$ rpki-client -vvvf r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/AS23161.roa File: AS23161.roa (raw, json) Hash identifier: vAdJPbYUfToC4iizWhtP7C0bYod2+ZO3qLysuIO30Mo= Subject key identifier: 8A:98:94:95:75:82:95:AC:D9:5A:EB:D1:31:0D:6A:36:12:67:99:A2 Certificate issuer: /CN=D34606949D385DB42714FE71274FAC9948EF279C Certificate serial: 2ACB21C91E1F4FCEEFE1E14B534128104C73CA5E Authority key identifier: D3:46:06:94:9D:38:5D:B4:27:14:FE:71:27:4F:AC:99:48:EF:27:9C Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/D34606949D385DB42714FE71274FAC9948EF279C.cer Subject info access: rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/AS23161.roa Signing time: Fri 16 Oct 2026 18:49:37 +0000 ROA not before: Fri 16 Oct 2026 18:44:37 +0000 ROA not after: Fri 15 Oct 2027 18:49:37 +0000 asID: 23161 IP address blocks: 89.117.31.0/24 maxlen: 24 Validation: OK Signature path: rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/D34606949D385DB42714FE71274FAC9948EF279C.crl rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/D34606949D385DB42714FE71274FAC9948EF279C.mft rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/D34606949D385DB42714FE71274FAC9948EF279C.cer rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/9DF85997B1B9B358E1C43F36765AA0A4A02144AE.crl rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/9DF85997B1B9B358E1C43F36765AA0A4A02144AE.mft rsync://rpki.ripe.net/repository/DEFAULT/nfhZl7G5s1jhxD82dlqgpKAhRK4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 21 Oct 2026 01:16:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2a:cb:21:c9:1e:1f:4f:ce:ef:e1:e1:4b:53:41:28:10:4c:73:ca:5e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D34606949D385DB42714FE71274FAC9948EF279C Validity Not Before: Oct 16 18:44:37 2026 GMT Not After : Oct 15 18:49:37 2027 GMT Subject: CN=8A989495758295ACD95AEBD1310D6A36126799A2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:a5:71:0b:0c:ef:55:64:d1:2f:ed:d5:50:e2: 43:16:1b:7b:5f:a2:97:35:5e:e5:95:6c:13:d7:0a: 55:d5:df:2e:86:cc:c7:5c:8f:a2:79:e7:79:4c:be: 91:a6:99:ed:29:e3:7e:1d:3c:91:8b:1a:17:2d:37: bf:a1:33:3e:4b:e3:16:e0:21:68:4f:51:b4:f8:bc: 65:89:03:ca:9b:28:a4:5e:38:bf:20:49:6a:2d:e8: dd:d9:0f:40:33:6a:1a:39:21:2a:3d:93:48:a5:63: 27:e1:de:c4:01:72:7d:d9:40:b2:ac:7b:be:4f:9c: 77:30:17:14:07:12:75:4c:99:17:ff:d8:b6:57:db: 87:85:f7:94:dc:6e:bf:73:53:d7:d5:5c:b0:7c:78: 10:ea:a5:94:21:c9:cb:3f:42:79:0f:49:a7:f1:2d: 9f:31:23:a3:56:53:8f:ee:db:bd:47:4d:ad:8e:32: f7:32:d0:bf:03:45:d2:b3:07:d2:fc:07:75:e6:08: 5c:57:66:42:6d:cd:9b:7c:3e:4a:d1:e2:2c:a6:da: 1a:d5:7a:c3:52:30:83:39:fa:10:bb:31:0c:c2:ad: 2c:5d:31:ae:2e:b5:13:2c:1b:2c:de:27:d2:9d:fe: 87:0b:41:83:b4:fa:f8:d7:c7:59:1a:53:20:be:13: 19:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:98:94:95:75:82:95:AC:D9:5A:EB:D1:31:0D:6A:36:12:67:99:A2 X509v3 Authority Key Identifier: keyid:D3:46:06:94:9D:38:5D:B4:27:14:FE:71:27:4F:AC:99:48:EF:27:9C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/D34606949D385DB42714FE71274FAC9948EF279C.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/D34606949D385DB42714FE71274FAC9948EF279C.cer Subject Information Access: Signed Object - URI:rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/AS23161.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 89.117.31.0/24 Signature Algorithm: sha256WithRSAEncryption 2a:81:5b:e9:84:91:92:73:99:9d:25:5a:e3:46:c9:32:3a:d7: e0:19:e3:73:89:3c:98:2c:95:ed:d7:e2:06:47:af:e1:89:99: a7:05:0e:e8:ec:96:bf:5c:9b:3f:1d:c7:10:72:c4:db:df:29: 57:8f:bb:0c:dd:c3:a7:7e:99:74:7e:8f:7c:7f:a0:fa:dc:c0: 06:f2:bd:6f:f9:e3:13:70:48:f6:5e:7e:d2:d9:55:d4:e7:49: 45:37:90:77:18:67:11:c4:9d:06:f8:7f:f5:41:c8:a9:b4:8d: b0:d9:25:19:7f:70:44:c2:b4:c8:82:5f:3a:f2:49:27:48:26: 65:3e:00:3a:8b:ae:db:ab:6d:de:4d:d1:e2:38:88:5e:6a:54: 58:f1:ba:d7:e7:89:a4:9c:7f:33:00:34:b7:d0:72:1a:e7:81: fd:7c:71:b0:b2:97:59:de:6c:fb:e1:b9:34:2e:ff:0d:da:a9: b4:63:c7:4e:b0:2f:9a:b0:10:46:8d:6a:6e:8e:1f:4b:6d:d6: 61:a4:94:bd:07:f0:21:4b:3d:19:2d:57:dd:0e:4e:db:12:ce: 7e:77:e5:89:5e:9f:a3:8b:17:4e:30:a0:33:e0:e6:a1:25:ae: 5b:31:67:6b:6a:07:a9:39:c5:6a:ee:67:9d:26:59:57:ba:48: c5:9c:a6:ea -----BEGIN CERTIFICATE----- MIIFJDCCBAygAwIBAgIUKsshyR4fT87v4eFLU0EoEExzyl4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDM0NjA2OTQ5RDM4NURCNDI3MTRGRTcxMjc0RkFDOTk0 OEVGMjc5QzAeFw0yNjEwMTYxODQ0MzdaFw0yNzEwMTUxODQ5MzdaMDMxMTAvBgNV BAMTKDhBOTg5NDk1NzU4Mjk1QUNEOTVBRUJEMTMxMEQ2QTM2MTI2Nzk5QTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDepXELDO9VZNEv7dVQ4kMWG3tf opc1XuWVbBPXClXV3y6GzMdcj6J553lMvpGmme0p434dPJGLGhctN7+hMz5L4xbg IWhPUbT4vGWJA8qbKKReOL8gSWot6N3ZD0Azaho5ISo9k0ilYyfh3sQBcn3ZQLKs e75PnHcwFxQHEnVMmRf/2LZX24eF95Tcbr9zU9fVXLB8eBDqpZQhycs/QnkPSafx LZ8xI6NWU4/u271HTa2OMvcy0L8DRdKzB9L8B3XmCFxXZkJtzZt8PkrR4iym2hrV esNSMIM5+hC7MQzCrSxdMa4utRMsGyzeJ9Kd/ocLQYO0+vjXx1kaUyC+ExmXAgMB AAGjggIuMIICKjAdBgNVHQ4EFgQUipiUlXWClazZWuvRMQ1qNhJnmaIwHwYDVR0j BBgwFoAU00YGlJ04XbQnFP5xJ0+smUjvJ5wwDgYDVR0PAQH/BAQDAgeAMIGIBgNV HR8EgYAwfjB8oHqgeIZ2cnN5bmM6Ly9yLm1hZ2VsbGFuLmlweG8uY29tL3JlcG8v NTI4YTIxOGYtYWQyOC00MGQyLWJkN2YtMzUwZWFkYTNkNzA1LTAvMC9EMzQ2MDY5 NDlEMzg1REI0MjcxNEZFNzEyNzRGQUM5OTQ4RUYyNzlDLmNybDCBngYIKwYBBQUH AQEEgZEwgY4wgYsGCCsGAQUFBzAChn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5y aXBlLm5ldC9yZXBvc2l0b3J5LzAwMmUwYmEzLWZlNjAtNDViMS05MTYwLTg2OGEy ZjhhNDNiMS8zL0QzNDYwNjk0OUQzODVEQjQyNzE0RkU3MTI3NEZBQzk5NDhFRjI3 OUMuY2VyMHEGCCsGAQUFBwELBGUwYzBhBggrBgEFBQcwC4ZVcnN5bmM6Ly9yLm1h Z2VsbGFuLmlweG8uY29tL3JlcG8vNTI4YTIxOGYtYWQyOC00MGQyLWJkN2YtMzUw ZWFkYTNkNzA1LTAvMC9BUzIzMTYxLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAWXUfMA0GCSqGSIb3DQEB CwUAA4IBAQAqgVvphJGSc5mdJVrjRskyOtfgGeNziTyYLJXt1+IGR6/hiZmnBQ7o 7Ja/XJs/HccQcsTb3ylXj7sM3cOnfpl0fo98f6D63MAG8r1v+eMTcEj2Xn7S2VXU 50lFN5B3GGcRxJ0G+H/1QciptI2w2SUZf3BEwrTIgl868kknSCZlPgA6i67bq23e TdHiOIhealRY8brX54mknH8zADS30HIa54H9fHGwspdZ3mz74bk0Lv8N2qm0Y8dO sC+asBBGjWpujh9LbdZhpJS9B/AhSz0ZLVfdDk7bEs5+d+WJXp+jixdOMKAz4Oah Ja5bMWdragepOcVq7medJllXukjFnKbq -----END CERTIFICATE-----Generated at Tue Oct 20 12:22:02 2026 by rpki-client