$ rpki-client -vvvf r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/AS137409.roa File: AS137409.roa (raw, json) Hash identifier: UVcAiO4IYF5Dvwfrp/Q/qVUjNNaxGc6lyQOi5YmD444= Subject key identifier: C9:63:1D:69:8B:53:9D:39:57:12:5E:99:D8:56:6B:92:50:98:62:C8 Certificate issuer: /CN=D34606949D385DB42714FE71274FAC9948EF279C Certificate serial: 564CABB05ADFA26238B097CDEAFE46F106EEC50D Authority key identifier: D3:46:06:94:9D:38:5D:B4:27:14:FE:71:27:4F:AC:99:48:EF:27:9C Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/D34606949D385DB42714FE71274FAC9948EF279C.cer Subject info access: rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/AS137409.roa Signing time: Thu 12 Nov 2026 07:40:28 +0000 ROA not before: Thu 12 Nov 2026 07:35:28 +0000 ROA not after: Thu 11 Nov 2027 07:40:28 +0000 asID: 137409 IP address blocks: 89.116.182.0/24 maxlen: 24 Validation: OK Signature path: rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/D34606949D385DB42714FE71274FAC9948EF279C.crl rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/D34606949D385DB42714FE71274FAC9948EF279C.mft rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/D34606949D385DB42714FE71274FAC9948EF279C.cer rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/9DF85997B1B9B358E1C43F36765AA0A4A02144AE.crl rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/9DF85997B1B9B358E1C43F36765AA0A4A02144AE.mft rsync://rpki.ripe.net/repository/DEFAULT/nfhZl7G5s1jhxD82dlqgpKAhRK4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 15 Nov 2026 12:00:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 56:4c:ab:b0:5a:df:a2:62:38:b0:97:cd:ea:fe:46:f1:06:ee:c5:0d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D34606949D385DB42714FE71274FAC9948EF279C Validity Not Before: Nov 12 07:35:28 2026 GMT Not After : Nov 11 07:40:28 2027 GMT Subject: CN=C9631D698B539D3957125E99D8566B92509862C8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:8c:97:5b:50:9a:f1:ea:d5:f2:7b:be:43:6e: 4d:74:8e:7d:3d:59:b1:c2:dd:bc:53:c3:01:0a:70: 48:24:ff:1c:66:ca:37:16:8e:d4:b4:4b:36:94:da: 1b:73:99:7c:45:6b:ce:6a:06:86:cf:67:50:dc:7d: 87:52:53:bb:a4:a8:54:91:99:5a:b2:ee:30:5a:bc: 28:90:71:51:dd:79:14:1f:30:4c:34:21:04:48:a4: f4:1a:e1:bd:e2:a0:c5:ec:0e:1b:9b:39:56:37:38: 2f:0d:57:81:97:fb:74:70:c5:b4:bd:a6:7a:20:c9: 21:f5:76:5b:53:89:f2:34:e4:eb:6a:49:3e:9f:e3: c7:39:78:4c:79:c0:94:c1:da:70:14:3e:74:c7:d5: b0:c6:dd:3a:52:63:2a:61:90:41:73:69:26:7e:b9: e1:1c:72:55:01:74:c5:41:47:d4:ff:83:74:84:db: df:28:53:fc:4b:e6:6a:34:61:85:4b:00:63:04:be: a9:41:dd:9d:8b:9d:67:9c:41:0e:f7:92:f7:ea:05: 14:a1:1e:fc:72:b3:af:0f:ef:71:86:87:83:38:a4: d6:33:c3:2d:ca:3c:1f:3d:e4:01:e5:05:22:b5:c1: a1:d4:46:83:02:fb:5a:dd:08:0c:ff:8b:8b:7a:25: 41:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:63:1D:69:8B:53:9D:39:57:12:5E:99:D8:56:6B:92:50:98:62:C8 X509v3 Authority Key Identifier: keyid:D3:46:06:94:9D:38:5D:B4:27:14:FE:71:27:4F:AC:99:48:EF:27:9C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/D34606949D385DB42714FE71274FAC9948EF279C.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/D34606949D385DB42714FE71274FAC9948EF279C.cer Subject Information Access: Signed Object - URI:rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/AS137409.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 89.116.182.0/24 Signature Algorithm: sha256WithRSAEncryption 28:a5:13:01:19:e0:36:7a:1a:c8:48:ce:82:b0:6f:23:d3:c1: 2f:e5:e1:59:36:10:1b:6e:b2:1a:22:83:1b:b2:a0:cf:fd:53: 2b:4d:09:c0:f6:6a:75:ab:a8:3a:a8:1d:42:f1:e3:3d:27:31: 2e:ad:df:be:77:58:73:2d:3a:c3:52:33:76:48:7f:9c:e3:71: f6:7b:60:f5:35:cf:ff:5f:68:bf:b9:20:25:98:dc:24:89:77: be:46:db:0e:94:eb:54:7e:f6:98:5a:0f:33:27:7d:6d:1f:a3: 0a:4b:78:26:be:b3:5b:a1:7d:32:95:08:3b:a6:09:2e:b7:4b: ee:b8:54:96:5a:9c:c3:5b:a5:d6:82:96:90:23:5a:8f:0a:e2: ee:5e:44:86:2c:ad:7d:66:e5:45:4f:0f:6a:e2:7d:e4:c2:9d: fd:dc:20:57:4b:2f:00:6a:cc:83:64:5f:b7:f5:b3:33:da:0a: d0:e2:02:af:eb:05:28:6c:3a:39:e0:76:2a:0e:5e:a4:f4:52: ff:30:2c:23:6c:48:e1:e2:c4:f1:a9:c7:14:9d:88:4d:6a:61: fd:36:7f:75:87:11:d6:c8:9f:73:b2:a5:f8:de:ba:b9:78:b7: 5e:11:8a:b0:b0:7a:54:91:b7:c2:dc:e2:16:9f:65:e6:cc:66: 6b:76:cc:0b -----BEGIN CERTIFICATE----- MIIFJTCCBA2gAwIBAgIUVkyrsFrfomI4sJfN6v5G8QbuxQ0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDM0NjA2OTQ5RDM4NURCNDI3MTRGRTcxMjc0RkFDOTk0 OEVGMjc5QzAeFw0yNjExMTIwNzM1MjhaFw0yNzExMTEwNzQwMjhaMDMxMTAvBgNV BAMTKEM5NjMxRDY5OEI1MzlEMzk1NzEyNUU5OUQ4NTY2QjkyNTA5ODYyQzgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6jJdbUJrx6tXye75Dbk10jn09 WbHC3bxTwwEKcEgk/xxmyjcWjtS0SzaU2htzmXxFa85qBobPZ1DcfYdSU7ukqFSR mVqy7jBavCiQcVHdeRQfMEw0IQRIpPQa4b3ioMXsDhubOVY3OC8NV4GX+3RwxbS9 pnogySH1dltTifI05OtqST6f48c5eEx5wJTB2nAUPnTH1bDG3TpSYyphkEFzaSZ+ ueEcclUBdMVBR9T/g3SE298oU/xL5mo0YYVLAGMEvqlB3Z2LnWecQQ73kvfqBRSh Hvxys68P73GGh4M4pNYzwy3KPB895AHlBSK1waHURoMC+1rdCAz/i4t6JUEPAgMB AAGjggIvMIICKzAdBgNVHQ4EFgQUyWMdaYtTnTlXEl6Z2FZrklCYYsgwHwYDVR0j BBgwFoAU00YGlJ04XbQnFP5xJ0+smUjvJ5wwDgYDVR0PAQH/BAQDAgeAMIGIBgNV HR8EgYAwfjB8oHqgeIZ2cnN5bmM6Ly9yLm1hZ2VsbGFuLmlweG8uY29tL3JlcG8v NTI4YTIxOGYtYWQyOC00MGQyLWJkN2YtMzUwZWFkYTNkNzA1LTAvMC9EMzQ2MDY5 NDlEMzg1REI0MjcxNEZFNzEyNzRGQUM5OTQ4RUYyNzlDLmNybDCBngYIKwYBBQUH AQEEgZEwgY4wgYsGCCsGAQUFBzAChn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5y aXBlLm5ldC9yZXBvc2l0b3J5LzAwMmUwYmEzLWZlNjAtNDViMS05MTYwLTg2OGEy ZjhhNDNiMS8zL0QzNDYwNjk0OUQzODVEQjQyNzE0RkU3MTI3NEZBQzk5NDhFRjI3 OUMuY2VyMHIGCCsGAQUFBwELBGYwZDBiBggrBgEFBQcwC4ZWcnN5bmM6Ly9yLm1h Z2VsbGFuLmlweG8uY29tL3JlcG8vNTI4YTIxOGYtYWQyOC00MGQyLWJkN2YtMzUw ZWFkYTNkNzA1LTAvMC9BUzEzNzQwOS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEF BQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAFl0tjANBgkqhkiG9w0B AQsFAAOCAQEAKKUTARngNnoayEjOgrBvI9PBL+XhWTYQG26yGiKDG7Kgz/1TK00J wPZqdauoOqgdQvHjPScxLq3fvndYcy06w1Izdkh/nONx9ntg9TXP/19ov7kgJZjc JIl3vkbbDpTrVH72mFoPMyd9bR+jCkt4Jr6zW6F9MpUIO6YJLrdL7rhUllqcw1ul 1oKWkCNajwri7l5EhiytfWblRU8PauJ95MKd/dwgV0svAGrMg2Rft/WzM9oK0OIC r+sFKGw6OeB2Kg5epPRS/zAsI2xI4eLE8anHFJ2ITWph/TZ/dYcR1sifc7Kl+N66 uXi3XhGKsLB6VJG3wtziFp9l5sxma3bMCw== -----END CERTIFICATE-----Generated at Sat Nov 14 21:04:45 2026 by rpki-client