$ rpki-client -vvf r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/AS152179.roa File: AS152179.roa (raw, json) Hash identifier: 7w3bPSH0kbYPdcs1jW27723kx6NOr5dfoocImpE8lBY= Subject key identifier: 8F:EE:27:CF:99:D7:40:49:13:4C:F7:DB:95:33:93:01:6E:2D:5D:93 Certificate issuer: /CN=D34606949D385DB42714FE71274FAC9948EF279C Certificate serial: 3039C3A37347E776852F8D77ACA1D271012D84F3 Authority key identifier: D3:46:06:94:9D:38:5D:B4:27:14:FE:71:27:4F:AC:99:48:EF:27:9C Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/D34606949D385DB42714FE71274FAC9948EF279C.cer Subject info access: rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/AS152179.roa Signing time: Wed 08 Jul 2026 01:53:21 +0000 ROA not before: Wed 08 Jul 2026 01:48:21 +0000 ROA not after: Wed 07 Jul 2027 01:53:21 +0000 asID: 152179 IP address blocks: 89.116.9.0/24 maxlen: 24 89.116.164.0/24 maxlen: 24 Validation: OK Signature path: rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/D34606949D385DB42714FE71274FAC9948EF279C.crl rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/D34606949D385DB42714FE71274FAC9948EF279C.mft rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/D34606949D385DB42714FE71274FAC9948EF279C.cer rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/9DF85997B1B9B358E1C43F36765AA0A4A02144AE.crl rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/9DF85997B1B9B358E1C43F36765AA0A4A02144AE.mft rsync://rpki.ripe.net/repository/DEFAULT/nfhZl7G5s1jhxD82dlqgpKAhRK4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 21 Jul 2026 11:54:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 30:39:c3:a3:73:47:e7:76:85:2f:8d:77:ac:a1:d2:71:01:2d:84:f3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D34606949D385DB42714FE71274FAC9948EF279C Validity Not Before: Jul 8 01:48:21 2026 GMT Not After : Jul 7 01:53:21 2027 GMT Subject: CN=8FEE27CF99D74049134CF7DB953393016E2D5D93 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:dd:1a:f1:06:48:d1:34:12:95:b7:7a:bf:66: d5:eb:26:77:34:a2:ab:ca:42:b1:cc:c3:3f:73:84: d7:ec:d1:e7:44:e5:b9:d3:07:34:65:0e:03:07:15: 3c:12:68:10:57:aa:46:7d:df:01:eb:1a:ea:bc:cd: 9a:3b:9e:80:7d:30:b2:cc:d3:0e:4e:1b:25:25:ab: cd:34:6a:97:53:aa:1e:7a:5c:d5:18:cb:11:32:7d: 09:4e:df:b7:0b:82:87:dc:50:7e:d8:21:27:b4:61: b4:fc:3a:77:e7:c2:be:7f:9c:28:54:3a:21:28:ae: ba:4e:99:57:89:83:4c:bb:0f:42:d9:3b:b5:d2:9b: 23:07:12:e3:8e:c1:09:81:08:a6:72:41:81:fd:02: 3e:44:b4:44:0e:28:bf:64:70:6c:a5:11:f0:71:18: 28:c0:bb:5d:9d:38:09:8a:90:1f:36:2e:f6:98:d3: b4:cf:2f:14:70:61:7c:a6:73:0f:67:93:77:e0:7e: bf:97:0d:c1:28:4e:43:c7:2f:15:8f:96:75:13:ae: c4:9e:ab:b9:3c:0b:65:e0:e2:fd:0e:5b:c8:f0:7f: 9d:a2:c4:d7:3c:bc:f3:06:f2:73:5d:27:3a:00:04: b5:23:66:31:db:d7:71:9e:92:56:02:ce:ea:9b:44: aa:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:EE:27:CF:99:D7:40:49:13:4C:F7:DB:95:33:93:01:6E:2D:5D:93 X509v3 Authority Key Identifier: keyid:D3:46:06:94:9D:38:5D:B4:27:14:FE:71:27:4F:AC:99:48:EF:27:9C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/D34606949D385DB42714FE71274FAC9948EF279C.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/D34606949D385DB42714FE71274FAC9948EF279C.cer Subject Information Access: Signed Object - URI:rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/AS152179.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 89.116.9.0/24 89.116.164.0/24 Signature Algorithm: sha256WithRSAEncryption ba:f3:a6:5e:78:cb:7b:a3:7b:88:a3:f1:9d:94:44:37:c6:af: 8c:ff:3c:5c:c6:cb:bf:83:53:dd:0f:42:83:13:f9:40:21:80: e1:3e:99:83:fc:f3:c0:01:51:80:9b:4c:d1:d6:fb:06:4f:94: 9f:2e:b3:66:40:43:25:c9:17:0c:7f:78:fe:28:fe:8c:89:44: 35:6b:9f:cd:49:41:df:ba:e4:27:0f:5b:5c:ee:a1:ff:0b:28: b8:ad:f1:0e:e7:fd:10:eb:34:7f:25:87:c2:b6:52:84:49:b5: 40:99:30:e9:39:a9:90:7d:47:b3:eb:f6:4d:06:3a:5a:e2:85: af:ec:eb:f4:d6:12:b4:2c:05:20:83:c3:e4:06:0c:9e:b5:15: 6d:01:4e:d7:b9:3c:ae:a6:7c:9f:f6:2d:55:52:a1:71:48:2d: 93:f4:a0:ce:64:74:a8:87:be:bf:e6:ed:22:1c:74:9c:d7:57: ef:9b:2a:80:b9:cc:4a:1f:ab:6e:29:1a:43:78:6e:07:1f:25: 67:17:81:f7:8e:5e:61:07:94:de:c2:d9:12:43:e9:f0:6c:08: 77:6c:dc:1a:b0:07:d9:f7:7e:71:74:79:cb:be:61:32:26:44: 39:ea:73:5b:65:cd:81:3f:11:ae:e9:b9:00:73:01:92:5c:d3: 62:f5:2a:26 -----BEGIN CERTIFICATE----- MIIFKzCCBBOgAwIBAgIUMDnDo3NH53aFL413rKHScQEthPMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDM0NjA2OTQ5RDM4NURCNDI3MTRGRTcxMjc0RkFDOTk0 OEVGMjc5QzAeFw0yNjA3MDgwMTQ4MjFaFw0yNzA3MDcwMTUzMjFaMDMxMTAvBgNV BAMTKDhGRUUyN0NGOTlENzQwNDkxMzRDRjdEQjk1MzM5MzAxNkUyRDVEOTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDQ3RrxBkjRNBKVt3q/ZtXrJnc0 oqvKQrHMwz9zhNfs0edE5bnTBzRlDgMHFTwSaBBXqkZ93wHrGuq8zZo7noB9MLLM 0w5OGyUlq800apdTqh56XNUYyxEyfQlO37cLgofcUH7YISe0YbT8Onfnwr5/nChU OiEorrpOmVeJg0y7D0LZO7XSmyMHEuOOwQmBCKZyQYH9Aj5EtEQOKL9kcGylEfBx GCjAu12dOAmKkB82LvaY07TPLxRwYXymcw9nk3fgfr+XDcEoTkPHLxWPlnUTrsSe q7k8C2Xg4v0OW8jwf52ixNc8vPMG8nNdJzoABLUjZjHb13GeklYCzuqbRKpJAgMB AAGjggI1MIICMTAdBgNVHQ4EFgQUj+4nz5nXQEkTTPfblTOTAW4tXZMwHwYDVR0j BBgwFoAU00YGlJ04XbQnFP5xJ0+smUjvJ5wwDgYDVR0PAQH/BAQDAgeAMIGIBgNV HR8EgYAwfjB8oHqgeIZ2cnN5bmM6Ly9yLm1hZ2VsbGFuLmlweG8uY29tL3JlcG8v NTI4YTIxOGYtYWQyOC00MGQyLWJkN2YtMzUwZWFkYTNkNzA1LTAvMC9EMzQ2MDY5 NDlEMzg1REI0MjcxNEZFNzEyNzRGQUM5OTQ4RUYyNzlDLmNybDCBngYIKwYBBQUH AQEEgZEwgY4wgYsGCCsGAQUFBzAChn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5y aXBlLm5ldC9yZXBvc2l0b3J5LzAwMmUwYmEzLWZlNjAtNDViMS05MTYwLTg2OGEy ZjhhNDNiMS8zL0QzNDYwNjk0OUQzODVEQjQyNzE0RkU3MTI3NEZBQzk5NDhFRjI3 OUMuY2VyMHIGCCsGAQUFBwELBGYwZDBiBggrBgEFBQcwC4ZWcnN5bmM6Ly9yLm1h Z2VsbGFuLmlweG8uY29tL3JlcG8vNTI4YTIxOGYtYWQyOC00MGQyLWJkN2YtMzUw ZWFkYTNkNzA1LTAvMC9BUzE1MjE3OS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEF BQcOAjAlBggrBgEFBQcBBwEB/wQWMBQwEgQCAAEwDAMEAFl0CQMEAFl0pDANBgkq hkiG9w0BAQsFAAOCAQEAuvOmXnjLe6N7iKPxnZREN8avjP88XMbLv4NT3Q9CgxP5 QCGA4T6Zg/zzwAFRgJtM0db7Bk+Uny6zZkBDJckXDH94/ij+jIlENWufzUlB37rk Jw9bXO6h/wsouK3xDuf9EOs0fyWHwrZShEm1QJkw6TmpkH1Hs+v2TQY6WuKFr+zr 9NYStCwFIIPD5AYMnrUVbQFO17k8rqZ8n/YtVVKhcUgtk/SgzmR0qIe+v+btIhx0 nNdX75sqgLnMSh+rbikaQ3huBx8lZxeB945eYQeU3sLZEkPp8GwId2zcGrAH2fd+ cXR5y75hMiZEOepzW2XNgT8Rrum5AHMBklzTYvUqJg== -----END CERTIFICATE-----Generated at Tue Jul 21 01:27:39 2026 by rpki-client