$ rpki-client -vvf r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/AS9304.roa File: AS9304.roa (raw, json) Hash identifier: H3ze08LvgZCM00zX/usNaRZ5AZPMU8Fyr3qInZoS6us= Subject key identifier: 1B:B5:51:2D:60:5C:3A:C3:49:82:F5:D8:F2:32:F2:C2:4D:C7:03:54 Certificate issuer: /CN=D34606949D385DB42714FE71274FAC9948EF279C Certificate serial: 3E00D4B715EE3B33BEC15F343304A35406664083 Authority key identifier: D3:46:06:94:9D:38:5D:B4:27:14:FE:71:27:4F:AC:99:48:EF:27:9C Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/D34606949D385DB42714FE71274FAC9948EF279C.cer Subject info access: rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/AS9304.roa Signing time: Sun 05 Jul 2026 06:25:53 +0000 ROA not before: Sun 05 Jul 2026 06:20:53 +0000 ROA not after: Sun 04 Jul 2027 06:25:53 +0000 asID: 9304 IP address blocks: 86.38.187.0/24 maxlen: 24 89.116.8.0/24 maxlen: 24 89.116.244.0/24 maxlen: 24 89.117.250.0/24 maxlen: 24 Validation: OK Signature path: rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/D34606949D385DB42714FE71274FAC9948EF279C.crl rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/D34606949D385DB42714FE71274FAC9948EF279C.mft rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/D34606949D385DB42714FE71274FAC9948EF279C.cer rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/9DF85997B1B9B358E1C43F36765AA0A4A02144AE.crl rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/9DF85997B1B9B358E1C43F36765AA0A4A02144AE.mft rsync://rpki.ripe.net/repository/DEFAULT/nfhZl7G5s1jhxD82dlqgpKAhRK4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 18 Jul 2026 09:44:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3e:00:d4:b7:15:ee:3b:33:be:c1:5f:34:33:04:a3:54:06:66:40:83 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D34606949D385DB42714FE71274FAC9948EF279C Validity Not Before: Jul 5 06:20:53 2026 GMT Not After : Jul 4 06:25:53 2027 GMT Subject: CN=1BB5512D605C3AC34982F5D8F232F2C24DC70354 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:ab:9d:15:d1:e7:b3:24:83:db:04:7d:df:b0: 96:30:62:f1:2a:d8:2a:22:0b:68:a2:fd:2c:7f:37: ee:c4:6f:ae:a9:2f:c4:f6:12:81:9a:49:6c:5e:02: ce:b4:9e:57:3f:9e:c0:15:99:99:39:bd:2c:03:65: e8:16:81:c6:ab:c5:d3:6a:72:6d:72:8e:34:f9:ce: 9b:f9:51:cf:6b:b2:1d:1c:a2:1a:da:30:00:d8:78: 70:33:5f:62:50:30:6a:62:3a:7f:26:c5:63:60:6b: 30:50:ad:72:69:51:f8:19:57:61:91:a4:30:bd:5e: b9:22:8e:65:38:53:e8:00:33:49:2f:2d:e5:21:88: 8a:23:fa:50:36:ca:db:b6:cd:ad:83:aa:a3:a1:51: 80:a0:ec:62:04:e6:04:62:72:4c:81:56:a4:74:1f: 62:c3:8f:9a:1a:41:6b:6a:e1:93:3b:51:8b:ca:cc: e2:87:48:2c:c3:14:7f:99:ce:96:26:e0:81:d2:0a: 5b:f6:5c:e2:b3:70:4e:2b:4b:74:cf:85:6b:a5:f3: 75:47:ad:17:a2:a9:86:de:fd:42:d8:d3:fb:67:a0: 7e:91:a8:61:77:2c:b6:43:64:ea:14:42:31:f2:4b: ac:23:15:b3:ff:d1:f2:02:e6:3e:5c:68:d0:3c:3c: 08:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:B5:51:2D:60:5C:3A:C3:49:82:F5:D8:F2:32:F2:C2:4D:C7:03:54 X509v3 Authority Key Identifier: keyid:D3:46:06:94:9D:38:5D:B4:27:14:FE:71:27:4F:AC:99:48:EF:27:9C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/D34606949D385DB42714FE71274FAC9948EF279C.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/D34606949D385DB42714FE71274FAC9948EF279C.cer Subject Information Access: Signed Object - URI:rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/AS9304.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 86.38.187.0/24 89.116.8.0/24 89.116.244.0/24 89.117.250.0/24 Signature Algorithm: sha256WithRSAEncryption 2c:94:91:35:d2:02:ee:85:89:4b:a9:e2:24:0c:66:b8:80:0d: cc:74:9b:a2:4c:2a:5f:30:a7:73:d4:b4:73:80:de:80:7d:94: 66:06:86:f8:e5:cc:07:58:28:02:88:06:ff:bd:bf:cb:c7:4d: 8b:c9:8e:42:11:64:37:f4:7c:05:05:1d:a7:73:77:53:0e:72: 49:cd:0d:61:37:25:66:21:59:c4:2c:58:9b:ea:f6:d0:13:38: dd:c8:e5:9c:29:7e:ef:2a:21:e2:7b:ba:5b:48:ba:fb:67:50: 59:40:6e:68:08:5b:fd:13:07:16:46:a8:3d:90:78:b5:64:0c: 20:5c:be:01:95:3b:4f:5f:80:5d:10:92:b2:c8:5d:66:32:dc: 70:2e:56:f2:c8:0f:e2:d1:4a:4c:51:68:be:86:49:9e:5b:ea: c3:fd:18:29:bd:91:ef:85:9a:64:ca:22:4b:0d:22:b2:26:d1: 28:c2:f0:58:2c:b2:95:43:bf:1f:a4:5b:df:37:39:08:f9:dc: 20:04:bd:72:7d:dc:dd:43:e9:cc:a5:11:cf:f6:c9:3e:86:3e: b8:37:e9:59:75:94:20:f2:de:7c:6a:f5:8d:2c:90:ce:4a:46: 22:27:54:6c:60:f4:04:5f:4f:a3:b0:00:40:96:34:5d:ed:8c: 25:d5:f5:12 -----BEGIN CERTIFICATE----- MIIFNTCCBB2gAwIBAgIUPgDUtxXuOzO+wV80MwSjVAZmQIMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDM0NjA2OTQ5RDM4NURCNDI3MTRGRTcxMjc0RkFDOTk0 OEVGMjc5QzAeFw0yNjA3MDUwNjIwNTNaFw0yNzA3MDQwNjI1NTNaMDMxMTAvBgNV BAMTKDFCQjU1MTJENjA1QzNBQzM0OTgyRjVEOEYyMzJGMkMyNERDNzAzNTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCxq50V0eezJIPbBH3fsJYwYvEq 2CoiC2ii/Sx/N+7Eb66pL8T2EoGaSWxeAs60nlc/nsAVmZk5vSwDZegWgcarxdNq cm1yjjT5zpv5Uc9rsh0cohraMADYeHAzX2JQMGpiOn8mxWNgazBQrXJpUfgZV2GR pDC9XrkijmU4U+gAM0kvLeUhiIoj+lA2ytu2za2DqqOhUYCg7GIE5gRickyBVqR0 H2LDj5oaQWtq4ZM7UYvKzOKHSCzDFH+ZzpYm4IHSClv2XOKzcE4rS3TPhWul83VH rReiqYbe/ULY0/tnoH6RqGF3LLZDZOoUQjHyS6wjFbP/0fIC5j5caNA8PAgdAgMB AAGjggI/MIICOzAdBgNVHQ4EFgQUG7VRLWBcOsNJgvXY8jLywk3HA1QwHwYDVR0j BBgwFoAU00YGlJ04XbQnFP5xJ0+smUjvJ5wwDgYDVR0PAQH/BAQDAgeAMIGIBgNV HR8EgYAwfjB8oHqgeIZ2cnN5bmM6Ly9yLm1hZ2VsbGFuLmlweG8uY29tL3JlcG8v NTI4YTIxOGYtYWQyOC00MGQyLWJkN2YtMzUwZWFkYTNkNzA1LTAvMC9EMzQ2MDY5 NDlEMzg1REI0MjcxNEZFNzEyNzRGQUM5OTQ4RUYyNzlDLmNybDCBngYIKwYBBQUH AQEEgZEwgY4wgYsGCCsGAQUFBzAChn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5y aXBlLm5ldC9yZXBvc2l0b3J5LzAwMmUwYmEzLWZlNjAtNDViMS05MTYwLTg2OGEy ZjhhNDNiMS8zL0QzNDYwNjk0OUQzODVEQjQyNzE0RkU3MTI3NEZBQzk5NDhFRjI3 OUMuY2VyMHAGCCsGAQUFBwELBGQwYjBgBggrBgEFBQcwC4ZUcnN5bmM6Ly9yLm1h Z2VsbGFuLmlweG8uY29tL3JlcG8vNTI4YTIxOGYtYWQyOC00MGQyLWJkN2YtMzUw ZWFkYTNkNzA1LTAvMC9BUzkzMDQucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUH DgIwMQYIKwYBBQUHAQcBAf8EIjAgMB4EAgABMBgDBABWJrsDBABZdAgDBABZdPQD BABZdfowDQYJKoZIhvcNAQELBQADggEBACyUkTXSAu6FiUup4iQMZriADcx0m6JM Kl8wp3PUtHOA3oB9lGYGhvjlzAdYKAKIBv+9v8vHTYvJjkIRZDf0fAUFHadzd1MO cknNDWE3JWYhWcQsWJvq9tATON3I5Zwpfu8qIeJ7ultIuvtnUFlAbmgIW/0TBxZG qD2QeLVkDCBcvgGVO09fgF0QkrLIXWYy3HAuVvLID+LRSkxRaL6GSZ5b6sP9GCm9 ke+FmmTKIksNIrIm0SjC8FgsspVDvx+kW983OQj53CAEvXJ93N1D6cylEc/2yT6G Prg36Vl1lCDy3nxq9Y0skM5KRiInVGxg9ARfT6OwAECWNF3tjCXV9RI= -----END CERTIFICATE-----Generated at Sat Jul 18 01:48:17 2026 by rpki-client