$ rpki-client -vvf r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/AS205220.roa File: AS205220.roa (raw, json) Hash identifier: N5ItM8HTCO+GzbSgFi6cToKtjs04LNO9y4EL51OjBLQ= Subject key identifier: 95:E7:97:55:DC:87:BF:DB:C8:3A:05:03:32:6D:DB:9C:E7:F6:86:C5 Certificate issuer: /CN=D34606949D385DB42714FE71274FAC9948EF279C Certificate serial: 5A219B1F759A8C3769A99D98EC67D62CB954EDB2 Authority key identifier: D3:46:06:94:9D:38:5D:B4:27:14:FE:71:27:4F:AC:99:48:EF:27:9C Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/D34606949D385DB42714FE71274FAC9948EF279C.cer Subject info access: rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/AS205220.roa Signing time: Tue 14 Oct 2025 18:55:08 +0000 ROA not before: Tue 14 Oct 2025 18:50:08 +0000 ROA not after: Tue 13 Oct 2026 18:55:08 +0000 asID: 205220 IP address blocks: 89.116.148.0/23 maxlen: 24 89.117.24.0/23 maxlen: 24 89.117.70.0/23 maxlen: 24 Validation: OK Signature path: rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/D34606949D385DB42714FE71274FAC9948EF279C.crl rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/D34606949D385DB42714FE71274FAC9948EF279C.mft rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/D34606949D385DB42714FE71274FAC9948EF279C.cer rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/9DF85997B1B9B358E1C43F36765AA0A4A02144AE.crl rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/9DF85997B1B9B358E1C43F36765AA0A4A02144AE.mft rsync://rpki.ripe.net/repository/DEFAULT/nfhZl7G5s1jhxD82dlqgpKAhRK4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 20 Oct 2025 07:07:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5a:21:9b:1f:75:9a:8c:37:69:a9:9d:98:ec:67:d6:2c:b9:54:ed:b2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D34606949D385DB42714FE71274FAC9948EF279C Validity Not Before: Oct 14 18:50:08 2025 GMT Not After : Oct 13 18:55:08 2026 GMT Subject: CN=95E79755DC87BFDBC83A0503326DDB9CE7F686C5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:a8:e4:bf:59:4c:75:32:35:16:5f:81:d0:83: 2c:df:9b:0d:0a:70:03:25:c0:87:cf:43:ec:bf:52: d3:3d:83:e1:26:d9:42:90:ef:f1:34:b4:43:eb:ed: 35:21:4d:55:81:4d:94:eb:d9:6f:94:ed:f6:6f:21: ef:05:0e:b1:86:13:f0:6c:71:20:2c:6f:2a:d4:5c: 8d:03:a7:ff:1c:1c:f1:ba:ee:5c:fd:b2:49:37:97: 8e:c6:45:0b:b0:29:b5:ba:f1:a5:43:6a:ad:cc:ac: 5a:10:c9:c7:22:3e:bb:88:43:da:e6:f4:c5:47:6d: 6a:ff:a1:7c:88:41:10:e4:36:ce:a5:f5:f0:11:89: b0:c4:a9:53:16:b8:91:d8:03:92:f2:a8:29:3a:80: 2a:84:37:39:46:cd:0a:07:f7:3e:8a:b2:c6:bf:3a: ae:60:81:12:fa:83:97:20:32:b2:53:86:c1:f0:ac: bc:3f:18:34:b7:13:48:d8:70:f4:c5:8d:86:c1:4b: 92:23:22:e7:da:c2:8f:5c:f2:c1:5e:fd:7b:bb:38: d9:14:39:8f:eb:ea:4f:ac:05:e2:60:bb:50:f2:4e: 30:d8:b0:39:37:2c:3a:fd:6f:3b:4b:21:5a:d2:49: 0e:6f:d1:9c:fe:3c:8a:06:0f:9a:8e:0c:06:75:c4: c7:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:E7:97:55:DC:87:BF:DB:C8:3A:05:03:32:6D:DB:9C:E7:F6:86:C5 X509v3 Authority Key Identifier: keyid:D3:46:06:94:9D:38:5D:B4:27:14:FE:71:27:4F:AC:99:48:EF:27:9C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/D34606949D385DB42714FE71274FAC9948EF279C.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/D34606949D385DB42714FE71274FAC9948EF279C.cer Subject Information Access: Signed Object - URI:rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/AS205220.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 89.116.148.0/23 89.117.24.0/23 89.117.70.0/23 Signature Algorithm: sha256WithRSAEncryption 08:87:f0:be:78:f4:d8:c6:56:ce:09:5d:fe:de:b5:52:6a:af: c5:af:dc:64:53:82:af:35:59:f5:68:ea:f3:ae:fc:d8:a7:2f: ba:41:58:81:70:c3:dc:12:fa:1f:58:14:f5:e4:bf:e8:d0:f3: e7:52:57:10:22:97:75:80:38:a5:45:4a:f4:a3:43:45:bd:2e: 68:cb:c1:58:c8:3e:69:60:d0:ad:3d:9b:8e:2e:87:bc:20:bd: c0:d3:6f:15:3c:5d:6d:f8:86:e0:4a:9a:81:8b:b5:aa:7c:14: b3:9d:6f:9e:3f:c4:cf:5c:42:69:f9:e3:af:0c:e6:7f:f5:c0: 61:a6:8d:4c:e0:d6:32:82:c4:07:20:4b:26:c7:22:6d:2d:74: 97:c6:3f:cf:a9:e9:fe:ca:cc:8f:23:83:a4:3e:1b:0a:1c:10: 0c:0d:94:8d:b6:15:9a:75:b4:08:52:a7:91:b0:e2:27:55:af: ef:3e:41:29:eb:4d:5a:39:2d:d1:54:c5:27:a1:e4:19:d7:be: a9:c1:86:34:ef:1d:4f:85:da:1c:2d:71:cc:55:4a:87:a4:ba: 8e:9f:4e:b7:82:36:68:db:ab:4d:06:41:e8:1e:88:8b:f8:1f: 6a:47:fb:e4:19:21:fc:36:d3:16:ec:99:ee:83:0d:63:77:1b: c7:ee:9b:d4 -----BEGIN CERTIFICATE----- MIIFMTCCBBmgAwIBAgIUWiGbH3WajDdpqZ2Y7GfWLLlU7bIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDM0NjA2OTQ5RDM4NURCNDI3MTRGRTcxMjc0RkFDOTk0 OEVGMjc5QzAeFw0yNTEwMTQxODUwMDhaFw0yNjEwMTMxODU1MDhaMDMxMTAvBgNV BAMTKDk1RTc5NzU1REM4N0JGREJDODNBMDUwMzMyNkREQjlDRTdGNjg2QzUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCsqOS/WUx1MjUWX4HQgyzfmw0K cAMlwIfPQ+y/UtM9g+Em2UKQ7/E0tEPr7TUhTVWBTZTr2W+U7fZvIe8FDrGGE/Bs cSAsbyrUXI0Dp/8cHPG67lz9skk3l47GRQuwKbW68aVDaq3MrFoQycciPruIQ9rm 9MVHbWr/oXyIQRDkNs6l9fARibDEqVMWuJHYA5LyqCk6gCqENzlGzQoH9z6Kssa/ Oq5ggRL6g5cgMrJThsHwrLw/GDS3E0jYcPTFjYbBS5IjIufawo9c8sFe/Xu7ONkU OY/r6k+sBeJgu1DyTjDYsDk3LDr9bztLIVrSSQ5v0Zz+PIoGD5qODAZ1xMdFAgMB AAGjggI7MIICNzAdBgNVHQ4EFgQUleeXVdyHv9vIOgUDMm3bnOf2hsUwHwYDVR0j BBgwFoAU00YGlJ04XbQnFP5xJ0+smUjvJ5wwDgYDVR0PAQH/BAQDAgeAMIGIBgNV HR8EgYAwfjB8oHqgeIZ2cnN5bmM6Ly9yLm1hZ2VsbGFuLmlweG8uY29tL3JlcG8v NTI4YTIxOGYtYWQyOC00MGQyLWJkN2YtMzUwZWFkYTNkNzA1LTAvMC9EMzQ2MDY5 NDlEMzg1REI0MjcxNEZFNzEyNzRGQUM5OTQ4RUYyNzlDLmNybDCBngYIKwYBBQUH AQEEgZEwgY4wgYsGCCsGAQUFBzAChn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5y aXBlLm5ldC9yZXBvc2l0b3J5LzAwMmUwYmEzLWZlNjAtNDViMS05MTYwLTg2OGEy ZjhhNDNiMS8zL0QzNDYwNjk0OUQzODVEQjQyNzE0RkU3MTI3NEZBQzk5NDhFRjI3 OUMuY2VyMHIGCCsGAQUFBwELBGYwZDBiBggrBgEFBQcwC4ZWcnN5bmM6Ly9yLm1h Z2VsbGFuLmlweG8uY29tL3JlcG8vNTI4YTIxOGYtYWQyOC00MGQyLWJkN2YtMzUw ZWFkYTNkNzA1LTAvMC9BUzIwNTIyMC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEF BQcOAjArBggrBgEFBQcBBwEB/wQcMBowGAQCAAEwEgMEAVl0lAMEAVl1GAMEAVl1 RjANBgkqhkiG9w0BAQsFAAOCAQEACIfwvnj02MZWzgld/t61Umqvxa/cZFOCrzVZ 9Wjq86782KcvukFYgXDD3BL6H1gU9eS/6NDz51JXECKXdYA4pUVK9KNDRb0uaMvB WMg+aWDQrT2bji6HvCC9wNNvFTxdbfiG4EqagYu1qnwUs51vnj/Ez1xCafnjrwzm f/XAYaaNTODWMoLEByBLJscibS10l8Y/z6np/srMjyODpD4bChwQDA2UjbYVmnW0 CFKnkbDiJ1Wv7z5BKetNWjkt0VTFJ6HkGde+qcGGNO8dT4XaHC1xzFVKh6S6jp9O t4I2aNurTQZB6B6Ii/gfakf75Bkh/DbTFuyZ7oMNY3cbx+6b1A== -----END CERTIFICATE-----Generated at Sun Oct 19 20:09:11 2025 by rpki-client