$ rpki-client -vvf r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/AS13122.roa File: AS13122.roa (raw, json) Hash identifier: Qwao8LRn5jZmYEvbL4i6s75CVypXeF5brP/IENAtKs0= Subject key identifier: 74:00:9E:ED:76:7A:60:ED:49:EF:D1:E4:0F:06:9E:F2:77:CA:3C:17 Certificate issuer: /CN=D34606949D385DB42714FE71274FAC9948EF279C Certificate serial: 4E6AEAD9B91BDE8588ABDA31B7DD4B5AA58EF343 Authority key identifier: D3:46:06:94:9D:38:5D:B4:27:14:FE:71:27:4F:AC:99:48:EF:27:9C Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/D34606949D385DB42714FE71274FAC9948EF279C.cer Subject info access: rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/AS13122.roa Signing time: Wed 01 Jul 2026 13:48:52 +0000 ROA not before: Wed 01 Jul 2026 13:43:52 +0000 ROA not after: Wed 30 Jun 2027 13:48:52 +0000 asID: 13122 IP address blocks: 86.38.4.0/24 maxlen: 24 89.116.126.0/24 maxlen: 24 Validation: OK Signature path: rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/D34606949D385DB42714FE71274FAC9948EF279C.crl rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/D34606949D385DB42714FE71274FAC9948EF279C.mft rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/D34606949D385DB42714FE71274FAC9948EF279C.cer rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/9DF85997B1B9B358E1C43F36765AA0A4A02144AE.crl rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/9DF85997B1B9B358E1C43F36765AA0A4A02144AE.mft rsync://rpki.ripe.net/repository/DEFAULT/nfhZl7G5s1jhxD82dlqgpKAhRK4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 22 Jul 2026 06:12:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4e:6a:ea:d9:b9:1b:de:85:88:ab:da:31:b7:dd:4b:5a:a5:8e:f3:43 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D34606949D385DB42714FE71274FAC9948EF279C Validity Not Before: Jul 1 13:43:52 2026 GMT Not After : Jun 30 13:48:52 2027 GMT Subject: CN=74009EED767A60ED49EFD1E40F069EF277CA3C17 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:21:44:90:67:f5:82:9b:02:33:a5:0a:7a:b7: 11:8f:92:55:ff:a4:40:f6:b3:85:a1:de:54:a4:9c: 94:a5:4d:05:b9:37:ca:c2:5e:7b:a9:50:49:65:94: fd:d9:c7:6b:80:24:9c:c6:e4:ff:6b:d1:22:13:1f: 43:0e:52:0c:5c:e8:0a:8a:41:29:6e:02:eb:ef:bf: 51:a7:14:68:be:9c:f5:9b:1a:bc:ee:db:aa:6e:4a: 85:e5:3e:df:4d:ae:97:89:86:46:e0:a7:e0:b2:d6: 26:62:7c:14:7f:31:55:52:f1:89:8a:d2:6b:02:bf: 56:71:58:d1:e5:ee:8f:f9:9b:ea:a5:9d:7f:9c:f8: 0a:e7:13:94:d9:84:5e:1a:5a:59:a7:c0:79:ee:f0: 30:59:1f:e7:4a:bb:e5:70:d0:d0:f4:b4:6e:81:d1: 27:f4:8b:46:cc:b7:ec:99:d0:7e:0e:91:55:ef:9c: 11:5e:fb:12:ed:7b:59:8b:ad:31:a2:56:e1:14:4f: c0:af:70:ed:77:08:ff:a3:a9:d4:0e:06:9b:02:f6: cb:bd:e6:1c:b7:6b:d4:b9:7f:a9:11:8c:ab:8b:d8: 3f:38:62:d3:22:d1:b1:fc:8f:9b:fc:57:00:0d:c2: e7:d3:a7:fd:cd:f6:f5:da:1e:23:c8:96:7c:87:ca: b2:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:00:9E:ED:76:7A:60:ED:49:EF:D1:E4:0F:06:9E:F2:77:CA:3C:17 X509v3 Authority Key Identifier: keyid:D3:46:06:94:9D:38:5D:B4:27:14:FE:71:27:4F:AC:99:48:EF:27:9C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/D34606949D385DB42714FE71274FAC9948EF279C.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/D34606949D385DB42714FE71274FAC9948EF279C.cer Subject Information Access: Signed Object - URI:rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/AS13122.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 86.38.4.0/24 89.116.126.0/24 Signature Algorithm: sha256WithRSAEncryption 39:b1:f3:76:0d:81:d6:89:b3:81:da:04:53:a9:66:5d:59:13: 94:f7:3d:fb:0e:14:77:7a:d4:2d:53:84:91:87:52:94:90:6c: 33:e8:ff:df:2c:0d:bc:0d:f4:de:d5:1f:1a:05:39:b2:4c:08: 5e:7f:c6:92:a9:21:b3:e1:c7:d3:81:64:f0:24:1e:f7:15:f5: 26:f5:10:21:a5:19:79:44:1a:99:55:57:9b:57:2c:aa:fc:21: f9:06:83:b8:15:d0:20:43:12:46:2f:23:8b:1f:d4:21:42:4d: 2d:00:c4:5b:e1:28:61:82:8d:95:ca:ab:a6:b3:8c:e1:6b:2f: 4f:c0:57:bd:c5:17:69:0e:7d:3e:61:5c:83:d4:ee:8f:96:4d: 5f:f5:82:4f:44:c8:4f:e6:7b:a9:11:07:dd:2b:eb:c0:5b:f2: 11:b3:97:6f:39:72:3b:89:23:e1:f6:03:15:7e:b2:e7:98:5f: 34:98:3c:3e:7a:d3:d6:bd:43:c9:5c:54:44:26:af:85:d9:0a: 0d:33:68:ee:70:9f:0d:b8:90:c3:db:1a:b9:0c:75:58:92:de: d8:85:fa:b7:66:ff:85:16:d9:39:4e:f4:dc:b0:22:b1:1a:be: 59:9a:dd:e2:6f:3c:36:4d:2c:ce:a6:66:5f:2f:84:d5:e5:2c: 48:22:60:7f -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUTmrq2bkb3oWIq9oxt91LWqWO80MwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDM0NjA2OTQ5RDM4NURCNDI3MTRGRTcxMjc0RkFDOTk0 OEVGMjc5QzAeFw0yNjA3MDExMzQzNTJaFw0yNzA2MzAxMzQ4NTJaMDMxMTAvBgNV BAMTKDc0MDA5RUVENzY3QTYwRUQ0OUVGRDFFNDBGMDY5RUYyNzdDQTNDMTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6IUSQZ/WCmwIzpQp6txGPklX/ pED2s4Wh3lSknJSlTQW5N8rCXnupUElllP3Zx2uAJJzG5P9r0SITH0MOUgxc6AqK QSluAuvvv1GnFGi+nPWbGrzu26puSoXlPt9NrpeJhkbgp+Cy1iZifBR/MVVS8YmK 0msCv1ZxWNHl7o/5m+qlnX+c+ArnE5TZhF4aWlmnwHnu8DBZH+dKu+Vw0ND0tG6B 0Sf0i0bMt+yZ0H4OkVXvnBFe+xLte1mLrTGiVuEUT8CvcO13CP+jqdQOBpsC9su9 5hy3a9S5f6kRjKuL2D84YtMi0bH8j5v8VwANwufTp/3N9vXaHiPIlnyHyrKjAgMB AAGjggI0MIICMDAdBgNVHQ4EFgQUdACe7XZ6YO1J79HkDwae8nfKPBcwHwYDVR0j BBgwFoAU00YGlJ04XbQnFP5xJ0+smUjvJ5wwDgYDVR0PAQH/BAQDAgeAMIGIBgNV HR8EgYAwfjB8oHqgeIZ2cnN5bmM6Ly9yLm1hZ2VsbGFuLmlweG8uY29tL3JlcG8v NTI4YTIxOGYtYWQyOC00MGQyLWJkN2YtMzUwZWFkYTNkNzA1LTAvMC9EMzQ2MDY5 NDlEMzg1REI0MjcxNEZFNzEyNzRGQUM5OTQ4RUYyNzlDLmNybDCBngYIKwYBBQUH AQEEgZEwgY4wgYsGCCsGAQUFBzAChn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5y aXBlLm5ldC9yZXBvc2l0b3J5LzAwMmUwYmEzLWZlNjAtNDViMS05MTYwLTg2OGEy ZjhhNDNiMS8zL0QzNDYwNjk0OUQzODVEQjQyNzE0RkU3MTI3NEZBQzk5NDhFRjI3 OUMuY2VyMHEGCCsGAQUFBwELBGUwYzBhBggrBgEFBQcwC4ZVcnN5bmM6Ly9yLm1h Z2VsbGFuLmlweG8uY29tL3JlcG8vNTI4YTIxOGYtYWQyOC00MGQyLWJkN2YtMzUw ZWFkYTNkNzA1LTAvMC9BUzEzMTIyLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAViYEAwQAWXR+MA0GCSqG SIb3DQEBCwUAA4IBAQA5sfN2DYHWibOB2gRTqWZdWROU9z37DhR3etQtU4SRh1KU kGwz6P/fLA28DfTe1R8aBTmyTAhef8aSqSGz4cfTgWTwJB73FfUm9RAhpRl5RBqZ VVebVyyq/CH5BoO4FdAgQxJGLyOLH9QhQk0tAMRb4Shhgo2Vyqums4zhay9PwFe9 xRdpDn0+YVyD1O6Plk1f9YJPRMhP5nupEQfdK+vAW/IRs5dvOXI7iSPh9gMVfrLn mF80mDw+etPWvUPJXFREJq+F2QoNM2jucJ8NuJDD2xq5DHVYkt7Yhfq3Zv+FFtk5 TvTcsCKxGr5Zmt3ibzw2TSzOpmZfL4TV5SxIImB/ -----END CERTIFICATE-----Generated at Tue Jul 21 11:10:37 2026 by rpki-client