$ rpki-client -vvf r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/AS142561.roa File: AS142561.roa (raw, json) Hash identifier: Z4BFu/0K7b4AvPpPlSa1sWqx7lUmxEgW0J+EvPvcLbA= Subject key identifier: 03:5B:38:84:29:60:AF:6A:DA:95:20:4B:C8:81:4C:7C:63:49:34:7A Certificate issuer: /CN=D34606949D385DB42714FE71274FAC9948EF279C Certificate serial: 4E2D18DE776BE3D9D7C7005E1F5949176671C7E4 Authority key identifier: D3:46:06:94:9D:38:5D:B4:27:14:FE:71:27:4F:AC:99:48:EF:27:9C Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/D34606949D385DB42714FE71274FAC9948EF279C.cer Subject info access: rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/AS142561.roa Signing time: Thu 14 Aug 2025 08:54:13 +0000 ROA not before: Thu 14 Aug 2025 08:49:13 +0000 ROA not after: Thu 13 Aug 2026 08:54:13 +0000 asID: 142561 IP address blocks: 89.116.221.0/24 maxlen: 24 Validation: OK Signature path: rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/D34606949D385DB42714FE71274FAC9948EF279C.crl rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/D34606949D385DB42714FE71274FAC9948EF279C.mft rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/D34606949D385DB42714FE71274FAC9948EF279C.cer rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/9DF85997B1B9B358E1C43F36765AA0A4A02144AE.crl rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/9DF85997B1B9B358E1C43F36765AA0A4A02144AE.mft rsync://rpki.ripe.net/repository/DEFAULT/nfhZl7G5s1jhxD82dlqgpKAhRK4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 24 Aug 2025 09:09:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4e:2d:18:de:77:6b:e3:d9:d7:c7:00:5e:1f:59:49:17:66:71:c7:e4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D34606949D385DB42714FE71274FAC9948EF279C Validity Not Before: Aug 14 08:49:13 2025 GMT Not After : Aug 13 08:54:13 2026 GMT Subject: CN=035B38842960AF6ADA95204BC8814C7C6349347A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:94:79:5d:7c:16:c3:24:a9:3e:99:f4:49:56: 35:c0:6c:44:2f:61:b5:40:36:16:3a:28:b6:12:e7: 6a:bb:bd:8e:03:db:b5:e3:60:78:3c:34:b6:67:c7: a7:c6:37:99:76:2f:6f:e0:1c:fb:10:df:76:a4:f0: 16:bc:aa:35:46:ad:65:13:de:6c:15:52:c1:78:d7: 6b:b3:8a:de:16:d7:19:9c:25:d3:26:67:36:0f:26: 21:55:ef:74:97:ce:65:a8:ee:c0:88:62:d8:c2:a6: b2:d7:73:54:46:e8:5f:79:a7:58:53:e1:da:e0:5c: d4:16:ff:2b:d7:14:f5:d3:b1:a2:53:43:27:63:ed: 23:9f:a4:49:56:1b:ae:85:cc:11:d2:50:0e:ef:e5: 75:f2:34:95:53:42:b3:88:81:3f:3f:6a:d5:07:16: 81:82:7a:42:6b:9d:3f:c9:3f:98:c9:41:dd:31:56: 82:fa:12:53:89:5d:0f:58:3c:2d:ee:b0:0b:32:47: de:e4:11:56:f0:b2:ed:0a:7d:e5:87:23:8d:64:75: 93:ff:42:f0:2d:49:30:8f:06:ef:11:ee:68:c3:7a: 1e:51:76:c0:29:50:5b:47:0e:cc:f9:b7:24:dd:16: d0:fb:9d:75:e3:f7:ec:dd:5c:ef:57:9e:4b:49:68: b7:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:5B:38:84:29:60:AF:6A:DA:95:20:4B:C8:81:4C:7C:63:49:34:7A X509v3 Authority Key Identifier: keyid:D3:46:06:94:9D:38:5D:B4:27:14:FE:71:27:4F:AC:99:48:EF:27:9C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/D34606949D385DB42714FE71274FAC9948EF279C.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/D34606949D385DB42714FE71274FAC9948EF279C.cer Subject Information Access: Signed Object - URI:rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/AS142561.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 89.116.221.0/24 Signature Algorithm: sha256WithRSAEncryption 21:72:03:b1:1c:4f:e9:86:29:df:aa:8b:a5:2d:62:fe:b1:6b: 21:bc:7a:41:22:a0:06:31:df:51:30:c8:34:75:e6:af:c3:24: 9f:db:4e:f3:c3:72:e9:85:3b:ad:16:c2:11:1b:55:d1:41:3b: 07:bb:9a:7b:cf:eb:9e:0b:b3:13:9e:85:1f:d9:f9:d3:70:67: 28:8d:f5:9f:41:bd:83:e5:d9:cf:13:3c:c8:a4:93:2d:bd:3a: ab:6b:4a:94:61:b8:75:02:ad:71:94:ff:f0:fa:9b:73:af:81: 16:e0:94:1f:c6:cc:f9:ac:e8:32:34:ff:4f:bb:4e:00:1d:7b: 54:5f:04:bc:d1:91:9a:80:f5:f5:13:bf:d7:62:18:19:f7:39: b2:27:d5:98:be:7b:90:5b:b3:a9:89:29:e0:93:a4:97:33:f8: 82:4c:b1:eb:6a:b6:fa:6f:37:82:84:62:c2:f4:0a:14:bd:8a: c0:b7:2a:52:4f:e3:11:64:34:8d:f0:36:30:90:bd:71:81:6a: 39:ff:41:0d:68:cf:2f:35:bc:0c:76:45:b1:b9:32:57:00:40: 12:b2:39:91:01:3f:87:72:a0:06:b4:91:e2:53:b6:fb:ae:f6: 49:15:a3:9f:1b:2c:90:f1:7b:d6:dd:90:1b:04:d7:1c:9a:74: f1:e1:b7:d1 -----BEGIN CERTIFICATE----- MIIFJTCCBA2gAwIBAgIUTi0Y3ndr49nXxwBeH1lJF2Zxx+QwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDM0NjA2OTQ5RDM4NURCNDI3MTRGRTcxMjc0RkFDOTk0 OEVGMjc5QzAeFw0yNTA4MTQwODQ5MTNaFw0yNjA4MTMwODU0MTNaMDMxMTAvBgNV BAMTKDAzNUIzODg0Mjk2MEFGNkFEQTk1MjA0QkM4ODE0QzdDNjM0OTM0N0EwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDQlHldfBbDJKk+mfRJVjXAbEQv YbVANhY6KLYS52q7vY4D27XjYHg8NLZnx6fGN5l2L2/gHPsQ33ak8Ba8qjVGrWUT 3mwVUsF412uzit4W1xmcJdMmZzYPJiFV73SXzmWo7sCIYtjCprLXc1RG6F95p1hT 4drgXNQW/yvXFPXTsaJTQydj7SOfpElWG66FzBHSUA7v5XXyNJVTQrOIgT8/atUH FoGCekJrnT/JP5jJQd0xVoL6ElOJXQ9YPC3usAsyR97kEVbwsu0KfeWHI41kdZP/ QvAtSTCPBu8R7mjDeh5RdsApUFtHDsz5tyTdFtD7nXXj9+zdXO9XnktJaLeDAgMB AAGjggIvMIICKzAdBgNVHQ4EFgQUA1s4hClgr2ralSBLyIFMfGNJNHowHwYDVR0j BBgwFoAU00YGlJ04XbQnFP5xJ0+smUjvJ5wwDgYDVR0PAQH/BAQDAgeAMIGIBgNV HR8EgYAwfjB8oHqgeIZ2cnN5bmM6Ly9yLm1hZ2VsbGFuLmlweG8uY29tL3JlcG8v NTI4YTIxOGYtYWQyOC00MGQyLWJkN2YtMzUwZWFkYTNkNzA1LTAvMC9EMzQ2MDY5 NDlEMzg1REI0MjcxNEZFNzEyNzRGQUM5OTQ4RUYyNzlDLmNybDCBngYIKwYBBQUH AQEEgZEwgY4wgYsGCCsGAQUFBzAChn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5y aXBlLm5ldC9yZXBvc2l0b3J5LzAwMmUwYmEzLWZlNjAtNDViMS05MTYwLTg2OGEy ZjhhNDNiMS8zL0QzNDYwNjk0OUQzODVEQjQyNzE0RkU3MTI3NEZBQzk5NDhFRjI3 OUMuY2VyMHIGCCsGAQUFBwELBGYwZDBiBggrBgEFBQcwC4ZWcnN5bmM6Ly9yLm1h Z2VsbGFuLmlweG8uY29tL3JlcG8vNTI4YTIxOGYtYWQyOC00MGQyLWJkN2YtMzUw ZWFkYTNkNzA1LTAvMC9BUzE0MjU2MS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEF BQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAFl03TANBgkqhkiG9w0B AQsFAAOCAQEAIXIDsRxP6YYp36qLpS1i/rFrIbx6QSKgBjHfUTDINHXmr8Mkn9tO 88Ny6YU7rRbCERtV0UE7B7uae8/rnguzE56FH9n503BnKI31n0G9g+XZzxM8yKST Lb06q2tKlGG4dQKtcZT/8Pqbc6+BFuCUH8bM+azoMjT/T7tOAB17VF8EvNGRmoD1 9RO/12IYGfc5sifVmL57kFuzqYkp4JOklzP4gkyx62q2+m83goRiwvQKFL2KwLcq Uk/jEWQ0jfA2MJC9cYFqOf9BDWjPLzW8DHZFsbkyVwBAErI5kQE/h3KgBrSR4lO2 +672SRWjnxsskPF71t2QGwTXHJp08eG30Q== -----END CERTIFICATE-----Generated at Sun Aug 24 00:33:38 2025 by rpki-client