$ rpki-client -vvf r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AS212980.roa File: AS212980.roa (raw, json) Hash identifier: LwTTZQWEG8SD4UpTvAyLqa8nPj7TCbDSx3DF2UuFKRo= Subject key identifier: 90:85:B9:56:58:7D:2F:1E:9D:30:89:D8:EF:6F:AE:37:40:6C:F1:DB Certificate issuer: /CN=AEF766F103B2EF99DF8C71978A7FE519D730B155 Certificate serial: 119D33917A778ED5A1CCA71E153D43F7ABCF20C3 Authority key identifier: AE:F7:66:F1:03:B2:EF:99:DF:8C:71:97:8A:7F:E5:19:D7:30:B1:55 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AEF766F103B2EF99DF8C71978A7FE519D730B155.cer Subject info access: rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AS212980.roa Signing time: Thu 26 Mar 2026 08:23:16 +0000 ROA not before: Thu 26 Mar 2026 08:18:16 +0000 ROA not after: Thu 25 Mar 2027 08:23:16 +0000 asID: 212980 IP address blocks: 169.40.64.0/22 maxlen: 24 Validation: OK Signature path: rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AEF766F103B2EF99DF8C71978A7FE519D730B155.crl rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AEF766F103B2EF99DF8C71978A7FE519D730B155.mft rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AEF766F103B2EF99DF8C71978A7FE519D730B155.cer rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 27 Mar 2026 09:00:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 11:9d:33:91:7a:77:8e:d5:a1:cc:a7:1e:15:3d:43:f7:ab:cf:20:c3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AEF766F103B2EF99DF8C71978A7FE519D730B155 Validity Not Before: Mar 26 08:18:16 2026 GMT Not After : Mar 25 08:23:16 2027 GMT Subject: CN=9085B956587D2F1E9D3089D8EF6FAE37406CF1DB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:9b:be:2b:4a:45:3e:4b:fe:61:a7:73:ca:3c: 4c:ac:6d:59:c3:5e:92:dd:81:80:eb:9f:01:1b:ee: 3a:74:ba:65:7a:cb:1e:0b:c0:85:71:e3:90:23:b2: 06:39:ff:6a:8c:e1:65:5e:93:56:9b:52:db:ac:79: 7d:36:1c:42:0e:a7:0d:8e:92:66:c5:ea:cd:59:3d: 74:8d:74:04:66:cc:1c:30:f7:10:65:92:5f:d5:e1: e5:33:62:0d:bc:48:f6:91:d1:62:d6:96:bb:a7:4b: 30:7d:fa:6f:31:0d:9c:58:6f:0a:0f:af:83:26:f0: 20:4c:40:b9:4e:e8:07:b6:9f:a9:c3:67:9c:c1:6d: bd:c1:97:83:be:3c:7d:88:ae:78:94:79:d5:f0:4c: 39:05:2a:c7:ee:ec:e9:d1:47:6c:db:0e:f6:74:72: b3:f5:73:57:42:e8:3b:dd:c3:df:9e:93:15:59:c1: 52:29:78:1d:24:c5:c5:bc:57:9a:9c:28:04:b5:46: af:21:38:48:87:07:98:96:0b:52:79:cf:af:ed:ac: 88:0d:02:57:51:e3:f3:fc:65:0c:c5:23:11:53:f5: 33:2a:f5:15:81:1f:20:57:0b:8b:e0:f7:3c:bf:72: 9b:19:bd:5a:4a:a8:6a:2d:56:5e:56:75:61:c1:66: 4c:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:85:B9:56:58:7D:2F:1E:9D:30:89:D8:EF:6F:AE:37:40:6C:F1:DB X509v3 Authority Key Identifier: keyid:AE:F7:66:F1:03:B2:EF:99:DF:8C:71:97:8A:7F:E5:19:D7:30:B1:55 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AEF766F103B2EF99DF8C71978A7FE519D730B155.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AEF766F103B2EF99DF8C71978A7FE519D730B155.cer Subject Information Access: Signed Object - URI:rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AS212980.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 169.40.64.0/22 Signature Algorithm: sha256WithRSAEncryption 6d:fc:31:ab:58:2e:79:c3:51:f6:70:69:19:94:11:67:f5:e2: 23:80:0e:e4:49:b9:48:f7:a4:f7:d0:35:1d:ee:cc:0d:1a:93: 46:d1:fa:a9:22:fb:21:29:c4:be:23:2a:82:75:b7:c7:42:85: 28:f7:fb:79:32:e0:3e:0c:55:6f:89:f5:d4:a0:c3:62:cb:21: 46:e6:4a:f1:e8:a3:b5:42:c5:09:61:1f:e9:61:69:70:92:23: 37:52:56:67:48:f1:e1:13:e2:d9:d0:75:ea:b0:a6:8b:7d:e9: 18:a0:a7:d5:84:63:a6:28:0a:be:41:58:0a:79:63:77:6a:df: de:b8:42:02:a9:b6:ad:79:a4:1f:43:0e:d1:50:f1:bc:a3:fe: b3:32:3b:13:dd:31:2e:37:09:46:e0:9d:a2:0b:e1:03:f7:6b: 3a:f1:7e:c8:c6:55:54:22:b6:e2:f0:c1:38:32:42:ac:eb:4f: 49:aa:e9:30:c5:31:65:ff:47:5e:a1:c3:81:32:8f:a3:d7:f0: 0f:76:6d:6b:08:61:56:24:3d:ed:2a:7a:b2:66:3a:12:c1:cb: 9c:04:27:7e:99:31:5e:2f:81:a5:9b:83:05:cd:6e:4d:5e:71: 97:18:ee:a2:a5:62:a6:01:72:77:97:8e:e1:f6:51:a4:08:ef: ab:a1:40:c6 -----BEGIN CERTIFICATE----- MIIFJTCCBA2gAwIBAgIUEZ0zkXp3jtWhzKceFT1D96vPIMMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUVGNzY2RjEwM0IyRUY5OURGOEM3MTk3OEE3RkU1MTlE NzMwQjE1NTAeFw0yNjAzMjYwODE4MTZaFw0yNzAzMjUwODIzMTZaMDMxMTAvBgNV BAMTKDkwODVCOTU2NTg3RDJGMUU5RDMwODlEOEVGNkZBRTM3NDA2Q0YxREIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDQm74rSkU+S/5hp3PKPEysbVnD XpLdgYDrnwEb7jp0umV6yx4LwIVx45AjsgY5/2qM4WVek1abUtuseX02HEIOpw2O kmbF6s1ZPXSNdARmzBww9xBlkl/V4eUzYg28SPaR0WLWlrunSzB9+m8xDZxYbwoP r4Mm8CBMQLlO6Ae2n6nDZ5zBbb3Bl4O+PH2IrniUedXwTDkFKsfu7OnRR2zbDvZ0 crP1c1dC6Dvdw9+ekxVZwVIpeB0kxcW8V5qcKAS1Rq8hOEiHB5iWC1J5z6/trIgN AldR4/P8ZQzFIxFT9TMq9RWBHyBXC4vg9zy/cpsZvVpKqGotVl5WdWHBZkx9AgMB AAGjggIvMIICKzAdBgNVHQ4EFgQUkIW5Vlh9Lx6dMInY72+uN0Bs8dswHwYDVR0j BBgwFoAUrvdm8QOy75nfjHGXin/lGdcwsVUwDgYDVR0PAQH/BAQDAgeAMIGIBgNV HR8EgYAwfjB8oHqgeIZ2cnN5bmM6Ly9yLm1hZ2VsbGFuLmlweG8uY29tL3JlcG8v MzAzMjdiOWUtMjI3YS00ZWJkLTgyNWItM2I5ODA5NWRjOTI3LTAvMC9BRUY3NjZG MTAzQjJFRjk5REY4QzcxOTc4QTdGRTUxOUQ3MzBCMTU1LmNybDCBngYIKwYBBQUH AQEEgZEwgY4wgYsGCCsGAQUFBzAChn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5y aXBlLm5ldC9yZXBvc2l0b3J5L2ZlMzcwOGEwLTY3ZDUtNGFjMi1hYmM0LWEzMzI1 OTBiOTlhZi80L0FFRjc2NkYxMDNCMkVGOTlERjhDNzE5NzhBN0ZFNTE5RDczMEIx NTUuY2VyMHIGCCsGAQUFBwELBGYwZDBiBggrBgEFBQcwC4ZWcnN5bmM6Ly9yLm1h Z2VsbGFuLmlweG8uY29tL3JlcG8vMzAzMjdiOWUtMjI3YS00ZWJkLTgyNWItM2I5 ODA5NWRjOTI3LTAvMC9BUzIxMjk4MC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEF BQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAqkoQDANBgkqhkiG9w0B AQsFAAOCAQEAbfwxq1guecNR9nBpGZQRZ/XiI4AO5Em5SPek99A1He7MDRqTRtH6 qSL7ISnEviMqgnW3x0KFKPf7eTLgPgxVb4n11KDDYsshRuZK8eijtULFCWEf6WFp cJIjN1JWZ0jx4RPi2dB16rCmi33pGKCn1YRjpigKvkFYCnljd2rf3rhCAqm2rXmk H0MO0VDxvKP+szI7E90xLjcJRuCdogvhA/drOvF+yMZVVCK24vDBODJCrOtPSarp MMUxZf9HXqHDgTKPo9fwD3ZtawhhViQ97Sp6smY6EsHLnAQnfpkxXi+BpZuDBc1u TV5xlxjuoqVipgFyd5eO4fZRpAjvq6FAxg== -----END CERTIFICATE-----Generated at Thu Mar 26 17:46:03 2026 by rpki-client