$ rpki-client -vvf r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/AS212980.roa File: AS212980.roa (raw, json) Hash identifier: wT6JvuayUjesrYRwvoJEwdaJezDevHkCvaoXF8ZiBQc= Subject key identifier: 7D:91:8D:8A:14:51:CE:6B:2A:34:D5:06:15:9C:CB:00:BD:F4:E9:78 Certificate issuer: /CN=D34606949D385DB42714FE71274FAC9948EF279C Certificate serial: 41284B780FF80B2EEBE8C19246DE745F9BC05CB1 Authority key identifier: D3:46:06:94:9D:38:5D:B4:27:14:FE:71:27:4F:AC:99:48:EF:27:9C Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/D34606949D385DB42714FE71274FAC9948EF279C.cer Subject info access: rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/AS212980.roa Signing time: Wed 13 May 2026 12:47:02 +0000 ROA not before: Wed 13 May 2026 12:42:02 +0000 ROA not after: Wed 12 May 2027 12:47:02 +0000 asID: 212980 IP address blocks: 86.38.235.0/24 maxlen: 24 Validation: OK Signature path: rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/D34606949D385DB42714FE71274FAC9948EF279C.crl rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/D34606949D385DB42714FE71274FAC9948EF279C.mft rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/D34606949D385DB42714FE71274FAC9948EF279C.cer rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/9DF85997B1B9B358E1C43F36765AA0A4A02144AE.crl rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/9DF85997B1B9B358E1C43F36765AA0A4A02144AE.mft rsync://rpki.ripe.net/repository/DEFAULT/nfhZl7G5s1jhxD82dlqgpKAhRK4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 25 May 2026 01:32:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 41:28:4b:78:0f:f8:0b:2e:eb:e8:c1:92:46:de:74:5f:9b:c0:5c:b1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D34606949D385DB42714FE71274FAC9948EF279C Validity Not Before: May 13 12:42:02 2026 GMT Not After : May 12 12:47:02 2027 GMT Subject: CN=7D918D8A1451CE6B2A34D506159CCB00BDF4E978 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:ad:7b:1e:a1:19:1b:c6:be:17:c0:c5:17:03: 6c:de:a5:53:ce:2e:2b:ce:eb:56:73:f9:a8:f2:b7: 4c:6a:44:8f:99:67:f8:c6:d4:4f:92:5a:b4:9a:9b: f0:79:7b:b5:0a:e5:d9:97:4e:c0:56:95:bd:dd:b5: b9:c4:19:f2:5f:91:f8:c6:71:07:c2:80:ba:f0:d9: 47:57:df:21:6c:a3:d9:6c:3c:1f:b3:ad:da:80:72: 46:16:ec:98:44:11:c2:0d:30:04:b6:a8:84:50:46: fb:9b:3c:e2:62:24:fa:cd:d5:09:9f:48:e4:a2:0f: 44:d7:8d:2e:b8:1c:a3:30:89:b9:93:ae:7b:a7:cd: 2f:49:fe:24:82:87:5a:8e:0b:45:aa:34:a8:11:7a: 05:05:6f:8f:d2:64:7a:a6:08:1d:87:aa:9e:79:41: f3:da:7d:40:66:51:49:42:da:4d:22:da:11:d5:67: 7d:5e:7f:15:29:0a:7d:e9:65:9a:13:cc:90:5c:d3: d0:33:8d:2b:54:81:ee:1b:d0:eb:d4:14:9b:c0:3a: fb:b9:43:ee:7f:65:3a:32:24:e4:eb:a4:75:3a:91: 95:d2:3f:c6:25:29:2b:27:45:a4:50:b7:31:d8:81: 11:6d:fd:9f:59:f0:72:b5:f3:cc:f5:53:d0:37:57: 00:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:91:8D:8A:14:51:CE:6B:2A:34:D5:06:15:9C:CB:00:BD:F4:E9:78 X509v3 Authority Key Identifier: keyid:D3:46:06:94:9D:38:5D:B4:27:14:FE:71:27:4F:AC:99:48:EF:27:9C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/D34606949D385DB42714FE71274FAC9948EF279C.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/D34606949D385DB42714FE71274FAC9948EF279C.cer Subject Information Access: Signed Object - URI:rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/AS212980.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 86.38.235.0/24 Signature Algorithm: sha256WithRSAEncryption ab:71:9a:a6:ad:0e:04:86:5f:fe:21:17:07:33:76:ec:61:58: ba:c7:2f:d6:b6:da:95:c9:16:5b:62:9f:36:24:f4:a5:0a:a5: 35:19:c4:dc:e2:2f:ad:ab:b1:c1:18:8e:66:78:bb:39:3e:f8: 88:63:96:b2:7e:db:8b:57:be:a3:a8:2c:ea:fa:0e:32:ed:3d: ec:6b:06:53:59:06:70:b3:03:41:40:58:86:99:b5:72:c7:13: df:df:90:6e:ed:31:f7:24:08:02:57:01:3e:9b:c7:c2:42:77: f1:41:6d:aa:04:e6:4f:86:16:f3:28:ac:32:1c:c4:b8:29:af: 82:57:a2:83:6e:05:1e:4f:38:c8:22:5d:7b:79:c5:b0:fa:ef: 89:d4:f3:db:c9:33:52:59:7b:63:aa:61:0f:04:ef:c3:56:87: 4a:70:aa:41:7d:9a:b5:aa:a0:13:bb:fb:81:1b:d5:1f:9b:b3: 08:07:89:fe:6b:f1:1f:64:7b:25:77:6b:8f:fe:4f:5f:28:e6: 83:3a:3e:2e:c7:10:74:a1:c7:77:8d:a8:f7:52:bf:51:c8:6e: 37:0f:53:0d:05:d8:c6:6f:ea:1b:ca:34:0f:ff:b7:8e:28:07: 08:31:9c:ab:bf:d1:45:2a:eb:50:07:85:85:2a:4a:e3:8c:f8: 54:55:55:ec -----BEGIN CERTIFICATE----- MIIFJTCCBA2gAwIBAgIUQShLeA/4Cy7r6MGSRt50X5vAXLEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDM0NjA2OTQ5RDM4NURCNDI3MTRGRTcxMjc0RkFDOTk0 OEVGMjc5QzAeFw0yNjA1MTMxMjQyMDJaFw0yNzA1MTIxMjQ3MDJaMDMxMTAvBgNV BAMTKDdEOTE4RDhBMTQ1MUNFNkIyQTM0RDUwNjE1OUNDQjAwQkRGNEU5NzgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCgrXseoRkbxr4XwMUXA2zepVPO LivO61Zz+ajyt0xqRI+ZZ/jG1E+SWrSam/B5e7UK5dmXTsBWlb3dtbnEGfJfkfjG cQfCgLrw2UdX3yFso9lsPB+zrdqAckYW7JhEEcINMAS2qIRQRvubPOJiJPrN1Qmf SOSiD0TXjS64HKMwibmTrnunzS9J/iSCh1qOC0WqNKgRegUFb4/SZHqmCB2Hqp55 QfPafUBmUUlC2k0i2hHVZ31efxUpCn3pZZoTzJBc09AzjStUge4b0OvUFJvAOvu5 Q+5/ZToyJOTrpHU6kZXSP8YlKSsnRaRQtzHYgRFt/Z9Z8HK188z1U9A3VwCVAgMB AAGjggIvMIICKzAdBgNVHQ4EFgQUfZGNihRRzmsqNNUGFZzLAL306XgwHwYDVR0j BBgwFoAU00YGlJ04XbQnFP5xJ0+smUjvJ5wwDgYDVR0PAQH/BAQDAgeAMIGIBgNV HR8EgYAwfjB8oHqgeIZ2cnN5bmM6Ly9yLm1hZ2VsbGFuLmlweG8uY29tL3JlcG8v NTI4YTIxOGYtYWQyOC00MGQyLWJkN2YtMzUwZWFkYTNkNzA1LTAvMC9EMzQ2MDY5 NDlEMzg1REI0MjcxNEZFNzEyNzRGQUM5OTQ4RUYyNzlDLmNybDCBngYIKwYBBQUH AQEEgZEwgY4wgYsGCCsGAQUFBzAChn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5y aXBlLm5ldC9yZXBvc2l0b3J5LzAwMmUwYmEzLWZlNjAtNDViMS05MTYwLTg2OGEy ZjhhNDNiMS8zL0QzNDYwNjk0OUQzODVEQjQyNzE0RkU3MTI3NEZBQzk5NDhFRjI3 OUMuY2VyMHIGCCsGAQUFBwELBGYwZDBiBggrBgEFBQcwC4ZWcnN5bmM6Ly9yLm1h Z2VsbGFuLmlweG8uY29tL3JlcG8vNTI4YTIxOGYtYWQyOC00MGQyLWJkN2YtMzUw ZWFkYTNkNzA1LTAvMC9BUzIxMjk4MC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEF BQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAFYm6zANBgkqhkiG9w0B AQsFAAOCAQEAq3Gapq0OBIZf/iEXBzN27GFYuscv1rbalckWW2KfNiT0pQqlNRnE 3OIvrauxwRiOZni7OT74iGOWsn7bi1e+o6gs6voOMu097GsGU1kGcLMDQUBYhpm1 cscT39+Qbu0x9yQIAlcBPpvHwkJ38UFtqgTmT4YW8yisMhzEuCmvgleig24FHk84 yCJde3nFsPrvidTz28kzUll7Y6phDwTvw1aHSnCqQX2ataqgE7v7gRvVH5uzCAeJ /mvxH2R7JXdrj/5PXyjmgzo+LscQdKHHd42o91K/UchuNw9TDQXYxm/qG8o0D/+3 jigHCDGcq7/RRSrrUAeFhSpK44z4VFVV7A== -----END CERTIFICATE-----Generated at Sun May 24 13:44:49 2026 by rpki-client