$ rpki-client -vvf r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/AS51167.roa File: AS51167.roa (raw, json) Hash identifier: kJSHiXrZB4IuVLEuj8SGsa5MUmiTk0588/lM6ToAR5U= Subject key identifier: F1:69:C3:73:16:0C:B8:7F:81:DD:C2:F3:F8:DD:7F:CF:A2:C4:22:70 Certificate issuer: /CN=D34606949D385DB42714FE71274FAC9948EF279C Certificate serial: 65FDD54AD67DA4C73595FA28764092A0488523C6 Authority key identifier: D3:46:06:94:9D:38:5D:B4:27:14:FE:71:27:4F:AC:99:48:EF:27:9C Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/D34606949D385DB42714FE71274FAC9948EF279C.cer Subject info access: rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/AS51167.roa Signing time: Mon 07 Jul 2025 15:54:13 +0000 ROA not before: Mon 07 Jul 2025 15:49:13 +0000 ROA not after: Mon 06 Jul 2026 15:54:13 +0000 asID: 51167 IP address blocks: 84.46.240.0/20 maxlen: 24 89.116.24.0/21 maxlen: 24 89.117.16.0/21 maxlen: 21 89.117.48.0/20 maxlen: 24 89.117.72.0/21 maxlen: 24 89.117.144.0/21 maxlen: 21 Validation: OK Signature path: rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/D34606949D385DB42714FE71274FAC9948EF279C.crl rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/D34606949D385DB42714FE71274FAC9948EF279C.mft rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/D34606949D385DB42714FE71274FAC9948EF279C.cer rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/9DF85997B1B9B358E1C43F36765AA0A4A02144AE.crl rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/9DF85997B1B9B358E1C43F36765AA0A4A02144AE.mft rsync://rpki.ripe.net/repository/DEFAULT/nfhZl7G5s1jhxD82dlqgpKAhRK4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 24 Jul 2025 06:36:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 65:fd:d5:4a:d6:7d:a4:c7:35:95:fa:28:76:40:92:a0:48:85:23:c6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D34606949D385DB42714FE71274FAC9948EF279C Validity Not Before: Jul 7 15:49:13 2025 GMT Not After : Jul 6 15:54:13 2026 GMT Subject: CN=F169C373160CB87F81DDC2F3F8DD7FCFA2C42270 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:57:5c:83:ec:d3:b1:48:00:38:20:f2:bb:cb: e0:90:bc:60:fb:ed:00:cb:28:e4:c4:50:a0:f4:85: 72:ff:e9:d8:b4:bb:0c:0d:83:d5:5f:bb:6e:fd:61: 0e:3c:89:68:36:2f:fd:3a:66:73:33:b3:33:e8:67: d0:f0:5c:f6:b6:96:41:3f:dc:d5:b6:96:63:98:f4: 10:58:b2:8b:7f:1e:7d:42:8c:36:2c:8d:8a:9b:84: 88:24:01:fc:ef:11:5b:7b:a0:3d:94:ce:f5:8f:17: f8:9c:62:95:b2:35:45:9c:08:0e:b9:26:73:14:2e: 19:30:cd:dc:4b:35:c2:d0:84:1b:bf:95:78:8f:f4: 7e:ce:bc:1b:b2:1d:ea:42:b5:84:b4:c4:e7:0b:a5: 19:ce:8d:68:b0:1c:81:59:98:1f:c7:47:fa:68:5a: 85:08:d6:51:0d:1c:74:6a:3c:93:df:6b:99:3e:10: 13:87:fa:1d:71:e0:3f:89:a1:aa:5a:c6:e3:ab:f7: 3b:08:01:63:58:5e:ea:b0:91:a2:bc:03:6d:f7:69: 5b:e1:a1:b7:e5:29:36:95:01:20:1c:f8:80:27:d0: 3a:9d:d9:76:1d:08:e2:31:9f:5a:94:bb:33:6f:d2: 41:3b:d7:6a:35:40:fb:c9:a6:29:d9:c2:81:a7:1b: c5:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:69:C3:73:16:0C:B8:7F:81:DD:C2:F3:F8:DD:7F:CF:A2:C4:22:70 X509v3 Authority Key Identifier: keyid:D3:46:06:94:9D:38:5D:B4:27:14:FE:71:27:4F:AC:99:48:EF:27:9C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/D34606949D385DB42714FE71274FAC9948EF279C.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/D34606949D385DB42714FE71274FAC9948EF279C.cer Subject Information Access: Signed Object - URI:rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/AS51167.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 84.46.240.0/20 89.116.24.0/21 89.117.16.0/21 89.117.48.0/20 89.117.72.0/21 89.117.144.0/21 Signature Algorithm: sha256WithRSAEncryption 5a:82:de:96:6b:1d:77:5c:09:d7:e3:b6:00:ca:6e:25:4c:21: 37:d8:ea:14:49:94:66:0d:46:6d:f1:10:0e:65:d1:83:1f:0a: 05:a9:44:38:61:04:17:a5:af:21:db:f5:b6:32:5f:12:44:80: e3:cc:33:63:d8:ca:2a:d6:a6:d5:14:dc:de:f2:16:1c:b7:00: c9:54:0e:81:56:78:bb:80:fa:cc:25:88:d7:70:c3:c2:3b:d3: 58:34:c6:36:d4:96:47:39:5a:0c:ad:c9:51:42:d7:65:af:41: 06:cf:32:a2:ec:26:71:7e:d7:3d:aa:3c:24:71:11:9e:71:42: a5:40:7f:2d:bf:9f:17:89:c1:9e:ff:7c:ef:84:3f:43:5a:8c: 6b:a7:d3:1e:cc:95:84:52:29:34:8f:17:d0:04:7f:6f:ec:24: 9d:fb:1f:c8:57:ea:aa:6d:6f:25:15:5b:d9:4a:12:b5:cd:32: 51:e5:de:46:3f:63:c7:1c:9f:b3:d2:8f:e7:03:55:71:e4:0a: bb:05:50:e1:69:40:cc:85:bf:86:f1:55:24:b3:2b:f8:09:d7: 90:2e:1d:6e:89:b7:76:b2:e1:18:23:00:89:e0:c8:fb:c6:d8: c6:a0:56:ec:ce:67:eb:98:2f:34:b5:b6:bd:a7:7a:f8:1b:8a: 82:e9:aa:be -----BEGIN CERTIFICATE----- MIIFQjCCBCqgAwIBAgIUZf3VStZ9pMc1lfoodkCSoEiFI8YwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDM0NjA2OTQ5RDM4NURCNDI3MTRGRTcxMjc0RkFDOTk0 OEVGMjc5QzAeFw0yNTA3MDcxNTQ5MTNaFw0yNjA3MDYxNTU0MTNaMDMxMTAvBgNV BAMTKEYxNjlDMzczMTYwQ0I4N0Y4MUREQzJGM0Y4REQ3RkNGQTJDNDIyNzAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3V1yD7NOxSAA4IPK7y+CQvGD7 7QDLKOTEUKD0hXL/6di0uwwNg9Vfu279YQ48iWg2L/06ZnMzszPoZ9DwXPa2lkE/ 3NW2lmOY9BBYsot/Hn1CjDYsjYqbhIgkAfzvEVt7oD2UzvWPF/icYpWyNUWcCA65 JnMULhkwzdxLNcLQhBu/lXiP9H7OvBuyHepCtYS0xOcLpRnOjWiwHIFZmB/HR/po WoUI1lENHHRqPJPfa5k+EBOH+h1x4D+JoapaxuOr9zsIAWNYXuqwkaK8A233aVvh obflKTaVASAc+IAn0Dqd2XYdCOIxn1qUuzNv0kE712o1QPvJpinZwoGnG8U5AgMB AAGjggJMMIICSDAdBgNVHQ4EFgQU8WnDcxYMuH+B3cLz+N1/z6LEInAwHwYDVR0j BBgwFoAU00YGlJ04XbQnFP5xJ0+smUjvJ5wwDgYDVR0PAQH/BAQDAgeAMIGIBgNV HR8EgYAwfjB8oHqgeIZ2cnN5bmM6Ly9yLm1hZ2VsbGFuLmlweG8uY29tL3JlcG8v NTI4YTIxOGYtYWQyOC00MGQyLWJkN2YtMzUwZWFkYTNkNzA1LTAvMC9EMzQ2MDY5 NDlEMzg1REI0MjcxNEZFNzEyNzRGQUM5OTQ4RUYyNzlDLmNybDCBngYIKwYBBQUH AQEEgZEwgY4wgYsGCCsGAQUFBzAChn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5y aXBlLm5ldC9yZXBvc2l0b3J5LzAwMmUwYmEzLWZlNjAtNDViMS05MTYwLTg2OGEy ZjhhNDNiMS8zL0QzNDYwNjk0OUQzODVEQjQyNzE0RkU3MTI3NEZBQzk5NDhFRjI3 OUMuY2VyMHEGCCsGAQUFBwELBGUwYzBhBggrBgEFBQcwC4ZVcnN5bmM6Ly9yLm1h Z2VsbGFuLmlweG8uY29tL3JlcG8vNTI4YTIxOGYtYWQyOC00MGQyLWJkN2YtMzUw ZWFkYTNkNzA1LTAvMC9BUzUxMTY3LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMD0GCCsGAQUFBwEHAQH/BC4wLDAqBAIAATAkAwQEVC7wAwQDWXQYAwQDWXUQ AwQEWXUwAwQDWXVIAwQDWXWQMA0GCSqGSIb3DQEBCwUAA4IBAQBagt6Wax13XAnX 47YAym4lTCE32OoUSZRmDUZt8RAOZdGDHwoFqUQ4YQQXpa8h2/W2Ml8SRIDjzDNj 2Moq1qbVFNze8hYctwDJVA6BVni7gPrMJYjXcMPCO9NYNMY21JZHOVoMrclRQtdl r0EGzzKi7CZxftc9qjwkcRGecUKlQH8tv58XicGe/3zvhD9DWoxrp9MezJWEUik0 jxfQBH9v7CSd+x/IV+qqbW8lFVvZShK1zTJR5d5GP2PHHJ+z0o/nA1Vx5Aq7BVDh aUDMhb+G8VUksyv4CdeQLh1uibd2suEYIwCJ4Mj7xtjGoFbszmfrmC80tba9p3r4 G4qC6aq+ -----END CERTIFICATE-----Generated at Wed Jul 23 19:35:58 2025 by rpki-client