$ rpki-client -vvf r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/AS21859.roa File: AS21859.roa (raw, json) Hash identifier: mdK9JyB+P4qLznP5z74BNlxDgO3n4Mj1mFsduM9vmrk= Subject key identifier: 93:BA:E5:54:93:37:A1:E6:02:A0:3A:E0:20:A4:EC:9F:6B:F1:12:05 Certificate issuer: /CN=D34606949D385DB42714FE71274FAC9948EF279C Certificate serial: 65AB475EBA88ABACB26A8EE0F37710C3F6EF75A4 Authority key identifier: D3:46:06:94:9D:38:5D:B4:27:14:FE:71:27:4F:AC:99:48:EF:27:9C Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/D34606949D385DB42714FE71274FAC9948EF279C.cer Subject info access: rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/AS21859.roa Signing time: Thu 19 Jun 2025 06:32:02 +0000 ROA not before: Thu 19 Jun 2025 06:27:02 +0000 ROA not after: Thu 18 Jun 2026 06:32:02 +0000 asID: 21859 IP address blocks: 89.117.35.0/24 maxlen: 24 Validation: OK Signature path: rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/D34606949D385DB42714FE71274FAC9948EF279C.crl rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/D34606949D385DB42714FE71274FAC9948EF279C.mft rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/D34606949D385DB42714FE71274FAC9948EF279C.cer rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/9DF85997B1B9B358E1C43F36765AA0A4A02144AE.crl rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/9DF85997B1B9B358E1C43F36765AA0A4A02144AE.mft rsync://rpki.ripe.net/repository/DEFAULT/nfhZl7G5s1jhxD82dlqgpKAhRK4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 02 Jul 2025 08:57:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 65:ab:47:5e:ba:88:ab:ac:b2:6a:8e:e0:f3:77:10:c3:f6:ef:75:a4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D34606949D385DB42714FE71274FAC9948EF279C Validity Not Before: Jun 19 06:27:02 2025 GMT Not After : Jun 18 06:32:02 2026 GMT Subject: CN=93BAE5549337A1E602A03AE020A4EC9F6BF11205 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:57:3b:bc:0f:3e:d9:32:7c:66:89:89:1f:0b: 21:1d:9a:cd:e8:8b:61:f4:95:22:ee:84:0c:af:d2: 0c:df:1a:40:ef:21:02:c8:6b:62:9a:bb:c6:2c:96: 5c:e7:9e:96:a2:44:9b:50:27:bb:43:26:f1:81:79: be:8d:b5:0d:03:d5:44:d0:5c:2a:d8:a1:7e:3a:71: af:0e:47:40:54:a3:7a:ce:14:6d:ad:fc:50:9a:62: 8c:9a:df:9a:3a:8b:05:bf:a2:6b:79:3a:95:66:e8: 94:bb:2c:63:f5:e1:93:55:dd:70:d4:d7:21:31:3a: 30:d2:81:88:c3:44:c8:c1:95:9f:d8:48:bf:e4:40: 92:0e:77:e7:8f:2a:f3:a8:2c:d6:0e:78:d2:f5:17: a3:03:e4:11:69:68:ed:c8:69:5b:60:50:4b:9a:1e: 13:d0:44:98:ac:82:d1:e6:93:3e:77:16:d9:76:7f: 12:d7:fe:fc:4a:42:97:8a:c2:df:d8:bd:e4:6b:94: 3b:2e:73:cd:25:72:20:5d:56:93:95:e8:35:c7:ef: 09:b3:42:96:cb:0c:7e:20:57:b6:98:bc:0e:ed:e4: 5d:b4:71:41:70:2e:68:64:78:06:cb:e7:44:d0:82: 96:38:4f:03:c6:27:67:d3:35:09:2d:d3:10:26:f5: 4b:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:BA:E5:54:93:37:A1:E6:02:A0:3A:E0:20:A4:EC:9F:6B:F1:12:05 X509v3 Authority Key Identifier: keyid:D3:46:06:94:9D:38:5D:B4:27:14:FE:71:27:4F:AC:99:48:EF:27:9C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/D34606949D385DB42714FE71274FAC9948EF279C.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/D34606949D385DB42714FE71274FAC9948EF279C.cer Subject Information Access: Signed Object - URI:rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/AS21859.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 89.117.35.0/24 Signature Algorithm: sha256WithRSAEncryption 51:4a:c3:3f:70:0e:62:05:6f:c2:92:85:95:21:e5:79:6c:f4: af:f9:50:c8:1a:b7:8b:6e:63:e8:cc:53:f9:65:2d:1e:f0:ad: 72:44:bf:35:63:25:6a:2b:01:c4:6e:71:27:32:49:32:33:96: b2:69:ba:bb:6a:ad:64:a0:3f:58:af:bf:22:97:b7:9e:98:0e: ba:59:15:ce:d3:03:43:09:47:4a:2f:72:ed:7a:21:87:0d:a7: 1f:0c:83:36:e6:c9:c0:b5:55:91:52:7e:c0:d3:0f:f2:91:10: a1:37:06:70:c3:a7:ed:38:34:84:06:a7:a1:f3:07:d9:2e:82: 55:59:a7:87:01:27:24:cf:61:97:1a:e8:d9:f9:45:71:4b:39: 66:08:49:45:ef:88:9d:e4:80:54:b7:7c:bb:98:92:fb:e4:0f: ef:a5:b6:91:af:b2:d0:ee:a5:57:e2:21:45:59:90:20:a1:67: 41:97:bf:f0:50:08:29:b3:5a:f5:b1:60:bc:cc:81:e0:10:7e: 7c:6b:d9:0f:88:bb:08:74:2a:11:13:88:60:1a:a4:92:da:55: 09:c6:c6:da:2e:c7:af:29:3b:b3:8c:d6:c2:28:eb:b7:fb:2b: 96:87:eb:42:85:5c:61:42:e5:b2:31:93:9a:c4:9e:9d:16:dc: d3:98:12:d0 -----BEGIN CERTIFICATE----- MIIFJDCCBAygAwIBAgIUZatHXrqIq6yyao7g83cQw/bvdaQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDM0NjA2OTQ5RDM4NURCNDI3MTRGRTcxMjc0RkFDOTk0 OEVGMjc5QzAeFw0yNTA2MTkwNjI3MDJaFw0yNjA2MTgwNjMyMDJaMDMxMTAvBgNV BAMTKDkzQkFFNTU0OTMzN0ExRTYwMkEwM0FFMDIwQTRFQzlGNkJGMTEyMDUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDdVzu8Dz7ZMnxmiYkfCyEdms3o i2H0lSLuhAyv0gzfGkDvIQLIa2Kau8YsllznnpaiRJtQJ7tDJvGBeb6NtQ0D1UTQ XCrYoX46ca8OR0BUo3rOFG2t/FCaYoya35o6iwW/omt5OpVm6JS7LGP14ZNV3XDU 1yExOjDSgYjDRMjBlZ/YSL/kQJIOd+ePKvOoLNYOeNL1F6MD5BFpaO3IaVtgUEua HhPQRJisgtHmkz53Ftl2fxLX/vxKQpeKwt/YveRrlDsuc80lciBdVpOV6DXH7wmz QpbLDH4gV7aYvA7t5F20cUFwLmhkeAbL50TQgpY4TwPGJ2fTNQkt0xAm9UvFAgMB AAGjggIuMIICKjAdBgNVHQ4EFgQUk7rlVJM3oeYCoDrgIKTsn2vxEgUwHwYDVR0j BBgwFoAU00YGlJ04XbQnFP5xJ0+smUjvJ5wwDgYDVR0PAQH/BAQDAgeAMIGIBgNV HR8EgYAwfjB8oHqgeIZ2cnN5bmM6Ly9yLm1hZ2VsbGFuLmlweG8uY29tL3JlcG8v NTI4YTIxOGYtYWQyOC00MGQyLWJkN2YtMzUwZWFkYTNkNzA1LTAvMC9EMzQ2MDY5 NDlEMzg1REI0MjcxNEZFNzEyNzRGQUM5OTQ4RUYyNzlDLmNybDCBngYIKwYBBQUH AQEEgZEwgY4wgYsGCCsGAQUFBzAChn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5y aXBlLm5ldC9yZXBvc2l0b3J5LzAwMmUwYmEzLWZlNjAtNDViMS05MTYwLTg2OGEy ZjhhNDNiMS8zL0QzNDYwNjk0OUQzODVEQjQyNzE0RkU3MTI3NEZBQzk5NDhFRjI3 OUMuY2VyMHEGCCsGAQUFBwELBGUwYzBhBggrBgEFBQcwC4ZVcnN5bmM6Ly9yLm1h Z2VsbGFuLmlweG8uY29tL3JlcG8vNTI4YTIxOGYtYWQyOC00MGQyLWJkN2YtMzUw ZWFkYTNkNzA1LTAvMC9BUzIxODU5LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAWXUjMA0GCSqGSIb3DQEB CwUAA4IBAQBRSsM/cA5iBW/CkoWVIeV5bPSv+VDIGreLbmPozFP5ZS0e8K1yRL81 YyVqKwHEbnEnMkkyM5ayabq7aq1koD9Yr78il7eemA66WRXO0wNDCUdKL3LteiGH DacfDIM25snAtVWRUn7A0w/ykRChNwZww6ftODSEBqeh8wfZLoJVWaeHASckz2GX GujZ+UVxSzlmCElF74id5IBUt3y7mJL75A/vpbaRr7LQ7qVX4iFFWZAgoWdBl7/w UAgps1r1sWC8zIHgEH58a9kPiLsIdCoRE4hgGqSS2lUJxsbaLsevKTuzjNbCKOu3 +yuWh+tChVxhQuWyMZOaxJ6dFtzTmBLQ -----END CERTIFICATE-----Generated at Wed Jul 2 00:44:19 2025 by rpki-client