$ rpki-client -vvf r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/AS21859.roa File: AS21859.roa (raw, json) Hash identifier: okHV+O1If1eA5NXDXyaTny74tVJYN+ey0bMWNdJE2yw= Subject key identifier: A3:23:D3:A4:49:4A:00:05:4B:57:EF:EE:A5:74:9D:58:94:95:07:95 Certificate issuer: /CN=D34606949D385DB42714FE71274FAC9948EF279C Certificate serial: 6B504C6694FC719A1F9A7CBA6FDE469297BBE504 Authority key identifier: D3:46:06:94:9D:38:5D:B4:27:14:FE:71:27:4F:AC:99:48:EF:27:9C Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/D34606949D385DB42714FE71274FAC9948EF279C.cer Subject info access: rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/AS21859.roa Signing time: Tue 19 Aug 2025 08:41:50 +0000 ROA not before: Tue 19 Aug 2025 08:36:50 +0000 ROA not after: Tue 18 Aug 2026 08:41:50 +0000 asID: 21859 IP address blocks: 86.38.187.0/24 maxlen: 24 Validation: OK Signature path: rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/D34606949D385DB42714FE71274FAC9948EF279C.crl rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/D34606949D385DB42714FE71274FAC9948EF279C.mft rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/D34606949D385DB42714FE71274FAC9948EF279C.cer rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/9DF85997B1B9B358E1C43F36765AA0A4A02144AE.crl rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/9DF85997B1B9B358E1C43F36765AA0A4A02144AE.mft rsync://rpki.ripe.net/repository/DEFAULT/nfhZl7G5s1jhxD82dlqgpKAhRK4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 24 Aug 2025 09:09:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6b:50:4c:66:94:fc:71:9a:1f:9a:7c:ba:6f:de:46:92:97:bb:e5:04 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D34606949D385DB42714FE71274FAC9948EF279C Validity Not Before: Aug 19 08:36:50 2025 GMT Not After : Aug 18 08:41:50 2026 GMT Subject: CN=A323D3A4494A00054B57EFEEA5749D5894950795 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:ef:72:10:9c:6e:f0:48:c5:4f:e3:20:94:2f: 54:ba:b7:ac:b1:46:eb:e7:18:25:b4:38:42:42:7b: 21:2d:39:70:b2:40:ad:ea:ce:50:77:99:07:8c:b8: 54:e2:bb:b9:cf:56:76:6f:a4:ca:02:48:3f:7c:f9: ae:79:ac:2d:4d:e6:9a:d1:bf:0a:09:f1:88:e4:0b: f6:42:ef:51:45:57:96:32:4e:75:5d:dd:b0:f9:b9: 7d:62:0e:47:89:77:f0:f9:fe:04:2d:59:1b:18:55: 43:fe:9c:96:72:3d:e2:15:42:4f:e6:04:af:85:f4: eb:91:bb:b3:89:4c:e5:1e:1e:cc:e4:59:a4:10:71: 40:49:60:40:81:cd:2a:40:a6:89:69:0b:69:24:ee: 91:1c:6c:7f:42:c3:22:a1:14:b3:55:4a:f1:76:ab: 0f:0a:1e:c4:6e:bc:58:95:b9:28:f1:d6:a8:5b:7f: b0:d4:5b:ae:88:18:86:a1:6e:c2:74:e8:4a:cf:7b: 33:d6:a6:39:b0:db:28:96:62:53:4d:78:fe:7b:df: 8a:f9:ca:25:a4:e9:44:d5:49:ce:2d:98:12:44:62: 40:cf:90:67:ba:b7:26:ec:e2:65:ea:b5:a0:01:62: 94:49:b8:a5:7f:1e:3c:90:2a:d0:35:8c:5c:ac:9f: e4:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:23:D3:A4:49:4A:00:05:4B:57:EF:EE:A5:74:9D:58:94:95:07:95 X509v3 Authority Key Identifier: keyid:D3:46:06:94:9D:38:5D:B4:27:14:FE:71:27:4F:AC:99:48:EF:27:9C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/D34606949D385DB42714FE71274FAC9948EF279C.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/D34606949D385DB42714FE71274FAC9948EF279C.cer Subject Information Access: Signed Object - URI:rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/AS21859.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 86.38.187.0/24 Signature Algorithm: sha256WithRSAEncryption 26:9c:c3:21:41:ed:b0:c1:12:a4:38:a2:99:21:f7:ac:c4:14: c4:5d:74:7c:4c:cf:19:57:a1:24:a6:ba:84:69:07:b1:7f:fc: 5f:b3:b8:f3:db:e0:c5:ea:02:09:e9:a6:b1:91:bb:fc:ee:7c: 45:61:6c:2f:d2:ce:ee:38:b5:d5:3e:1d:73:07:1f:98:f4:0f: a4:f8:f1:74:e1:dd:9a:b8:a3:e8:a3:54:93:44:1e:24:a9:f8: 4c:71:61:79:c0:50:1f:d6:79:85:d5:91:94:64:ba:da:8a:9b: 61:fe:5e:9b:64:74:4a:c1:43:d1:9d:2b:45:eb:f1:0f:5f:ef: 78:dd:37:8a:1c:79:8b:22:ff:d9:c5:cf:eb:c8:6d:64:8b:88: c7:69:0c:03:89:2e:bb:19:0c:83:81:b6:d0:23:14:3b:55:0c: 3f:60:85:87:db:4a:6b:92:48:5c:01:6d:22:e1:58:88:f3:7b: bf:bc:0a:b8:f2:e9:bb:4a:2a:30:16:72:a8:d2:cb:62:9a:72: 52:a9:09:01:d8:e4:78:16:70:ee:7a:bf:49:b1:29:20:83:ac: e7:9f:9e:4a:97:24:63:91:ca:c2:a2:9b:5f:fb:4e:34:b6:1e: 07:e7:e1:a2:eb:f1:83:26:11:34:66:9d:0e:dd:73:a7:f1:73: 3d:8a:8c:fb -----BEGIN CERTIFICATE----- MIIFJDCCBAygAwIBAgIUa1BMZpT8cZofmny6b95Gkpe75QQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDM0NjA2OTQ5RDM4NURCNDI3MTRGRTcxMjc0RkFDOTk0 OEVGMjc5QzAeFw0yNTA4MTkwODM2NTBaFw0yNjA4MTgwODQxNTBaMDMxMTAvBgNV BAMTKEEzMjNEM0E0NDk0QTAwMDU0QjU3RUZFRUE1NzQ5RDU4OTQ5NTA3OTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCJ73IQnG7wSMVP4yCUL1S6t6yx RuvnGCW0OEJCeyEtOXCyQK3qzlB3mQeMuFTiu7nPVnZvpMoCSD98+a55rC1N5prR vwoJ8YjkC/ZC71FFV5YyTnVd3bD5uX1iDkeJd/D5/gQtWRsYVUP+nJZyPeIVQk/m BK+F9OuRu7OJTOUeHszkWaQQcUBJYECBzSpApolpC2kk7pEcbH9CwyKhFLNVSvF2 qw8KHsRuvFiVuSjx1qhbf7DUW66IGIahbsJ06ErPezPWpjmw2yiWYlNNeP5734r5 yiWk6UTVSc4tmBJEYkDPkGe6tybs4mXqtaABYpRJuKV/HjyQKtA1jFysn+SBAgMB AAGjggIuMIICKjAdBgNVHQ4EFgQUoyPTpElKAAVLV+/upXSdWJSVB5UwHwYDVR0j BBgwFoAU00YGlJ04XbQnFP5xJ0+smUjvJ5wwDgYDVR0PAQH/BAQDAgeAMIGIBgNV HR8EgYAwfjB8oHqgeIZ2cnN5bmM6Ly9yLm1hZ2VsbGFuLmlweG8uY29tL3JlcG8v NTI4YTIxOGYtYWQyOC00MGQyLWJkN2YtMzUwZWFkYTNkNzA1LTAvMC9EMzQ2MDY5 NDlEMzg1REI0MjcxNEZFNzEyNzRGQUM5OTQ4RUYyNzlDLmNybDCBngYIKwYBBQUH AQEEgZEwgY4wgYsGCCsGAQUFBzAChn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5y aXBlLm5ldC9yZXBvc2l0b3J5LzAwMmUwYmEzLWZlNjAtNDViMS05MTYwLTg2OGEy ZjhhNDNiMS8zL0QzNDYwNjk0OUQzODVEQjQyNzE0RkU3MTI3NEZBQzk5NDhFRjI3 OUMuY2VyMHEGCCsGAQUFBwELBGUwYzBhBggrBgEFBQcwC4ZVcnN5bmM6Ly9yLm1h Z2VsbGFuLmlweG8uY29tL3JlcG8vNTI4YTIxOGYtYWQyOC00MGQyLWJkN2YtMzUw ZWFkYTNkNzA1LTAvMC9BUzIxODU5LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAVia7MA0GCSqGSIb3DQEB CwUAA4IBAQAmnMMhQe2wwRKkOKKZIfesxBTEXXR8TM8ZV6EkprqEaQexf/xfs7jz 2+DF6gIJ6aaxkbv87nxFYWwv0s7uOLXVPh1zBx+Y9A+k+PF04d2auKPoo1STRB4k qfhMcWF5wFAf1nmF1ZGUZLraipth/l6bZHRKwUPRnStF6/EPX+943TeKHHmLIv/Z xc/ryG1ki4jHaQwDiS67GQyDgbbQIxQ7VQw/YIWH20prkkhcAW0i4ViI83u/vAq4 8um7SiowFnKo0stimnJSqQkB2OR4FnDuer9JsSkgg6znn55KlyRjkcrCoptf+040 th4H5+Gi6/GDJhE0Zp0O3XOn8XM9ioz7 -----END CERTIFICATE-----Generated at Sat Aug 23 21:04:25 2025 by rpki-client