$ rpki-client -vvvf r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/AS25369.roa File: AS25369.roa (raw, json) Hash identifier: vYDtsPlupyTLq96fzBjkmUcdDXZ/VUHYtkFI3xKAOFg= Subject key identifier: 53:6D:81:A6:A8:3C:9A:C9:1C:99:C8:57:F7:AF:A1:42:CC:59:D3:35 Certificate issuer: /CN=D34606949D385DB42714FE71274FAC9948EF279C Certificate serial: 51CF8385692CADD17957618F08463AD1307FA489 Authority key identifier: D3:46:06:94:9D:38:5D:B4:27:14:FE:71:27:4F:AC:99:48:EF:27:9C Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/D34606949D385DB42714FE71274FAC9948EF279C.cer Subject info access: rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/AS25369.roa Signing time: Mon 05 Oct 2026 16:10:58 +0000 ROA not before: Mon 05 Oct 2026 16:05:58 +0000 ROA not after: Mon 04 Oct 2027 16:10:58 +0000 asID: 25369 IP address blocks: 86.38.187.0/24 maxlen: 24 89.116.48.0/22 maxlen: 24 Validation: OK Signature path: rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/D34606949D385DB42714FE71274FAC9948EF279C.crl rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/D34606949D385DB42714FE71274FAC9948EF279C.mft rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/D34606949D385DB42714FE71274FAC9948EF279C.cer rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/9DF85997B1B9B358E1C43F36765AA0A4A02144AE.crl rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/9DF85997B1B9B358E1C43F36765AA0A4A02144AE.mft rsync://rpki.ripe.net/repository/DEFAULT/nfhZl7G5s1jhxD82dlqgpKAhRK4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Oct 2026 06:53:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 51:cf:83:85:69:2c:ad:d1:79:57:61:8f:08:46:3a:d1:30:7f:a4:89 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D34606949D385DB42714FE71274FAC9948EF279C Validity Not Before: Oct 5 16:05:58 2026 GMT Not After : Oct 4 16:10:58 2027 GMT Subject: CN=536D81A6A83C9AC91C99C857F7AFA142CC59D335 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:43:f9:b1:3e:9d:89:c7:92:8f:04:7a:3d:46: b1:e2:76:8b:d1:9e:4f:02:75:e8:8c:e2:cb:5a:ba: 73:35:ca:0b:4d:d9:f0:69:3f:fa:b1:08:db:67:7b: c3:83:36:05:2f:92:ee:8e:26:e4:d0:40:38:20:a5: 68:64:6a:44:2d:e2:9a:22:3e:76:76:8f:c7:80:11: 86:5a:fa:5f:b8:2d:08:fd:d4:28:67:e4:ca:b5:6d: f3:9f:9b:ec:c4:d2:7a:bf:f2:c5:c4:7a:a2:dd:73: 38:44:66:13:32:9b:00:0d:5b:b9:dc:0b:86:0d:0e: 3e:b5:fb:a6:5e:89:40:0c:1a:8d:75:c9:64:21:67: 80:35:20:d4:01:55:44:af:96:fe:c4:43:b2:f4:ac: e9:f9:70:07:1f:df:cf:be:c5:46:27:19:09:a6:5f: 6d:a0:39:5a:ee:62:0e:62:1a:8b:e5:c1:0b:aa:b9: db:78:06:38:ad:72:76:48:0d:d3:bb:0f:f8:13:4f: 44:51:2c:b4:47:15:48:79:0f:29:9f:8d:75:28:fc: 76:9c:22:31:cf:a7:74:2b:71:16:7b:de:eb:e4:70: 47:25:17:7b:6a:98:ef:f2:d6:a5:46:d2:3a:08:76: 77:8e:88:82:37:9b:3f:85:f3:5c:45:6c:95:58:6a: 4b:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:6D:81:A6:A8:3C:9A:C9:1C:99:C8:57:F7:AF:A1:42:CC:59:D3:35 X509v3 Authority Key Identifier: keyid:D3:46:06:94:9D:38:5D:B4:27:14:FE:71:27:4F:AC:99:48:EF:27:9C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/D34606949D385DB42714FE71274FAC9948EF279C.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/D34606949D385DB42714FE71274FAC9948EF279C.cer Subject Information Access: Signed Object - URI:rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/AS25369.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 86.38.187.0/24 89.116.48.0/22 Signature Algorithm: sha256WithRSAEncryption c4:84:53:e2:cc:9b:64:c7:74:e7:f6:05:68:55:44:00:ae:f4: a9:9f:f3:6f:ff:60:78:ed:f2:65:94:1c:9f:53:92:81:16:f1: bf:34:5c:73:10:da:9d:d0:b4:2f:21:36:9b:c9:da:72:27:85: ad:cd:6f:64:e7:68:a4:3e:70:16:d5:ae:48:82:79:38:f4:8a: f2:eb:1b:9f:64:d5:fb:8c:39:30:b9:b8:28:02:05:ec:a1:b2: 62:ca:bd:f2:60:3d:9b:51:cb:24:74:15:9f:c4:f2:7a:81:4d: 31:c7:5f:9e:ac:a5:45:c1:cf:c1:5d:0b:0c:3f:eb:50:0c:e8: 22:a2:0e:ef:20:cc:56:c8:95:82:c3:c8:76:55:f5:56:2a:00: 20:d2:10:31:59:cb:73:0e:70:cb:4c:9f:34:cf:24:1d:73:b1: 5f:c2:bb:72:be:56:88:67:67:52:a3:6d:5a:ec:6c:82:6d:7b: ae:b7:bc:55:7a:72:d2:d0:1b:70:31:76:1f:4b:fd:35:ef:f8: 9e:db:0e:00:a0:a3:84:92:93:4a:8c:1e:16:7a:42:82:01:01: b8:58:c8:d9:d4:e2:eb:bd:58:77:9f:bc:f0:27:93:c9:bd:d9: b3:4e:64:ef:be:3d:32:ad:0b:39:13:b2:4a:2b:33:77:b4:86: 7e:87:a2:5d -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUUc+DhWksrdF5V2GPCEY60TB/pIkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDM0NjA2OTQ5RDM4NURCNDI3MTRGRTcxMjc0RkFDOTk0 OEVGMjc5QzAeFw0yNjEwMDUxNjA1NThaFw0yNzEwMDQxNjEwNThaMDMxMTAvBgNV BAMTKDUzNkQ4MUE2QTgzQzlBQzkxQzk5Qzg1N0Y3QUZBMTQyQ0M1OUQzMzUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCyQ/mxPp2Jx5KPBHo9RrHidovR nk8CdeiM4staunM1ygtN2fBpP/qxCNtne8ODNgUvku6OJuTQQDggpWhkakQt4poi PnZ2j8eAEYZa+l+4LQj91Chn5Mq1bfOfm+zE0nq/8sXEeqLdczhEZhMymwANW7nc C4YNDj61+6ZeiUAMGo11yWQhZ4A1INQBVUSvlv7EQ7L0rOn5cAcf38++xUYnGQmm X22gOVruYg5iGovlwQuqudt4BjitcnZIDdO7D/gTT0RRLLRHFUh5DymfjXUo/Hac IjHPp3QrcRZ73uvkcEclF3tqmO/y1qVG0joIdneOiII3mz+F81xFbJVYakuVAgMB AAGjggI0MIICMDAdBgNVHQ4EFgQUU22Bpqg8mskcmchX96+hQsxZ0zUwHwYDVR0j BBgwFoAU00YGlJ04XbQnFP5xJ0+smUjvJ5wwDgYDVR0PAQH/BAQDAgeAMIGIBgNV HR8EgYAwfjB8oHqgeIZ2cnN5bmM6Ly9yLm1hZ2VsbGFuLmlweG8uY29tL3JlcG8v NTI4YTIxOGYtYWQyOC00MGQyLWJkN2YtMzUwZWFkYTNkNzA1LTAvMC9EMzQ2MDY5 NDlEMzg1REI0MjcxNEZFNzEyNzRGQUM5OTQ4RUYyNzlDLmNybDCBngYIKwYBBQUH AQEEgZEwgY4wgYsGCCsGAQUFBzAChn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5y aXBlLm5ldC9yZXBvc2l0b3J5LzAwMmUwYmEzLWZlNjAtNDViMS05MTYwLTg2OGEy ZjhhNDNiMS8zL0QzNDYwNjk0OUQzODVEQjQyNzE0RkU3MTI3NEZBQzk5NDhFRjI3 OUMuY2VyMHEGCCsGAQUFBwELBGUwYzBhBggrBgEFBQcwC4ZVcnN5bmM6Ly9yLm1h Z2VsbGFuLmlweG8uY29tL3JlcG8vNTI4YTIxOGYtYWQyOC00MGQyLWJkN2YtMzUw ZWFkYTNkNzA1LTAvMC9BUzI1MzY5LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAVia7AwQCWXQwMA0GCSqG SIb3DQEBCwUAA4IBAQDEhFPizJtkx3Tn9gVoVUQArvSpn/Nv/2B47fJllByfU5KB FvG/NFxzENqd0LQvITabydpyJ4WtzW9k52ikPnAW1a5Ignk49Iry6xufZNX7jDkw ubgoAgXsobJiyr3yYD2bUcskdBWfxPJ6gU0xx1+erKVFwc/BXQsMP+tQDOgiog7v IMxWyJWCw8h2VfVWKgAg0hAxWctzDnDLTJ80zyQdc7FfwrtyvlaIZ2dSo21a7GyC bXuut7xVenLS0BtwMXYfS/017/ie2w4AoKOEkpNKjB4WekKCAQG4WMjZ1OLrvVh3 n7zwJ5PJvdmzTmTvvj0yrQs5E7JKKzN3tIZ+h6Jd -----END CERTIFICATE-----Generated at Mon Oct 19 20:46:41 2026 by rpki-client