$ rpki-client -vvf r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/AS16276.roa File: AS16276.roa (raw, json) Hash identifier: CCrIIT9oh8EXGnpt6jNLuYiYOg8qhcz2ZhCfTMx9OcY= Subject key identifier: D3:37:29:5E:22:52:61:18:C2:24:47:2A:E2:02:33:C5:4E:DD:73:E5 Certificate issuer: /CN=D34606949D385DB42714FE71274FAC9948EF279C Certificate serial: 1AA87F54AA3F1B7582B3DB5B9209E96B9790A370 Authority key identifier: D3:46:06:94:9D:38:5D:B4:27:14:FE:71:27:4F:AC:99:48:EF:27:9C Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/D34606949D385DB42714FE71274FAC9948EF279C.cer Subject info access: rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/AS16276.roa Signing time: Thu 19 Jun 2025 06:13:59 +0000 ROA not before: Thu 19 Jun 2025 06:08:59 +0000 ROA not after: Thu 18 Jun 2026 06:13:59 +0000 asID: 16276 IP address blocks: 86.38.156.0/24 maxlen: 24 89.117.87.0/24 maxlen: 24 Validation: OK Signature path: rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/D34606949D385DB42714FE71274FAC9948EF279C.crl rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/D34606949D385DB42714FE71274FAC9948EF279C.mft rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/D34606949D385DB42714FE71274FAC9948EF279C.cer rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/9DF85997B1B9B358E1C43F36765AA0A4A02144AE.crl rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/9DF85997B1B9B358E1C43F36765AA0A4A02144AE.mft rsync://rpki.ripe.net/repository/DEFAULT/nfhZl7G5s1jhxD82dlqgpKAhRK4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 30 Jun 2025 21:09:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1a:a8:7f:54:aa:3f:1b:75:82:b3:db:5b:92:09:e9:6b:97:90:a3:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D34606949D385DB42714FE71274FAC9948EF279C Validity Not Before: Jun 19 06:08:59 2025 GMT Not After : Jun 18 06:13:59 2026 GMT Subject: CN=D337295E22526118C224472AE20233C54EDD73E5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:d6:e7:0a:22:61:1a:5c:36:7b:b9:90:4c:b5: fd:9f:a3:93:20:35:e7:21:d3:1f:7e:9a:44:e3:a8: da:2b:06:76:9e:6a:d3:ac:40:80:ad:a2:8d:5b:70: e4:d9:cf:49:78:32:d0:da:b3:8c:1c:6c:00:b0:88: dc:aa:e1:49:a6:86:f7:8c:7b:98:17:1a:63:7a:d6: f0:47:ac:dc:9e:fe:da:3e:7e:d5:ca:42:b5:49:19: ff:3c:32:9e:43:a2:c5:79:68:ba:73:a1:95:46:80: 44:ac:ab:80:bd:ce:d2:ec:5a:32:d8:09:55:d6:59: d2:98:7d:c8:ac:23:28:56:7f:77:a3:51:7b:19:98: a4:12:62:ec:f3:69:0d:e7:70:51:a4:6f:26:1f:8e: a3:02:db:64:1b:96:c7:6b:f9:46:9f:e2:ec:41:b4: 5d:af:af:d4:5d:23:ab:be:8c:11:8d:4b:6f:6c:a0: a5:e4:0c:3b:22:2e:18:e2:cb:81:ce:b1:bb:f4:ae: 20:ae:10:7a:9e:d9:43:d7:1e:3d:b0:70:08:5d:62: 5d:c1:b6:dc:f0:16:6b:25:38:e3:43:c9:d1:8d:16: 16:92:c6:b4:0e:ce:51:09:e8:9f:0e:84:ef:89:1a: bb:62:b4:b7:25:26:4d:9d:f0:e1:99:d4:a7:58:1a: 66:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:37:29:5E:22:52:61:18:C2:24:47:2A:E2:02:33:C5:4E:DD:73:E5 X509v3 Authority Key Identifier: keyid:D3:46:06:94:9D:38:5D:B4:27:14:FE:71:27:4F:AC:99:48:EF:27:9C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/D34606949D385DB42714FE71274FAC9948EF279C.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/D34606949D385DB42714FE71274FAC9948EF279C.cer Subject Information Access: Signed Object - URI:rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/AS16276.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 86.38.156.0/24 89.117.87.0/24 Signature Algorithm: sha256WithRSAEncryption 2e:6f:57:8b:e8:2a:ef:7d:fc:5d:ec:4c:81:a8:66:55:a3:56: 42:28:af:da:e4:ed:54:06:ce:76:08:42:7a:a0:ad:96:62:1c: 05:4a:d6:d6:e6:44:21:f3:94:f1:41:28:8e:4d:77:0e:2e:09: ff:1d:43:7a:27:1e:f9:c0:ff:84:fd:9a:15:e2:9b:fa:b7:1d: 3c:3c:81:5a:06:ce:e9:43:67:65:0a:2a:f8:46:bd:d2:2f:d2: 75:fd:d6:e4:78:53:af:72:54:07:27:f8:dc:55:d2:36:30:53: 1b:d1:4e:c7:f7:86:8f:bc:0c:be:5a:ae:63:8a:77:23:25:13: 8b:ba:2a:ec:22:07:7e:5a:34:0f:50:9f:44:56:1a:92:29:81: cc:ea:52:76:3c:f7:85:a8:c8:73:2a:3f:96:02:02:58:13:a8: fd:4d:16:74:01:a8:e6:d0:c3:9c:de:ae:7b:c8:75:89:ad:5a: d4:4b:60:6d:05:08:07:fe:6a:b3:8b:5c:ee:68:aa:a4:56:d1: 66:30:05:2f:0d:f5:21:54:09:3e:a3:d9:62:19:df:7f:29:51: fc:1a:3c:8a:31:68:18:73:1d:c9:96:f6:b0:2f:1e:69:10:1c: 33:15:37:38:cf:90:af:ab:67:6f:17:1d:66:b1:a4:a6:3b:ea: 80:79:82:80 -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUGqh/VKo/G3WCs9tbkgnpa5eQo3AwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDM0NjA2OTQ5RDM4NURCNDI3MTRGRTcxMjc0RkFDOTk0 OEVGMjc5QzAeFw0yNTA2MTkwNjA4NTlaFw0yNjA2MTgwNjEzNTlaMDMxMTAvBgNV BAMTKEQzMzcyOTVFMjI1MjYxMThDMjI0NDcyQUUyMDIzM0M1NEVERDczRTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC01ucKImEaXDZ7uZBMtf2fo5Mg Nech0x9+mkTjqNorBnaeatOsQICtoo1bcOTZz0l4MtDas4wcbACwiNyq4UmmhveM e5gXGmN61vBHrNye/to+ftXKQrVJGf88Mp5DosV5aLpzoZVGgESsq4C9ztLsWjLY CVXWWdKYfcisIyhWf3ejUXsZmKQSYuzzaQ3ncFGkbyYfjqMC22Qblsdr+Uaf4uxB tF2vr9RdI6u+jBGNS29soKXkDDsiLhjiy4HOsbv0riCuEHqe2UPXHj2wcAhdYl3B ttzwFmslOONDydGNFhaSxrQOzlEJ6J8OhO+JGrtitLclJk2d8OGZ1KdYGmZXAgMB AAGjggI0MIICMDAdBgNVHQ4EFgQU0zcpXiJSYRjCJEcq4gIzxU7dc+UwHwYDVR0j BBgwFoAU00YGlJ04XbQnFP5xJ0+smUjvJ5wwDgYDVR0PAQH/BAQDAgeAMIGIBgNV HR8EgYAwfjB8oHqgeIZ2cnN5bmM6Ly9yLm1hZ2VsbGFuLmlweG8uY29tL3JlcG8v NTI4YTIxOGYtYWQyOC00MGQyLWJkN2YtMzUwZWFkYTNkNzA1LTAvMC9EMzQ2MDY5 NDlEMzg1REI0MjcxNEZFNzEyNzRGQUM5OTQ4RUYyNzlDLmNybDCBngYIKwYBBQUH AQEEgZEwgY4wgYsGCCsGAQUFBzAChn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5y aXBlLm5ldC9yZXBvc2l0b3J5LzAwMmUwYmEzLWZlNjAtNDViMS05MTYwLTg2OGEy ZjhhNDNiMS8zL0QzNDYwNjk0OUQzODVEQjQyNzE0RkU3MTI3NEZBQzk5NDhFRjI3 OUMuY2VyMHEGCCsGAQUFBwELBGUwYzBhBggrBgEFBQcwC4ZVcnN5bmM6Ly9yLm1h Z2VsbGFuLmlweG8uY29tL3JlcG8vNTI4YTIxOGYtYWQyOC00MGQyLWJkN2YtMzUw ZWFkYTNkNzA1LTAvMC9BUzE2Mjc2LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAViacAwQAWXVXMA0GCSqG SIb3DQEBCwUAA4IBAQAub1eL6Crvffxd7EyBqGZVo1ZCKK/a5O1UBs52CEJ6oK2W YhwFStbW5kQh85TxQSiOTXcOLgn/HUN6Jx75wP+E/ZoV4pv6tx08PIFaBs7pQ2dl Cir4Rr3SL9J1/dbkeFOvclQHJ/jcVdI2MFMb0U7H94aPvAy+Wq5jincjJROLuirs Igd+WjQPUJ9EVhqSKYHM6lJ2PPeFqMhzKj+WAgJYE6j9TRZ0Aajm0MOc3q57yHWJ rVrUS2BtBQgH/mqzi1zuaKqkVtFmMAUvDfUhVAk+o9liGd9/KVH8GjyKMWgYcx3J lvawLx5pEBwzFTc4z5Cvq2dvFx1msaSmO+qAeYKA -----END CERTIFICATE-----Generated at Mon Jun 30 15:14:29 2025 by rpki-client