$ rpki-client -vvvf r.magellan.ipxo.com/repo/ddd1818b-9fbf-440c-aaec-44a4d1590f87-0/0/3130392e37322e3131382e302f32342d3234203d3e20313532313739.roa File: 3130392e37322e3131382e302f32342d3234203d3e20313532313739.roa (raw, json) Hash identifier: YgfSNVZOrsBmjfnuDZfkZwyoSPW0VBv6BsvzI9m7S9k= Subject key identifier: 34:8E:EE:01:6D:60:33:60:DF:0B:4E:05:C5:82:C2:D9:08:53:0D:CC Certificate issuer: /CN=C972E8671DEDC43FE908B548531C969A051CD34C Certificate serial: 2566DD4816A16F6FEFAC1537B2A34E54C73C6C89 Authority key identifier: C9:72:E8:67:1D:ED:C4:3F:E9:08:B5:48:53:1C:96:9A:05:1C:D3:4C Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/2/C972E8671DEDC43FE908B548531C969A051CD34C.cer Subject info access: rsync://r.magellan.ipxo.com/repo/ddd1818b-9fbf-440c-aaec-44a4d1590f87-0/0/3130392e37322e3131382e302f32342d3234203d3e20313532313739.roa Signing time: Tue 29 Sep 2026 05:55:23 +0000 ROA not before: Tue 29 Sep 2026 05:50:23 +0000 ROA not after: Tue 28 Sep 2027 05:55:23 +0000 asID: 152179 IP address blocks: 109.72.118.0/24 maxlen: 24 Validation: OK Signature path: rsync://r.magellan.ipxo.com/repo/ddd1818b-9fbf-440c-aaec-44a4d1590f87-0/0/C972E8671DEDC43FE908B548531C969A051CD34C.crl rsync://r.magellan.ipxo.com/repo/ddd1818b-9fbf-440c-aaec-44a4d1590f87-0/0/C972E8671DEDC43FE908B548531C969A051CD34C.mft rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/2/C972E8671DEDC43FE908B548531C969A051CD34C.cer rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/2/CF0631D33A3C9DC5C45424D55C3E7663838657A3.crl rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/2/CF0631D33A3C9DC5C45424D55C3E7663838657A3.mft rsync://rpki.ripe.net/repository/DEFAULT/zwYx0zo8ncXEVCTVXD52Y4OGV6M.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Oct 2026 00:37:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 25:66:dd:48:16:a1:6f:6f:ef:ac:15:37:b2:a3:4e:54:c7:3c:6c:89 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C972E8671DEDC43FE908B548531C969A051CD34C Validity Not Before: Sep 29 05:50:23 2026 GMT Not After : Sep 28 05:55:23 2027 GMT Subject: CN=348EEE016D603360DF0B4E05C582C2D908530DCC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:46:9d:69:d9:60:f4:9e:0f:95:54:70:99:fc: 5b:33:69:94:6b:04:a3:50:9e:8f:24:62:bc:43:e1: 6e:54:f9:5a:e1:ba:ec:e9:56:91:16:5c:bf:a6:72: 2a:cf:14:f3:37:a5:be:78:73:23:84:0a:0d:9d:bb: 3f:03:4d:63:eb:0e:df:37:a6:11:5a:c0:a8:a6:68: ea:14:f9:27:34:e4:1e:be:64:12:50:02:8f:42:05: 17:f4:f7:45:8a:fa:87:03:a2:99:50:a6:99:91:ed: 2b:22:7b:cb:ea:bb:28:4b:12:9a:3b:c9:8f:2a:56: d3:f8:e5:52:1e:1a:4f:93:f1:64:14:0a:2d:6f:e2: 11:b0:6f:f5:a4:11:f9:ad:e6:38:66:fc:d7:4c:53: ee:aa:d9:cc:8f:37:78:cc:f0:14:7d:64:1d:8f:7f: cb:b2:2d:09:60:da:d7:70:8a:f6:1a:a9:b9:3b:77: d3:af:ac:ec:6b:99:a1:dd:e9:22:b6:7c:16:5a:be: f1:fb:7d:3a:23:cc:28:c2:f1:5d:d1:aa:f0:b9:25: 39:c8:03:cc:10:21:ae:f6:32:b1:12:d1:68:db:79: 9b:31:5c:e6:24:f2:53:d0:40:30:ff:97:ae:b6:aa: b3:5e:81:c6:61:6a:4a:88:01:d1:43:f5:d6:40:02: e1:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:8E:EE:01:6D:60:33:60:DF:0B:4E:05:C5:82:C2:D9:08:53:0D:CC X509v3 Authority Key Identifier: keyid:C9:72:E8:67:1D:ED:C4:3F:E9:08:B5:48:53:1C:96:9A:05:1C:D3:4C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://r.magellan.ipxo.com/repo/ddd1818b-9fbf-440c-aaec-44a4d1590f87-0/0/C972E8671DEDC43FE908B548531C969A051CD34C.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/2/C972E8671DEDC43FE908B548531C969A051CD34C.cer Subject Information Access: Signed Object - URI:rsync://r.magellan.ipxo.com/repo/ddd1818b-9fbf-440c-aaec-44a4d1590f87-0/0/3130392e37322e3131382e302f32342d3234203d3e20313532313739.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 109.72.118.0/24 Signature Algorithm: sha256WithRSAEncryption 1a:d4:93:be:df:6b:89:84:cf:ac:e3:c1:13:b6:36:7a:17:9b: e8:ee:53:8e:05:72:7f:98:8d:b0:8a:52:69:bf:0d:10:53:86: df:15:8a:cb:4b:ee:8e:c1:91:bf:39:58:54:34:f4:25:49:83: f8:2d:78:61:7a:35:40:9d:a0:be:46:42:fa:af:f1:b3:8b:09: 58:07:1f:a6:ed:2f:99:15:e9:d6:53:16:83:01:5e:fd:e6:90: 1e:17:7c:cb:d5:31:ce:d2:86:41:3f:f4:3b:fd:59:df:2c:6e: a9:59:e9:28:9d:26:19:60:1e:6a:21:16:5b:9c:aa:c8:5f:d1: 60:d9:ec:41:74:9e:30:d9:e0:93:25:e0:01:a7:5c:fe:a0:b0: 80:51:2e:25:6d:5c:d7:d0:f5:d7:83:c5:86:59:9d:ba:f4:bf: 7e:73:b8:c8:2e:eb:6c:2b:70:26:ee:44:ed:72:62:4a:0e:f7: c4:ec:9f:9e:73:7b:6c:b7:15:88:32:61:5c:79:b4:33:ef:21: 85:92:9c:e2:d1:78:a3:4e:3b:95:d4:10:2e:6d:35:80:1e:61: 4a:67:72:c8:a9:6c:1d:72:7c:21:a4:f7:20:eb:62:0c:3d:42: 62:7c:92:22:99:67:33:b9:5a:d9:d2:3e:d3:b8:40:66:7e:b6: 35:81:08:84 -----BEGIN CERTIFICATE----- MIIFWjCCBEKgAwIBAgIUJWbdSBahb2/vrBU3sqNOVMc8bIkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzk3MkU4NjcxREVEQzQzRkU5MDhCNTQ4NTMxQzk2OUEw NTFDRDM0QzAeFw0yNjA5MjkwNTUwMjNaFw0yNzA5MjgwNTU1MjNaMDMxMTAvBgNV BAMTKDM0OEVFRTAxNkQ2MDMzNjBERjBCNEUwNUM1ODJDMkQ5MDg1MzBEQ0MwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7Rp1p2WD0ng+VVHCZ/FszaZRr BKNQno8kYrxD4W5U+VrhuuzpVpEWXL+mcirPFPM3pb54cyOECg2duz8DTWPrDt83 phFawKimaOoU+Sc05B6+ZBJQAo9CBRf090WK+ocDoplQppmR7Ssie8vquyhLEpo7 yY8qVtP45VIeGk+T8WQUCi1v4hGwb/WkEfmt5jhm/NdMU+6q2cyPN3jM8BR9ZB2P f8uyLQlg2tdwivYaqbk7d9OvrOxrmaHd6SK2fBZavvH7fTojzCjC8V3RqvC5JTnI A8wQIa72MrES0WjbeZsxXOYk8lPQQDD/l662qrNegcZhakqIAdFD9dZAAuGJAgMB AAGjggJkMIICYDAdBgNVHQ4EFgQUNI7uAW1gM2DfC04FxYLC2QhTDcwwHwYDVR0j BBgwFoAUyXLoZx3txD/pCLVIUxyWmgUc00wwDgYDVR0PAQH/BAQDAgeAMIGIBgNV HR8EgYAwfjB8oHqgeIZ2cnN5bmM6Ly9yLm1hZ2VsbGFuLmlweG8uY29tL3JlcG8v ZGRkMTgxOGItOWZiZi00NDBjLWFhZWMtNDRhNGQxNTkwZjg3LTAvMC9DOTcyRTg2 NzFERURDNDNGRTkwOEI1NDg1MzFDOTY5QTA1MUNEMzRDLmNybDCBngYIKwYBBQUH AQEEgZEwgY4wgYsGCCsGAQUFBzAChn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5y aXBlLm5ldC9yZXBvc2l0b3J5LzYxNzA4YTZiLTZjM2EtNDBhMC1hMzAyLTU5NWVj YzE3ODQ4Yy8yL0M5NzJFODY3MURFREM0M0ZFOTA4QjU0ODUzMUM5NjlBMDUxQ0Qz NEMuY2VyMIGmBggrBgEFBQcBCwSBmTCBljCBkwYIKwYBBQUHMAuGgYZyc3luYzov L3IubWFnZWxsYW4uaXB4by5jb20vcmVwby9kZGQxODE4Yi05ZmJmLTQ0MGMtYWFl Yy00NGE0ZDE1OTBmODctMC8wLzMxMzAzOTJlMzczMjJlMzEzMTM4MmUzMDJmMzIz NDJkMzIzNDIwM2QzZTIwMzEzNTMyMzEzNzM5LnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAbUh2MA0GCSqG SIb3DQEBCwUAA4IBAQAa1JO+32uJhM+s48ETtjZ6F5vo7lOOBXJ/mI2wilJpvw0Q U4bfFYrLS+6OwZG/OVhUNPQlSYP4LXhhejVAnaC+RkL6r/GziwlYBx+m7S+ZFenW UxaDAV795pAeF3zL1THO0oZBP/Q7/VnfLG6pWekonSYZYB5qIRZbnKrIX9Fg2exB dJ4w2eCTJeABp1z+oLCAUS4lbVzX0PXXg8WGWZ269L9+c7jILutsK3Am7kTtcmJK DvfE7J+ec3tstxWIMmFcebQz7yGFkpzi0XijTjuV1BAubTWAHmFKZ3LIqWwdcnwh pPcg62IMPUJifJIimWczuVrZ0j7TuEBmfrY1gQiE -----END CERTIFICATE-----Generated at Mon Oct 19 20:58:17 2026 by rpki-client