$ rpki-client -vvf r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/AS201949.roa File: AS201949.roa (raw, json) Hash identifier: w7zwb21IJoCqC5VeDNbdMBddkXTi48jw2gUi6CjjURQ= Subject key identifier: 0B:A4:03:D6:82:12:E3:38:BE:32:CA:31:D4:2E:D2:8F:A9:BE:BF:AF Certificate issuer: /CN=D34606949D385DB42714FE71274FAC9948EF279C Certificate serial: 516D94E7A349994BC0AE5BF28B0D77DFC24EB390 Authority key identifier: D3:46:06:94:9D:38:5D:B4:27:14:FE:71:27:4F:AC:99:48:EF:27:9C Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/D34606949D385DB42714FE71274FAC9948EF279C.cer Subject info access: rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/AS201949.roa Signing time: Wed 22 Jul 2026 21:00:54 +0000 ROA not before: Wed 22 Jul 2026 20:55:54 +0000 ROA not after: Wed 21 Jul 2027 21:00:54 +0000 asID: 201949 IP address blocks: 89.117.222.0/24 maxlen: 24 Validation: OK Signature path: rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/D34606949D385DB42714FE71274FAC9948EF279C.crl rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/D34606949D385DB42714FE71274FAC9948EF279C.mft rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/D34606949D385DB42714FE71274FAC9948EF279C.cer rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/9DF85997B1B9B358E1C43F36765AA0A4A02144AE.crl rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/9DF85997B1B9B358E1C43F36765AA0A4A02144AE.mft rsync://rpki.ripe.net/repository/DEFAULT/nfhZl7G5s1jhxD82dlqgpKAhRK4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 24 Jul 2026 10:30:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 51:6d:94:e7:a3:49:99:4b:c0:ae:5b:f2:8b:0d:77:df:c2:4e:b3:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D34606949D385DB42714FE71274FAC9948EF279C Validity Not Before: Jul 22 20:55:54 2026 GMT Not After : Jul 21 21:00:54 2027 GMT Subject: CN=0BA403D68212E338BE32CA31D42ED28FA9BEBFAF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:99:4b:a4:39:af:58:ad:21:02:5a:c6:f0:a2: e7:bd:ca:93:a5:74:50:d2:d0:2e:e2:22:c2:3d:5e: b3:bb:73:d4:bf:15:48:25:1c:6d:9f:dd:bf:d0:ca: 57:0d:04:78:7a:9b:fc:14:01:a5:1a:96:97:0e:c2: 71:b1:e3:90:39:bb:fa:45:a4:09:f6:2a:81:a1:3f: c3:81:b9:ca:9f:6e:ab:1c:a2:37:61:56:f8:8f:6c: 37:0c:53:19:a1:df:48:aa:fb:10:a7:9f:c2:c8:ca: ae:2e:25:e8:61:cd:12:99:97:c4:90:ca:b9:a0:d9: 3e:da:e3:d4:1a:f2:2f:7e:d6:55:ba:e7:7a:09:3f: 33:6f:d0:22:2b:24:62:ec:0b:50:47:0f:c7:e8:20: b3:8d:0d:88:ed:d3:67:d9:37:6d:3c:74:bd:4d:b2: fb:04:78:c3:68:be:1b:42:38:8a:53:09:c5:0b:6a: e0:98:5f:0e:d3:1c:7e:51:01:20:24:78:fa:11:14: 56:ae:bf:82:44:5b:a1:0f:c3:a7:72:87:80:86:11: 6f:d6:80:c7:a5:12:45:5c:cf:b5:8a:a7:f6:16:56: 7f:b9:d5:22:4f:92:32:e5:6e:9d:30:0c:64:3e:c6: 1c:99:ca:25:59:c0:40:68:00:85:e6:51:51:68:0a: 33:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:A4:03:D6:82:12:E3:38:BE:32:CA:31:D4:2E:D2:8F:A9:BE:BF:AF X509v3 Authority Key Identifier: keyid:D3:46:06:94:9D:38:5D:B4:27:14:FE:71:27:4F:AC:99:48:EF:27:9C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/D34606949D385DB42714FE71274FAC9948EF279C.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/D34606949D385DB42714FE71274FAC9948EF279C.cer Subject Information Access: Signed Object - URI:rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/AS201949.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 89.117.222.0/24 Signature Algorithm: sha256WithRSAEncryption 11:d9:ad:4e:f0:05:2f:f6:25:76:25:cf:d8:e4:28:26:11:dc: af:04:b2:dc:a9:23:ca:1f:8d:4e:ea:3a:c6:fd:de:10:cc:14: 53:57:29:61:98:ab:30:3a:c6:be:9a:d8:74:cc:0c:bc:46:5b: 78:6f:f8:3b:93:4d:dd:b0:17:e7:07:26:6c:7b:71:af:10:66: 2d:a4:b2:9a:3f:fb:54:7b:0e:6b:f7:b9:5a:32:42:95:25:37: 1e:18:ff:1f:85:05:0b:3d:bf:9d:bf:95:43:03:8f:45:7a:93: ac:5f:b3:3c:bd:d3:ff:3b:b7:e3:c7:a0:a0:b4:e3:49:6b:82: e7:99:13:d2:28:79:1f:68:f8:8c:36:fd:3a:9f:08:e8:50:fa: 30:40:47:87:b4:1d:f6:39:87:f2:ba:6f:58:a2:35:24:db:5b: 56:00:19:af:9b:c9:1e:ec:a3:30:3c:d1:a3:34:de:a9:c7:ac: 31:24:9d:d3:fb:41:25:6c:16:7f:94:ec:67:4f:41:10:f4:e2: b1:5e:7b:e0:b4:47:23:d9:13:07:f9:d5:80:77:70:41:8e:e3: a2:b6:58:59:73:8b:98:8b:68:49:53:ce:d9:55:98:58:3e:91: 6c:ce:74:71:e2:28:d9:dc:87:81:c7:3f:36:83:9b:13:a3:6b: 5a:1c:b2:24 -----BEGIN CERTIFICATE----- MIIFJTCCBA2gAwIBAgIUUW2U56NJmUvArlvyiw1338JOs5AwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDM0NjA2OTQ5RDM4NURCNDI3MTRGRTcxMjc0RkFDOTk0 OEVGMjc5QzAeFw0yNjA3MjIyMDU1NTRaFw0yNzA3MjEyMTAwNTRaMDMxMTAvBgNV BAMTKDBCQTQwM0Q2ODIxMkUzMzhCRTMyQ0EzMUQ0MkVEMjhGQTlCRUJGQUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCPmUukOa9YrSECWsbwoue9ypOl dFDS0C7iIsI9XrO7c9S/FUglHG2f3b/QylcNBHh6m/wUAaUalpcOwnGx45A5u/pF pAn2KoGhP8OBucqfbqscojdhVviPbDcMUxmh30iq+xCnn8LIyq4uJehhzRKZl8SQ yrmg2T7a49Qa8i9+1lW653oJPzNv0CIrJGLsC1BHD8foILONDYjt02fZN208dL1N svsEeMNovhtCOIpTCcULauCYXw7THH5RASAkePoRFFauv4JEW6EPw6dyh4CGEW/W gMelEkVcz7WKp/YWVn+51SJPkjLlbp0wDGQ+xhyZyiVZwEBoAIXmUVFoCjNbAgMB AAGjggIvMIICKzAdBgNVHQ4EFgQUC6QD1oIS4zi+Msox1C7Sj6m+v68wHwYDVR0j BBgwFoAU00YGlJ04XbQnFP5xJ0+smUjvJ5wwDgYDVR0PAQH/BAQDAgeAMIGIBgNV HR8EgYAwfjB8oHqgeIZ2cnN5bmM6Ly9yLm1hZ2VsbGFuLmlweG8uY29tL3JlcG8v NTI4YTIxOGYtYWQyOC00MGQyLWJkN2YtMzUwZWFkYTNkNzA1LTAvMC9EMzQ2MDY5 NDlEMzg1REI0MjcxNEZFNzEyNzRGQUM5OTQ4RUYyNzlDLmNybDCBngYIKwYBBQUH AQEEgZEwgY4wgYsGCCsGAQUFBzAChn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5y aXBlLm5ldC9yZXBvc2l0b3J5LzAwMmUwYmEzLWZlNjAtNDViMS05MTYwLTg2OGEy ZjhhNDNiMS8zL0QzNDYwNjk0OUQzODVEQjQyNzE0RkU3MTI3NEZBQzk5NDhFRjI3 OUMuY2VyMHIGCCsGAQUFBwELBGYwZDBiBggrBgEFBQcwC4ZWcnN5bmM6Ly9yLm1h Z2VsbGFuLmlweG8uY29tL3JlcG8vNTI4YTIxOGYtYWQyOC00MGQyLWJkN2YtMzUw ZWFkYTNkNzA1LTAvMC9BUzIwMTk0OS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEF BQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAFl13jANBgkqhkiG9w0B AQsFAAOCAQEAEdmtTvAFL/YldiXP2OQoJhHcrwSy3Kkjyh+NTuo6xv3eEMwUU1cp YZirMDrGvprYdMwMvEZbeG/4O5NN3bAX5wcmbHtxrxBmLaSymj/7VHsOa/e5WjJC lSU3Hhj/H4UFCz2/nb+VQwOPRXqTrF+zPL3T/zu348egoLTjSWuC55kT0ih5H2j4 jDb9Op8I6FD6MEBHh7Qd9jmH8rpvWKI1JNtbVgAZr5vJHuyjMDzRozTeqcesMSSd 0/tBJWwWf5TsZ09BEPTisV574LRHI9kTB/nVgHdwQY7jorZYWXOLmItoSVPO2VWY WD6RbM50ceIo2dyHgcc/NoObE6NrWhyyJA== -----END CERTIFICATE-----Generated at Thu Jul 23 23:45:01 2026 by rpki-client