$ rpki-client -vvf r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/AS262287.roa File: AS262287.roa (raw, json) Hash identifier: yFhFRYfmpr9PWvrWRe4RL0ay1+t8Qa2obqTznyP0yY0= Subject key identifier: 2A:0A:84:93:E6:1A:7C:6B:C0:BF:AC:80:F8:FB:59:0E:DC:A3:5A:5C Certificate issuer: /CN=D34606949D385DB42714FE71274FAC9948EF279C Certificate serial: 18B148918322AE4162BA734B98A2A6C9E85664A7 Authority key identifier: D3:46:06:94:9D:38:5D:B4:27:14:FE:71:27:4F:AC:99:48:EF:27:9C Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/D34606949D385DB42714FE71274FAC9948EF279C.cer Subject info access: rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/AS262287.roa Signing time: Fri 10 Oct 2025 13:20:26 +0000 ROA not before: Fri 10 Oct 2025 13:15:26 +0000 ROA not after: Fri 09 Oct 2026 13:20:26 +0000 asID: 262287 IP address blocks: 86.38.32.0/24 maxlen: 24 86.38.185.0/24 maxlen: 24 86.38.186.0/24 maxlen: 24 89.116.60.0/24 maxlen: 24 89.116.61.0/24 maxlen: 24 89.116.63.0/24 maxlen: 24 89.116.68.0/24 maxlen: 24 89.116.154.0/24 maxlen: 24 89.116.158.0/24 maxlen: 24 89.116.218.0/24 maxlen: 24 89.116.253.0/24 maxlen: 24 89.117.101.0/24 maxlen: 24 89.117.155.0/24 maxlen: 24 89.117.254.0/24 maxlen: 24 Validation: OK Signature path: rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/D34606949D385DB42714FE71274FAC9948EF279C.crl rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/D34606949D385DB42714FE71274FAC9948EF279C.mft rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/D34606949D385DB42714FE71274FAC9948EF279C.cer rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/9DF85997B1B9B358E1C43F36765AA0A4A02144AE.crl rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/9DF85997B1B9B358E1C43F36765AA0A4A02144AE.mft rsync://rpki.ripe.net/repository/DEFAULT/nfhZl7G5s1jhxD82dlqgpKAhRK4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 20 Oct 2025 07:07:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 18:b1:48:91:83:22:ae:41:62:ba:73:4b:98:a2:a6:c9:e8:56:64:a7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D34606949D385DB42714FE71274FAC9948EF279C Validity Not Before: Oct 10 13:15:26 2025 GMT Not After : Oct 9 13:20:26 2026 GMT Subject: CN=2A0A8493E61A7C6BC0BFAC80F8FB590EDCA35A5C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:5a:03:de:7a:69:6f:38:c8:7e:8f:2d:86:95: 60:1e:3a:1c:22:69:b7:1c:1c:53:50:6e:5b:99:19: 9a:cc:19:36:e3:3e:1a:7b:32:25:91:fb:dc:97:19: b6:e7:39:d3:ac:9b:a1:4b:dd:b6:60:43:1c:9a:8e: 0e:c0:c9:51:13:37:90:9e:34:ba:18:28:50:35:32: fc:ae:42:33:6f:66:db:e9:6c:27:09:fc:3e:51:b2: 94:9c:2a:43:81:9d:29:99:44:09:3d:c5:99:a1:c1: 41:8b:06:fd:66:96:20:d4:b9:49:ca:0a:b0:5b:b4: 04:18:0f:46:d9:58:cb:94:bb:bb:b6:38:ed:a4:7f: fa:d9:10:0d:ef:4f:17:78:01:de:b4:6f:f4:5b:f6: 2e:9b:98:d9:1a:75:cb:95:f9:68:ef:08:de:87:e4: cf:e2:d4:5c:d0:5c:09:a7:f2:ab:59:c0:33:ca:43: aa:fa:44:6a:45:3c:34:22:49:67:aa:fa:72:2b:97: d1:7d:77:95:b1:b4:c5:6b:47:67:bb:68:6e:21:e9: 86:cf:56:e9:9d:ad:b7:06:fb:f7:b7:58:39:50:2d: cf:f5:c7:64:66:7f:19:4a:fe:ac:ad:68:a7:99:f6: 19:88:8b:16:df:5d:57:a3:89:26:23:d7:64:1d:a3: 07:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:0A:84:93:E6:1A:7C:6B:C0:BF:AC:80:F8:FB:59:0E:DC:A3:5A:5C X509v3 Authority Key Identifier: keyid:D3:46:06:94:9D:38:5D:B4:27:14:FE:71:27:4F:AC:99:48:EF:27:9C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/D34606949D385DB42714FE71274FAC9948EF279C.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/D34606949D385DB42714FE71274FAC9948EF279C.cer Subject Information Access: Signed Object - URI:rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/AS262287.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 86.38.32.0/24 86.38.185.0-86.38.186.255 89.116.60.0/23 89.116.63.0/24 89.116.68.0/24 89.116.154.0/24 89.116.158.0/24 89.116.218.0/24 89.116.253.0/24 89.117.101.0/24 89.117.155.0/24 89.117.254.0/24 Signature Algorithm: sha256WithRSAEncryption 6a:c8:c2:ef:44:5f:46:5c:1e:36:27:e7:b9:e7:71:f0:29:cb: bf:ed:4f:9b:4d:31:6b:ac:96:96:32:91:c6:48:9d:5e:df:94: b3:a9:bb:b2:f8:e5:d5:49:42:73:6c:0d:93:0d:28:23:cd:25: 2e:22:a3:ff:6b:18:7b:3a:ea:01:2e:4e:f9:a4:32:78:46:20: 25:d0:ac:fe:f6:fe:52:4d:69:e0:ab:7b:52:e9:93:5b:80:a6: b0:27:c4:66:bf:1f:8b:36:16:13:98:75:4d:07:7e:71:3c:28: c1:5a:cd:d6:c2:f1:be:49:4b:29:44:eb:6d:be:17:c3:50:dd: cd:71:d6:4d:db:eb:7b:0b:65:ae:4d:62:4a:4c:81:fb:a7:d5: ca:5a:f1:a5:9b:9b:bb:c5:6f:e7:eb:3c:8f:af:37:45:1d:73: 32:a4:65:5d:e9:14:e0:a6:d1:fc:55:aa:74:2e:0c:9e:f0:44: c1:ab:48:9c:ce:f9:a1:38:09:61:03:4a:b9:42:cc:48:cb:3e: 47:53:ef:b8:73:c1:5b:94:57:ac:e0:5b:6c:4d:f5:58:a0:a7: 98:b4:24:da:27:8f:87:6e:44:9c:7a:a5:4b:c3:16:11:4e:1e: 61:02:9d:a0:53:49:0f:41:9a:50:d2:4b:19:b6:e9:2c:66:13: 53:a9:16:4b -----BEGIN CERTIFICATE----- MIIFbzCCBFegAwIBAgIUGLFIkYMirkFiunNLmKKmyehWZKcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDM0NjA2OTQ5RDM4NURCNDI3MTRGRTcxMjc0RkFDOTk0 OEVGMjc5QzAeFw0yNTEwMTAxMzE1MjZaFw0yNjEwMDkxMzIwMjZaMDMxMTAvBgNV BAMTKDJBMEE4NDkzRTYxQTdDNkJDMEJGQUM4MEY4RkI1OTBFRENBMzVBNUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDWWgPeemlvOMh+jy2GlWAeOhwi abccHFNQbluZGZrMGTbjPhp7MiWR+9yXGbbnOdOsm6FL3bZgQxyajg7AyVETN5Ce NLoYKFA1MvyuQjNvZtvpbCcJ/D5RspScKkOBnSmZRAk9xZmhwUGLBv1mliDUuUnK CrBbtAQYD0bZWMuUu7u2OO2kf/rZEA3vTxd4Ad60b/Rb9i6bmNkadcuV+WjvCN6H 5M/i1FzQXAmn8qtZwDPKQ6r6RGpFPDQiSWeq+nIrl9F9d5WxtMVrR2e7aG4h6YbP VumdrbcG+/e3WDlQLc/1x2RmfxlK/qytaKeZ9hmIixbfXVejiSYj12QdowenAgMB AAGjggJ5MIICdTAdBgNVHQ4EFgQUKgqEk+YafGvAv6yA+PtZDtyjWlwwHwYDVR0j BBgwFoAU00YGlJ04XbQnFP5xJ0+smUjvJ5wwDgYDVR0PAQH/BAQDAgeAMIGIBgNV HR8EgYAwfjB8oHqgeIZ2cnN5bmM6Ly9yLm1hZ2VsbGFuLmlweG8uY29tL3JlcG8v NTI4YTIxOGYtYWQyOC00MGQyLWJkN2YtMzUwZWFkYTNkNzA1LTAvMC9EMzQ2MDY5 NDlEMzg1REI0MjcxNEZFNzEyNzRGQUM5OTQ4RUYyNzlDLmNybDCBngYIKwYBBQUH AQEEgZEwgY4wgYsGCCsGAQUFBzAChn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5y aXBlLm5ldC9yZXBvc2l0b3J5LzAwMmUwYmEzLWZlNjAtNDViMS05MTYwLTg2OGEy ZjhhNDNiMS8zL0QzNDYwNjk0OUQzODVEQjQyNzE0RkU3MTI3NEZBQzk5NDhFRjI3 OUMuY2VyMHIGCCsGAQUFBwELBGYwZDBiBggrBgEFBQcwC4ZWcnN5bmM6Ly9yLm1h Z2VsbGFuLmlweG8uY29tL3JlcG8vNTI4YTIxOGYtYWQyOC00MGQyLWJkN2YtMzUw ZWFkYTNkNzA1LTAvMC9BUzI2MjI4Ny5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEF BQcOAjBpBggrBgEFBQcBBwEB/wRaMFgwVgQCAAEwUAMEAFYmIDAMAwQAVia5AwQA Via6AwQBWXQ8AwQAWXQ/AwQAWXREAwQAWXSaAwQAWXSeAwQAWXTaAwQAWXT9AwQA WXVlAwQAWXWbAwQAWXX+MA0GCSqGSIb3DQEBCwUAA4IBAQBqyMLvRF9GXB42J+e5 53HwKcu/7U+bTTFrrJaWMpHGSJ1e35Szqbuy+OXVSUJzbA2TDSgjzSUuIqP/axh7 OuoBLk75pDJ4RiAl0Kz+9v5STWngq3tS6ZNbgKawJ8Rmvx+LNhYTmHVNB35xPCjB Ws3WwvG+SUspROttvhfDUN3NcdZN2+t7C2WuTWJKTIH7p9XKWvGlm5u7xW/n6zyP rzdFHXMypGVd6RTgptH8Vap0Lgye8ETBq0iczvmhOAlhA0q5QsxIyz5HU++4c8Fb lFes4FtsTfVYoKeYtCTaJ4+HbkSceqVLwxYRTh5hAp2gU0kPQZpQ0ksZtuksZhNT qRZL -----END CERTIFICATE-----Generated at Sun Oct 19 20:16:22 2025 by rpki-client