$ rpki-client -vvf r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/AS25198.roa File: AS25198.roa (raw, json) Hash identifier: EPp3kZ61stQ+6O3tA2pgqLtkmoG25WYgz9YvmSgDco0= Subject key identifier: A8:83:52:CC:7E:AC:35:ED:A2:48:B8:ED:29:BC:19:90:4A:4F:EB:FB Certificate issuer: /CN=D34606949D385DB42714FE71274FAC9948EF279C Certificate serial: 69C8AFC80B3A11E00B5BE21DFA8C1DF94894EBBA Authority key identifier: D3:46:06:94:9D:38:5D:B4:27:14:FE:71:27:4F:AC:99:48:EF:27:9C Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/D34606949D385DB42714FE71274FAC9948EF279C.cer Subject info access: rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/AS25198.roa Signing time: Wed 24 Jun 2026 20:46:19 +0000 ROA not before: Wed 24 Jun 2026 20:41:19 +0000 ROA not after: Wed 23 Jun 2027 20:46:19 +0000 asID: 25198 IP address blocks: 86.38.184.0/24 maxlen: 24 Validation: OK Signature path: rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/D34606949D385DB42714FE71274FAC9948EF279C.crl rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/D34606949D385DB42714FE71274FAC9948EF279C.mft rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/D34606949D385DB42714FE71274FAC9948EF279C.cer rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/9DF85997B1B9B358E1C43F36765AA0A4A02144AE.crl rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/9DF85997B1B9B358E1C43F36765AA0A4A02144AE.mft rsync://rpki.ripe.net/repository/DEFAULT/nfhZl7G5s1jhxD82dlqgpKAhRK4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 21 Jul 2026 11:54:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 69:c8:af:c8:0b:3a:11:e0:0b:5b:e2:1d:fa:8c:1d:f9:48:94:eb:ba Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D34606949D385DB42714FE71274FAC9948EF279C Validity Not Before: Jun 24 20:41:19 2026 GMT Not After : Jun 23 20:46:19 2027 GMT Subject: CN=A88352CC7EAC35EDA248B8ED29BC19904A4FEBFB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:71:fe:c9:09:da:de:e2:82:40:53:b3:f5:31: c3:4a:bc:e1:42:5f:27:ae:e6:a7:6e:87:1b:60:c2: 77:87:8d:a9:4d:c6:27:6c:dc:ba:a1:d3:c5:97:a3: 48:ea:81:e5:e4:33:d6:ef:3d:c4:dc:8d:ab:0b:c8: 4a:3f:fc:94:19:41:6b:fb:2a:66:70:42:09:0a:c6: b1:4f:5a:a1:e2:96:d4:f4:27:15:85:9a:9b:c6:48: cf:23:b1:2d:5a:ee:7c:05:a5:51:55:aa:26:72:3d: ca:0d:b7:dc:26:3a:7c:b4:e4:23:a5:5b:39:c7:9b: 6b:f5:c5:ed:89:f7:73:3b:6e:ce:cb:8e:e7:a0:d3: 55:32:79:60:6b:7d:4d:5d:9a:88:a0:58:03:ae:85: 93:b7:5a:92:15:e2:5f:23:fb:0a:04:26:a7:3d:42: 5d:fd:e9:e5:d4:07:c3:f7:cd:86:07:92:9a:01:9b: 4b:80:71:be:16:df:e5:25:9d:28:32:b3:0e:50:ce: 8a:28:ba:b5:51:34:12:31:8b:10:23:c6:35:72:09: fd:0d:29:ca:6f:43:34:63:87:79:49:db:11:56:4b: e2:41:6b:5d:ff:b7:fa:e4:a1:08:d7:f4:dd:ea:5d: d6:f2:14:4c:52:33:a8:14:9c:02:b0:8e:b0:9f:4d: 47:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:83:52:CC:7E:AC:35:ED:A2:48:B8:ED:29:BC:19:90:4A:4F:EB:FB X509v3 Authority Key Identifier: keyid:D3:46:06:94:9D:38:5D:B4:27:14:FE:71:27:4F:AC:99:48:EF:27:9C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/D34606949D385DB42714FE71274FAC9948EF279C.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/D34606949D385DB42714FE71274FAC9948EF279C.cer Subject Information Access: Signed Object - URI:rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/AS25198.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 86.38.184.0/24 Signature Algorithm: sha256WithRSAEncryption be:90:55:e7:53:70:83:00:21:ca:d1:1f:2d:8f:61:75:90:46: a9:d7:bc:c3:3f:b1:c5:22:70:ec:55:51:00:3e:e7:a8:d6:19: 95:46:4d:7d:a4:c8:be:8e:e7:21:7f:07:3a:74:78:fa:b9:6d: e0:ff:bd:60:49:b4:da:5d:13:20:c0:51:fc:ba:1f:39:a3:2a: d5:c8:b1:3e:3b:78:e6:cf:7d:05:05:76:f6:f1:e4:fa:b3:f2: c2:0a:ca:c9:87:fb:57:e0:2b:68:db:73:c0:aa:cf:d7:1b:17: 2c:b5:b4:b1:02:0c:6f:7a:c8:62:d9:05:df:17:31:5a:d6:44: 4d:39:10:77:8d:14:e3:63:d8:c7:df:75:4b:bb:28:0f:f1:bf: 28:33:84:3d:f6:99:4b:cb:4a:4e:2c:1c:df:6e:49:7f:79:58: a1:0c:90:65:9c:61:91:b7:b3:23:bb:94:6c:bf:ba:25:4e:f1: 43:69:ca:4a:4a:b9:00:9e:17:22:2e:15:bb:2b:8b:bd:b8:b8: 15:2c:d5:17:76:b4:83:16:e7:e9:6a:de:3b:12:36:ce:b7:27: 8d:ef:92:e0:97:78:ef:47:2e:07:ed:2d:19:50:d8:8a:60:27: 7d:f2:89:ca:d5:73:72:6f:db:84:82:ce:1a:9e:a9:60:86:7c: 41:fd:6c:12 -----BEGIN CERTIFICATE----- MIIFJDCCBAygAwIBAgIUacivyAs6EeALW+Id+owd+UiU67owDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDM0NjA2OTQ5RDM4NURCNDI3MTRGRTcxMjc0RkFDOTk0 OEVGMjc5QzAeFw0yNjA2MjQyMDQxMTlaFw0yNzA2MjMyMDQ2MTlaMDMxMTAvBgNV BAMTKEE4ODM1MkNDN0VBQzM1RURBMjQ4QjhFRDI5QkMxOTkwNEE0RkVCRkIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCRcf7JCdre4oJAU7P1McNKvOFC Xyeu5qduhxtgwneHjalNxids3Lqh08WXo0jqgeXkM9bvPcTcjasLyEo//JQZQWv7 KmZwQgkKxrFPWqHiltT0JxWFmpvGSM8jsS1a7nwFpVFVqiZyPcoNt9wmOny05COl WznHm2v1xe2J93M7bs7Ljueg01UyeWBrfU1dmoigWAOuhZO3WpIV4l8j+woEJqc9 Ql396eXUB8P3zYYHkpoBm0uAcb4W3+UlnSgysw5QzooourVRNBIxixAjxjVyCf0N KcpvQzRjh3lJ2xFWS+JBa13/t/rkoQjX9N3qXdbyFExSM6gUnAKwjrCfTUdBAgMB AAGjggIuMIICKjAdBgNVHQ4EFgQUqINSzH6sNe2iSLjtKbwZkEpP6/swHwYDVR0j BBgwFoAU00YGlJ04XbQnFP5xJ0+smUjvJ5wwDgYDVR0PAQH/BAQDAgeAMIGIBgNV HR8EgYAwfjB8oHqgeIZ2cnN5bmM6Ly9yLm1hZ2VsbGFuLmlweG8uY29tL3JlcG8v NTI4YTIxOGYtYWQyOC00MGQyLWJkN2YtMzUwZWFkYTNkNzA1LTAvMC9EMzQ2MDY5 NDlEMzg1REI0MjcxNEZFNzEyNzRGQUM5OTQ4RUYyNzlDLmNybDCBngYIKwYBBQUH AQEEgZEwgY4wgYsGCCsGAQUFBzAChn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5y aXBlLm5ldC9yZXBvc2l0b3J5LzAwMmUwYmEzLWZlNjAtNDViMS05MTYwLTg2OGEy ZjhhNDNiMS8zL0QzNDYwNjk0OUQzODVEQjQyNzE0RkU3MTI3NEZBQzk5NDhFRjI3 OUMuY2VyMHEGCCsGAQUFBwELBGUwYzBhBggrBgEFBQcwC4ZVcnN5bmM6Ly9yLm1h Z2VsbGFuLmlweG8uY29tL3JlcG8vNTI4YTIxOGYtYWQyOC00MGQyLWJkN2YtMzUw ZWFkYTNkNzA1LTAvMC9BUzI1MTk4LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAVia4MA0GCSqGSIb3DQEB CwUAA4IBAQC+kFXnU3CDACHK0R8tj2F1kEap17zDP7HFInDsVVEAPueo1hmVRk19 pMi+juchfwc6dHj6uW3g/71gSbTaXRMgwFH8uh85oyrVyLE+O3jmz30FBXb28eT6 s/LCCsrJh/tX4Cto23PAqs/XGxcstbSxAgxveshi2QXfFzFa1kRNORB3jRTjY9jH 33VLuygP8b8oM4Q99plLy0pOLBzfbkl/eVihDJBlnGGRt7Mju5Rsv7olTvFDacpK SrkAnhciLhW7K4u9uLgVLNUXdrSDFufpat47EjbOtyeN75Lgl3jvRy4H7S0ZUNiK YCd98onK1XNyb9uEgs4anqlghnxB/WwS -----END CERTIFICATE-----Generated at Tue Jul 21 01:37:49 2026 by rpki-client