$ rpki-client -vvvf r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/AS218943.roa File: AS218943.roa (raw, json) Hash identifier: P8Bkgw1BTyi06AvjmPsRSlSyujKxev6Ww+ZlCTq3DZA= Subject key identifier: C0:58:6F:8F:CC:2D:C6:5B:48:2B:FB:E0:64:CA:C7:A7:89:77:83:D3 Certificate issuer: /CN=D34606949D385DB42714FE71274FAC9948EF279C Certificate serial: 562E23D92E406F576FD77ACF91BF3FEB41F7FBE4 Authority key identifier: D3:46:06:94:9D:38:5D:B4:27:14:FE:71:27:4F:AC:99:48:EF:27:9C Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/D34606949D385DB42714FE71274FAC9948EF279C.cer Subject info access: rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/AS218943.roa Signing time: Wed 19 Aug 2026 16:48:31 +0000 ROA not before: Wed 19 Aug 2026 16:43:31 +0000 ROA not after: Wed 18 Aug 2027 16:48:31 +0000 asID: 218943 IP address blocks: 89.116.237.0/24 maxlen: 24 89.116.252.0/24 maxlen: 24 Validation: OK Signature path: rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/D34606949D385DB42714FE71274FAC9948EF279C.crl rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/D34606949D385DB42714FE71274FAC9948EF279C.mft rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/D34606949D385DB42714FE71274FAC9948EF279C.cer rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/9DF85997B1B9B358E1C43F36765AA0A4A02144AE.crl rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/9DF85997B1B9B358E1C43F36765AA0A4A02144AE.mft rsync://rpki.ripe.net/repository/DEFAULT/nfhZl7G5s1jhxD82dlqgpKAhRK4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 26 Aug 2026 10:02:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 56:2e:23:d9:2e:40:6f:57:6f:d7:7a:cf:91:bf:3f:eb:41:f7:fb:e4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D34606949D385DB42714FE71274FAC9948EF279C Validity Not Before: Aug 19 16:43:31 2026 GMT Not After : Aug 18 16:48:31 2027 GMT Subject: CN=C0586F8FCC2DC65B482BFBE064CAC7A7897783D3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:ff:b7:f3:d3:b9:82:4e:f7:05:a7:74:06:f0: 99:e8:3b:68:55:b0:1a:57:3c:d4:60:66:3e:c2:99: 87:b5:4c:2d:d2:c7:a2:1f:4c:e2:f3:16:35:f3:34: f4:4c:cb:da:b3:6d:ab:47:3e:e5:8a:ca:52:96:f2: 25:c3:d6:6e:c8:69:41:1c:d1:67:a0:de:d4:15:15: f9:9c:7f:13:6b:0d:92:c3:cb:e2:92:51:ef:90:dc: ca:56:28:38:7d:6f:7d:08:d9:68:d5:ec:fc:72:45: f5:eb:2d:06:c1:25:54:0f:b9:3d:89:a2:3b:80:39: 8e:2b:ca:6d:19:78:d3:0d:9b:a2:b5:92:e0:ba:c8: de:0a:13:06:57:ed:e1:e0:7d:7c:48:c0:19:42:2e: 31:d8:aa:39:82:2c:d5:59:b2:a2:36:cc:05:a7:88: 2e:9c:2e:51:51:76:81:92:6b:42:e0:34:62:4a:fc: 7b:47:6c:3d:73:b2:d6:17:86:bc:4f:f4:60:07:bd: 59:f9:61:9a:02:45:92:ea:ec:85:c1:9a:7a:ea:50: 91:00:b0:0b:13:8c:3f:bb:be:98:ee:5f:79:bc:10: 2e:e1:c9:2f:ea:71:03:16:e8:14:dd:0f:e4:61:e6: 30:f6:80:26:70:25:5c:af:7a:ec:41:09:ca:6b:bd: d7:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:58:6F:8F:CC:2D:C6:5B:48:2B:FB:E0:64:CA:C7:A7:89:77:83:D3 X509v3 Authority Key Identifier: keyid:D3:46:06:94:9D:38:5D:B4:27:14:FE:71:27:4F:AC:99:48:EF:27:9C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/D34606949D385DB42714FE71274FAC9948EF279C.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/D34606949D385DB42714FE71274FAC9948EF279C.cer Subject Information Access: Signed Object - URI:rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/AS218943.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 89.116.237.0/24 89.116.252.0/24 Signature Algorithm: sha256WithRSAEncryption 03:2c:59:11:59:c8:ed:e6:d9:28:8e:c2:b4:f1:d0:37:0f:d6: a5:60:bd:73:4e:bb:36:82:92:0a:70:f8:ab:c4:65:2b:de:a9: 96:d2:ae:98:00:8c:a3:7e:3a:9f:83:3e:b9:09:8b:31:61:fc: bf:73:86:a5:11:d8:d7:77:a7:09:62:f1:42:ca:fc:26:17:a0: 7d:1c:d7:55:70:3a:81:d9:98:40:80:ab:c0:8d:75:73:9a:ce: 46:53:41:fc:d6:2e:e9:4b:c1:3d:c9:6a:a0:77:c9:62:84:eb: 68:12:78:f6:af:1b:1b:32:c9:77:05:b8:83:97:83:6a:ce:5e: 27:f5:ba:d4:46:65:99:55:3c:ae:9b:af:81:02:fd:34:d2:fa: 43:5e:3d:10:00:e0:46:29:fe:81:38:88:bd:b1:5e:b5:2f:19: 91:70:b5:fb:00:fb:ba:3a:c2:c7:78:64:d5:4a:4f:02:11:8f: 78:84:f2:6d:9f:b0:b3:22:14:6e:ff:c6:af:91:98:2c:c7:54: 71:87:40:f3:7f:b3:dd:55:ba:b3:f5:cd:94:64:36:86:f1:2b: fc:2d:e2:7e:c7:1f:a7:ae:7e:81:03:40:26:ac:b8:4b:de:b8: 66:12:16:21:6e:7b:4d:77:aa:dd:b6:d8:9c:17:5d:f7:a6:72: ba:1d:d8:9f -----BEGIN CERTIFICATE----- MIIFKzCCBBOgAwIBAgIUVi4j2S5Ab1dv13rPkb8/60H3++QwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDM0NjA2OTQ5RDM4NURCNDI3MTRGRTcxMjc0RkFDOTk0 OEVGMjc5QzAeFw0yNjA4MTkxNjQzMzFaFw0yNzA4MTgxNjQ4MzFaMDMxMTAvBgNV BAMTKEMwNTg2RjhGQ0MyREM2NUI0ODJCRkJFMDY0Q0FDN0E3ODk3NzgzRDMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8/7fz07mCTvcFp3QG8JnoO2hV sBpXPNRgZj7CmYe1TC3Sx6IfTOLzFjXzNPRMy9qzbatHPuWKylKW8iXD1m7IaUEc 0Weg3tQVFfmcfxNrDZLDy+KSUe+Q3MpWKDh9b30I2WjV7PxyRfXrLQbBJVQPuT2J ojuAOY4rym0ZeNMNm6K1kuC6yN4KEwZX7eHgfXxIwBlCLjHYqjmCLNVZsqI2zAWn iC6cLlFRdoGSa0LgNGJK/HtHbD1zstYXhrxP9GAHvVn5YZoCRZLq7IXBmnrqUJEA sAsTjD+7vpjuX3m8EC7hyS/qcQMW6BTdD+Rh5jD2gCZwJVyveuxBCcprvdfTAgMB AAGjggI1MIICMTAdBgNVHQ4EFgQUwFhvj8wtxltIK/vgZMrHp4l3g9MwHwYDVR0j BBgwFoAU00YGlJ04XbQnFP5xJ0+smUjvJ5wwDgYDVR0PAQH/BAQDAgeAMIGIBgNV HR8EgYAwfjB8oHqgeIZ2cnN5bmM6Ly9yLm1hZ2VsbGFuLmlweG8uY29tL3JlcG8v NTI4YTIxOGYtYWQyOC00MGQyLWJkN2YtMzUwZWFkYTNkNzA1LTAvMC9EMzQ2MDY5 NDlEMzg1REI0MjcxNEZFNzEyNzRGQUM5OTQ4RUYyNzlDLmNybDCBngYIKwYBBQUH AQEEgZEwgY4wgYsGCCsGAQUFBzAChn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5y aXBlLm5ldC9yZXBvc2l0b3J5LzAwMmUwYmEzLWZlNjAtNDViMS05MTYwLTg2OGEy ZjhhNDNiMS8zL0QzNDYwNjk0OUQzODVEQjQyNzE0RkU3MTI3NEZBQzk5NDhFRjI3 OUMuY2VyMHIGCCsGAQUFBwELBGYwZDBiBggrBgEFBQcwC4ZWcnN5bmM6Ly9yLm1h Z2VsbGFuLmlweG8uY29tL3JlcG8vNTI4YTIxOGYtYWQyOC00MGQyLWJkN2YtMzUw ZWFkYTNkNzA1LTAvMC9BUzIxODk0My5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEF BQcOAjAlBggrBgEFBQcBBwEB/wQWMBQwEgQCAAEwDAMEAFl07QMEAFl0/DANBgkq hkiG9w0BAQsFAAOCAQEAAyxZEVnI7ebZKI7CtPHQNw/WpWC9c067NoKSCnD4q8Rl K96pltKumACMo346n4M+uQmLMWH8v3OGpRHY13enCWLxQsr8JhegfRzXVXA6gdmY QICrwI11c5rORlNB/NYu6UvBPclqoHfJYoTraBJ49q8bGzLJdwW4g5eDas5eJ/W6 1EZlmVU8rpuvgQL9NNL6Q149EADgRin+gTiIvbFetS8ZkXC1+wD7ujrCx3hk1UpP AhGPeITybZ+wsyIUbv/Gr5GYLMdUcYdA83+z3VW6s/XNlGQ2hvEr/C3ifscfp65+ gQNAJqy4S964ZhIWIW57TXeq3bbYnBdd96Zyuh3Ynw== -----END CERTIFICATE-----Generated at Tue Aug 25 16:34:43 2026 by rpki-client