$ rpki-client -vvf r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/AS199741.roa File: AS199741.roa (raw, json) Hash identifier: +V/VXKXBqqngMon2wkjBfmViZswsvyL0p9odnNbjTd4= Subject key identifier: 87:A3:81:5D:08:4D:61:DF:90:06:C1:F9:D3:A2:58:85:5F:0F:EF:41 Certificate issuer: /CN=D34606949D385DB42714FE71274FAC9948EF279C Certificate serial: 62018AD6830791738A717D131D6484B6548A60BF Authority key identifier: D3:46:06:94:9D:38:5D:B4:27:14:FE:71:27:4F:AC:99:48:EF:27:9C Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/D34606949D385DB42714FE71274FAC9948EF279C.cer Subject info access: rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/AS199741.roa Signing time: Thu 02 Jul 2026 16:12:05 +0000 ROA not before: Thu 02 Jul 2026 16:07:05 +0000 ROA not after: Thu 01 Jul 2027 16:12:05 +0000 asID: 199741 IP address blocks: 89.116.148.0/24 maxlen: 24 Validation: OK Signature path: rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/D34606949D385DB42714FE71274FAC9948EF279C.crl rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/D34606949D385DB42714FE71274FAC9948EF279C.mft rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/D34606949D385DB42714FE71274FAC9948EF279C.cer rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/9DF85997B1B9B358E1C43F36765AA0A4A02144AE.crl rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/9DF85997B1B9B358E1C43F36765AA0A4A02144AE.mft rsync://rpki.ripe.net/repository/DEFAULT/nfhZl7G5s1jhxD82dlqgpKAhRK4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 22 Jul 2026 06:12:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 62:01:8a:d6:83:07:91:73:8a:71:7d:13:1d:64:84:b6:54:8a:60:bf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D34606949D385DB42714FE71274FAC9948EF279C Validity Not Before: Jul 2 16:07:05 2026 GMT Not After : Jul 1 16:12:05 2027 GMT Subject: CN=87A3815D084D61DF9006C1F9D3A258855F0FEF41 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:b9:a0:ec:eb:52:fc:fa:4b:a0:64:e9:93:c0: 49:70:53:06:93:26:56:ee:9b:8a:d6:e0:b7:d2:64: 03:9c:27:ee:47:bb:b8:eb:36:7a:db:41:c8:a9:e3: f5:51:ce:30:cc:47:83:dc:a9:a2:69:ac:37:cf:18: 59:81:85:44:a2:ae:2b:d5:51:c0:19:05:d1:66:1d: 01:67:00:e7:a7:76:db:ae:e6:f5:00:5a:93:6a:23: 1e:6b:1c:e8:48:30:6f:89:1e:57:17:d0:66:79:a7: c9:36:8c:e6:a4:00:b3:0f:08:17:92:a5:fa:84:57: 80:56:e7:06:57:05:5f:97:1a:52:60:1f:1b:6f:0f: 6e:f5:af:5c:0d:50:7c:0e:f3:51:98:0c:8d:b9:9c: 58:93:3f:a0:7e:fc:d5:68:ae:02:a8:fa:99:c8:4b: 68:3d:17:51:ff:cc:81:b1:10:f5:cf:1b:f7:53:b6: f6:08:7e:2a:1f:30:67:97:05:ba:88:be:5c:c9:60: a1:46:77:f8:c1:8b:8d:82:4a:c6:b2:58:c1:a4:04: 7f:08:5f:8d:9a:bd:1b:2a:a0:f3:5a:ff:88:32:36: 5f:1a:81:ef:2b:61:e9:40:91:03:f8:99:eb:41:04: c0:db:ef:07:75:df:ff:b2:2e:9f:8f:99:30:77:fd: dd:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:A3:81:5D:08:4D:61:DF:90:06:C1:F9:D3:A2:58:85:5F:0F:EF:41 X509v3 Authority Key Identifier: keyid:D3:46:06:94:9D:38:5D:B4:27:14:FE:71:27:4F:AC:99:48:EF:27:9C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/D34606949D385DB42714FE71274FAC9948EF279C.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/D34606949D385DB42714FE71274FAC9948EF279C.cer Subject Information Access: Signed Object - URI:rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/AS199741.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 89.116.148.0/24 Signature Algorithm: sha256WithRSAEncryption 2c:c2:7b:bb:1e:be:45:03:c6:14:83:6d:dd:23:fd:86:d3:8f: 0e:23:ba:d8:63:6c:26:88:0f:68:7b:9a:3e:16:23:8f:2d:ee: 21:cc:70:37:76:72:51:d6:b5:f4:cf:0d:31:4e:af:c2:7b:1b: 77:3e:14:ac:cd:dc:6d:79:a5:83:51:9f:3a:6f:f3:70:d5:3d: 0f:df:14:0b:14:f7:da:c1:d6:e1:24:1c:f5:9d:35:b8:22:f9: 40:42:31:3f:8a:b9:f8:97:f3:41:6c:0b:c9:f8:e4:9a:79:fd: 6e:16:65:54:42:c4:90:0c:47:b3:64:fc:25:e5:1e:ae:84:77: 61:54:09:07:9f:6b:9f:b3:84:c2:f1:9f:35:b4:b1:05:ad:9c: fb:f9:2f:2b:f2:07:80:7b:0c:c5:08:39:99:13:75:f0:52:3f: 80:89:e1:e5:42:ac:9b:42:97:c2:72:dc:46:94:ff:3a:9e:82: 88:e0:95:9c:8b:29:56:36:13:32:5c:82:25:ce:81:7e:4a:c0: 78:77:f3:29:1d:0b:f4:db:d0:47:f1:90:e4:84:5a:47:cf:a6: 2c:59:b0:08:e6:59:3c:36:a4:73:d7:d8:3a:a2:e6:bf:5e:bb: 92:2b:b7:dc:25:99:5c:15:dd:a3:33:b4:29:ce:66:34:f2:bc: 53:0f:9f:6c -----BEGIN CERTIFICATE----- MIIFJTCCBA2gAwIBAgIUYgGK1oMHkXOKcX0THWSEtlSKYL8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDM0NjA2OTQ5RDM4NURCNDI3MTRGRTcxMjc0RkFDOTk0 OEVGMjc5QzAeFw0yNjA3MDIxNjA3MDVaFw0yNzA3MDExNjEyMDVaMDMxMTAvBgNV BAMTKDg3QTM4MTVEMDg0RDYxREY5MDA2QzFGOUQzQTI1ODg1NUYwRkVGNDEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCuuaDs61L8+kugZOmTwElwUwaT Jlbum4rW4LfSZAOcJ+5Hu7jrNnrbQcip4/VRzjDMR4PcqaJprDfPGFmBhUSirivV UcAZBdFmHQFnAOendtuu5vUAWpNqIx5rHOhIMG+JHlcX0GZ5p8k2jOakALMPCBeS pfqEV4BW5wZXBV+XGlJgHxtvD271r1wNUHwO81GYDI25nFiTP6B+/NVorgKo+pnI S2g9F1H/zIGxEPXPG/dTtvYIfiofMGeXBbqIvlzJYKFGd/jBi42CSsayWMGkBH8I X42avRsqoPNa/4gyNl8age8rYelAkQP4metBBMDb7wd13/+yLp+PmTB3/d3fAgMB AAGjggIvMIICKzAdBgNVHQ4EFgQUh6OBXQhNYd+QBsH506JYhV8P70EwHwYDVR0j BBgwFoAU00YGlJ04XbQnFP5xJ0+smUjvJ5wwDgYDVR0PAQH/BAQDAgeAMIGIBgNV HR8EgYAwfjB8oHqgeIZ2cnN5bmM6Ly9yLm1hZ2VsbGFuLmlweG8uY29tL3JlcG8v NTI4YTIxOGYtYWQyOC00MGQyLWJkN2YtMzUwZWFkYTNkNzA1LTAvMC9EMzQ2MDY5 NDlEMzg1REI0MjcxNEZFNzEyNzRGQUM5OTQ4RUYyNzlDLmNybDCBngYIKwYBBQUH AQEEgZEwgY4wgYsGCCsGAQUFBzAChn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5y aXBlLm5ldC9yZXBvc2l0b3J5LzAwMmUwYmEzLWZlNjAtNDViMS05MTYwLTg2OGEy ZjhhNDNiMS8zL0QzNDYwNjk0OUQzODVEQjQyNzE0RkU3MTI3NEZBQzk5NDhFRjI3 OUMuY2VyMHIGCCsGAQUFBwELBGYwZDBiBggrBgEFBQcwC4ZWcnN5bmM6Ly9yLm1h Z2VsbGFuLmlweG8uY29tL3JlcG8vNTI4YTIxOGYtYWQyOC00MGQyLWJkN2YtMzUw ZWFkYTNkNzA1LTAvMC9BUzE5OTc0MS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEF BQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAFl0lDANBgkqhkiG9w0B AQsFAAOCAQEALMJ7ux6+RQPGFINt3SP9htOPDiO62GNsJogPaHuaPhYjjy3uIcxw N3ZyUda19M8NMU6vwnsbdz4UrM3cbXmlg1GfOm/zcNU9D98UCxT32sHW4SQc9Z01 uCL5QEIxP4q5+JfzQWwLyfjkmnn9bhZlVELEkAxHs2T8JeUeroR3YVQJB59rn7OE wvGfNbSxBa2c+/kvK/IHgHsMxQg5mRN18FI/gInh5UKsm0KXwnLcRpT/Op6CiOCV nIspVjYTMlyCJc6BfkrAeHfzKR0L9NvQR/GQ5IRaR8+mLFmwCOZZPDakc9fYOqLm v167kiu33CWZXBXdozO0Kc5mNPK8Uw+fbA== -----END CERTIFICATE-----Generated at Tue Jul 21 11:07:59 2026 by rpki-client