$ rpki-client -vvf r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/AS14618.roa File: AS14618.roa (raw, json) Hash identifier: SnedDoMFZhQpZiDMXD2nOVGeKA9bH57W63OIk8ahBOk= Subject key identifier: B1:51:5D:A5:86:10:68:3D:E2:6F:B2:E4:6B:6E:DD:BE:F7:11:32:00 Certificate issuer: /CN=D34606949D385DB42714FE71274FAC9948EF279C Certificate serial: 35EAD05FAC4CAED0386F863439B86EB9B669AF91 Authority key identifier: D3:46:06:94:9D:38:5D:B4:27:14:FE:71:27:4F:AC:99:48:EF:27:9C Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/D34606949D385DB42714FE71274FAC9948EF279C.cer Subject info access: rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/AS14618.roa Signing time: Wed 13 Aug 2025 15:46:45 +0000 ROA not before: Wed 13 Aug 2025 15:41:45 +0000 ROA not after: Wed 12 Aug 2026 15:46:45 +0000 asID: 14618 IP address blocks: 86.38.232.0/24 maxlen: 24 89.117.15.0/24 maxlen: 24 89.117.28.0/24 maxlen: 24 89.117.81.0/24 maxlen: 24 89.117.153.0/24 maxlen: 24 Validation: OK Signature path: rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/D34606949D385DB42714FE71274FAC9948EF279C.crl rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/D34606949D385DB42714FE71274FAC9948EF279C.mft rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/D34606949D385DB42714FE71274FAC9948EF279C.cer rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/9DF85997B1B9B358E1C43F36765AA0A4A02144AE.crl rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/9DF85997B1B9B358E1C43F36765AA0A4A02144AE.mft rsync://rpki.ripe.net/repository/DEFAULT/nfhZl7G5s1jhxD82dlqgpKAhRK4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 23 Aug 2025 15:02:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 35:ea:d0:5f:ac:4c:ae:d0:38:6f:86:34:39:b8:6e:b9:b6:69:af:91 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D34606949D385DB42714FE71274FAC9948EF279C Validity Not Before: Aug 13 15:41:45 2025 GMT Not After : Aug 12 15:46:45 2026 GMT Subject: CN=B1515DA58610683DE26FB2E46B6EDDBEF7113200 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:fd:63:6f:53:82:3a:e8:24:69:fc:16:15:6f: dc:fb:d4:d4:83:5a:3f:89:43:9d:ad:05:65:98:8b: 31:9c:de:12:25:d1:38:2f:b6:33:65:6c:fb:c9:43: ee:ac:37:e0:89:3f:62:ff:db:32:42:ed:4a:0d:9c: 05:21:a0:04:e5:81:08:95:7b:32:b2:91:ce:73:2f: 3d:f7:f0:ea:4c:06:1b:d3:5c:83:22:cf:6a:c1:78: 32:fe:68:7e:a9:e5:d0:18:02:6e:b4:bb:16:98:72: 99:9d:99:f4:da:cd:70:6b:43:15:f6:91:36:be:24: 2b:cb:34:4a:15:7b:07:8e:fc:32:1f:ba:cc:15:ef: 7d:28:10:55:33:9d:17:15:89:34:20:84:54:00:29: 22:8c:f0:45:1d:fa:51:63:2d:29:71:fe:5f:d6:83: 6e:fa:04:08:37:b2:8b:fb:15:c3:e6:93:8a:37:1b: 52:bf:27:c6:8e:40:a5:4b:f1:8f:d5:27:86:d7:1a: 5b:4d:fc:ab:09:1c:d2:a0:0b:9d:89:df:1e:df:bb: e6:17:82:47:b6:58:bf:5b:f1:d6:1d:89:36:62:1b: 5c:1a:03:4e:32:20:ea:f2:7a:7a:42:1f:a0:58:3b: 4e:69:22:17:30:6e:f0:75:00:7e:9f:74:58:b8:76: d5:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:51:5D:A5:86:10:68:3D:E2:6F:B2:E4:6B:6E:DD:BE:F7:11:32:00 X509v3 Authority Key Identifier: keyid:D3:46:06:94:9D:38:5D:B4:27:14:FE:71:27:4F:AC:99:48:EF:27:9C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/D34606949D385DB42714FE71274FAC9948EF279C.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/D34606949D385DB42714FE71274FAC9948EF279C.cer Subject Information Access: Signed Object - URI:rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/AS14618.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 86.38.232.0/24 89.117.15.0/24 89.117.28.0/24 89.117.81.0/24 89.117.153.0/24 Signature Algorithm: sha256WithRSAEncryption 6e:e2:bd:a0:74:9e:f1:18:2f:39:70:91:d9:cb:29:c9:79:d4: 7e:e0:ef:7d:f6:4b:63:7a:bc:c0:aa:33:99:00:98:78:b6:92: 0a:f7:50:16:f0:ff:ac:0d:ae:73:a6:b8:48:22:f5:d0:d6:7f: 84:6f:a0:70:98:1d:20:d1:06:a3:2d:39:e9:a3:f6:03:f7:7f: e7:58:43:c6:c7:58:85:10:c8:b5:3d:ee:ad:41:e3:0e:69:78: 33:03:4f:d6:0c:d6:f0:e7:1a:65:16:d9:7f:b3:3e:9a:15:ef: 87:58:07:2d:85:80:c5:c4:08:f1:07:28:5d:6d:25:a4:bb:bb: c1:fa:70:0b:58:49:35:5f:27:18:6d:26:81:c8:24:c0:d6:e9: 5f:81:18:db:e0:e7:e6:88:b3:26:99:e1:ec:2a:16:12:b5:ee: f2:a5:bd:c4:e8:c7:e6:ce:82:b2:eb:b7:c5:08:69:8b:5a:f2: 77:2b:b2:cb:af:dd:5d:b0:0e:67:08:49:88:ff:99:d7:ca:df: 1c:0e:ef:87:8d:c8:9d:76:ae:27:61:d2:32:1c:12:50:8c:a8: df:92:48:45:02:e9:df:85:68:36:d7:3b:0c:0e:06:09:60:db: d6:8b:db:c1:13:d7:14:d0:27:57:da:96:ad:da:2c:f1:09:cd: 8a:1c:5d:85 -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgIUNerQX6xMrtA4b4Y0ObhuubZpr5EwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDM0NjA2OTQ5RDM4NURCNDI3MTRGRTcxMjc0RkFDOTk0 OEVGMjc5QzAeFw0yNTA4MTMxNTQxNDVaFw0yNjA4MTIxNTQ2NDVaMDMxMTAvBgNV BAMTKEIxNTE1REE1ODYxMDY4M0RFMjZGQjJFNDZCNkVEREJFRjcxMTMyMDAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDT/WNvU4I66CRp/BYVb9z71NSD Wj+JQ52tBWWYizGc3hIl0TgvtjNlbPvJQ+6sN+CJP2L/2zJC7UoNnAUhoATlgQiV ezKykc5zLz338OpMBhvTXIMiz2rBeDL+aH6p5dAYAm60uxaYcpmdmfTazXBrQxX2 kTa+JCvLNEoVeweO/DIfuswV730oEFUznRcViTQghFQAKSKM8EUd+lFjLSlx/l/W g276BAg3sov7FcPmk4o3G1K/J8aOQKVL8Y/VJ4bXGltN/KsJHNKgC52J3x7fu+YX gke2WL9b8dYdiTZiG1waA04yIOryenpCH6BYO05pIhcwbvB1AH6fdFi4dtVrAgMB AAGjggJGMIICQjAdBgNVHQ4EFgQUsVFdpYYQaD3ib7Lka27dvvcRMgAwHwYDVR0j BBgwFoAU00YGlJ04XbQnFP5xJ0+smUjvJ5wwDgYDVR0PAQH/BAQDAgeAMIGIBgNV HR8EgYAwfjB8oHqgeIZ2cnN5bmM6Ly9yLm1hZ2VsbGFuLmlweG8uY29tL3JlcG8v NTI4YTIxOGYtYWQyOC00MGQyLWJkN2YtMzUwZWFkYTNkNzA1LTAvMC9EMzQ2MDY5 NDlEMzg1REI0MjcxNEZFNzEyNzRGQUM5OTQ4RUYyNzlDLmNybDCBngYIKwYBBQUH AQEEgZEwgY4wgYsGCCsGAQUFBzAChn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5y aXBlLm5ldC9yZXBvc2l0b3J5LzAwMmUwYmEzLWZlNjAtNDViMS05MTYwLTg2OGEy ZjhhNDNiMS8zL0QzNDYwNjk0OUQzODVEQjQyNzE0RkU3MTI3NEZBQzk5NDhFRjI3 OUMuY2VyMHEGCCsGAQUFBwELBGUwYzBhBggrBgEFBQcwC4ZVcnN5bmM6Ly9yLm1h Z2VsbGFuLmlweG8uY29tL3JlcG8vNTI4YTIxOGYtYWQyOC00MGQyLWJkN2YtMzUw ZWFkYTNkNzA1LTAvMC9BUzE0NjE4LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMDcGCCsGAQUFBwEHAQH/BCgwJjAkBAIAATAeAwQAViboAwQAWXUPAwQAWXUc AwQAWXVRAwQAWXWZMA0GCSqGSIb3DQEBCwUAA4IBAQBu4r2gdJ7xGC85cJHZyynJ edR+4O999ktjerzAqjOZAJh4tpIK91AW8P+sDa5zprhIIvXQ1n+Eb6BwmB0g0Qaj LTnpo/YD93/nWEPGx1iFEMi1Pe6tQeMOaXgzA0/WDNbw5xplFtl/sz6aFe+HWAct hYDFxAjxByhdbSWku7vB+nALWEk1XycYbSaByCTA1ulfgRjb4OfmiLMmmeHsKhYS te7ypb3E6MfmzoKy67fFCGmLWvJ3K7LLr91dsA5nCEmI/5nXyt8cDu+Hjciddq4n YdIyHBJQjKjfkkhFAunfhWg21zsMDgYJYNvWi9vBE9cU0CdX2pat2izxCc2KHF2F -----END CERTIFICATE-----Generated at Sat Aug 23 06:56:19 2025 by rpki-client