$ rpki-client -vvf r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/AS16509.roa File: AS16509.roa (raw, json) Hash identifier: NAmjSxckObhwYaRDxYxeCKqoTze+XS6HX34sjrTm9+Y= Subject key identifier: B8:E2:5F:E9:5E:7E:37:29:11:42:B7:FC:B8:57:D9:46:C2:1B:A2:61 Certificate issuer: /CN=D34606949D385DB42714FE71274FAC9948EF279C Certificate serial: 30A22FA33F90AAD85F01859F31D5DEC6E854CC3F Authority key identifier: D3:46:06:94:9D:38:5D:B4:27:14:FE:71:27:4F:AC:99:48:EF:27:9C Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/D34606949D385DB42714FE71274FAC9948EF279C.cer Subject info access: rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/AS16509.roa Signing time: Wed 13 Aug 2025 15:33:51 +0000 ROA not before: Wed 13 Aug 2025 15:28:51 +0000 ROA not after: Wed 12 Aug 2026 15:33:51 +0000 asID: 16509 IP address blocks: 86.38.232.0/24 maxlen: 24 89.117.15.0/24 maxlen: 24 89.117.28.0/24 maxlen: 24 89.117.81.0/24 maxlen: 24 89.117.153.0/24 maxlen: 24 Validation: OK Signature path: rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/D34606949D385DB42714FE71274FAC9948EF279C.crl rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/D34606949D385DB42714FE71274FAC9948EF279C.mft rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/D34606949D385DB42714FE71274FAC9948EF279C.cer rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/9DF85997B1B9B358E1C43F36765AA0A4A02144AE.crl rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/9DF85997B1B9B358E1C43F36765AA0A4A02144AE.mft rsync://rpki.ripe.net/repository/DEFAULT/nfhZl7G5s1jhxD82dlqgpKAhRK4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 23 Aug 2025 15:02:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 30:a2:2f:a3:3f:90:aa:d8:5f:01:85:9f:31:d5:de:c6:e8:54:cc:3f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D34606949D385DB42714FE71274FAC9948EF279C Validity Not Before: Aug 13 15:28:51 2025 GMT Not After : Aug 12 15:33:51 2026 GMT Subject: CN=B8E25FE95E7E37291142B7FCB857D946C21BA261 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:ae:b6:14:c6:4c:27:62:5b:9d:1a:fd:22:4e: 6f:2c:27:23:0e:b3:89:a9:4c:8d:f3:e2:8d:5d:f6: 26:65:30:66:d7:b6:20:95:2c:0f:d2:c4:8c:89:ea: 8d:23:60:9f:01:2c:cf:e3:8c:0d:74:ad:36:5d:6c: 9f:c3:a8:02:eb:c1:6f:4c:f4:65:2b:3c:b4:27:99: 4a:77:b9:39:05:a8:9b:f3:87:aa:50:51:29:a7:de: ac:a6:6e:be:83:12:13:f8:74:24:65:98:3e:13:8c: 53:42:87:c6:56:57:1e:22:a9:b3:51:3f:45:3c:25: c4:4b:ba:e4:e8:03:23:90:36:7f:e5:17:ed:58:91: d8:20:5f:e6:8a:a4:f2:5e:62:89:ea:67:f3:df:27: d8:9f:e5:05:85:b0:80:23:c5:ca:0a:87:01:ba:fa: c9:d0:6e:27:01:1f:fc:1f:01:14:fc:fe:49:64:b1: 2b:47:0e:ff:24:6e:07:aa:af:38:51:63:fa:46:ba: 4a:a9:9d:b4:96:75:df:e9:25:b7:9a:5b:a8:4f:b8: 86:93:9d:ec:19:9c:22:94:23:84:ac:14:14:68:c1: f4:a3:13:60:d2:b2:67:63:ef:5b:0b:f9:ad:91:87: 63:8f:13:b0:cd:a5:b7:fc:83:df:6b:ba:c8:1c:7a: 94:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:E2:5F:E9:5E:7E:37:29:11:42:B7:FC:B8:57:D9:46:C2:1B:A2:61 X509v3 Authority Key Identifier: keyid:D3:46:06:94:9D:38:5D:B4:27:14:FE:71:27:4F:AC:99:48:EF:27:9C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/D34606949D385DB42714FE71274FAC9948EF279C.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/D34606949D385DB42714FE71274FAC9948EF279C.cer Subject Information Access: Signed Object - URI:rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/AS16509.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 86.38.232.0/24 89.117.15.0/24 89.117.28.0/24 89.117.81.0/24 89.117.153.0/24 Signature Algorithm: sha256WithRSAEncryption 3f:43:c0:d8:55:a6:17:4b:8b:f7:68:5f:0d:04:30:f9:a4:30: 3d:4d:c2:7f:92:5e:f7:18:34:bc:a9:c0:c2:55:bb:93:b0:1d: 9e:c7:4a:ff:6d:cf:ec:85:48:ef:50:50:6c:dc:7d:06:34:6f: 39:b1:81:b5:ee:1a:c5:96:d3:30:5a:33:c7:e4:51:15:5c:91: 1a:24:a7:5b:44:9c:fe:9b:4e:a7:6d:70:fe:dd:9c:33:1e:91: 63:04:e9:11:51:1e:73:ba:c5:0b:c8:b5:b5:c9:66:c6:c0:37: 4b:e6:93:a3:82:94:84:48:90:e8:e1:bb:6b:df:7b:3a:ee:86: 85:9d:13:a0:32:ba:33:0e:15:94:d5:90:c9:5d:ad:08:9a:f0: 8a:c3:d6:58:f8:d3:1b:b4:8e:a1:86:9d:e9:8e:00:de:ec:df: 09:2a:7c:e3:d5:4f:76:19:d7:f0:22:c0:86:35:6b:34:ca:c4: e7:b9:50:ed:ae:34:f8:f4:67:22:45:39:05:9b:7a:88:4d:6f: 7a:7f:48:09:19:9f:29:db:aa:ee:f1:fa:cc:14:0a:a8:19:f7: 7c:e4:b8:bc:97:a4:27:0b:35:70:ca:99:a7:2b:5d:cc:85:aa: f5:1e:dc:8f:dc:f8:48:bb:59:f8:c2:7d:5f:25:f6:7e:3c:db: 5c:b9:74:a1 -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgIUMKIvoz+QqthfAYWfMdXexuhUzD8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDM0NjA2OTQ5RDM4NURCNDI3MTRGRTcxMjc0RkFDOTk0 OEVGMjc5QzAeFw0yNTA4MTMxNTI4NTFaFw0yNjA4MTIxNTMzNTFaMDMxMTAvBgNV BAMTKEI4RTI1RkU5NUU3RTM3MjkxMTQyQjdGQ0I4NTdEOTQ2QzIxQkEyNjEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCrrrYUxkwnYludGv0iTm8sJyMO s4mpTI3z4o1d9iZlMGbXtiCVLA/SxIyJ6o0jYJ8BLM/jjA10rTZdbJ/DqALrwW9M 9GUrPLQnmUp3uTkFqJvzh6pQUSmn3qymbr6DEhP4dCRlmD4TjFNCh8ZWVx4iqbNR P0U8JcRLuuToAyOQNn/lF+1YkdggX+aKpPJeYonqZ/PfJ9if5QWFsIAjxcoKhwG6 +snQbicBH/wfART8/klksStHDv8kbgeqrzhRY/pGukqpnbSWdd/pJbeaW6hPuIaT newZnCKUI4SsFBRowfSjE2DSsmdj71sL+a2Rh2OPE7DNpbf8g99rusgcepRnAgMB AAGjggJGMIICQjAdBgNVHQ4EFgQUuOJf6V5+NykRQrf8uFfZRsIbomEwHwYDVR0j BBgwFoAU00YGlJ04XbQnFP5xJ0+smUjvJ5wwDgYDVR0PAQH/BAQDAgeAMIGIBgNV HR8EgYAwfjB8oHqgeIZ2cnN5bmM6Ly9yLm1hZ2VsbGFuLmlweG8uY29tL3JlcG8v NTI4YTIxOGYtYWQyOC00MGQyLWJkN2YtMzUwZWFkYTNkNzA1LTAvMC9EMzQ2MDY5 NDlEMzg1REI0MjcxNEZFNzEyNzRGQUM5OTQ4RUYyNzlDLmNybDCBngYIKwYBBQUH AQEEgZEwgY4wgYsGCCsGAQUFBzAChn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5y aXBlLm5ldC9yZXBvc2l0b3J5LzAwMmUwYmEzLWZlNjAtNDViMS05MTYwLTg2OGEy ZjhhNDNiMS8zL0QzNDYwNjk0OUQzODVEQjQyNzE0RkU3MTI3NEZBQzk5NDhFRjI3 OUMuY2VyMHEGCCsGAQUFBwELBGUwYzBhBggrBgEFBQcwC4ZVcnN5bmM6Ly9yLm1h Z2VsbGFuLmlweG8uY29tL3JlcG8vNTI4YTIxOGYtYWQyOC00MGQyLWJkN2YtMzUw ZWFkYTNkNzA1LTAvMC9BUzE2NTA5LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMDcGCCsGAQUFBwEHAQH/BCgwJjAkBAIAATAeAwQAViboAwQAWXUPAwQAWXUc AwQAWXVRAwQAWXWZMA0GCSqGSIb3DQEBCwUAA4IBAQA/Q8DYVaYXS4v3aF8NBDD5 pDA9TcJ/kl73GDS8qcDCVbuTsB2ex0r/bc/shUjvUFBs3H0GNG85sYG17hrFltMw WjPH5FEVXJEaJKdbRJz+m06nbXD+3ZwzHpFjBOkRUR5zusULyLW1yWbGwDdL5pOj gpSESJDo4btr33s67oaFnROgMrozDhWU1ZDJXa0ImvCKw9ZY+NMbtI6hhp3pjgDe 7N8JKnzj1U92GdfwIsCGNWs0ysTnuVDtrjT49GciRTkFm3qITW96f0gJGZ8p26ru 8frMFAqoGfd85Li8l6QnCzVwypmnK13Mhar1HtyP3PhIu1n4wn1fJfZ+PNtcuXSh -----END CERTIFICATE-----Generated at Sat Aug 23 08:30:26 2025 by rpki-client