$ rpki-client -vvf r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/AS16509.roa File: AS16509.roa (raw, json) Hash identifier: uOHmutblPoITsjEahZ4qU8tn9Yl1ZChpcijfdUHhzMw= Subject key identifier: A2:11:DC:0E:6F:76:4A:0C:9C:83:39:C8:0A:B2:19:B9:D2:97:14:FE Certificate issuer: /CN=D34606949D385DB42714FE71274FAC9948EF279C Certificate serial: 2FC7BA81B9524AF42B513B8DE0178C4D07D0DE70 Authority key identifier: D3:46:06:94:9D:38:5D:B4:27:14:FE:71:27:4F:AC:99:48:EF:27:9C Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/D34606949D385DB42714FE71274FAC9948EF279C.cer Subject info access: rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/AS16509.roa Signing time: Sun 14 Jun 2026 09:55:59 +0000 ROA not before: Sun 14 Jun 2026 09:50:59 +0000 ROA not after: Sun 13 Jun 2027 09:55:59 +0000 asID: 16509 IP address blocks: 89.117.15.0/24 maxlen: 24 89.117.28.0/24 maxlen: 24 89.117.87.0/24 maxlen: 24 89.117.153.0/24 maxlen: 24 Validation: OK Signature path: rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/D34606949D385DB42714FE71274FAC9948EF279C.crl rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/D34606949D385DB42714FE71274FAC9948EF279C.mft rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/D34606949D385DB42714FE71274FAC9948EF279C.cer rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/9DF85997B1B9B358E1C43F36765AA0A4A02144AE.crl rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/9DF85997B1B9B358E1C43F36765AA0A4A02144AE.mft rsync://rpki.ripe.net/repository/DEFAULT/nfhZl7G5s1jhxD82dlqgpKAhRK4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 22 Jul 2026 06:12:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2f:c7:ba:81:b9:52:4a:f4:2b:51:3b:8d:e0:17:8c:4d:07:d0:de:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D34606949D385DB42714FE71274FAC9948EF279C Validity Not Before: Jun 14 09:50:59 2026 GMT Not After : Jun 13 09:55:59 2027 GMT Subject: CN=A211DC0E6F764A0C9C8339C80AB219B9D29714FE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:9d:79:37:4c:a1:73:9e:61:a6:d5:1b:00:94: 2d:6d:b6:f9:68:46:c5:43:57:35:dd:fc:54:28:11: f2:c9:73:af:63:5e:fa:3f:b0:af:3f:e6:24:af:0c: 59:90:48:09:e0:b7:2f:c8:85:10:83:79:2e:85:90: d6:01:16:f1:90:7d:52:e3:23:7b:11:69:8b:7a:92: a9:02:f8:4e:71:d3:15:38:8e:da:6e:3e:6f:ff:59: 1d:c6:9a:90:b8:6f:dd:a9:4d:53:38:c0:23:3b:b5: 0e:9d:76:10:94:d8:6a:76:fa:2a:79:c0:f3:e9:de: 65:48:b1:bf:ee:bf:d2:de:1a:e6:08:fc:62:ec:d5: a1:15:30:d0:62:3f:a2:44:4b:44:32:31:ef:b1:bd: 12:f0:33:94:13:21:2c:a1:02:5d:e3:36:22:d3:a7: ef:a5:12:e0:01:ef:80:78:41:e0:54:29:30:2f:a9: fa:ca:96:10:50:e7:c4:bb:87:b8:68:e9:d8:53:ef: 6f:52:d5:14:c1:05:cc:fb:03:5b:25:ab:cc:68:e3: d7:a9:95:8f:4f:a2:02:03:47:39:06:ba:eb:19:ee: dd:56:5a:d6:43:1b:7b:99:3f:51:bc:c2:2e:84:06: 78:a9:3a:dd:cf:8d:d9:27:94:7c:ff:d7:ed:93:e4: cd:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:11:DC:0E:6F:76:4A:0C:9C:83:39:C8:0A:B2:19:B9:D2:97:14:FE X509v3 Authority Key Identifier: keyid:D3:46:06:94:9D:38:5D:B4:27:14:FE:71:27:4F:AC:99:48:EF:27:9C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/D34606949D385DB42714FE71274FAC9948EF279C.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/D34606949D385DB42714FE71274FAC9948EF279C.cer Subject Information Access: Signed Object - URI:rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/AS16509.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 89.117.15.0/24 89.117.28.0/24 89.117.87.0/24 89.117.153.0/24 Signature Algorithm: sha256WithRSAEncryption 4a:de:6d:85:59:01:bd:8c:4b:49:b4:69:c3:9e:90:10:33:c8: 9c:22:ea:0a:12:50:f4:c5:a3:3c:d5:e6:f0:2a:f2:b9:b2:b0: fc:0e:da:51:48:a4:52:71:e6:e3:48:4f:72:c2:b3:d1:c5:58: 09:d1:85:42:23:d1:a5:fc:b5:67:90:51:7d:8e:2a:8a:8a:c4: b6:02:db:0b:89:5c:ee:30:35:43:c3:dd:be:79:8f:b6:f2:16: b3:68:12:4c:b1:74:e2:4d:c2:c1:65:ad:ae:1a:85:76:cb:c1: 61:18:58:c2:e4:f8:ee:6a:01:c1:36:11:a3:91:72:30:bd:32: f2:27:16:7c:bf:2d:c4:60:66:8c:3d:32:84:e2:bf:93:23:4d: 0c:53:35:c0:7d:f9:64:3c:0a:5f:f4:7a:8b:b2:6f:05:f6:28: 01:48:21:57:33:7d:2d:42:7b:4d:33:f9:4b:7c:57:18:1a:28: 0c:67:d9:fd:5c:9d:1c:8b:66:bd:fd:a4:7a:45:8d:c1:be:32: 51:07:6c:19:cb:8f:45:90:fa:68:a3:22:1c:cf:9d:28:6c:ab: 11:82:f7:92:37:e0:01:28:c6:1d:5c:11:d9:46:29:1e:a9:c7: ad:4f:fc:2c:58:aa:80:92:50:fb:3c:14:12:6b:27:51:2a:4a: f0:72:7c:d3 -----BEGIN CERTIFICATE----- MIIFNjCCBB6gAwIBAgIUL8e6gblSSvQrUTuN4BeMTQfQ3nAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDM0NjA2OTQ5RDM4NURCNDI3MTRGRTcxMjc0RkFDOTk0 OEVGMjc5QzAeFw0yNjA2MTQwOTUwNTlaFw0yNzA2MTMwOTU1NTlaMDMxMTAvBgNV BAMTKEEyMTFEQzBFNkY3NjRBMEM5QzgzMzlDODBBQjIxOUI5RDI5NzE0RkUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDlnXk3TKFznmGm1RsAlC1ttvlo RsVDVzXd/FQoEfLJc69jXvo/sK8/5iSvDFmQSAngty/IhRCDeS6FkNYBFvGQfVLj I3sRaYt6kqkC+E5x0xU4jtpuPm//WR3GmpC4b92pTVM4wCM7tQ6ddhCU2Gp2+ip5 wPPp3mVIsb/uv9LeGuYI/GLs1aEVMNBiP6JES0QyMe+xvRLwM5QTISyhAl3jNiLT p++lEuAB74B4QeBUKTAvqfrKlhBQ58S7h7ho6dhT729S1RTBBcz7A1slq8xo49ep lY9PogIDRzkGuusZ7t1WWtZDG3uZP1G8wi6EBnipOt3PjdknlHz/1+2T5M1fAgMB AAGjggJAMIICPDAdBgNVHQ4EFgQUohHcDm92SgycgznICrIZudKXFP4wHwYDVR0j BBgwFoAU00YGlJ04XbQnFP5xJ0+smUjvJ5wwDgYDVR0PAQH/BAQDAgeAMIGIBgNV HR8EgYAwfjB8oHqgeIZ2cnN5bmM6Ly9yLm1hZ2VsbGFuLmlweG8uY29tL3JlcG8v NTI4YTIxOGYtYWQyOC00MGQyLWJkN2YtMzUwZWFkYTNkNzA1LTAvMC9EMzQ2MDY5 NDlEMzg1REI0MjcxNEZFNzEyNzRGQUM5OTQ4RUYyNzlDLmNybDCBngYIKwYBBQUH AQEEgZEwgY4wgYsGCCsGAQUFBzAChn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5y aXBlLm5ldC9yZXBvc2l0b3J5LzAwMmUwYmEzLWZlNjAtNDViMS05MTYwLTg2OGEy ZjhhNDNiMS8zL0QzNDYwNjk0OUQzODVEQjQyNzE0RkU3MTI3NEZBQzk5NDhFRjI3 OUMuY2VyMHEGCCsGAQUFBwELBGUwYzBhBggrBgEFBQcwC4ZVcnN5bmM6Ly9yLm1h Z2VsbGFuLmlweG8uY29tL3JlcG8vNTI4YTIxOGYtYWQyOC00MGQyLWJkN2YtMzUw ZWFkYTNkNzA1LTAvMC9BUzE2NTA5LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQAWXUPAwQAWXUcAwQAWXVX AwQAWXWZMA0GCSqGSIb3DQEBCwUAA4IBAQBK3m2FWQG9jEtJtGnDnpAQM8icIuoK ElD0xaM81ebwKvK5srD8DtpRSKRScebjSE9ywrPRxVgJ0YVCI9Gl/LVnkFF9jiqK isS2AtsLiVzuMDVDw92+eY+28hazaBJMsXTiTcLBZa2uGoV2y8FhGFjC5PjuagHB NhGjkXIwvTLyJxZ8vy3EYGaMPTKE4r+TI00MUzXAfflkPApf9HqLsm8F9igBSCFX M30tQntNM/lLfFcYGigMZ9n9XJ0ci2a9/aR6RY3BvjJRB2wZy49FkPpooyIcz50o bKsRgveSN+ABKMYdXBHZRikeqcetT/wsWKqAklD7PBQSaydRKkrwcnzT -----END CERTIFICATE-----Generated at Tue Jul 21 11:10:29 2026 by rpki-client