MzBCMTU1LmNybDCBngYIKwYBBQUH AQEEgZEwgY4wgYsGCCsGAQUFBzAChn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5y aXBlLm5ldC9yZXBvc2l0b3J5L2ZlMzcwOGEwLTY3ZDUtNGFjMi1hYmM0LWEzMzI1 OTBiOTlhZi80L0FFRjc2NkYxMDNCMkVGOTlERjhDNzE5NzhBN0ZFNTE5RDczMEIx NTUuY2VyMIGgBggrBgEFBQcBCwSBkzCBkDCBjQYIKwYBBQUHMAuGgYByc3luYzov L3IubWFnZWxsYW4uaXB4by5jb20vcmVwby8zMDMyN2I5ZS0yMjdhLTRlYmQtODI1 Yi0zYjk4MDk1ZGM5MjctMC8wLzMxMzYzOTJlMzQzMDJlMzEzMDM4MmUzMDJmMzIz NDJkMzIzNDIwM2QzZTIwMzEzNzM0LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAqShsMA0GCSqGSIb3DQEB CwUAA4IBAQCGGj1MGLdG39fOZGDwthW9ufSgHZ8cr69p5tkhigbOPtnlitwYpLJK QJTB7/2VyhM3rnTLTeOTs+qvbH9Wib2ajeYB1S9wTMDYVZa7Ilo5G/bZ99TVksIe piAdEd8f3nw4KVkKwIbqBUkHTeeA8aJmbeB+1a3y/5Pk3Kk1HANf42Zf4rp+tOA7 eC2jMD1sCXCUlq8z76XDaAX1+rjfLL7Jym4QUda5E6gzcunhVIfQsYu9D7NDQ9Kh f3f57YHjGBX/RdsKJNnsTK+cUGrZFLKhlzRmiMw6N8jT8yS4Us4EUfrKgA4DEuxV H+OklRXUA4OW2TSABMuN+fQaa4omseF3 -----END CERTIFICATE-----Generated at Thu Feb 26 10:33:03 2026 by rpki-client