$ rpki-client -vvf r.magellan.ipxo.com/repo/ddd1818b-9fbf-440c-aaec-44a4d1590f87-0/0/3130392e37322e3132312e302f32342d3234203d3e20343032323336.roa File: 3130392e37322e3132312e302f32342d3234203d3e20343032323336.roa (raw, json) Hash identifier: MYaMCpdt7v8eAjLJEbHKfek9X43OdryCMBq4dsrc8V4= Subject key identifier: 99:8B:59:9C:A9:63:AD:3E:1A:5E:38:BD:93:46:8F:E1:79:E6:E6:49 Certificate issuer: /CN=C972E8671DEDC43FE908B548531C969A051CD34C Certificate serial: 13F8CAB09B752ABEFB461307ECA0E70BCA3A4863 Authority key identifier: C9:72:E8:67:1D:ED:C4:3F:E9:08:B5:48:53:1C:96:9A:05:1C:D3:4C Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/2/C972E8671DEDC43FE908B548531C969A051CD34C.cer Subject info access: rsync://r.magellan.ipxo.com/repo/ddd1818b-9fbf-440c-aaec-44a4d1590f87-0/0/3130392e37322e3132312e302f32342d3234203d3e20343032323336.roa Signing time: Mon 06 Jul 2026 18:22:47 +0000 ROA not before: Mon 06 Jul 2026 18:17:47 +0000 ROA not after: Mon 05 Jul 2027 18:22:47 +0000 asID: 402236 IP address blocks: 109.72.121.0/24 maxlen: 24 Validation: OK Signature path: rsync://r.magellan.ipxo.com/repo/ddd1818b-9fbf-440c-aaec-44a4d1590f87-0/0/C972E8671DEDC43FE908B548531C969A051CD34C.crl rsync://r.magellan.ipxo.com/repo/ddd1818b-9fbf-440c-aaec-44a4d1590f87-0/0/C972E8671DEDC43FE908B548531C969A051CD34C.mft rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/2/C972E8671DEDC43FE908B548531C969A051CD34C.cer rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/2/CF0631D33A3C9DC5C45424D55C3E7663838657A3.crl rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/2/CF0631D33A3C9DC5C45424D55C3E7663838657A3.mft rsync://rpki.ripe.net/repository/DEFAULT/zwYx0zo8ncXEVCTVXD52Y4OGV6M.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 18 Jul 2026 09:59:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13:f8:ca:b0:9b:75:2a:be:fb:46:13:07:ec:a0:e7:0b:ca:3a:48:63 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C972E8671DEDC43FE908B548531C969A051CD34C Validity Not Before: Jul 6 18:17:47 2026 GMT Not After : Jul 5 18:22:47 2027 GMT Subject: CN=998B599CA963AD3E1A5E38BD93468FE179E6E649 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:fc:41:c5:92:d3:5f:b7:f5:18:2d:a5:0f:c6:bc: d2:85:31:0f:88:2c:30:12:3c:6f:bf:50:0f:59:0a: ce:e0:49:d6:bb:65:8d:ed:98:5a:dc:8e:03:3b:60: af:aa:05:c3:cb:b2:d7:62:e1:4e:69:49:fa:5b:f9: 2f:6d:19:4c:96:de:5f:e0:9c:78:72:b3:5c:aa:1c: 64:87:c3:a3:20:96:2a:3d:20:41:df:47:7f:e7:c7: f9:22:51:4d:61:a4:6a:dc:18:23:67:d2:da:0a:18: fa:b5:14:b5:c8:00:ad:1b:76:6f:b8:e7:89:e4:73: ff:b9:b6:49:dc:8d:f7:41:48:fd:1a:1c:e1:d7:4c: ac:76:12:e7:ce:de:48:17:20:ef:60:91:fc:26:90: 23:ff:13:c2:f0:25:5a:c8:1e:b1:28:b3:c2:97:7a: 94:11:42:c5:11:7a:d0:36:84:89:ac:76:5a:19:7f: 9d:06:d6:ea:a4:6b:2a:31:5e:cd:d6:e0:a2:7d:95: ba:38:cd:66:2e:8b:67:f6:02:15:b2:81:53:ec:96: 95:ed:5f:61:ff:60:24:b2:80:8f:20:d5:fe:69:82: 27:1d:b6:dd:d5:e3:7c:88:44:ec:fa:8b:d1:96:9b: 14:f0:3b:16:48:b7:8b:f7:b2:aa:4c:50:bf:db:4a: 2d:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:8B:59:9C:A9:63:AD:3E:1A:5E:38:BD:93:46:8F:E1:79:E6:E6:49 X509v3 Authority Key Identifier: keyid:C9:72:E8:67:1D:ED:C4:3F:E9:08:B5:48:53:1C:96:9A:05:1C:D3:4C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://r.magellan.ipxo.com/repo/ddd1818b-9fbf-440c-aaec-44a4d1590f87-0/0/C972E8671DEDC43FE908B548531C969A051CD34C.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/2/C972E8671DEDC43FE908B548531C969A051CD34C.cer Subject Information Access: Signed Object - URI:rsync://r.magellan.ipxo.com/repo/ddd1818b-9fbf-440c-aaec-44a4d1590f87-0/0/3130392e37322e3132312e302f32342d3234203d3e20343032323336.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 109.72.121.0/24 Signature Algorithm: sha256WithRSAEncryption 45:71:31:9d:27:0e:dd:4b:a8:11:e8:a8:4a:bc:36:75:c8:e2: b6:75:1d:d3:02:44:50:13:13:2e:f7:ce:70:e5:59:77:1c:39: 74:90:37:eb:07:97:1f:bd:0c:b1:68:6d:6f:7d:85:f9:78:b1: 0a:bf:be:a8:a1:7b:8d:1c:5d:99:c8:b8:62:12:e0:0a:47:61: 06:34:4a:d5:ba:8b:7b:31:a6:b4:b8:23:b3:16:55:81:14:d2: 7d:01:a6:e3:a2:92:5c:c2:bf:2f:87:87:2c:d6:20:fd:0e:8b: bb:ca:43:b6:1f:d0:13:f6:76:de:c9:d5:fb:1b:ea:b6:fe:1f: b7:4f:e4:31:28:c2:39:de:d1:e9:4e:1b:e0:d9:c3:88:4f:42: 65:27:bc:4f:70:73:5b:c3:76:eb:4d:97:ae:42:24:84:ea:94: 89:dc:aa:bc:f9:d9:0b:01:08:26:5e:0b:39:17:7b:0c:f6:2f: 14:88:46:b7:99:a2:62:37:77:c5:a1:a4:29:78:d5:ae:82:fb: 31:4a:93:bd:14:45:ac:92:84:ad:ed:7d:1e:75:b3:26:0f:f5: 55:c2:39:22:a9:b7:b6:bc:2e:9e:d7:87:31:0d:c4:5e:cb:80: 8d:b4:3b:83:e6:a8:43:21:8f:fc:15:20:f9:5c:79:c5:8a:ae: 40:c1:2e:f6 -----BEGIN CERTIFICATE----- MIIFWjCCBEKgAwIBAgIUE/jKsJt1Kr77RhMH7KDnC8o6SGMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzk3MkU4NjcxREVEQzQzRkU5MDhCNTQ4NTMxQzk2OUEw NTFDRDM0QzAeFw0yNjA3MDYxODE3NDdaFw0yNzA3MDUxODIyNDdaMDMxMTAvBgNV BAMTKDk5OEI1OTlDQTk2M0FEM0UxQTVFMzhCRDkzNDY4RkUxNzlFNkU2NDkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD8QcWS01+39RgtpQ/GvNKFMQ+I LDASPG+/UA9ZCs7gSda7ZY3tmFrcjgM7YK+qBcPLstdi4U5pSfpb+S9tGUyW3l/g nHhys1yqHGSHw6Mglio9IEHfR3/nx/kiUU1hpGrcGCNn0toKGPq1FLXIAK0bdm+4 54nkc/+5tkncjfdBSP0aHOHXTKx2EufO3kgXIO9gkfwmkCP/E8LwJVrIHrEos8KX epQRQsURetA2hImsdloZf50G1uqkayoxXs3W4KJ9lbo4zWYui2f2AhWygVPslpXt X2H/YCSygI8g1f5pgicdtt3V43yIROz6i9GWmxTwOxZIt4v3sqpMUL/bSi2LAgMB AAGjggJkMIICYDAdBgNVHQ4EFgQUmYtZnKljrT4aXji9k0aP4Xnm5kkwHwYDVR0j BBgwFoAUyXLoZx3txD/pCLVIUxyWmgUc00wwDgYDVR0PAQH/BAQDAgeAMIGIBgNV HR8EgYAwfjB8oHqgeIZ2cnN5bmM6Ly9yLm1hZ2VsbGFuLmlweG8uY29tL3JlcG8v ZGRkMTgxOGItOWZiZi00NDBjLWFhZWMtNDRhNGQxNTkwZjg3LTAvMC9DOTcyRTg2 NzFERURDNDNGRTkwOEI1NDg1MzFDOTY5QTA1MUNEMzRDLmNybDCBngYIKwYBBQUH AQEEgZEwgY4wgYsGCCsGAQUFBzAChn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5y aXBlLm5ldC9yZXBvc2l0b3J5LzYxNzA4YTZiLTZjM2EtNDBhMC1hMzAyLTU5NWVj YzE3ODQ4Yy8yL0M5NzJFODY3MURFREM0M0ZFOTA4QjU0ODUzMUM5NjlBMDUxQ0Qz NEMuY2VyMIGmBggrBgEFBQcBCwSBmTCBljCBkwYIKwYBBQUHMAuGgYZyc3luYzov L3IubWFnZWxsYW4uaXB4by5jb20vcmVwby9kZGQxODE4Yi05ZmJmLTQ0MGMtYWFl Yy00NGE0ZDE1OTBmODctMC8wLzMxMzAzOTJlMzczMjJlMzEzMjMxMmUzMDJmMzIz NDJkMzIzNDIwM2QzZTIwMzQzMDMyMzIzMzM2LnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAbUh5MA0GCSqG SIb3DQEBCwUAA4IBAQBFcTGdJw7dS6gR6KhKvDZ1yOK2dR3TAkRQExMu985w5Vl3 HDl0kDfrB5cfvQyxaG1vfYX5eLEKv76ooXuNHF2ZyLhiEuAKR2EGNErVuot7Maa0 uCOzFlWBFNJ9AabjopJcwr8vh4cs1iD9Dou7ykO2H9AT9nbeydX7G+q2/h+3T+Qx KMI53tHpThvg2cOIT0JlJ7xPcHNbw3brTZeuQiSE6pSJ3Kq8+dkLAQgmXgs5F3sM 9i8UiEa3maJiN3fFoaQpeNWugvsxSpO9FEWskoSt7X0edbMmD/VVwjkiqbe2vC6e 14cxDcRey4CNtDuD5qhDIY/8FSD5XHnFiq5AwS72 -----END CERTIFICATE-----Generated at Sat Jul 18 02:16:32 2026 by rpki-client