$ rpki-client -vvvf r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/AS197685.roa File: AS197685.roa (raw, json) Hash identifier: i0gyBleHSa9J7isGYnPhcA//Dkq/OTOIutxEjYkH1Rg= Subject key identifier: 85:F9:99:F5:C4:59:CC:5C:7C:DE:D3:AC:64:BE:13:1F:DF:4C:7F:B7 Certificate issuer: /CN=D34606949D385DB42714FE71274FAC9948EF279C Certificate serial: 7EBAAAE9B0BA6EB769DB3BCFEC7D2948A465948C Authority key identifier: D3:46:06:94:9D:38:5D:B4:27:14:FE:71:27:4F:AC:99:48:EF:27:9C Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/D34606949D385DB42714FE71274FAC9948EF279C.cer Subject info access: rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/AS197685.roa Signing time: Mon 24 Aug 2026 12:49:30 +0000 ROA not before: Mon 24 Aug 2026 12:44:30 +0000 ROA not after: Mon 23 Aug 2027 12:49:30 +0000 asID: 197685 IP address blocks: 89.116.107.0/24 maxlen: 24 Validation: OK Signature path: rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/D34606949D385DB42714FE71274FAC9948EF279C.crl rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/D34606949D385DB42714FE71274FAC9948EF279C.mft rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/D34606949D385DB42714FE71274FAC9948EF279C.cer rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/9DF85997B1B9B358E1C43F36765AA0A4A02144AE.crl rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/9DF85997B1B9B358E1C43F36765AA0A4A02144AE.mft rsync://rpki.ripe.net/repository/DEFAULT/nfhZl7G5s1jhxD82dlqgpKAhRK4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 05 Sep 2026 10:43:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7e:ba:aa:e9:b0:ba:6e:b7:69:db:3b:cf:ec:7d:29:48:a4:65:94:8c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D34606949D385DB42714FE71274FAC9948EF279C Validity Not Before: Aug 24 12:44:30 2026 GMT Not After : Aug 23 12:49:30 2027 GMT Subject: CN=85F999F5C459CC5C7CDED3AC64BE131FDF4C7FB7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:82:94:31:c1:57:11:98:f6:ba:8e:fa:9d:ed: 47:6b:73:6a:28:4f:29:2a:cb:42:fb:52:c9:b6:79: 10:1a:bf:fa:06:a9:7e:0a:68:69:75:ec:0f:60:9e: 9d:30:3a:28:af:9e:de:50:41:18:37:a5:9a:39:1e: 27:5a:d9:2b:ab:2f:5a:5d:55:6c:29:ec:a3:76:61: 46:b1:d3:bd:09:32:0d:51:33:29:dd:8e:95:15:88: f7:5a:44:9f:bb:2a:04:07:9d:78:5a:dd:86:8d:e5: 94:2d:23:53:d5:a0:60:5e:8a:db:f2:e9:7e:7f:4b: 3a:a0:0b:f3:ee:82:35:a9:56:a8:53:17:a1:a2:bc: 0d:a5:27:92:9c:90:ed:e8:3d:06:0f:fc:28:3e:74: e2:44:be:8c:6b:b4:9d:5b:0a:df:af:c7:e1:e8:ec: 29:94:e4:b9:5c:b7:c8:6d:99:45:de:ce:cd:39:e8: d0:11:78:2a:a4:02:b4:d3:1a:06:ec:c7:3b:e1:64: f6:55:8b:5d:76:35:7e:02:cf:ae:af:ca:13:e0:72: 62:5f:24:7f:d4:19:a8:13:bd:22:a0:2d:c2:00:ad: 79:4c:bb:cd:9d:b6:85:99:c8:5d:7b:8c:db:04:b8: 3f:85:61:8e:ed:12:5a:de:5b:65:b0:35:1a:dc:7b: f1:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:F9:99:F5:C4:59:CC:5C:7C:DE:D3:AC:64:BE:13:1F:DF:4C:7F:B7 X509v3 Authority Key Identifier: keyid:D3:46:06:94:9D:38:5D:B4:27:14:FE:71:27:4F:AC:99:48:EF:27:9C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/D34606949D385DB42714FE71274FAC9948EF279C.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/D34606949D385DB42714FE71274FAC9948EF279C.cer Subject Information Access: Signed Object - URI:rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/AS197685.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 89.116.107.0/24 Signature Algorithm: sha256WithRSAEncryption 21:77:d8:44:da:ee:7e:b0:31:c1:3a:fd:53:17:d9:08:d8:59: 7d:40:63:09:33:14:53:dc:60:a2:10:d3:20:1e:c1:ff:6d:42: 7d:a9:f9:a6:4f:eb:d9:e5:d0:ea:4b:8f:c3:9d:5b:95:fc:7d: b1:e5:d0:57:c6:68:91:a8:4a:a2:4e:f4:36:7b:54:9b:51:bb: ca:96:f4:28:4c:f5:14:64:cc:fe:f2:80:7d:b3:92:53:0b:88: 85:25:90:68:55:09:2e:17:47:f1:c3:bd:ff:f9:66:b2:dd:d7: 40:a3:7b:62:68:ed:3b:7d:04:2b:44:2c:24:22:59:ae:ad:58: 4e:70:b0:24:1d:1c:2a:ce:38:35:98:56:3b:f3:fe:1c:d7:58: c2:71:94:34:ce:53:60:42:67:8c:02:d0:77:67:bb:06:77:0b: 34:08:5c:9c:c8:a9:53:2c:e1:26:e9:c8:14:db:0b:08:f1:c0: b3:76:06:7f:cb:7f:fa:2b:f9:21:a9:8c:f8:0b:7c:ac:cb:8e: 95:11:50:22:c7:a8:e1:48:8b:36:ed:5f:5c:fc:06:fa:0a:6d: 08:5c:8e:49:8d:cf:2f:3b:a1:92:26:d7:e7:8a:69:0f:92:e8: ff:5a:69:36:e0:0b:6c:d5:48:f3:2a:10:c3:3e:c3:07:13:78: e7:86:59:cb -----BEGIN CERTIFICATE----- MIIFJTCCBA2gAwIBAgIUfrqq6bC6brdp2zvP7H0pSKRllIwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDM0NjA2OTQ5RDM4NURCNDI3MTRGRTcxMjc0RkFDOTk0 OEVGMjc5QzAeFw0yNjA4MjQxMjQ0MzBaFw0yNzA4MjMxMjQ5MzBaMDMxMTAvBgNV BAMTKDg1Rjk5OUY1QzQ1OUNDNUM3Q0RFRDNBQzY0QkUxMzFGREY0QzdGQjcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCtgpQxwVcRmPa6jvqd7Udrc2oo Tykqy0L7Usm2eRAav/oGqX4KaGl17A9gnp0wOiivnt5QQRg3pZo5Hida2SurL1pd VWwp7KN2YUax070JMg1RMyndjpUViPdaRJ+7KgQHnXha3YaN5ZQtI1PVoGBeitvy 6X5/SzqgC/PugjWpVqhTF6GivA2lJ5KckO3oPQYP/Cg+dOJEvoxrtJ1bCt+vx+Ho 7CmU5Llct8htmUXezs056NAReCqkArTTGgbsxzvhZPZVi112NX4Cz66vyhPgcmJf JH/UGagTvSKgLcIArXlMu82dtoWZyF17jNsEuD+FYY7tElreW2WwNRrce/FfAgMB AAGjggIvMIICKzAdBgNVHQ4EFgQUhfmZ9cRZzFx83tOsZL4TH99Mf7cwHwYDVR0j BBgwFoAU00YGlJ04XbQnFP5xJ0+smUjvJ5wwDgYDVR0PAQH/BAQDAgeAMIGIBgNV HR8EgYAwfjB8oHqgeIZ2cnN5bmM6Ly9yLm1hZ2VsbGFuLmlweG8uY29tL3JlcG8v NTI4YTIxOGYtYWQyOC00MGQyLWJkN2YtMzUwZWFkYTNkNzA1LTAvMC9EMzQ2MDY5 NDlEMzg1REI0MjcxNEZFNzEyNzRGQUM5OTQ4RUYyNzlDLmNybDCBngYIKwYBBQUH AQEEgZEwgY4wgYsGCCsGAQUFBzAChn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5y aXBlLm5ldC9yZXBvc2l0b3J5LzAwMmUwYmEzLWZlNjAtNDViMS05MTYwLTg2OGEy ZjhhNDNiMS8zL0QzNDYwNjk0OUQzODVEQjQyNzE0RkU3MTI3NEZBQzk5NDhFRjI3 OUMuY2VyMHIGCCsGAQUFBwELBGYwZDBiBggrBgEFBQcwC4ZWcnN5bmM6Ly9yLm1h Z2VsbGFuLmlweG8uY29tL3JlcG8vNTI4YTIxOGYtYWQyOC00MGQyLWJkN2YtMzUw ZWFkYTNkNzA1LTAvMC9BUzE5NzY4NS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEF BQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAFl0azANBgkqhkiG9w0B AQsFAAOCAQEAIXfYRNrufrAxwTr9UxfZCNhZfUBjCTMUU9xgohDTIB7B/21Cfan5 pk/r2eXQ6kuPw51blfx9seXQV8ZokahKok70NntUm1G7ypb0KEz1FGTM/vKAfbOS UwuIhSWQaFUJLhdH8cO9//lmst3XQKN7YmjtO30EK0QsJCJZrq1YTnCwJB0cKs44 NZhWO/P+HNdYwnGUNM5TYEJnjALQd2e7BncLNAhcnMipUyzhJunIFNsLCPHAs3YG f8t/+iv5IamM+At8rMuOlRFQIseo4UiLNu1fXPwG+gptCFyOSY3PLzuhkibX54pp D5Lo/1ppNuALbNVI8yoQwz7DBxN454ZZyw== -----END CERTIFICATE-----Generated at Fri Sep 4 20:59:20 2026 by rpki-client