$ rpki-client -vvvf r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/AS198020.roa File: AS198020.roa (raw, json) Hash identifier: yPqr8q6uANSz+K0z88wkiwOENc2q0X4WlIaZCA6auf8= Subject key identifier: BF:76:53:12:19:C4:04:DC:BB:A4:AC:7D:37:0F:30:F2:9B:1C:93:86 Certificate issuer: /CN=D34606949D385DB42714FE71274FAC9948EF279C Certificate serial: 5E58C358F47E3E106CD59A7F1041CE1F8C53A09E Authority key identifier: D3:46:06:94:9D:38:5D:B4:27:14:FE:71:27:4F:AC:99:48:EF:27:9C Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/D34606949D385DB42714FE71274FAC9948EF279C.cer Subject info access: rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/AS198020.roa Signing time: Fri 02 Oct 2026 11:49:35 +0000 ROA not before: Fri 02 Oct 2026 11:44:35 +0000 ROA not after: Fri 01 Oct 2027 11:49:35 +0000 asID: 198020 IP address blocks: 86.38.182.0/24 maxlen: 24 86.38.238.0/24 maxlen: 24 Validation: OK Signature path: rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/D34606949D385DB42714FE71274FAC9948EF279C.crl rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/D34606949D385DB42714FE71274FAC9948EF279C.mft rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/D34606949D385DB42714FE71274FAC9948EF279C.cer rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/9DF85997B1B9B358E1C43F36765AA0A4A02144AE.crl rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/9DF85997B1B9B358E1C43F36765AA0A4A02144AE.mft rsync://rpki.ripe.net/repository/DEFAULT/nfhZl7G5s1jhxD82dlqgpKAhRK4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 21 Oct 2026 01:16:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5e:58:c3:58:f4:7e:3e:10:6c:d5:9a:7f:10:41:ce:1f:8c:53:a0:9e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D34606949D385DB42714FE71274FAC9948EF279C Validity Not Before: Oct 2 11:44:35 2026 GMT Not After : Oct 1 11:49:35 2027 GMT Subject: CN=BF76531219C404DCBBA4AC7D370F30F29B1C9386 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:38:d5:fd:64:e2:39:0a:ab:95:d5:e6:d3:53: b7:16:4a:71:38:1b:2f:9a:6e:e6:c3:58:4b:f4:75: 88:e5:cc:36:61:bb:16:b6:07:bd:b5:53:7c:11:b1: 69:ff:bf:2b:37:4f:08:60:0e:8d:93:5d:22:46:ca: 7a:18:83:d0:45:c6:65:38:82:14:39:1a:80:2f:d9: b8:9e:5b:29:69:8b:fe:6d:74:96:20:3d:9b:86:34: 90:f5:d8:be:38:54:4e:47:ed:6f:f3:63:be:55:49: 08:ab:65:f6:ce:33:53:27:35:96:e3:4f:6f:4a:2a: 65:ba:49:ba:50:a3:7c:e2:41:38:96:d3:6a:6e:98: 9e:c8:9f:56:59:03:da:cf:3e:01:0c:7a:84:eb:55: 45:63:95:e7:ef:58:36:28:d6:92:47:7c:9f:37:f3: 93:b5:9b:a5:49:15:39:0d:92:ad:e8:67:8f:fb:20: 82:51:84:1e:87:06:ae:32:11:b1:a7:36:99:c8:3b: b7:b5:d9:5a:3d:70:34:3e:05:07:c2:93:5f:90:a3: 78:3d:df:ea:a2:7f:1d:b5:41:f3:d2:3c:d9:58:a2: 41:a9:86:a7:73:64:d7:5f:04:75:cd:b4:80:c4:06: 14:7f:13:aa:03:bc:75:f3:d1:7e:51:67:ae:04:02: 8c:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:76:53:12:19:C4:04:DC:BB:A4:AC:7D:37:0F:30:F2:9B:1C:93:86 X509v3 Authority Key Identifier: keyid:D3:46:06:94:9D:38:5D:B4:27:14:FE:71:27:4F:AC:99:48:EF:27:9C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/D34606949D385DB42714FE71274FAC9948EF279C.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/D34606949D385DB42714FE71274FAC9948EF279C.cer Subject Information Access: Signed Object - URI:rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/AS198020.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 86.38.182.0/24 86.38.238.0/24 Signature Algorithm: sha256WithRSAEncryption c1:61:6d:c6:08:82:de:5a:45:07:11:26:b2:f8:61:5f:b9:91: 1a:6c:05:51:b1:eb:e0:71:fe:c2:90:c4:12:9f:be:9a:f5:c2: f6:ef:bd:52:5b:49:e4:e6:f3:04:65:8c:36:7b:5c:d1:a5:7e: cb:d9:5c:b2:9e:23:3d:c8:4b:b0:59:59:4e:c9:62:52:35:a5: 0b:c3:25:cc:4b:79:94:54:f2:2c:34:f0:3d:32:9c:20:20:4b: 57:a6:db:2a:76:e0:ab:fc:3b:e6:59:c7:90:db:f8:f9:f7:2f: 25:f4:89:23:9d:5b:ba:e9:62:64:20:6f:c0:33:ba:37:f7:e4: 81:b0:ba:a7:34:c8:ba:06:ea:bf:30:f4:d9:aa:7f:27:30:3e: a0:e0:61:0c:0b:1f:ea:3f:f7:11:f8:b1:2a:e8:e9:0e:ee:fd: 9d:c9:1e:e3:c6:c7:10:ac:19:20:11:fa:24:84:e2:87:b1:d7: 4c:f8:d5:11:7e:f1:45:15:7c:6b:01:5e:cc:b3:2d:ec:1b:ce: 65:34:07:d8:8a:fa:f2:47:4b:15:c1:90:07:af:25:6e:f4:b2: 2c:79:28:26:d6:f0:10:84:a2:e8:f6:80:fe:62:74:96:b7:14: b5:bf:3b:e1:ac:ce:c0:2f:1b:f3:f0:da:d9:83:4e:18:61:f0: 44:5b:51:eb -----BEGIN CERTIFICATE----- MIIFKzCCBBOgAwIBAgIUXljDWPR+PhBs1Zp/EEHOH4xToJ4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDM0NjA2OTQ5RDM4NURCNDI3MTRGRTcxMjc0RkFDOTk0 OEVGMjc5QzAeFw0yNjEwMDIxMTQ0MzVaFw0yNzEwMDExMTQ5MzVaMDMxMTAvBgNV BAMTKEJGNzY1MzEyMTlDNDA0RENCQkE0QUM3RDM3MEYzMEYyOUIxQzkzODYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDBONX9ZOI5CquV1ebTU7cWSnE4 Gy+abubDWEv0dYjlzDZhuxa2B721U3wRsWn/vys3TwhgDo2TXSJGynoYg9BFxmU4 ghQ5GoAv2bieWylpi/5tdJYgPZuGNJD12L44VE5H7W/zY75VSQirZfbOM1MnNZbj T29KKmW6SbpQo3ziQTiW02pumJ7In1ZZA9rPPgEMeoTrVUVjlefvWDYo1pJHfJ83 85O1m6VJFTkNkq3oZ4/7IIJRhB6HBq4yEbGnNpnIO7e12Vo9cDQ+BQfCk1+Qo3g9 3+qifx21QfPSPNlYokGphqdzZNdfBHXNtIDEBhR/E6oDvHXz0X5RZ64EAozXAgMB AAGjggI1MIICMTAdBgNVHQ4EFgQUv3ZTEhnEBNy7pKx9Nw8w8psck4YwHwYDVR0j BBgwFoAU00YGlJ04XbQnFP5xJ0+smUjvJ5wwDgYDVR0PAQH/BAQDAgeAMIGIBgNV HR8EgYAwfjB8oHqgeIZ2cnN5bmM6Ly9yLm1hZ2VsbGFuLmlweG8uY29tL3JlcG8v NTI4YTIxOGYtYWQyOC00MGQyLWJkN2YtMzUwZWFkYTNkNzA1LTAvMC9EMzQ2MDY5 NDlEMzg1REI0MjcxNEZFNzEyNzRGQUM5OTQ4RUYyNzlDLmNybDCBngYIKwYBBQUH AQEEgZEwgY4wgYsGCCsGAQUFBzAChn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5y aXBlLm5ldC9yZXBvc2l0b3J5LzAwMmUwYmEzLWZlNjAtNDViMS05MTYwLTg2OGEy ZjhhNDNiMS8zL0QzNDYwNjk0OUQzODVEQjQyNzE0RkU3MTI3NEZBQzk5NDhFRjI3 OUMuY2VyMHIGCCsGAQUFBwELBGYwZDBiBggrBgEFBQcwC4ZWcnN5bmM6Ly9yLm1h Z2VsbGFuLmlweG8uY29tL3JlcG8vNTI4YTIxOGYtYWQyOC00MGQyLWJkN2YtMzUw ZWFkYTNkNzA1LTAvMC9BUzE5ODAyMC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEF BQcOAjAlBggrBgEFBQcBBwEB/wQWMBQwEgQCAAEwDAMEAFYmtgMEAFYm7jANBgkq hkiG9w0BAQsFAAOCAQEAwWFtxgiC3lpFBxEmsvhhX7mRGmwFUbHr4HH+wpDEEp++ mvXC9u+9UltJ5ObzBGWMNntc0aV+y9lcsp4jPchLsFlZTsliUjWlC8MlzEt5lFTy LDTwPTKcICBLV6bbKnbgq/w75lnHkNv4+fcvJfSJI51buuliZCBvwDO6N/fkgbC6 pzTIugbqvzD02ap/JzA+oOBhDAsf6j/3EfixKujpDu79ncke48bHEKwZIBH6JITi h7HXTPjVEX7xRRV8awFezLMt7BvOZTQH2Ir68kdLFcGQB68lbvSyLHkoJtbwEISi 6PaA/mJ0lrcUtb874azOwC8b8/Da2YNOGGHwRFtR6w== -----END CERTIFICATE-----Generated at Tue Oct 20 12:17:43 2026 by rpki-client