$ rpki-client -vvf r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/AS137235.roa File: AS137235.roa (raw, json) Hash identifier: 0GR+HM2Z0oT8g8I3PNqrka/rm9iMGybjDmBhD40sJrs= Subject key identifier: 9B:8B:76:88:B0:01:FC:45:6C:D4:E6:71:0A:7D:4E:DA:01:3F:79:B5 Certificate issuer: /CN=D34606949D385DB42714FE71274FAC9948EF279C Certificate serial: 7154F8434389DA89F609FA263584418446D7276E Authority key identifier: D3:46:06:94:9D:38:5D:B4:27:14:FE:71:27:4F:AC:99:48:EF:27:9C Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/D34606949D385DB42714FE71274FAC9948EF279C.cer Subject info access: rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/AS137235.roa Signing time: Thu 17 Jul 2025 10:54:13 +0000 ROA not before: Thu 17 Jul 2025 10:49:13 +0000 ROA not after: Thu 16 Jul 2026 10:54:13 +0000 asID: 137235 IP address blocks: 89.117.11.0/24 maxlen: 24 Validation: OK Signature path: rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/D34606949D385DB42714FE71274FAC9948EF279C.crl rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/D34606949D385DB42714FE71274FAC9948EF279C.mft rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/D34606949D385DB42714FE71274FAC9948EF279C.cer rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/9DF85997B1B9B358E1C43F36765AA0A4A02144AE.crl rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/9DF85997B1B9B358E1C43F36765AA0A4A02144AE.mft rsync://rpki.ripe.net/repository/DEFAULT/nfhZl7G5s1jhxD82dlqgpKAhRK4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 23 Jul 2025 11:29:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 71:54:f8:43:43:89:da:89:f6:09:fa:26:35:84:41:84:46:d7:27:6e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D34606949D385DB42714FE71274FAC9948EF279C Validity Not Before: Jul 17 10:49:13 2025 GMT Not After : Jul 16 10:54:13 2026 GMT Subject: CN=9B8B7688B001FC456CD4E6710A7D4EDA013F79B5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:ad:10:4c:2f:39:ad:67:a4:27:42:e2:50:ff: 12:c7:28:96:48:05:d0:3e:34:c5:57:e6:11:82:d6: e4:39:7f:b5:69:b3:78:c8:b6:5f:3a:95:96:54:06: 0c:dc:e8:d0:2f:4c:5b:37:ff:30:ae:dc:af:b6:58: dd:4b:5c:14:45:aa:ec:29:ed:01:1d:9f:a9:04:75: b8:be:91:95:76:cf:d4:fb:14:d9:5e:20:00:d6:bc: 02:2c:db:f2:d8:ef:03:52:54:ac:24:39:c0:76:97: ae:0f:8d:b4:58:40:26:27:07:03:46:3e:0b:8d:d5: 2e:f3:34:de:03:f1:14:f0:92:c9:08:84:fd:38:e0: e2:3d:f3:44:d3:09:5d:24:1f:35:58:90:5a:ac:22: 3d:a9:c8:e0:bc:a5:15:4a:d0:5b:c1:ee:59:9f:e7: a7:2b:2f:9c:df:e4:73:bf:4f:8a:c8:83:b7:3c:d5: c5:25:a0:d2:45:d5:f3:bc:fc:a6:10:2d:91:bd:b0: 5d:8b:62:9c:3a:4b:f6:3e:d8:6c:55:ef:35:77:fe: de:33:1e:e6:03:6f:d3:e9:aa:b7:ca:2b:11:e5:a0: 81:76:0e:e9:09:ac:b1:d0:7c:98:7f:84:16:a3:f7: 33:b8:bb:c2:51:c3:c0:99:9c:7d:be:06:be:43:ee: 0b:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:8B:76:88:B0:01:FC:45:6C:D4:E6:71:0A:7D:4E:DA:01:3F:79:B5 X509v3 Authority Key Identifier: keyid:D3:46:06:94:9D:38:5D:B4:27:14:FE:71:27:4F:AC:99:48:EF:27:9C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/D34606949D385DB42714FE71274FAC9948EF279C.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/D34606949D385DB42714FE71274FAC9948EF279C.cer Subject Information Access: Signed Object - URI:rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/AS137235.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 89.117.11.0/24 Signature Algorithm: sha256WithRSAEncryption 39:6e:96:02:fc:8b:45:32:ef:48:68:3e:25:38:c0:ab:af:9f: 55:c8:72:62:6d:1a:f8:70:83:97:69:7b:77:88:89:dc:52:42: 0d:58:ea:35:a9:da:33:19:82:0a:50:ee:38:e3:0b:7b:e9:71: 9f:7c:e9:53:6d:02:8f:11:b9:f9:c4:a2:2c:a5:d4:ed:b4:9a: 0b:85:bb:07:fe:3f:ec:96:0f:35:1b:4b:5c:f6:1a:17:5a:a2: f7:b4:b4:7f:b7:2f:af:fd:d3:79:b0:b8:ef:00:23:75:f0:8f: b4:c0:74:c5:4c:ca:2f:b2:5d:2e:a6:2f:bc:a2:22:30:ea:a5: de:f9:1b:b8:c0:b5:ac:d9:0d:0d:bc:38:3a:51:9b:ad:4e:bb: 33:4c:53:a1:42:34:8b:9b:8e:bc:cf:70:dc:7c:33:08:63:4e: 78:be:d8:22:b9:23:52:e9:86:3e:ea:c6:a9:0c:d4:56:9d:c1: 04:f9:6e:2b:38:92:cf:55:09:a1:91:fd:f5:72:22:69:da:f5: 5a:89:ff:ff:c2:32:73:be:9b:a2:05:ff:64:f6:7e:f0:eb:16: 7b:95:87:bc:a0:8d:ff:74:9e:fd:1d:e6:b3:eb:aa:77:64:0f: 62:c2:e3:7f:94:a6:49:76:96:8f:1f:0d:a5:16:53:9d:f1:9f: 21:c2:a8:53 -----BEGIN CERTIFICATE----- MIIFJTCCBA2gAwIBAgIUcVT4Q0OJ2on2CfomNYRBhEbXJ24wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDM0NjA2OTQ5RDM4NURCNDI3MTRGRTcxMjc0RkFDOTk0 OEVGMjc5QzAeFw0yNTA3MTcxMDQ5MTNaFw0yNjA3MTYxMDU0MTNaMDMxMTAvBgNV BAMTKDlCOEI3Njg4QjAwMUZDNDU2Q0Q0RTY3MTBBN0Q0RURBMDEzRjc5QjUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDkrRBMLzmtZ6QnQuJQ/xLHKJZI BdA+NMVX5hGC1uQ5f7Vps3jItl86lZZUBgzc6NAvTFs3/zCu3K+2WN1LXBRFquwp 7QEdn6kEdbi+kZV2z9T7FNleIADWvAIs2/LY7wNSVKwkOcB2l64PjbRYQCYnBwNG PguN1S7zNN4D8RTwkskIhP044OI980TTCV0kHzVYkFqsIj2pyOC8pRVK0FvB7lmf 56crL5zf5HO/T4rIg7c81cUloNJF1fO8/KYQLZG9sF2LYpw6S/Y+2GxV7zV3/t4z HuYDb9PpqrfKKxHloIF2DukJrLHQfJh/hBaj9zO4u8JRw8CZnH2+Br5D7gtBAgMB AAGjggIvMIICKzAdBgNVHQ4EFgQUm4t2iLAB/EVs1OZxCn1O2gE/ebUwHwYDVR0j BBgwFoAU00YGlJ04XbQnFP5xJ0+smUjvJ5wwDgYDVR0PAQH/BAQDAgeAMIGIBgNV HR8EgYAwfjB8oHqgeIZ2cnN5bmM6Ly9yLm1hZ2VsbGFuLmlweG8uY29tL3JlcG8v NTI4YTIxOGYtYWQyOC00MGQyLWJkN2YtMzUwZWFkYTNkNzA1LTAvMC9EMzQ2MDY5 NDlEMzg1REI0MjcxNEZFNzEyNzRGQUM5OTQ4RUYyNzlDLmNybDCBngYIKwYBBQUH AQEEgZEwgY4wgYsGCCsGAQUFBzAChn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5y aXBlLm5ldC9yZXBvc2l0b3J5LzAwMmUwYmEzLWZlNjAtNDViMS05MTYwLTg2OGEy ZjhhNDNiMS8zL0QzNDYwNjk0OUQzODVEQjQyNzE0RkU3MTI3NEZBQzk5NDhFRjI3 OUMuY2VyMHIGCCsGAQUFBwELBGYwZDBiBggrBgEFBQcwC4ZWcnN5bmM6Ly9yLm1h Z2VsbGFuLmlweG8uY29tL3JlcG8vNTI4YTIxOGYtYWQyOC00MGQyLWJkN2YtMzUw ZWFkYTNkNzA1LTAvMC9BUzEzNzIzNS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEF BQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAFl1CzANBgkqhkiG9w0B AQsFAAOCAQEAOW6WAvyLRTLvSGg+JTjAq6+fVchyYm0a+HCDl2l7d4iJ3FJCDVjq NanaMxmCClDuOOMLe+lxn3zpU20CjxG5+cSiLKXU7bSaC4W7B/4/7JYPNRtLXPYa F1qi97S0f7cvr/3TebC47wAjdfCPtMB0xUzKL7JdLqYvvKIiMOql3vkbuMC1rNkN Dbw4OlGbrU67M0xToUI0i5uOvM9w3HwzCGNOeL7YIrkjUumGPurGqQzUVp3BBPlu KziSz1UJoZH99XIiadr1Won//8Iyc76bogX/ZPZ+8OsWe5WHvKCN/3Se/R3ms+uq d2QPYsLjf5SmSXaWjx8NpRZTnfGfIcKoUw== -----END CERTIFICATE-----Generated at Wed Jul 23 02:11:11 2025 by rpki-client