$ rpki-client -vvf r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/AS984.roa File: AS984.roa (raw, json) Hash identifier: 5mdVx0kOOyYQWwGoTEkT9Duy4U+BASATGIWGav5Dc6A= Subject key identifier: 32:6F:D6:40:D9:DC:CA:D2:7C:55:72:8C:30:BB:B8:86:39:F0:D2:46 Certificate issuer: /CN=D34606949D385DB42714FE71274FAC9948EF279C Certificate serial: 2ABB63AFF8B5EAAB79BE51FDCD58E0ABECB43519 Authority key identifier: D3:46:06:94:9D:38:5D:B4:27:14:FE:71:27:4F:AC:99:48:EF:27:9C Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/D34606949D385DB42714FE71274FAC9948EF279C.cer Subject info access: rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/AS984.roa Signing time: Thu 09 Oct 2025 02:59:52 +0000 ROA not before: Thu 09 Oct 2025 02:54:52 +0000 ROA not after: Thu 08 Oct 2026 02:59:52 +0000 asID: 984 IP address blocks: 89.116.45.0/24 maxlen: 24 89.116.203.0/24 maxlen: 24 Validation: OK Signature path: rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/D34606949D385DB42714FE71274FAC9948EF279C.crl rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/D34606949D385DB42714FE71274FAC9948EF279C.mft rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/D34606949D385DB42714FE71274FAC9948EF279C.cer rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/9DF85997B1B9B358E1C43F36765AA0A4A02144AE.crl rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/9DF85997B1B9B358E1C43F36765AA0A4A02144AE.mft rsync://rpki.ripe.net/repository/DEFAULT/nfhZl7G5s1jhxD82dlqgpKAhRK4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 20 Oct 2025 06:00:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2a:bb:63:af:f8:b5:ea:ab:79:be:51:fd:cd:58:e0:ab:ec:b4:35:19 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D34606949D385DB42714FE71274FAC9948EF279C Validity Not Before: Oct 9 02:54:52 2025 GMT Not After : Oct 8 02:59:52 2026 GMT Subject: CN=326FD640D9DCCAD27C55728C30BBB88639F0D246 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:ea:19:29:54:8b:37:b8:36:cb:33:2f:ab:14: 15:ea:aa:07:b9:93:df:1f:83:53:7f:ff:1b:4d:80: 4a:de:99:e8:ff:a0:08:62:66:e3:c9:91:ab:43:5d: 06:95:cc:86:02:46:6e:60:8a:4e:65:7c:20:ea:d5: f5:36:5c:24:94:ad:d0:30:ca:e0:43:18:e8:c1:0c: af:06:dc:46:12:88:e6:e4:e9:6b:e1:de:5b:be:1f: eb:e8:5a:9a:dc:08:b7:e3:12:6e:f6:b0:8f:38:fa: 94:b3:e7:48:67:ec:3a:2d:42:36:98:df:d5:c7:9a: d0:11:26:e4:e1:be:42:29:ba:27:5b:09:cc:ca:f9: 16:2f:da:1f:70:04:f2:e2:70:f6:de:be:4a:cb:98: c6:bb:c4:9f:89:1a:39:44:96:35:22:65:fa:d3:fe: 83:58:ae:3f:b0:c5:c4:4a:17:7f:0a:c8:9c:25:79: 61:a2:9d:03:e8:d2:d4:46:2a:f1:7e:41:d2:b2:67: bb:d3:7d:50:6f:84:35:06:d2:28:5b:c8:4c:dc:f2: 07:18:0d:94:3d:a9:c5:80:48:e9:93:02:a0:25:82: 0c:b5:bc:82:fe:39:4e:c2:37:96:96:75:2c:4b:62: c0:f7:89:48:5f:7d:03:6a:03:0c:93:37:f8:d4:55: 4e:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:6F:D6:40:D9:DC:CA:D2:7C:55:72:8C:30:BB:B8:86:39:F0:D2:46 X509v3 Authority Key Identifier: keyid:D3:46:06:94:9D:38:5D:B4:27:14:FE:71:27:4F:AC:99:48:EF:27:9C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/D34606949D385DB42714FE71274FAC9948EF279C.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/D34606949D385DB42714FE71274FAC9948EF279C.cer Subject Information Access: Signed Object - URI:rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/AS984.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 89.116.45.0/24 89.116.203.0/24 Signature Algorithm: sha256WithRSAEncryption 45:0f:49:f5:c0:92:23:d7:a7:7a:96:6a:0e:9b:38:75:49:03: 6b:51:5c:8b:66:96:00:ae:1b:e0:4b:29:69:48:c7:bc:e7:4d: 77:b6:37:52:49:47:97:a1:22:77:cc:5a:21:39:5f:88:1b:19: 46:6c:19:25:c2:20:fb:86:df:ac:f0:e6:fa:f3:1d:1f:1d:ad: 7d:1e:52:fc:8e:d0:20:b8:21:01:56:40:b0:54:4f:bb:cb:a2: b2:0a:66:b6:fa:36:ca:93:76:58:09:3d:42:b9:4e:f6:50:55: 7a:b8:5b:5b:df:87:c3:ae:b4:8c:ac:0b:2d:85:a0:63:84:3f: b0:1d:57:b3:f9:a8:3d:3d:5b:c3:ef:9c:d1:f8:1a:69:e1:2e: 00:b8:98:1f:10:b4:86:03:10:a0:ed:8e:f2:5f:6a:e6:c0:f7: 5e:aa:45:b8:5d:e7:53:fd:0c:c6:b2:b8:c5:34:3a:ea:4f:98: f5:ad:08:dc:3e:56:0d:2d:7e:09:91:65:45:df:45:44:0d:38: ce:7b:00:10:13:6d:d3:1f:3b:c6:3e:6c:f3:3c:99:e5:24:41: 0e:97:35:32:42:2d:1e:b5:6d:8a:ac:76:a3:37:d0:26:1e:f5: 43:b8:81:c2:a2:57:69:4f:75:52:1f:61:83:25:74:42:b8:d2: de:8b:92:ea -----BEGIN CERTIFICATE----- MIIFKDCCBBCgAwIBAgIUKrtjr/i16qt5vlH9zVjgq+y0NRkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDM0NjA2OTQ5RDM4NURCNDI3MTRGRTcxMjc0RkFDOTk0 OEVGMjc5QzAeFw0yNTEwMDkwMjU0NTJaFw0yNjEwMDgwMjU5NTJaMDMxMTAvBgNV BAMTKDMyNkZENjQwRDlEQ0NBRDI3QzU1NzI4QzMwQkJCODg2MzlGMEQyNDYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCn6hkpVIs3uDbLMy+rFBXqqge5 k98fg1N//xtNgEremej/oAhiZuPJkatDXQaVzIYCRm5gik5lfCDq1fU2XCSUrdAw yuBDGOjBDK8G3EYSiObk6Wvh3lu+H+voWprcCLfjEm72sI84+pSz50hn7DotQjaY 39XHmtARJuThvkIpuidbCczK+RYv2h9wBPLicPbevkrLmMa7xJ+JGjlEljUiZfrT /oNYrj+wxcRKF38KyJwleWGinQPo0tRGKvF+QdKyZ7vTfVBvhDUG0ihbyEzc8gcY DZQ9qcWASOmTAqAlggy1vIL+OU7CN5aWdSxLYsD3iUhffQNqAwyTN/jUVU7lAgMB AAGjggIyMIICLjAdBgNVHQ4EFgQUMm/WQNncytJ8VXKMMLu4hjnw0kYwHwYDVR0j BBgwFoAU00YGlJ04XbQnFP5xJ0+smUjvJ5wwDgYDVR0PAQH/BAQDAgeAMIGIBgNV HR8EgYAwfjB8oHqgeIZ2cnN5bmM6Ly9yLm1hZ2VsbGFuLmlweG8uY29tL3JlcG8v NTI4YTIxOGYtYWQyOC00MGQyLWJkN2YtMzUwZWFkYTNkNzA1LTAvMC9EMzQ2MDY5 NDlEMzg1REI0MjcxNEZFNzEyNzRGQUM5OTQ4RUYyNzlDLmNybDCBngYIKwYBBQUH AQEEgZEwgY4wgYsGCCsGAQUFBzAChn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5y aXBlLm5ldC9yZXBvc2l0b3J5LzAwMmUwYmEzLWZlNjAtNDViMS05MTYwLTg2OGEy ZjhhNDNiMS8zL0QzNDYwNjk0OUQzODVEQjQyNzE0RkU3MTI3NEZBQzk5NDhFRjI3 OUMuY2VyMG8GCCsGAQUFBwELBGMwYTBfBggrBgEFBQcwC4ZTcnN5bmM6Ly9yLm1h Z2VsbGFuLmlweG8uY29tL3JlcG8vNTI4YTIxOGYtYWQyOC00MGQyLWJkN2YtMzUw ZWFkYTNkNzA1LTAvMC9BUzk4NC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcO AjAlBggrBgEFBQcBBwEB/wQWMBQwEgQCAAEwDAMEAFl0LQMEAFl0yzANBgkqhkiG 9w0BAQsFAAOCAQEARQ9J9cCSI9enepZqDps4dUkDa1Fci2aWAK4b4EspaUjHvOdN d7Y3UklHl6Eid8xaITlfiBsZRmwZJcIg+4bfrPDm+vMdHx2tfR5S/I7QILghAVZA sFRPu8uisgpmtvo2ypN2WAk9QrlO9lBVerhbW9+Hw660jKwLLYWgY4Q/sB1Xs/mo PT1bw++c0fgaaeEuALiYHxC0hgMQoO2O8l9q5sD3XqpFuF3nU/0MxrK4xTQ66k+Y 9a0I3D5WDS1+CZFlRd9FRA04znsAEBNt0x87xj5s8zyZ5SRBDpc1MkItHrVtiqx2 ozfQJh71Q7iBwqJXaU91Uh9hgyV0QrjS3ouS6g== -----END CERTIFICATE-----Generated at Sun Oct 19 16:10:28 2025 by rpki-client