$ rpki-client -vvf r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/AS393942.roa File: AS393942.roa (raw, json) Hash identifier: 3L4D64vgcCYx/XQQpY0pcWCGAAIdWovSCSsQlvwd4cA= Subject key identifier: E9:C8:46:FD:90:80:A2:03:88:81:37:EF:60:9A:55:22:8F:EE:BE:AC Certificate issuer: /CN=D34606949D385DB42714FE71274FAC9948EF279C Certificate serial: 2842AFAD41472B5936D15E103BCC7AF16A92DF6C Authority key identifier: D3:46:06:94:9D:38:5D:B4:27:14:FE:71:27:4F:AC:99:48:EF:27:9C Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/D34606949D385DB42714FE71274FAC9948EF279C.cer Subject info access: rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/AS393942.roa Signing time: Mon 14 Jul 2025 09:33:31 +0000 ROA not before: Mon 14 Jul 2025 09:28:31 +0000 ROA not after: Mon 13 Jul 2026 09:33:31 +0000 asID: 393942 IP address blocks: 86.38.187.0/24 maxlen: 24 Validation: OK Signature path: rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/D34606949D385DB42714FE71274FAC9948EF279C.crl rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/D34606949D385DB42714FE71274FAC9948EF279C.mft rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/D34606949D385DB42714FE71274FAC9948EF279C.cer rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/9DF85997B1B9B358E1C43F36765AA0A4A02144AE.crl rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/9DF85997B1B9B358E1C43F36765AA0A4A02144AE.mft rsync://rpki.ripe.net/repository/DEFAULT/nfhZl7G5s1jhxD82dlqgpKAhRK4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 25 Jul 2025 07:44:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 28:42:af:ad:41:47:2b:59:36:d1:5e:10:3b:cc:7a:f1:6a:92:df:6c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D34606949D385DB42714FE71274FAC9948EF279C Validity Not Before: Jul 14 09:28:31 2025 GMT Not After : Jul 13 09:33:31 2026 GMT Subject: CN=E9C846FD9080A203888137EF609A55228FEEBEAC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:51:ea:3b:50:e9:38:66:34:f1:e9:88:fa:ce: 06:ca:09:6a:4c:0d:1c:82:7d:18:00:2d:ce:a6:37: bb:21:e1:1a:44:0f:1a:4b:2f:cb:54:8a:bb:3c:5a: 72:17:f3:95:b5:44:71:78:44:8e:39:33:77:ff:92: 4b:30:7b:cb:96:07:f6:61:cc:d5:0c:1b:99:83:0f: 31:54:b2:82:13:0d:20:98:75:7f:06:aa:8d:2b:95: b5:d6:e0:45:4e:59:e3:dc:0c:e7:4e:29:b6:ba:8f: 35:97:34:d9:14:36:5c:fe:3f:7b:79:63:d4:70:a4: d2:f8:ed:a8:a7:d2:ce:52:25:a6:9b:ac:17:c8:4b: 1a:12:8f:da:43:58:f4:d1:b6:60:52:2d:11:61:89: c0:8f:1a:e3:a0:ce:e6:22:74:78:7d:65:e4:d0:ce: 59:fa:aa:3f:de:dc:36:f8:18:9a:45:95:66:be:63: 56:cc:7b:9b:c1:98:be:c4:7c:2f:5a:46:7c:eb:70: 7c:f3:0a:ed:0f:d5:6f:30:5d:00:22:35:ad:d7:82: 6b:8b:85:70:b7:53:09:a2:56:87:7c:7d:9a:d1:84: 52:c7:dc:25:30:e4:d4:d1:b7:20:46:6c:25:94:0c: 46:56:4f:ee:cb:51:78:0e:5f:7f:78:f3:c0:3a:e1: e6:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:C8:46:FD:90:80:A2:03:88:81:37:EF:60:9A:55:22:8F:EE:BE:AC X509v3 Authority Key Identifier: keyid:D3:46:06:94:9D:38:5D:B4:27:14:FE:71:27:4F:AC:99:48:EF:27:9C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/D34606949D385DB42714FE71274FAC9948EF279C.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/D34606949D385DB42714FE71274FAC9948EF279C.cer Subject Information Access: Signed Object - URI:rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/AS393942.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 86.38.187.0/24 Signature Algorithm: sha256WithRSAEncryption 01:a7:a3:d4:b0:f0:73:d6:9e:f0:26:6f:14:68:97:5c:8e:ad: 32:3c:43:7d:93:d0:cd:8d:a5:84:3c:f3:a3:84:90:20:7d:3f: 46:b0:95:ba:6e:7d:db:97:2c:dc:92:35:5d:71:c2:23:06:ba: f2:ea:1e:0b:ba:a7:79:7c:60:d6:9c:8c:5a:c0:ab:bf:46:bc: 30:3c:99:25:d3:3f:a6:05:44:1d:18:00:91:36:d6:05:41:ac: fd:90:38:41:ea:78:b3:63:1b:32:12:a0:fb:28:6f:41:57:31: 29:e5:f2:9f:da:06:25:ac:8b:a9:9f:58:42:bb:ad:a5:d7:fa: 6a:bb:ab:42:e1:1a:c8:73:15:3f:c3:7d:8c:e3:e2:c6:8c:bd: 9f:39:8e:eb:b0:f8:07:eb:fb:dd:b4:9f:6d:03:b1:cc:67:b6: 40:fb:a1:7a:81:78:ea:1e:3d:9b:b7:46:b4:90:27:e5:6d:21: 3d:17:77:cc:89:53:89:25:ae:fb:e4:3f:f3:41:87:af:56:e9: b8:45:35:3d:5a:5e:db:99:6f:aa:de:4b:3c:0c:98:af:02:6b: 6c:29:86:31:79:ff:09:aa:8f:90:ca:75:f3:58:7c:a9:89:03: 7d:1f:f7:9e:0f:32:b5:c8:1f:d0:cd:c5:48:fd:80:a3:51:45: 3e:77:7e:ff -----BEGIN CERTIFICATE----- MIIFJTCCBA2gAwIBAgIUKEKvrUFHK1k20V4QO8x68WqS32wwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDM0NjA2OTQ5RDM4NURCNDI3MTRGRTcxMjc0RkFDOTk0 OEVGMjc5QzAeFw0yNTA3MTQwOTI4MzFaFw0yNjA3MTMwOTMzMzFaMDMxMTAvBgNV BAMTKEU5Qzg0NkZEOTA4MEEyMDM4ODgxMzdFRjYwOUE1NTIyOEZFRUJFQUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCwUeo7UOk4ZjTx6Yj6zgbKCWpM DRyCfRgALc6mN7sh4RpEDxpLL8tUirs8WnIX85W1RHF4RI45M3f/kkswe8uWB/Zh zNUMG5mDDzFUsoITDSCYdX8Gqo0rlbXW4EVOWePcDOdOKba6jzWXNNkUNlz+P3t5 Y9RwpNL47ain0s5SJaabrBfISxoSj9pDWPTRtmBSLRFhicCPGuOgzuYidHh9ZeTQ zln6qj/e3Db4GJpFlWa+Y1bMe5vBmL7EfC9aRnzrcHzzCu0P1W8wXQAiNa3XgmuL hXC3UwmiVod8fZrRhFLH3CUw5NTRtyBGbCWUDEZWT+7LUXgOX39488A64ea/AgMB AAGjggIvMIICKzAdBgNVHQ4EFgQU6chG/ZCAogOIgTfvYJpVIo/uvqwwHwYDVR0j BBgwFoAU00YGlJ04XbQnFP5xJ0+smUjvJ5wwDgYDVR0PAQH/BAQDAgeAMIGIBgNV HR8EgYAwfjB8oHqgeIZ2cnN5bmM6Ly9yLm1hZ2VsbGFuLmlweG8uY29tL3JlcG8v NTI4YTIxOGYtYWQyOC00MGQyLWJkN2YtMzUwZWFkYTNkNzA1LTAvMC9EMzQ2MDY5 NDlEMzg1REI0MjcxNEZFNzEyNzRGQUM5OTQ4RUYyNzlDLmNybDCBngYIKwYBBQUH AQEEgZEwgY4wgYsGCCsGAQUFBzAChn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5y aXBlLm5ldC9yZXBvc2l0b3J5LzAwMmUwYmEzLWZlNjAtNDViMS05MTYwLTg2OGEy ZjhhNDNiMS8zL0QzNDYwNjk0OUQzODVEQjQyNzE0RkU3MTI3NEZBQzk5NDhFRjI3 OUMuY2VyMHIGCCsGAQUFBwELBGYwZDBiBggrBgEFBQcwC4ZWcnN5bmM6Ly9yLm1h Z2VsbGFuLmlweG8uY29tL3JlcG8vNTI4YTIxOGYtYWQyOC00MGQyLWJkN2YtMzUw ZWFkYTNkNzA1LTAvMC9BUzM5Mzk0Mi5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEF BQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAFYmuzANBgkqhkiG9w0B AQsFAAOCAQEAAaej1LDwc9ae8CZvFGiXXI6tMjxDfZPQzY2lhDzzo4SQIH0/RrCV um5925cs3JI1XXHCIwa68uoeC7qneXxg1pyMWsCrv0a8MDyZJdM/pgVEHRgAkTbW BUGs/ZA4Qep4s2MbMhKg+yhvQVcxKeXyn9oGJayLqZ9YQrutpdf6arurQuEayHMV P8N9jOPixoy9nzmO67D4B+v73bSfbQOxzGe2QPuheoF46h49m7dGtJAn5W0hPRd3 zIlTiSWu++Q/80GHr1bpuEU1PVpe25lvqt5LPAyYrwJrbCmGMXn/CaqPkMp181h8 qYkDfR/3ng8ytcgf0M3FSP2Ao1FFPnd+/w== -----END CERTIFICATE-----Generated at Thu Jul 24 21:07:08 2025 by rpki-client