$ rpki-client -vvf r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/AS21840.roa File: AS21840.roa (raw, json) Hash identifier: 77fGkzamvCVNrBz7mwztwYi0xpdGLrhkxNdzPMPYuhY= Subject key identifier: C2:A5:4B:83:DA:9E:49:43:0E:82:AC:09:30:6C:62:0D:2B:79:84:12 Certificate issuer: /CN=D34606949D385DB42714FE71274FAC9948EF279C Certificate serial: 29FE884D0BA31155AAC5061CA2D5B52C43F765C8 Authority key identifier: D3:46:06:94:9D:38:5D:B4:27:14:FE:71:27:4F:AC:99:48:EF:27:9C Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/D34606949D385DB42714FE71274FAC9948EF279C.cer Subject info access: rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/AS21840.roa Signing time: Tue 21 Apr 2026 12:01:54 +0000 ROA not before: Tue 21 Apr 2026 11:56:54 +0000 ROA not after: Tue 20 Apr 2027 12:01:54 +0000 asID: 21840 IP address blocks: 89.116.203.0/24 maxlen: 24 Validation: OK Signature path: rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/D34606949D385DB42714FE71274FAC9948EF279C.crl rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/D34606949D385DB42714FE71274FAC9948EF279C.mft rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/D34606949D385DB42714FE71274FAC9948EF279C.cer rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/9DF85997B1B9B358E1C43F36765AA0A4A02144AE.crl rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/9DF85997B1B9B358E1C43F36765AA0A4A02144AE.mft rsync://rpki.ripe.net/repository/DEFAULT/nfhZl7G5s1jhxD82dlqgpKAhRK4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 22 Apr 2026 07:16:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 29:fe:88:4d:0b:a3:11:55:aa:c5:06:1c:a2:d5:b5:2c:43:f7:65:c8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D34606949D385DB42714FE71274FAC9948EF279C Validity Not Before: Apr 21 11:56:54 2026 GMT Not After : Apr 20 12:01:54 2027 GMT Subject: CN=C2A54B83DA9E49430E82AC09306C620D2B798412 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:75:1c:21:e9:14:91:65:7d:da:ed:1f:cd:5a: c5:56:aa:82:cb:68:bc:da:45:f2:a2:ab:32:43:18: 75:f4:59:a7:e7:92:b6:d5:07:42:4c:a7:da:fd:62: a5:2e:f3:58:f4:e5:5e:c1:7d:7a:9c:2f:90:b0:40: a3:26:d6:df:50:73:5a:dc:d6:58:27:b4:23:b9:a3: f9:13:af:3c:e2:ae:02:01:47:b0:03:91:78:50:55: d0:59:8f:e2:46:ba:b8:3b:81:1c:4f:af:e1:d2:94: 01:44:b1:46:17:ed:45:be:7f:96:e4:23:02:a1:95: e4:8f:69:6c:90:31:ef:51:8f:c9:c1:17:4d:37:b7: 22:ca:ef:0a:a6:b3:85:be:d4:f6:f5:6a:c4:a3:33: b5:09:46:75:27:c1:b7:00:77:7f:48:49:0c:5b:7e: 70:3a:b0:c0:03:cf:57:b7:f5:a6:37:5f:93:26:c2: 8b:2e:ee:3b:5a:cf:b7:8f:54:86:ba:44:39:f8:ef: c1:dd:50:89:09:8f:bf:4e:38:61:b0:52:e6:48:7c: c9:c4:63:7e:fb:cc:ea:2f:37:c1:0e:fb:c7:1f:5f: 80:c5:91:38:fc:13:8b:0f:ba:50:15:21:8d:1c:ca: 93:8a:b0:98:f1:61:0b:5d:cc:fa:2b:35:00:ee:63: ec:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:A5:4B:83:DA:9E:49:43:0E:82:AC:09:30:6C:62:0D:2B:79:84:12 X509v3 Authority Key Identifier: keyid:D3:46:06:94:9D:38:5D:B4:27:14:FE:71:27:4F:AC:99:48:EF:27:9C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/D34606949D385DB42714FE71274FAC9948EF279C.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/D34606949D385DB42714FE71274FAC9948EF279C.cer Subject Information Access: Signed Object - URI:rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/AS21840.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 89.116.203.0/24 Signature Algorithm: sha256WithRSAEncryption 68:43:33:36:57:92:da:e2:b1:63:f0:cf:57:3d:d0:64:c6:f8: 2f:61:c6:c3:a4:3b:01:e0:11:78:f9:7b:6f:49:9e:f1:f8:4d: 6a:fa:a4:f1:33:93:3c:9d:ab:13:00:98:3c:f9:69:0a:89:42: 43:7d:89:51:b6:7d:63:5b:d4:97:4b:07:f0:fd:bd:59:8f:8a: 88:16:a3:72:2d:e1:48:48:0f:9e:f4:ef:a8:d2:a7:33:39:dc: 2d:fe:b5:54:5d:69:82:ac:a1:5d:5c:1d:ea:71:a2:1a:ee:55: 4b:72:97:e7:8d:c5:f9:a7:2b:a4:d8:d6:1d:dc:87:72:cc:e1: 89:5d:cb:bf:ea:d8:5b:cd:a7:77:90:c9:d2:e1:5a:eb:e9:66: 8e:3b:66:00:c0:a3:ae:1b:6d:db:6c:c9:4b:96:5a:79:98:4d: 24:32:30:af:c3:1e:63:76:15:61:93:0b:b6:d9:fe:3d:95:c6: d4:97:87:96:3f:f4:27:f0:0a:88:08:ff:bf:3d:8e:ad:0d:52: 5b:d5:1b:2e:36:a6:5b:2b:6a:d9:a9:80:3a:69:a2:d4:0b:cf: 7b:c5:94:7b:f0:88:73:96:3c:41:14:2a:b7:de:0d:88:93:a7: 4e:8d:fe:18:75:bf:67:01:9c:77:c0:7b:1c:35:6d:88:3d:71: 3c:7d:3e:c2 -----BEGIN CERTIFICATE----- MIIFJDCCBAygAwIBAgIUKf6ITQujEVWqxQYcotW1LEP3ZcgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDM0NjA2OTQ5RDM4NURCNDI3MTRGRTcxMjc0RkFDOTk0 OEVGMjc5QzAeFw0yNjA0MjExMTU2NTRaFw0yNzA0MjAxMjAxNTRaMDMxMTAvBgNV BAMTKEMyQTU0QjgzREE5RTQ5NDMwRTgyQUMwOTMwNkM2MjBEMkI3OTg0MTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCodRwh6RSRZX3a7R/NWsVWqoLL aLzaRfKiqzJDGHX0WafnkrbVB0JMp9r9YqUu81j05V7BfXqcL5CwQKMm1t9Qc1rc 1lgntCO5o/kTrzzirgIBR7ADkXhQVdBZj+JGurg7gRxPr+HSlAFEsUYX7UW+f5bk IwKhleSPaWyQMe9Rj8nBF003tyLK7wqms4W+1Pb1asSjM7UJRnUnwbcAd39ISQxb fnA6sMADz1e39aY3X5Mmwosu7jtaz7ePVIa6RDn478HdUIkJj79OOGGwUuZIfMnE Y377zOovN8EO+8cfX4DFkTj8E4sPulAVIY0cypOKsJjxYQtdzPorNQDuY+wzAgMB AAGjggIuMIICKjAdBgNVHQ4EFgQUwqVLg9qeSUMOgqwJMGxiDSt5hBIwHwYDVR0j BBgwFoAU00YGlJ04XbQnFP5xJ0+smUjvJ5wwDgYDVR0PAQH/BAQDAgeAMIGIBgNV HR8EgYAwfjB8oHqgeIZ2cnN5bmM6Ly9yLm1hZ2VsbGFuLmlweG8uY29tL3JlcG8v NTI4YTIxOGYtYWQyOC00MGQyLWJkN2YtMzUwZWFkYTNkNzA1LTAvMC9EMzQ2MDY5 NDlEMzg1REI0MjcxNEZFNzEyNzRGQUM5OTQ4RUYyNzlDLmNybDCBngYIKwYBBQUH AQEEgZEwgY4wgYsGCCsGAQUFBzAChn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5y aXBlLm5ldC9yZXBvc2l0b3J5LzAwMmUwYmEzLWZlNjAtNDViMS05MTYwLTg2OGEy ZjhhNDNiMS8zL0QzNDYwNjk0OUQzODVEQjQyNzE0RkU3MTI3NEZBQzk5NDhFRjI3 OUMuY2VyMHEGCCsGAQUFBwELBGUwYzBhBggrBgEFBQcwC4ZVcnN5bmM6Ly9yLm1h Z2VsbGFuLmlweG8uY29tL3JlcG8vNTI4YTIxOGYtYWQyOC00MGQyLWJkN2YtMzUw ZWFkYTNkNzA1LTAvMC9BUzIxODQwLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAWXTLMA0GCSqGSIb3DQEB CwUAA4IBAQBoQzM2V5La4rFj8M9XPdBkxvgvYcbDpDsB4BF4+XtvSZ7x+E1q+qTx M5M8nasTAJg8+WkKiUJDfYlRtn1jW9SXSwfw/b1Zj4qIFqNyLeFISA+e9O+o0qcz Odwt/rVUXWmCrKFdXB3qcaIa7lVLcpfnjcX5pyuk2NYd3IdyzOGJXcu/6thbzad3 kMnS4Vrr6WaOO2YAwKOuG23bbMlLllp5mE0kMjCvwx5jdhVhkwu22f49lcbUl4eW P/Qn8AqICP+/PY6tDVJb1RsuNqZbK2rZqYA6aaLUC897xZR78IhzljxBFCq33g2I k6dOjf4Ydb9nAZx3wHscNW2IPXE8fT7C -----END CERTIFICATE-----Generated at Tue Apr 21 21:33:09 2026 by rpki-client