$ rpki-client -vvf r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/AS400799.roa File: AS400799.roa (raw, json) Hash identifier: EulAepN+MJL9S9kWZnym47FPg4Ji6EshovDSFnxlyqk= Subject key identifier: C4:95:4E:06:8E:AC:A2:D5:F4:51:CF:F0:A4:3F:E9:AE:55:8F:32:8F Certificate issuer: /CN=D34606949D385DB42714FE71274FAC9948EF279C Certificate serial: 708DB79701F7C6E5F7AA70A48014C044872BD15C Authority key identifier: D3:46:06:94:9D:38:5D:B4:27:14:FE:71:27:4F:AC:99:48:EF:27:9C Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/D34606949D385DB42714FE71274FAC9948EF279C.cer Subject info access: rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/AS400799.roa Signing time: Thu 09 Jul 2026 15:49:07 +0000 ROA not before: Thu 09 Jul 2026 15:44:07 +0000 ROA not after: Thu 08 Jul 2027 15:49:07 +0000 asID: 400799 IP address blocks: 89.116.234.0/24 maxlen: 24 Validation: OK Signature path: rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/D34606949D385DB42714FE71274FAC9948EF279C.crl rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/D34606949D385DB42714FE71274FAC9948EF279C.mft rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/D34606949D385DB42714FE71274FAC9948EF279C.cer rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/9DF85997B1B9B358E1C43F36765AA0A4A02144AE.crl rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/9DF85997B1B9B358E1C43F36765AA0A4A02144AE.mft rsync://rpki.ripe.net/repository/DEFAULT/nfhZl7G5s1jhxD82dlqgpKAhRK4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 22 Jul 2026 06:12:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 70:8d:b7:97:01:f7:c6:e5:f7:aa:70:a4:80:14:c0:44:87:2b:d1:5c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D34606949D385DB42714FE71274FAC9948EF279C Validity Not Before: Jul 9 15:44:07 2026 GMT Not After : Jul 8 15:49:07 2027 GMT Subject: CN=C4954E068EACA2D5F451CFF0A43FE9AE558F328F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:d2:56:b4:d8:de:2d:ce:70:0d:8d:ef:1a:b8: 85:5d:17:6c:0c:3b:23:8c:9f:af:40:94:1c:25:68: 2b:d2:1b:30:af:a6:5c:02:8c:45:06:2b:f6:e7:ae: ad:4e:ca:f8:9c:64:d5:62:5c:a9:6e:07:a2:c7:0a: b9:23:8e:b7:d3:b1:24:f5:79:b6:53:bc:b8:79:1c: 91:f6:42:b7:e6:90:35:ab:f0:41:43:67:d1:06:ed: 52:93:4b:39:61:22:54:88:f5:00:d1:7c:de:3d:14: 4b:1a:e8:64:d0:39:9c:b9:0c:0b:22:dd:e3:db:c6: 8c:7b:ae:49:ca:69:df:c1:07:db:19:2e:a1:d3:a2: 33:e3:66:80:81:13:aa:36:f5:f7:79:9f:29:46:99: 3a:05:3a:72:ad:fa:53:b6:eb:64:eb:4a:cc:9f:94: 59:60:74:9d:8d:f1:81:b7:3e:2d:e2:cf:d4:9f:bc: 97:47:b9:1a:4c:7c:e2:20:3d:51:fa:3a:5e:d5:e0: 9c:70:77:ac:6e:c3:ec:c3:ea:b5:67:4d:86:13:10: df:97:a5:17:79:2a:89:1b:c7:e5:e7:8b:3e:53:bb: d1:e4:f9:0d:7e:d5:fd:d0:84:34:04:62:21:85:fc: 34:0e:82:fd:ed:83:2b:aa:3f:75:42:a8:73:a8:57: 0b:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:95:4E:06:8E:AC:A2:D5:F4:51:CF:F0:A4:3F:E9:AE:55:8F:32:8F X509v3 Authority Key Identifier: keyid:D3:46:06:94:9D:38:5D:B4:27:14:FE:71:27:4F:AC:99:48:EF:27:9C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/D34606949D385DB42714FE71274FAC9948EF279C.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/D34606949D385DB42714FE71274FAC9948EF279C.cer Subject Information Access: Signed Object - URI:rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/AS400799.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 89.116.234.0/24 Signature Algorithm: sha256WithRSAEncryption 11:29:65:41:1b:00:ff:dd:9e:75:ce:f4:9e:02:44:ef:6f:3f: 23:98:58:31:1b:83:db:9f:ed:4d:2d:f3:0c:26:a0:a5:bd:ff: 8a:b5:01:69:e3:49:b1:fc:62:8c:54:be:bc:88:29:bc:e0:72: 34:1f:62:03:92:b9:ce:97:9a:e5:39:fa:76:74:c0:ff:4e:b0: 4f:1c:45:01:94:3d:5e:1f:6d:ad:f0:91:e8:d7:8a:5d:12:6e: 3c:f5:a4:fb:69:c2:0e:14:73:fb:f9:e4:df:b0:e3:66:11:8e: f1:b5:1b:ca:51:f4:f3:03:68:0d:d9:68:d9:7b:df:06:68:1f: 32:2f:26:b5:32:63:74:23:be:39:31:eb:aa:d2:35:82:85:d0: 9f:9a:86:97:21:44:4b:79:3b:32:5a:7c:fb:f9:67:6d:03:c7: 82:5e:b3:69:58:1c:aa:35:69:bf:ce:87:d3:d4:8b:1b:e2:a5: b6:69:1e:91:f6:a0:ad:4d:95:0e:05:13:94:02:38:e6:5c:1e: 3f:0f:f3:bf:66:53:c9:87:a4:02:33:7d:6d:e2:c6:f8:e7:55: 77:0d:06:a5:6c:2c:9a:4c:a6:aa:99:cd:32:17:cc:e5:b6:7d: 82:e8:0f:c0:21:9f:2c:f6:ae:15:2a:86:45:a5:0d:3f:eb:6e: 01:1b:6a:ed -----BEGIN CERTIFICATE----- MIIFJTCCBA2gAwIBAgIUcI23lwH3xuX3qnCkgBTARIcr0VwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDM0NjA2OTQ5RDM4NURCNDI3MTRGRTcxMjc0RkFDOTk0 OEVGMjc5QzAeFw0yNjA3MDkxNTQ0MDdaFw0yNzA3MDgxNTQ5MDdaMDMxMTAvBgNV BAMTKEM0OTU0RTA2OEVBQ0EyRDVGNDUxQ0ZGMEE0M0ZFOUFFNTU4RjMyOEYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCl0la02N4tznANje8auIVdF2wM OyOMn69AlBwlaCvSGzCvplwCjEUGK/bnrq1OyvicZNViXKluB6LHCrkjjrfTsST1 ebZTvLh5HJH2QrfmkDWr8EFDZ9EG7VKTSzlhIlSI9QDRfN49FEsa6GTQOZy5DAsi 3ePbxox7rknKad/BB9sZLqHTojPjZoCBE6o29fd5nylGmToFOnKt+lO262TrSsyf lFlgdJ2N8YG3Pi3iz9SfvJdHuRpMfOIgPVH6Ol7V4Jxwd6xuw+zD6rVnTYYTEN+X pRd5Kokbx+Xniz5Tu9Hk+Q1+1f3QhDQEYiGF/DQOgv3tgyuqP3VCqHOoVwvFAgMB AAGjggIvMIICKzAdBgNVHQ4EFgQUxJVOBo6sotX0Uc/wpD/prlWPMo8wHwYDVR0j BBgwFoAU00YGlJ04XbQnFP5xJ0+smUjvJ5wwDgYDVR0PAQH/BAQDAgeAMIGIBgNV HR8EgYAwfjB8oHqgeIZ2cnN5bmM6Ly9yLm1hZ2VsbGFuLmlweG8uY29tL3JlcG8v NTI4YTIxOGYtYWQyOC00MGQyLWJkN2YtMzUwZWFkYTNkNzA1LTAvMC9EMzQ2MDY5 NDlEMzg1REI0MjcxNEZFNzEyNzRGQUM5OTQ4RUYyNzlDLmNybDCBngYIKwYBBQUH AQEEgZEwgY4wgYsGCCsGAQUFBzAChn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5y aXBlLm5ldC9yZXBvc2l0b3J5LzAwMmUwYmEzLWZlNjAtNDViMS05MTYwLTg2OGEy ZjhhNDNiMS8zL0QzNDYwNjk0OUQzODVEQjQyNzE0RkU3MTI3NEZBQzk5NDhFRjI3 OUMuY2VyMHIGCCsGAQUFBwELBGYwZDBiBggrBgEFBQcwC4ZWcnN5bmM6Ly9yLm1h Z2VsbGFuLmlweG8uY29tL3JlcG8vNTI4YTIxOGYtYWQyOC00MGQyLWJkN2YtMzUw ZWFkYTNkNzA1LTAvMC9BUzQwMDc5OS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEF BQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAFl06jANBgkqhkiG9w0B AQsFAAOCAQEAESllQRsA/92edc70ngJE728/I5hYMRuD25/tTS3zDCagpb3/irUB aeNJsfxijFS+vIgpvOByNB9iA5K5zpea5Tn6dnTA/06wTxxFAZQ9Xh9trfCR6NeK XRJuPPWk+2nCDhRz+/nk37DjZhGO8bUbylH08wNoDdlo2XvfBmgfMi8mtTJjdCO+ OTHrqtI1goXQn5qGlyFES3k7Mlp8+/lnbQPHgl6zaVgcqjVpv86H09SLG+Kltmke kfagrU2VDgUTlAI45lwePw/zv2ZTyYekAjN9beLG+OdVdw0GpWwsmkymqpnNMhfM 5bZ9gugPwCGfLPauFSqGRaUNP+tuARtq7Q== -----END CERTIFICATE-----Generated at Tue Jul 21 11:10:10 2026 by rpki-client