$ rpki-client -vvvf r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/AS16509.roa File: AS16509.roa (raw, json) Hash identifier: UOG7FishQUF6djfuBqdY+tEiZcEaGr9q6h9BzfUM0hs= Subject key identifier: 41:D4:50:E2:C8:79:EA:00:0F:9B:1C:B9:1E:D7:BC:9D:3E:14:F7:D5 Certificate issuer: /CN=D34606949D385DB42714FE71274FAC9948EF279C Certificate serial: 2F292E7DA3A0C18D161A74D8C98EEE8226A99A33 Authority key identifier: D3:46:06:94:9D:38:5D:B4:27:14:FE:71:27:4F:AC:99:48:EF:27:9C Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/D34606949D385DB42714FE71274FAC9948EF279C.cer Subject info access: rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/AS16509.roa Signing time: Thu 03 Sep 2026 00:05:21 +0000 ROA not before: Thu 03 Sep 2026 00:00:21 +0000 ROA not after: Thu 02 Sep 2027 00:05:21 +0000 asID: 16509 IP address blocks: 89.117.15.0/24 maxlen: 24 89.117.87.0/24 maxlen: 24 Validation: OK Signature path: rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/D34606949D385DB42714FE71274FAC9948EF279C.crl rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/D34606949D385DB42714FE71274FAC9948EF279C.mft rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/D34606949D385DB42714FE71274FAC9948EF279C.cer rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/9DF85997B1B9B358E1C43F36765AA0A4A02144AE.crl rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/9DF85997B1B9B358E1C43F36765AA0A4A02144AE.mft rsync://rpki.ripe.net/repository/DEFAULT/nfhZl7G5s1jhxD82dlqgpKAhRK4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 05 Sep 2026 10:43:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2f:29:2e:7d:a3:a0:c1:8d:16:1a:74:d8:c9:8e:ee:82:26:a9:9a:33 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D34606949D385DB42714FE71274FAC9948EF279C Validity Not Before: Sep 3 00:00:21 2026 GMT Not After : Sep 2 00:05:21 2027 GMT Subject: CN=41D450E2C879EA000F9B1CB91ED7BC9D3E14F7D5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:69:1c:3b:0c:5a:94:15:81:31:87:fa:42:db: e0:ba:15:95:a8:cd:17:45:9b:18:dc:f1:04:b4:d3: 79:8b:e0:2c:05:d7:10:f7:bc:0d:2f:16:70:3e:19: d7:38:56:82:5a:59:e4:4b:36:42:28:b0:d5:23:d8: b9:35:44:2b:79:52:88:4a:ed:e0:c7:68:cc:d1:01: 1d:45:a5:5f:b3:ee:8d:ff:94:5e:91:52:15:5e:a1: eb:97:a0:9f:be:d3:fa:b8:0a:23:49:31:b1:42:4b: 5f:98:f2:36:e9:e9:b4:5e:f8:fb:d9:03:6a:c1:e7: 6a:e1:4e:07:fc:ad:31:78:74:4a:31:19:a2:c9:f7: 75:95:4d:d8:88:a0:a0:22:17:49:84:c9:49:83:0d: 9e:1c:a3:a9:a0:bb:67:b8:42:9d:d8:7a:7e:e0:10: 1c:cb:24:57:bf:6f:f8:5d:91:8d:c2:89:e9:e6:e3: 2e:2b:d9:be:33:e1:db:25:85:47:31:14:bc:e4:af: fb:e3:55:40:97:a9:19:2e:ca:b6:63:1b:ea:cc:f8: ad:00:3e:54:97:2e:18:b1:ce:c3:06:80:ed:cb:7a: 90:9e:25:85:14:c4:76:ca:be:35:d4:b7:ca:47:ce: f6:bd:ac:23:96:02:17:ad:c3:b2:12:2e:be:7b:fd: 6b:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:D4:50:E2:C8:79:EA:00:0F:9B:1C:B9:1E:D7:BC:9D:3E:14:F7:D5 X509v3 Authority Key Identifier: keyid:D3:46:06:94:9D:38:5D:B4:27:14:FE:71:27:4F:AC:99:48:EF:27:9C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/D34606949D385DB42714FE71274FAC9948EF279C.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/D34606949D385DB42714FE71274FAC9948EF279C.cer Subject Information Access: Signed Object - URI:rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/AS16509.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 89.117.15.0/24 89.117.87.0/24 Signature Algorithm: sha256WithRSAEncryption 08:4b:ab:cb:9e:34:cb:a2:e0:40:a6:bd:63:71:0b:39:8b:9f: 78:06:e8:b5:d8:05:50:68:67:d3:a1:5d:1f:1f:c7:c9:69:e7: 00:3d:c7:18:40:57:ce:eb:31:26:ca:03:4e:e2:fa:5e:9d:f2: 0b:18:66:e4:29:01:53:19:41:72:4c:63:13:76:61:60:6d:a2: bf:7d:d8:8f:84:25:e7:a6:f5:89:cf:b6:b2:85:5c:53:59:be: 8a:30:54:7b:f2:3f:48:e2:63:97:2e:75:e7:d3:4e:49:7b:6e: 66:ce:45:a0:07:2d:1d:1e:59:78:7d:57:b9:14:94:27:bd:80: d9:b0:bc:d6:f6:37:c5:67:e5:52:be:1a:84:d5:38:b8:63:85: 4d:cc:63:fe:49:6d:a2:40:94:37:ac:8a:77:a0:17:3b:e9:4a: fd:7a:a6:ec:ba:05:c3:57:c5:11:54:ab:79:1c:6d:bc:6e:8e: 50:3d:cf:80:54:0f:69:d3:4c:d7:86:7f:de:0d:84:7a:59:ff: 37:13:c5:d0:3b:75:a1:63:92:1a:d1:a7:39:50:72:ca:04:62: a7:a4:f8:0b:5e:0a:81:22:f7:26:0d:a3:7e:57:27:ee:9e:5c: 27:0c:63:47:53:2a:03:ad:ed:56:9a:b4:b2:38:a2:2b:c4:e5: c0:74:26:a1 -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIULykufaOgwY0WGnTYyY7ugiapmjMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDM0NjA2OTQ5RDM4NURCNDI3MTRGRTcxMjc0RkFDOTk0 OEVGMjc5QzAeFw0yNjA5MDMwMDAwMjFaFw0yNzA5MDIwMDA1MjFaMDMxMTAvBgNV BAMTKDQxRDQ1MEUyQzg3OUVBMDAwRjlCMUNCOTFFRDdCQzlEM0UxNEY3RDUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/aRw7DFqUFYExh/pC2+C6FZWo zRdFmxjc8QS003mL4CwF1xD3vA0vFnA+Gdc4VoJaWeRLNkIosNUj2Lk1RCt5UohK 7eDHaMzRAR1FpV+z7o3/lF6RUhVeoeuXoJ++0/q4CiNJMbFCS1+Y8jbp6bRe+PvZ A2rB52rhTgf8rTF4dEoxGaLJ93WVTdiIoKAiF0mEyUmDDZ4co6mgu2e4Qp3Yen7g EBzLJFe/b/hdkY3Cienm4y4r2b4z4dslhUcxFLzkr/vjVUCXqRkuyrZjG+rM+K0A PlSXLhixzsMGgO3LepCeJYUUxHbKvjXUt8pHzva9rCOWAhetw7ISLr57/WtfAgMB AAGjggI0MIICMDAdBgNVHQ4EFgQUQdRQ4sh56gAPmxy5Hte8nT4U99UwHwYDVR0j BBgwFoAU00YGlJ04XbQnFP5xJ0+smUjvJ5wwDgYDVR0PAQH/BAQDAgeAMIGIBgNV HR8EgYAwfjB8oHqgeIZ2cnN5bmM6Ly9yLm1hZ2VsbGFuLmlweG8uY29tL3JlcG8v NTI4YTIxOGYtYWQyOC00MGQyLWJkN2YtMzUwZWFkYTNkNzA1LTAvMC9EMzQ2MDY5 NDlEMzg1REI0MjcxNEZFNzEyNzRGQUM5OTQ4RUYyNzlDLmNybDCBngYIKwYBBQUH AQEEgZEwgY4wgYsGCCsGAQUFBzAChn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5y aXBlLm5ldC9yZXBvc2l0b3J5LzAwMmUwYmEzLWZlNjAtNDViMS05MTYwLTg2OGEy ZjhhNDNiMS8zL0QzNDYwNjk0OUQzODVEQjQyNzE0RkU3MTI3NEZBQzk5NDhFRjI3 OUMuY2VyMHEGCCsGAQUFBwELBGUwYzBhBggrBgEFBQcwC4ZVcnN5bmM6Ly9yLm1h Z2VsbGFuLmlweG8uY29tL3JlcG8vNTI4YTIxOGYtYWQyOC00MGQyLWJkN2YtMzUw ZWFkYTNkNzA1LTAvMC9BUzE2NTA5LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAWXUPAwQAWXVXMA0GCSqG SIb3DQEBCwUAA4IBAQAIS6vLnjTLouBApr1jcQs5i594Bui12AVQaGfToV0fH8fJ aecAPccYQFfO6zEmygNO4vpenfILGGbkKQFTGUFyTGMTdmFgbaK/fdiPhCXnpvWJ z7ayhVxTWb6KMFR78j9I4mOXLnXn005Je25mzkWgBy0dHll4fVe5FJQnvYDZsLzW 9jfFZ+VSvhqE1Ti4Y4VNzGP+SW2iQJQ3rIp3oBc76Ur9eqbsugXDV8URVKt5HG28 bo5QPc+AVA9p00zXhn/eDYR6Wf83E8XQO3WhY5Ia0ac5UHLKBGKnpPgLXgqBIvcm DaN+VyfunlwnDGNHUyoDre1WmrSyOKIrxOXAdCah -----END CERTIFICATE-----Generated at Fri Sep 4 20:36:43 2026 by rpki-client