$ rpki-client -vvf r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/AS199760.roa File: AS199760.roa (raw, json) Hash identifier: 9JJvRMie9gjYvy13NFgI7ZfUxPkRkMcSY+iRIZv/a3o= Subject key identifier: 27:4F:BF:E8:8A:BF:1E:39:E3:4F:41:1A:6D:FE:41:D6:4C:23:D4:B2 Certificate issuer: /CN=D34606949D385DB42714FE71274FAC9948EF279C Certificate serial: 577766D5F4C3B266F726735604B14D50EA52CDC0 Authority key identifier: D3:46:06:94:9D:38:5D:B4:27:14:FE:71:27:4F:AC:99:48:EF:27:9C Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/D34606949D385DB42714FE71274FAC9948EF279C.cer Subject info access: rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/AS199760.roa Signing time: Thu 13 Mar 2025 16:09:22 +0000 ROA not before: Thu 13 Mar 2025 16:04:22 +0000 ROA not after: Thu 12 Mar 2026 16:09:22 +0000 asID: 199760 IP address blocks: 89.116.172.0/24 maxlen: 24 Validation: OK Signature path: rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/D34606949D385DB42714FE71274FAC9948EF279C.crl rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/D34606949D385DB42714FE71274FAC9948EF279C.mft rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/D34606949D385DB42714FE71274FAC9948EF279C.cer rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/9DF85997B1B9B358E1C43F36765AA0A4A02144AE.crl rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/9DF85997B1B9B358E1C43F36765AA0A4A02144AE.mft rsync://rpki.ripe.net/repository/DEFAULT/nfhZl7G5s1jhxD82dlqgpKAhRK4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 05 Apr 2025 08:10:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 57:77:66:d5:f4:c3:b2:66:f7:26:73:56:04:b1:4d:50:ea:52:cd:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D34606949D385DB42714FE71274FAC9948EF279C Validity Not Before: Mar 13 16:04:22 2025 GMT Not After : Mar 12 16:09:22 2026 GMT Subject: CN=274FBFE88ABF1E39E34F411A6DFE41D64C23D4B2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:2c:e5:98:fb:4c:70:76:cd:4c:2e:7e:3a:e9: 24:3c:f5:f0:06:05:43:90:28:e8:82:95:c3:73:38: 1c:e2:ee:69:43:fe:3f:8f:10:23:9d:fb:8f:3f:1d: d8:61:f8:a2:53:ab:90:3e:38:09:b4:c5:eb:c4:49: 21:ee:a9:ae:a6:28:ce:ca:0d:28:ae:8d:6f:6e:65: 4a:c4:4a:18:ae:f5:3f:22:c5:6a:3c:11:99:c5:9e: 93:13:76:c2:71:b4:cc:08:af:d3:f1:dc:2f:a2:aa: cd:51:f3:52:be:45:20:a1:8b:9d:b4:6d:00:a5:a0: f0:53:01:05:20:73:6c:82:f4:d3:7a:58:96:1d:43: e4:cb:d7:9c:00:12:1e:7e:c4:87:a5:9a:05:dd:5b: 89:34:ed:4a:16:4b:17:e8:07:0d:8e:dd:1b:92:72: bd:21:a2:f3:43:e4:ef:a2:1f:2e:a2:8c:11:c9:29: ee:54:03:23:ab:d3:51:dc:cc:c8:51:f5:a6:af:ac: c1:5b:e2:5d:e7:70:2f:09:95:98:a2:36:8d:09:5a: 24:80:75:79:23:6b:a8:32:c9:38:61:ae:af:9e:c0: c6:88:92:52:b0:7f:d4:1e:dd:e7:43:eb:39:9a:c5: b3:50:09:9f:32:16:59:8e:68:1f:e5:13:3b:49:18: 28:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:4F:BF:E8:8A:BF:1E:39:E3:4F:41:1A:6D:FE:41:D6:4C:23:D4:B2 X509v3 Authority Key Identifier: keyid:D3:46:06:94:9D:38:5D:B4:27:14:FE:71:27:4F:AC:99:48:EF:27:9C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/D34606949D385DB42714FE71274FAC9948EF279C.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/D34606949D385DB42714FE71274FAC9948EF279C.cer Subject Information Access: Signed Object - URI:rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/AS199760.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 89.116.172.0/24 Signature Algorithm: sha256WithRSAEncryption 08:51:81:b7:ef:85:fe:56:04:d7:ac:c6:bc:2b:bc:40:49:f6: b7:cc:cf:e9:41:86:ef:7b:fc:74:ec:06:7d:95:57:6b:9b:cd: ea:aa:69:b6:11:ad:37:a8:17:8f:22:cd:63:49:96:ae:aa:da: f6:33:6d:f8:32:5b:bc:d1:4c:d0:da:82:af:e9:2d:7d:96:e3: cf:85:33:21:55:f6:23:0d:dd:18:56:14:51:84:91:f1:75:11: c4:7d:a4:d8:2a:1e:f5:6a:bc:e8:82:4b:9b:80:8a:80:03:97: f9:93:e5:da:81:bb:af:7e:f7:aa:8d:a8:62:aa:63:36:38:bb: 56:1a:96:dc:79:07:c2:92:8b:2e:ba:43:64:37:d0:aa:a9:97: 81:bd:f7:a9:35:14:61:fa:9e:65:fa:3a:20:69:98:ef:81:d4: 48:5c:ee:5b:ff:c0:46:25:6d:62:f0:b8:08:0e:43:f3:f4:1c: 4f:18:a1:8a:de:a6:eb:c6:3d:f6:c7:f6:3b:c2:24:34:ed:e6: 34:d5:39:71:32:dd:74:98:cb:1d:96:91:70:1e:96:bb:40:80: 6c:9e:d0:40:19:39:12:c9:32:79:c2:d0:99:6a:8f:84:f0:d9: be:25:f5:41:69:ed:47:9e:1e:ea:3d:ac:fa:c6:0b:95:73:5e: 1b:03:10:84 -----BEGIN CERTIFICATE----- MIIFJTCCBA2gAwIBAgIUV3dm1fTDsmb3JnNWBLFNUOpSzcAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDM0NjA2OTQ5RDM4NURCNDI3MTRGRTcxMjc0RkFDOTk0 OEVGMjc5QzAeFw0yNTAzMTMxNjA0MjJaFw0yNjAzMTIxNjA5MjJaMDMxMTAvBgNV BAMTKDI3NEZCRkU4OEFCRjFFMzlFMzRGNDExQTZERkU0MUQ2NEMyM0Q0QjIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDeLOWY+0xwds1MLn466SQ89fAG BUOQKOiClcNzOBzi7mlD/j+PECOd+48/Hdhh+KJTq5A+OAm0xevESSHuqa6mKM7K DSiujW9uZUrEShiu9T8ixWo8EZnFnpMTdsJxtMwIr9Px3C+iqs1R81K+RSChi520 bQCloPBTAQUgc2yC9NN6WJYdQ+TL15wAEh5+xIelmgXdW4k07UoWSxfoBw2O3RuS cr0hovND5O+iHy6ijBHJKe5UAyOr01HczMhR9aavrMFb4l3ncC8JlZiiNo0JWiSA dXkja6gyyThhrq+ewMaIklKwf9Qe3edD6zmaxbNQCZ8yFlmOaB/lEztJGChHAgMB AAGjggIvMIICKzAdBgNVHQ4EFgQUJ0+/6Iq/HjnjT0Eabf5B1kwj1LIwHwYDVR0j BBgwFoAU00YGlJ04XbQnFP5xJ0+smUjvJ5wwDgYDVR0PAQH/BAQDAgeAMIGIBgNV HR8EgYAwfjB8oHqgeIZ2cnN5bmM6Ly9yLm1hZ2VsbGFuLmlweG8uY29tL3JlcG8v NTI4YTIxOGYtYWQyOC00MGQyLWJkN2YtMzUwZWFkYTNkNzA1LTAvMC9EMzQ2MDY5 NDlEMzg1REI0MjcxNEZFNzEyNzRGQUM5OTQ4RUYyNzlDLmNybDCBngYIKwYBBQUH AQEEgZEwgY4wgYsGCCsGAQUFBzAChn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5y aXBlLm5ldC9yZXBvc2l0b3J5LzAwMmUwYmEzLWZlNjAtNDViMS05MTYwLTg2OGEy ZjhhNDNiMS8zL0QzNDYwNjk0OUQzODVEQjQyNzE0RkU3MTI3NEZBQzk5NDhFRjI3 OUMuY2VyMHIGCCsGAQUFBwELBGYwZDBiBggrBgEFBQcwC4ZWcnN5bmM6Ly9yLm1h Z2VsbGFuLmlweG8uY29tL3JlcG8vNTI4YTIxOGYtYWQyOC00MGQyLWJkN2YtMzUw ZWFkYTNkNzA1LTAvMC9BUzE5OTc2MC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEF BQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAFl0rDANBgkqhkiG9w0B AQsFAAOCAQEACFGBt++F/lYE16zGvCu8QEn2t8zP6UGG73v8dOwGfZVXa5vN6qpp thGtN6gXjyLNY0mWrqra9jNt+DJbvNFM0NqCr+ktfZbjz4UzIVX2Iw3dGFYUUYSR 8XURxH2k2Coe9Wq86IJLm4CKgAOX+ZPl2oG7r373qo2oYqpjNji7VhqW3HkHwpKL LrpDZDfQqqmXgb33qTUUYfqeZfo6IGmY74HUSFzuW//ARiVtYvC4CA5D8/QcTxih it6m68Y99sf2O8IkNO3mNNU5cTLddJjLHZaRcB6Wu0CAbJ7QQBk5EskyecLQmWqP hPDZviX1QWntR54e6j2s+sYLlXNeGwMQhA== -----END CERTIFICATE-----Generated at Fri Apr 4 20:23:26 2025 by rpki-client