$ rpki-client -vvf r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/AS152672.roa File: AS152672.roa (raw, json) Hash identifier: kKOSYIr0RfXwhHOVJOoVIZpvjWZjZABKaqXiUcMlMyk= Subject key identifier: 81:30:84:78:90:CB:58:FB:81:EB:53:FA:50:DE:30:51:B3:7B:76:4C Certificate issuer: /CN=D34606949D385DB42714FE71274FAC9948EF279C Certificate serial: 73DDC1D4FD10D2F494684058C60A7BC2CAEAAAF8 Authority key identifier: D3:46:06:94:9D:38:5D:B4:27:14:FE:71:27:4F:AC:99:48:EF:27:9C Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/D34606949D385DB42714FE71274FAC9948EF279C.cer Subject info access: rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/AS152672.roa Signing time: Mon 01 Jun 2026 06:47:19 +0000 ROA not before: Mon 01 Jun 2026 06:42:19 +0000 ROA not after: Mon 31 May 2027 06:47:19 +0000 asID: 152672 IP address blocks: 89.116.144.0/24 maxlen: 24 Validation: OK Signature path: rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/D34606949D385DB42714FE71274FAC9948EF279C.crl rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/D34606949D385DB42714FE71274FAC9948EF279C.mft rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/D34606949D385DB42714FE71274FAC9948EF279C.cer rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/9DF85997B1B9B358E1C43F36765AA0A4A02144AE.crl rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/9DF85997B1B9B358E1C43F36765AA0A4A02144AE.mft rsync://rpki.ripe.net/repository/DEFAULT/nfhZl7G5s1jhxD82dlqgpKAhRK4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Jun 2026 17:49:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 73:dd:c1:d4:fd:10:d2:f4:94:68:40:58:c6:0a:7b:c2:ca:ea:aa:f8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D34606949D385DB42714FE71274FAC9948EF279C Validity Not Before: Jun 1 06:42:19 2026 GMT Not After : May 31 06:47:19 2027 GMT Subject: CN=8130847890CB58FB81EB53FA50DE3051B37B764C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:e0:99:5c:69:b3:73:ad:8d:e0:fc:01:19:5c: f9:37:db:14:57:ba:c6:e5:fd:d8:24:71:10:4e:8d: 48:15:95:25:f7:7d:71:f9:ae:cd:a7:c8:bc:28:ed: 23:cc:17:49:8b:04:ec:46:24:ac:83:01:c3:61:23: 3c:c2:b4:ef:2f:65:77:07:dc:4a:eb:b1:6d:8e:a6: e2:71:b7:3a:f5:d5:67:cc:8f:c9:fb:57:31:04:aa: ac:41:3e:db:72:f1:f6:f8:52:57:87:4e:2f:f2:43: 82:16:c3:58:12:a4:6d:8d:6b:bb:d1:21:2b:58:19: b4:c4:53:fc:dc:26:8b:99:17:d9:a8:0a:3e:4b:a7: c9:55:fb:aa:f1:c7:93:1f:08:09:74:45:6e:8f:b9: 4d:e2:03:e8:88:0d:cf:61:13:79:59:6d:57:32:a9: a1:67:44:05:88:1e:3a:73:08:22:66:eb:9e:f8:f3: 96:ee:0c:5a:75:7a:c0:51:87:0d:13:90:ae:52:17: 5c:69:92:48:58:6e:29:92:21:8d:ce:a0:60:3f:fa: 75:37:fa:59:de:b2:cb:1c:3d:60:58:5d:0e:a7:4e: 3d:51:29:76:de:fe:04:0a:d1:74:c9:b4:8f:63:46: f3:56:58:3f:80:44:f9:7b:a7:de:c0:64:e2:96:98: d6:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:30:84:78:90:CB:58:FB:81:EB:53:FA:50:DE:30:51:B3:7B:76:4C X509v3 Authority Key Identifier: keyid:D3:46:06:94:9D:38:5D:B4:27:14:FE:71:27:4F:AC:99:48:EF:27:9C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/D34606949D385DB42714FE71274FAC9948EF279C.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/D34606949D385DB42714FE71274FAC9948EF279C.cer Subject Information Access: Signed Object - URI:rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/AS152672.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 89.116.144.0/24 Signature Algorithm: sha256WithRSAEncryption 09:67:e3:e5:2d:8f:69:27:1f:67:63:69:51:40:fe:f9:cf:0c: ad:75:f6:a4:04:0b:c8:27:3d:a1:e7:73:8d:31:fa:a5:26:dc: 15:60:36:7c:d3:65:13:ac:0d:49:44:78:74:68:55:59:8c:87: a5:7a:27:95:2e:48:12:fb:e3:d6:0e:5d:07:cc:eb:d7:96:a3: 2b:c8:e6:14:a7:8d:33:65:07:7c:86:70:fa:ff:ae:a9:dc:86: e7:e2:bb:48:12:3f:d0:aa:77:99:a0:95:e9:4e:ac:35:12:bd: 9f:5c:9c:02:65:23:0a:49:45:fd:b1:01:15:fd:0c:2b:bb:4b: fc:4f:c1:61:d6:6c:8a:72:23:4e:d7:4d:00:c2:d9:3e:25:7e: 77:14:85:67:6e:23:35:b7:62:b5:ea:6f:cb:3b:a4:eb:3e:b6: 00:a0:ca:65:54:17:28:42:f1:6c:bf:03:71:5a:98:0f:38:33: 2e:d9:a3:ae:3f:b3:41:d6:cf:7e:98:f4:ba:ae:3c:d9:92:61: fe:03:e3:49:cf:c7:0d:fa:a8:fe:77:60:93:3d:62:50:e2:1d: ac:d3:c0:45:92:ea:77:d0:c6:87:4c:19:dd:e3:e8:cf:96:b6: 49:88:33:18:fe:5d:f4:72:af:a3:88:d9:df:2b:38:4d:96:9e: 4f:00:8d:89 -----BEGIN CERTIFICATE----- MIIFJTCCBA2gAwIBAgIUc93B1P0Q0vSUaEBYxgp7wsrqqvgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDM0NjA2OTQ5RDM4NURCNDI3MTRGRTcxMjc0RkFDOTk0 OEVGMjc5QzAeFw0yNjA2MDEwNjQyMTlaFw0yNzA1MzEwNjQ3MTlaMDMxMTAvBgNV BAMTKDgxMzA4NDc4OTBDQjU4RkI4MUVCNTNGQTUwREUzMDUxQjM3Qjc2NEMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCi4JlcabNzrY3g/AEZXPk32xRX usbl/dgkcRBOjUgVlSX3fXH5rs2nyLwo7SPMF0mLBOxGJKyDAcNhIzzCtO8vZXcH 3ErrsW2OpuJxtzr11WfMj8n7VzEEqqxBPtty8fb4UleHTi/yQ4IWw1gSpG2Na7vR IStYGbTEU/zcJouZF9moCj5Lp8lV+6rxx5MfCAl0RW6PuU3iA+iIDc9hE3lZbVcy qaFnRAWIHjpzCCJm657485buDFp1esBRhw0TkK5SF1xpkkhYbimSIY3OoGA/+nU3 +lnessscPWBYXQ6nTj1RKXbe/gQK0XTJtI9jRvNWWD+ARPl7p97AZOKWmNbxAgMB AAGjggIvMIICKzAdBgNVHQ4EFgQUgTCEeJDLWPuB61P6UN4wUbN7dkwwHwYDVR0j BBgwFoAU00YGlJ04XbQnFP5xJ0+smUjvJ5wwDgYDVR0PAQH/BAQDAgeAMIGIBgNV HR8EgYAwfjB8oHqgeIZ2cnN5bmM6Ly9yLm1hZ2VsbGFuLmlweG8uY29tL3JlcG8v NTI4YTIxOGYtYWQyOC00MGQyLWJkN2YtMzUwZWFkYTNkNzA1LTAvMC9EMzQ2MDY5 NDlEMzg1REI0MjcxNEZFNzEyNzRGQUM5OTQ4RUYyNzlDLmNybDCBngYIKwYBBQUH AQEEgZEwgY4wgYsGCCsGAQUFBzAChn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5y aXBlLm5ldC9yZXBvc2l0b3J5LzAwMmUwYmEzLWZlNjAtNDViMS05MTYwLTg2OGEy ZjhhNDNiMS8zL0QzNDYwNjk0OUQzODVEQjQyNzE0RkU3MTI3NEZBQzk5NDhFRjI3 OUMuY2VyMHIGCCsGAQUFBwELBGYwZDBiBggrBgEFBQcwC4ZWcnN5bmM6Ly9yLm1h Z2VsbGFuLmlweG8uY29tL3JlcG8vNTI4YTIxOGYtYWQyOC00MGQyLWJkN2YtMzUw ZWFkYTNkNzA1LTAvMC9BUzE1MjY3Mi5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEF BQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAFl0kDANBgkqhkiG9w0B AQsFAAOCAQEACWfj5S2PaScfZ2NpUUD++c8MrXX2pAQLyCc9oedzjTH6pSbcFWA2 fNNlE6wNSUR4dGhVWYyHpXonlS5IEvvj1g5dB8zr15ajK8jmFKeNM2UHfIZw+v+u qdyG5+K7SBI/0Kp3maCV6U6sNRK9n1ycAmUjCklF/bEBFf0MK7tL/E/BYdZsinIj TtdNAMLZPiV+dxSFZ24jNbditepvyzuk6z62AKDKZVQXKELxbL8DcVqYDzgzLtmj rj+zQdbPfpj0uq482ZJh/gPjSc/HDfqo/ndgkz1iUOIdrNPARZLqd9DGh0wZ3ePo z5a2SYgzGP5d9HKvo4jZ3ys4TZaeTwCNiQ== -----END CERTIFICATE-----Generated at Sat Jun 6 02:29:39 2026 by rpki-client