$ rpki-client -vvf r.magellan.ipxo.com/repo/ddd1818b-9fbf-440c-aaec-44a4d1590f87-0/0/3130392e37322e3132342e302f32342d3234203d3e2036323036.roa File: 3130392e37322e3132342e302f32342d3234203d3e2036323036.roa (raw, json) Hash identifier: CNQ98nw98qMn3ZK2Q49E7wLFQCzQ34BegbOeqm4diMk= Subject key identifier: 83:1E:40:27:13:98:3F:BF:3F:67:64:18:90:5E:BD:49:63:08:33:85 Certificate issuer: /CN=C972E8671DEDC43FE908B548531C969A051CD34C Certificate serial: 48FB4D220EB8C54F1644AB84F97F374DA9CF0C5A Authority key identifier: C9:72:E8:67:1D:ED:C4:3F:E9:08:B5:48:53:1C:96:9A:05:1C:D3:4C Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/2/C972E8671DEDC43FE908B548531C969A051CD34C.cer Subject info access: rsync://r.magellan.ipxo.com/repo/ddd1818b-9fbf-440c-aaec-44a4d1590f87-0/0/3130392e37322e3132342e302f32342d3234203d3e2036323036.roa Signing time: Mon 25 May 2026 01:06:07 +0000 ROA not before: Mon 25 May 2026 01:01:07 +0000 ROA not after: Mon 24 May 2027 01:06:07 +0000 asID: 6206 IP address blocks: 109.72.124.0/24 maxlen: 24 Validation: OK Signature path: rsync://r.magellan.ipxo.com/repo/ddd1818b-9fbf-440c-aaec-44a4d1590f87-0/0/C972E8671DEDC43FE908B548531C969A051CD34C.crl rsync://r.magellan.ipxo.com/repo/ddd1818b-9fbf-440c-aaec-44a4d1590f87-0/0/C972E8671DEDC43FE908B548531C969A051CD34C.mft rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/2/C972E8671DEDC43FE908B548531C969A051CD34C.cer rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/2/CF0631D33A3C9DC5C45424D55C3E7663838657A3.crl rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/2/CF0631D33A3C9DC5C45424D55C3E7663838657A3.mft rsync://rpki.ripe.net/repository/DEFAULT/zwYx0zo8ncXEVCTVXD52Y4OGV6M.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 03 Jun 2026 05:42:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 48:fb:4d:22:0e:b8:c5:4f:16:44:ab:84:f9:7f:37:4d:a9:cf:0c:5a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C972E8671DEDC43FE908B548531C969A051CD34C Validity Not Before: May 25 01:01:07 2026 GMT Not After : May 24 01:06:07 2027 GMT Subject: CN=831E402713983FBF3F676418905EBD4963083385 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:52:d0:3b:37:de:81:80:5f:ca:51:ce:a3:e4: f5:f4:1a:7e:51:38:61:bc:b3:86:cd:5d:a8:76:90: 7f:ae:de:6e:19:2b:ca:23:b1:c6:9e:b1:8f:6e:88: 68:4e:46:7f:68:64:b5:4c:60:f3:e6:81:4f:3d:7a: 3c:5f:0d:f0:08:06:23:6e:d1:be:8e:5b:d8:70:44: ad:07:dd:eb:f1:b7:ff:f0:9b:35:5f:a2:75:a6:4b: 3f:56:c3:bb:5a:92:ce:31:6d:4b:36:de:8f:3c:7b: b0:1e:2a:37:c8:53:df:e6:83:38:c2:91:62:b4:be: 0b:23:8d:4a:8a:88:41:77:c2:2f:e2:70:ab:b1:ec: f2:c6:1b:49:5d:e8:9a:85:f4:be:60:fc:00:e3:7a: ec:67:88:f7:d0:cb:1c:a8:a7:76:db:8c:05:20:3e: da:b1:d9:27:4a:13:c2:3d:10:dc:9b:f0:a3:a2:0d: ea:29:06:6c:28:4e:1c:a1:fc:32:d3:93:21:7f:42: 08:05:ad:0a:ed:ea:ac:ff:30:82:63:e5:90:de:b6: 69:1c:b5:b9:7b:57:d6:20:a6:42:23:1a:42:a3:29: 1c:de:bf:86:d6:9c:bf:07:dd:68:66:66:b9:38:e4: 78:d5:87:66:cc:49:38:86:a8:63:95:6e:bc:5e:58: b8:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:1E:40:27:13:98:3F:BF:3F:67:64:18:90:5E:BD:49:63:08:33:85 X509v3 Authority Key Identifier: keyid:C9:72:E8:67:1D:ED:C4:3F:E9:08:B5:48:53:1C:96:9A:05:1C:D3:4C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://r.magellan.ipxo.com/repo/ddd1818b-9fbf-440c-aaec-44a4d1590f87-0/0/C972E8671DEDC43FE908B548531C969A051CD34C.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/2/C972E8671DEDC43FE908B548531C969A051CD34C.cer Subject Information Access: Signed Object - URI:rsync://r.magellan.ipxo.com/repo/ddd1818b-9fbf-440c-aaec-44a4d1590f87-0/0/3130392e37322e3132342e302f32342d3234203d3e2036323036.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 109.72.124.0/24 Signature Algorithm: sha256WithRSAEncryption a3:46:05:e0:75:2e:70:c2:32:cb:32:34:0a:87:f3:2b:fa:5f: c8:09:9d:7b:ee:a5:b9:3f:fb:a0:c7:ae:4c:ef:4b:58:b3:5e: 41:37:f6:22:86:f6:1d:92:29:8f:33:59:74:65:e9:bd:17:e2: ab:be:c8:be:57:88:7b:3b:74:3d:15:09:81:9a:99:2a:5b:5d: 48:7a:10:5e:bc:0e:a3:c4:4c:8c:d4:2a:cc:cc:e7:c4:f0:5d: ac:d7:b7:52:b2:94:40:d4:55:ce:1e:73:bb:5f:58:df:55:ee: eb:bc:e7:11:a7:7c:54:b1:28:d6:36:00:7a:11:2e:3e:7a:40: 5c:22:5e:99:18:64:a8:b8:a8:e9:2a:82:6e:9d:97:25:a5:20: cf:80:50:9f:16:11:38:5d:71:bd:b1:09:cc:6c:2e:59:cb:6a: fe:0b:24:ff:0d:9f:4e:83:c5:43:0c:e3:23:42:13:de:bc:72: 71:13:3e:fb:68:44:dd:7c:3f:6c:ca:1f:37:79:6c:cf:29:3b: a8:68:29:5a:51:ae:fb:2d:2c:5e:6f:27:bd:1b:17:ee:89:e4: 1b:a9:04:18:eb:27:e9:b6:b2:3c:b0:41:f9:76:6e:29:b4:c9: 1c:86:02:9b:e5:ea:19:c5:b7:fe:d6:32:67:07:5d:eb:59:41: c6:4e:1b:02 -----BEGIN CERTIFICATE----- MIIFVjCCBD6gAwIBAgIUSPtNIg64xU8WRKuE+X83TanPDFowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzk3MkU4NjcxREVEQzQzRkU5MDhCNTQ4NTMxQzk2OUEw NTFDRDM0QzAeFw0yNjA1MjUwMTAxMDdaFw0yNzA1MjQwMTA2MDdaMDMxMTAvBgNV BAMTKDgzMUU0MDI3MTM5ODNGQkYzRjY3NjQxODkwNUVCRDQ5NjMwODMzODUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDOUtA7N96BgF/KUc6j5PX0Gn5R OGG8s4bNXah2kH+u3m4ZK8ojscaesY9uiGhORn9oZLVMYPPmgU89ejxfDfAIBiNu 0b6OW9hwRK0H3evxt//wmzVfonWmSz9Ww7taks4xbUs23o88e7AeKjfIU9/mgzjC kWK0vgsjjUqKiEF3wi/icKux7PLGG0ld6JqF9L5g/ADjeuxniPfQyxyop3bbjAUg Ptqx2SdKE8I9ENyb8KOiDeopBmwoThyh/DLTkyF/QggFrQrt6qz/MIJj5ZDetmkc tbl7V9YgpkIjGkKjKRzev4bWnL8H3WhmZrk45HjVh2bMSTiGqGOVbrxeWLh1AgMB AAGjggJgMIICXDAdBgNVHQ4EFgQUgx5AJxOYP78/Z2QYkF69SWMIM4UwHwYDVR0j BBgwFoAUyXLoZx3txD/pCLVIUxyWmgUc00wwDgYDVR0PAQH/BAQDAgeAMIGIBgNV HR8EgYAwfjB8oHqgeIZ2cnN5bmM6Ly9yLm1hZ2VsbGFuLmlweG8uY29tL3JlcG8v ZGRkMTgxOGItOWZiZi00NDBjLWFhZWMtNDRhNGQxNTkwZjg3LTAvMC9DOTcyRTg2 NzFERURDNDNGRTkwOEI1NDg1MzFDOTY5QTA1MUNEMzRDLmNybDCBngYIKwYBBQUH AQEEgZEwgY4wgYsGCCsGAQUFBzAChn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5y aXBlLm5ldC9yZXBvc2l0b3J5LzYxNzA4YTZiLTZjM2EtNDBhMC1hMzAyLTU5NWVj YzE3ODQ4Yy8yL0M5NzJFODY3MURFREM0M0ZFOTA4QjU0ODUzMUM5NjlBMDUxQ0Qz NEMuY2VyMIGiBggrBgEFBQcBCwSBlTCBkjCBjwYIKwYBBQUHMAuGgYJyc3luYzov L3IubWFnZWxsYW4uaXB4by5jb20vcmVwby9kZGQxODE4Yi05ZmJmLTQ0MGMtYWFl Yy00NGE0ZDE1OTBmODctMC8wLzMxMzAzOTJlMzczMjJlMzEzMjM0MmUzMDJmMzIz NDJkMzIzNDIwM2QzZTIwMzYzMjMwMzYucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYB BQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABtSHwwDQYJKoZIhvcN AQELBQADggEBAKNGBeB1LnDCMssyNAqH8yv6X8gJnXvupbk/+6DHrkzvS1izXkE3 9iKG9h2SKY8zWXRl6b0X4qu+yL5XiHs7dD0VCYGamSpbXUh6EF68DqPETIzUKszM 58TwXazXt1KylEDUVc4ec7tfWN9V7uu85xGnfFSxKNY2AHoRLj56QFwiXpkYZKi4 qOkqgm6dlyWlIM+AUJ8WEThdcb2xCcxsLlnLav4LJP8Nn06DxUMM4yNCE968cnET PvtoRN18P2zKHzd5bM8pO6hoKVpRrvstLF5vJ70bF+6J5BupBBjrJ+m2sjywQfl2 bim0yRyGApvl6hnFt/7WMmcHXetZQcZOGwI= -----END CERTIFICATE-----Generated at Tue Jun 2 21:39:21 2026 by rpki-client