$ rpki-client -vvvf r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/AS9304.roa File: AS9304.roa (raw, json) Hash identifier: F/VGB427VtVLdw4pX52BpwqEyQsX0WWdHUO65oMja5Y= Subject key identifier: 1F:B6:2C:B9:A7:8A:3B:62:25:1D:F9:62:0C:36:53:89:C0:7D:EC:EB Certificate issuer: /CN=D34606949D385DB42714FE71274FAC9948EF279C Certificate serial: 03289E412273B1C4A1DD82CA36647A72EBFDB9CC Authority key identifier: D3:46:06:94:9D:38:5D:B4:27:14:FE:71:27:4F:AC:99:48:EF:27:9C Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/D34606949D385DB42714FE71274FAC9948EF279C.cer Subject info access: rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/AS9304.roa Signing time: Fri 25 Sep 2026 00:06:01 +0000 ROA not before: Fri 25 Sep 2026 00:01:01 +0000 ROA not after: Fri 24 Sep 2027 00:06:01 +0000 asID: 9304 IP address blocks: 89.116.244.0/24 maxlen: 24 89.117.250.0/24 maxlen: 24 Validation: OK Signature path: rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/D34606949D385DB42714FE71274FAC9948EF279C.crl rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/D34606949D385DB42714FE71274FAC9948EF279C.mft rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/D34606949D385DB42714FE71274FAC9948EF279C.cer rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/9DF85997B1B9B358E1C43F36765AA0A4A02144AE.crl rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/9DF85997B1B9B358E1C43F36765AA0A4A02144AE.mft rsync://rpki.ripe.net/repository/DEFAULT/nfhZl7G5s1jhxD82dlqgpKAhRK4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 21 Oct 2026 01:16:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 03:28:9e:41:22:73:b1:c4:a1:dd:82:ca:36:64:7a:72:eb:fd:b9:cc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D34606949D385DB42714FE71274FAC9948EF279C Validity Not Before: Sep 25 00:01:01 2026 GMT Not After : Sep 24 00:06:01 2027 GMT Subject: CN=1FB62CB9A78A3B62251DF9620C365389C07DECEB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:b9:2f:c1:4d:ed:e6:9e:e5:2d:7f:7d:da:a5: e1:58:22:e6:7d:ae:0c:69:f4:57:05:29:e1:52:1c: 9f:9e:be:59:6b:b0:b2:7c:ce:1c:8b:51:38:c7:ea: a2:f3:05:05:ff:2b:21:ba:c6:9e:69:33:74:dc:48: 70:c8:0d:31:29:12:87:04:56:74:9e:1e:88:26:06: 7b:8e:17:1f:f8:58:de:9e:a1:1d:c4:c0:91:72:b0: 8b:5c:73:04:8e:e1:bb:22:ae:ac:fa:ed:bb:f6:47: e5:e0:3f:db:f4:36:a3:33:97:cb:a5:d2:83:bd:9d: 7d:e3:0a:ee:8d:5a:22:12:95:65:88:b5:df:4a:51: 3d:d5:3f:a3:6f:4c:bf:c7:6b:eb:6a:6d:b5:4e:1e: 61:97:a4:7b:e6:3e:0a:1c:d2:0d:63:b1:3f:61:a3: 18:a7:2a:e3:48:ac:c7:b4:db:58:3b:02:cf:f9:1d: d2:60:33:78:5f:b6:59:06:a2:77:42:ab:06:3e:19: b5:bf:08:58:c7:2d:22:fc:89:96:c0:8e:21:12:6d: d3:a2:5b:49:b1:62:f1:53:44:ed:8a:67:e6:87:6e: bd:a0:b1:96:b3:02:f2:32:2e:eb:a1:b5:5b:7e:36: 54:bc:a9:88:c3:69:f8:15:6c:38:6e:10:23:40:a0: 70:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:B6:2C:B9:A7:8A:3B:62:25:1D:F9:62:0C:36:53:89:C0:7D:EC:EB X509v3 Authority Key Identifier: keyid:D3:46:06:94:9D:38:5D:B4:27:14:FE:71:27:4F:AC:99:48:EF:27:9C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/D34606949D385DB42714FE71274FAC9948EF279C.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/D34606949D385DB42714FE71274FAC9948EF279C.cer Subject Information Access: Signed Object - URI:rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/AS9304.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 89.116.244.0/24 89.117.250.0/24 Signature Algorithm: sha256WithRSAEncryption 70:ea:8c:8e:df:cb:3e:84:12:51:a2:3c:e9:d6:6b:01:4d:2a: bf:a9:f5:e0:3e:94:d1:22:fd:3a:24:27:13:7c:71:29:57:74: 1b:c0:b1:5a:a6:c2:84:cc:0d:f9:5f:a0:0b:42:cd:29:dd:3c: f4:b4:bc:30:85:3b:00:11:ba:fd:ed:e2:3f:8b:45:1e:14:8b: 17:74:ed:1c:aa:a6:95:8d:93:40:40:b0:15:25:73:5a:4b:c3: 5d:d7:56:ce:b4:d3:f0:0b:c3:14:44:8b:96:8c:72:4b:72:1b: 01:f2:33:0e:91:0c:25:cb:c4:2f:22:92:15:1b:97:d9:8b:59: 78:5f:26:e9:98:63:7f:ca:68:dc:b7:37:be:21:24:9c:b4:8d: fb:2f:c7:9c:db:cb:f7:3a:96:b3:76:18:51:c5:12:99:ad:26: 99:49:67:4d:83:b2:2e:35:58:9c:5d:f9:f8:52:ad:c7:e7:15: df:aa:01:ba:44:3c:22:a9:88:66:b6:11:2d:ea:1d:d2:0d:f5: 99:e1:73:72:3b:96:1b:4b:9d:d4:25:cf:28:d8:c5:b8:a0:c2: 14:0c:95:7a:2f:51:37:a1:d8:3f:f7:ac:95:d8:1a:bd:c9:da: af:db:b0:2d:0b:d5:9f:f0:78:47:69:38:d5:4c:46:5e:87:c3: ba:e3:d7:ea -----BEGIN CERTIFICATE----- MIIFKTCCBBGgAwIBAgIUAyieQSJzscSh3YLKNmR6cuv9ucwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDM0NjA2OTQ5RDM4NURCNDI3MTRGRTcxMjc0RkFDOTk0 OEVGMjc5QzAeFw0yNjA5MjUwMDAxMDFaFw0yNzA5MjQwMDA2MDFaMDMxMTAvBgNV BAMTKDFGQjYyQ0I5QTc4QTNCNjIyNTFERjk2MjBDMzY1Mzg5QzA3REVDRUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCAuS/BTe3mnuUtf33apeFYIuZ9 rgxp9FcFKeFSHJ+evllrsLJ8zhyLUTjH6qLzBQX/KyG6xp5pM3TcSHDIDTEpEocE VnSeHogmBnuOFx/4WN6eoR3EwJFysItccwSO4bsirqz67bv2R+XgP9v0NqMzl8ul 0oO9nX3jCu6NWiISlWWItd9KUT3VP6NvTL/Ha+tqbbVOHmGXpHvmPgoc0g1jsT9h oxinKuNIrMe021g7As/5HdJgM3hftlkGondCqwY+GbW/CFjHLSL8iZbAjiESbdOi W0mxYvFTRO2KZ+aHbr2gsZazAvIyLuuhtVt+NlS8qYjDafgVbDhuECNAoHDrAgMB AAGjggIzMIICLzAdBgNVHQ4EFgQUH7YsuaeKO2IlHfliDDZTicB97OswHwYDVR0j BBgwFoAU00YGlJ04XbQnFP5xJ0+smUjvJ5wwDgYDVR0PAQH/BAQDAgeAMIGIBgNV HR8EgYAwfjB8oHqgeIZ2cnN5bmM6Ly9yLm1hZ2VsbGFuLmlweG8uY29tL3JlcG8v NTI4YTIxOGYtYWQyOC00MGQyLWJkN2YtMzUwZWFkYTNkNzA1LTAvMC9EMzQ2MDY5 NDlEMzg1REI0MjcxNEZFNzEyNzRGQUM5OTQ4RUYyNzlDLmNybDCBngYIKwYBBQUH AQEEgZEwgY4wgYsGCCsGAQUFBzAChn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5y aXBlLm5ldC9yZXBvc2l0b3J5LzAwMmUwYmEzLWZlNjAtNDViMS05MTYwLTg2OGEy ZjhhNDNiMS8zL0QzNDYwNjk0OUQzODVEQjQyNzE0RkU3MTI3NEZBQzk5NDhFRjI3 OUMuY2VyMHAGCCsGAQUFBwELBGQwYjBgBggrBgEFBQcwC4ZUcnN5bmM6Ly9yLm1h Z2VsbGFuLmlweG8uY29tL3JlcG8vNTI4YTIxOGYtYWQyOC00MGQyLWJkN2YtMzUw ZWFkYTNkNzA1LTAvMC9BUzkzMDQucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUH DgIwJQYIKwYBBQUHAQcBAf8EFjAUMBIEAgABMAwDBABZdPQDBABZdfowDQYJKoZI hvcNAQELBQADggEBAHDqjI7fyz6EElGiPOnWawFNKr+p9eA+lNEi/TokJxN8cSlX dBvAsVqmwoTMDflfoAtCzSndPPS0vDCFOwARuv3t4j+LRR4Uixd07RyqppWNk0BA sBUlc1pLw13XVs600/ALwxREi5aMcktyGwHyMw6RDCXLxC8ikhUbl9mLWXhfJumY Y3/KaNy3N74hJJy0jfsvx5zby/c6lrN2GFHFEpmtJplJZ02Dsi41WJxd+fhSrcfn Fd+qAbpEPCKpiGa2ES3qHdIN9Znhc3I7lhtLndQlzyjYxbigwhQMlXovUTeh2D/3 rJXYGr3J2q/bsC0L1Z/weEdpONVMRl6Hw7rj1+o= -----END CERTIFICATE-----Generated at Tue Oct 20 12:22:01 2026 by rpki-client