$ rpki-client -vvf r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/AS9304.roa File: AS9304.roa (raw, json) Hash identifier: Y13by7pXoRMCjXSH087VAQPBiZCZYQrGvrs0NaUcqTE= Subject key identifier: FC:C5:FE:E4:7D:3B:FB:65:23:19:99:8A:FB:EA:D8:86:AB:D8:17:DA Certificate issuer: /CN=D34606949D385DB42714FE71274FAC9948EF279C Certificate serial: 27913D289C704A0EBDA850756E9F8DC3299213D9 Authority key identifier: D3:46:06:94:9D:38:5D:B4:27:14:FE:71:27:4F:AC:99:48:EF:27:9C Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/D34606949D385DB42714FE71274FAC9948EF279C.cer Subject info access: rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/AS9304.roa Signing time: Mon 25 May 2026 12:17:49 +0000 ROA not before: Mon 25 May 2026 12:12:49 +0000 ROA not after: Mon 24 May 2027 12:17:49 +0000 asID: 9304 IP address blocks: 86.38.187.0/24 maxlen: 24 89.116.8.0/24 maxlen: 24 89.116.244.0/24 maxlen: 24 89.117.250.0/24 maxlen: 24 Validation: OK Signature path: rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/D34606949D385DB42714FE71274FAC9948EF279C.crl rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/D34606949D385DB42714FE71274FAC9948EF279C.mft rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/D34606949D385DB42714FE71274FAC9948EF279C.cer rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/9DF85997B1B9B358E1C43F36765AA0A4A02144AE.crl rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/9DF85997B1B9B358E1C43F36765AA0A4A02144AE.mft rsync://rpki.ripe.net/repository/DEFAULT/nfhZl7G5s1jhxD82dlqgpKAhRK4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 03 Jun 2026 03:15:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 27:91:3d:28:9c:70:4a:0e:bd:a8:50:75:6e:9f:8d:c3:29:92:13:d9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D34606949D385DB42714FE71274FAC9948EF279C Validity Not Before: May 25 12:12:49 2026 GMT Not After : May 24 12:17:49 2027 GMT Subject: CN=FCC5FEE47D3BFB652319998AFBEAD886ABD817DA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:73:99:a2:99:6e:3c:a0:d1:f4:9a:bd:13:ea: a2:88:14:7a:ee:4d:6d:a4:af:d8:ad:a5:9f:ca:8a: e2:b3:a0:4d:c1:d9:3c:0a:f3:98:e3:7f:f2:b6:5f: f2:bb:90:14:d8:b7:c8:f5:3b:b7:7a:82:42:2c:f8: f0:13:5f:5e:a4:c8:27:ff:0b:8d:40:fc:c9:32:18: 86:ff:52:c4:28:a9:c6:38:c4:a5:f5:70:96:70:53: 58:ba:41:21:13:ef:e1:1e:40:b5:fc:b8:fe:89:6a: db:06:2b:95:70:57:97:1d:a4:fe:bc:10:b1:63:ac: 14:db:02:ad:c9:38:61:5b:fd:b1:73:a1:2b:0d:92: b8:db:14:aa:b8:6f:c4:5b:1b:90:65:6c:3f:d3:95: 96:af:67:db:7c:dc:4e:ff:eb:69:bd:05:d1:b6:dd: ac:9d:c1:02:a5:df:f0:b1:b7:13:8c:9a:0d:3c:93: 6e:43:e9:b2:4f:a7:dc:ec:f9:f4:aa:92:a7:ca:d6: 0a:fd:7c:d2:a9:2b:44:1e:b6:26:27:ce:5b:bd:63: ac:43:c8:0f:57:59:c9:42:e1:7f:13:24:85:65:ba: 85:35:e4:b3:26:cf:d7:9e:a1:3d:f7:18:cf:e6:0e: 61:1d:3d:da:88:e8:e3:68:2b:dd:f0:d7:0a:9b:56: d5:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:C5:FE:E4:7D:3B:FB:65:23:19:99:8A:FB:EA:D8:86:AB:D8:17:DA X509v3 Authority Key Identifier: keyid:D3:46:06:94:9D:38:5D:B4:27:14:FE:71:27:4F:AC:99:48:EF:27:9C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/D34606949D385DB42714FE71274FAC9948EF279C.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/D34606949D385DB42714FE71274FAC9948EF279C.cer Subject Information Access: Signed Object - URI:rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/AS9304.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 86.38.187.0/24 89.116.8.0/24 89.116.244.0/24 89.117.250.0/24 Signature Algorithm: sha256WithRSAEncryption 7f:43:da:bb:2c:86:b5:37:5c:c7:dd:ae:e6:ed:a9:8a:70:a6: c1:4b:9a:fe:04:3c:a3:03:88:47:c2:e5:54:36:bc:2f:e7:90: 51:e6:35:1c:e8:5e:4a:8b:40:5a:62:d8:76:51:91:8e:e2:82: 1e:51:41:05:24:e9:91:a7:c7:3b:29:20:57:c9:0c:1b:22:fe: eb:eb:21:fd:84:c0:7a:5a:bb:59:d7:93:e3:30:bf:6f:df:47: 14:6d:4a:5e:11:ee:3c:68:b9:24:97:06:87:6a:6e:12:df:34: b4:2f:6f:d8:48:3b:b5:5f:47:6a:81:35:8b:8e:cd:01:2c:01: 09:fc:15:cf:db:1c:b7:0d:49:7b:4a:2f:25:f9:26:ac:60:24: 19:bc:f4:64:13:43:c5:2c:9b:8f:b6:7f:49:d2:be:f0:e9:1c: aa:7f:1f:a3:9d:a5:9f:1d:a1:08:17:36:24:19:c2:e9:1a:99: b5:82:64:97:dc:a6:c4:2f:b2:f3:56:b6:31:c6:6f:e9:4e:62: 0a:f3:db:77:f2:10:ba:d1:48:72:a6:90:f6:bc:98:ae:7e:48: 60:54:89:ea:4d:e1:70:d0:0a:be:7f:2f:71:4e:84:83:f2:db: 25:19:ee:01:43:3b:fd:d6:cb:05:f5:99:74:95:08:ef:8f:68: f6:11:05:4d -----BEGIN CERTIFICATE----- MIIFNTCCBB2gAwIBAgIUJ5E9KJxwSg69qFB1bp+NwymSE9kwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDM0NjA2OTQ5RDM4NURCNDI3MTRGRTcxMjc0RkFDOTk0 OEVGMjc5QzAeFw0yNjA1MjUxMjEyNDlaFw0yNzA1MjQxMjE3NDlaMDMxMTAvBgNV BAMTKEZDQzVGRUU0N0QzQkZCNjUyMzE5OTk4QUZCRUFEODg2QUJEODE3REEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDmc5mimW48oNH0mr0T6qKIFHru TW2kr9itpZ/KiuKzoE3B2TwK85jjf/K2X/K7kBTYt8j1O7d6gkIs+PATX16kyCf/ C41A/MkyGIb/UsQoqcY4xKX1cJZwU1i6QSET7+EeQLX8uP6JatsGK5VwV5cdpP68 ELFjrBTbAq3JOGFb/bFzoSsNkrjbFKq4b8RbG5BlbD/TlZavZ9t83E7/62m9BdG2 3aydwQKl3/CxtxOMmg08k25D6bJPp9zs+fSqkqfK1gr9fNKpK0QetiYnzlu9Y6xD yA9XWclC4X8TJIVluoU15LMmz9eeoT33GM/mDmEdPdqI6ONoK93w1wqbVtWxAgMB AAGjggI/MIICOzAdBgNVHQ4EFgQU/MX+5H07+2UjGZmK++rYhqvYF9owHwYDVR0j BBgwFoAU00YGlJ04XbQnFP5xJ0+smUjvJ5wwDgYDVR0PAQH/BAQDAgeAMIGIBgNV HR8EgYAwfjB8oHqgeIZ2cnN5bmM6Ly9yLm1hZ2VsbGFuLmlweG8uY29tL3JlcG8v NTI4YTIxOGYtYWQyOC00MGQyLWJkN2YtMzUwZWFkYTNkNzA1LTAvMC9EMzQ2MDY5 NDlEMzg1REI0MjcxNEZFNzEyNzRGQUM5OTQ4RUYyNzlDLmNybDCBngYIKwYBBQUH AQEEgZEwgY4wgYsGCCsGAQUFBzAChn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5y aXBlLm5ldC9yZXBvc2l0b3J5LzAwMmUwYmEzLWZlNjAtNDViMS05MTYwLTg2OGEy ZjhhNDNiMS8zL0QzNDYwNjk0OUQzODVEQjQyNzE0RkU3MTI3NEZBQzk5NDhFRjI3 OUMuY2VyMHAGCCsGAQUFBwELBGQwYjBgBggrBgEFBQcwC4ZUcnN5bmM6Ly9yLm1h Z2VsbGFuLmlweG8uY29tL3JlcG8vNTI4YTIxOGYtYWQyOC00MGQyLWJkN2YtMzUw ZWFkYTNkNzA1LTAvMC9BUzkzMDQucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUH DgIwMQYIKwYBBQUHAQcBAf8EIjAgMB4EAgABMBgDBABWJrsDBABZdAgDBABZdPQD BABZdfowDQYJKoZIhvcNAQELBQADggEBAH9D2rsshrU3XMfdrubtqYpwpsFLmv4E PKMDiEfC5VQ2vC/nkFHmNRzoXkqLQFpi2HZRkY7igh5RQQUk6ZGnxzspIFfJDBsi /uvrIf2EwHpau1nXk+Mwv2/fRxRtSl4R7jxouSSXBodqbhLfNLQvb9hIO7VfR2qB NYuOzQEsAQn8Fc/bHLcNSXtKLyX5JqxgJBm89GQTQ8Usm4+2f0nSvvDpHKp/H6Od pZ8doQgXNiQZwukambWCZJfcpsQvsvNWtjHGb+lOYgrz23fyELrRSHKmkPa8mK5+ SGBUiepN4XDQCr5/L3FOhIPy2yUZ7gFDO/3WywX1mXSVCO+PaPYRBU0= -----END CERTIFICATE-----Generated at Tue Jun 2 20:51:30 2026 by rpki-client