$ rpki-client -vvf r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/AS397630.roa File: AS397630.roa (raw, json) Hash identifier: 1IIHBg0qGft5cN2DTSZqwX8NDBeJ6cfp9tm30FyjmVU= Subject key identifier: 48:FF:15:6E:76:07:AD:93:53:DF:ED:CD:D4:B5:89:91:73:B7:5C:3E Certificate issuer: /CN=D34606949D385DB42714FE71274FAC9948EF279C Certificate serial: 42F3D37BCD1EA2CCDCC5D98B0D730A58E8CAA3AF Authority key identifier: D3:46:06:94:9D:38:5D:B4:27:14:FE:71:27:4F:AC:99:48:EF:27:9C Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/D34606949D385DB42714FE71274FAC9948EF279C.cer Subject info access: rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/AS397630.roa Signing time: Tue 19 Aug 2025 16:58:03 +0000 ROA not before: Tue 19 Aug 2025 16:53:03 +0000 ROA not after: Tue 18 Aug 2026 16:58:03 +0000 asID: 397630 IP address blocks: 86.38.156.0/24 maxlen: 24 86.38.255.0/24 maxlen: 24 Validation: OK Signature path: rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/D34606949D385DB42714FE71274FAC9948EF279C.crl rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/D34606949D385DB42714FE71274FAC9948EF279C.mft rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/D34606949D385DB42714FE71274FAC9948EF279C.cer rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/9DF85997B1B9B358E1C43F36765AA0A4A02144AE.crl rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/9DF85997B1B9B358E1C43F36765AA0A4A02144AE.mft rsync://rpki.ripe.net/repository/DEFAULT/nfhZl7G5s1jhxD82dlqgpKAhRK4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 24 Aug 2025 09:09:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 42:f3:d3:7b:cd:1e:a2:cc:dc:c5:d9:8b:0d:73:0a:58:e8:ca:a3:af Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D34606949D385DB42714FE71274FAC9948EF279C Validity Not Before: Aug 19 16:53:03 2025 GMT Not After : Aug 18 16:58:03 2026 GMT Subject: CN=48FF156E7607AD9353DFEDCDD4B5899173B75C3E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:f2:02:72:39:4d:fc:97:d0:87:79:5e:7c:53: e3:de:fb:af:b3:ae:06:9a:b7:c7:c2:21:50:c3:01: 04:0c:fe:50:97:4f:1e:0f:91:4e:11:04:fd:a1:59: c0:fa:d4:80:e6:e7:20:90:64:9e:33:20:20:e7:56: 7b:3d:af:f7:13:52:75:d8:21:b0:15:b8:57:e6:4e: 1a:fb:16:74:fd:22:a6:d4:0f:c9:53:03:f6:fb:01: 8c:f7:fe:3a:7e:8d:ff:01:f8:56:b9:42:19:33:28: 50:ca:b6:38:21:41:b2:8a:ad:9c:71:67:0d:2e:75: 59:4b:77:88:d6:85:25:e2:20:50:f6:82:7f:08:ba: 62:b1:33:cb:06:de:c6:0a:03:2f:c9:31:e4:57:c2: fe:88:a9:bb:00:c0:31:76:99:4d:9f:d6:b2:43:13: 3a:af:c3:71:f3:26:19:e4:7c:f1:89:92:34:19:d5: 6a:6c:99:3d:cb:8e:10:5a:55:7b:65:d8:66:e4:47: cf:c4:6b:9e:ec:5f:20:fe:96:b0:40:a1:30:32:6a: c2:79:92:40:34:33:06:22:04:93:b3:81:2b:6b:2b: 62:eb:9e:da:0c:77:46:bf:21:de:3b:e3:30:5a:7d: 58:1d:0b:6e:54:33:eb:65:96:bf:d1:a3:79:49:b2: c4:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:FF:15:6E:76:07:AD:93:53:DF:ED:CD:D4:B5:89:91:73:B7:5C:3E X509v3 Authority Key Identifier: keyid:D3:46:06:94:9D:38:5D:B4:27:14:FE:71:27:4F:AC:99:48:EF:27:9C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/D34606949D385DB42714FE71274FAC9948EF279C.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/D34606949D385DB42714FE71274FAC9948EF279C.cer Subject Information Access: Signed Object - URI:rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/AS397630.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 86.38.156.0/24 86.38.255.0/24 Signature Algorithm: sha256WithRSAEncryption 45:d3:d5:16:e1:11:69:ca:82:ce:62:0b:b0:7a:4e:45:b8:d4: cd:de:20:b0:e5:85:97:58:92:d1:e3:3f:47:62:70:c3:8d:e7: d2:75:9b:47:fe:38:0c:84:92:e2:bf:74:43:38:b4:99:e1:c1: d3:8e:e0:97:8b:dc:37:64:24:e6:5c:e4:06:a3:84:a3:79:c9: 63:bd:37:46:6a:d1:1e:e7:0e:c1:d0:4e:4c:cb:89:d8:18:a4: 6a:41:65:0a:bf:f1:3c:1f:ef:ae:de:53:86:57:ab:e5:02:bd: b3:7b:61:02:ae:e5:df:87:10:ed:3b:78:56:f7:86:de:9a:30: d4:42:8e:87:5f:15:b1:8f:16:23:de:c3:49:9e:1c:df:79:82: 2b:cf:cd:ee:b3:a1:d7:3c:8b:26:3d:90:cd:8c:49:02:b0:6d: a8:8f:47:b9:d2:f9:f8:e1:79:ae:25:c9:c8:40:a7:d7:37:6f: c1:3f:7d:6d:58:a8:54:b5:34:b7:84:77:01:6d:73:6e:87:55: 49:c4:91:09:86:7f:9d:94:42:fd:50:84:42:c3:87:6f:0c:76: 6b:d9:39:81:1d:85:af:f1:96:4e:47:bb:15:87:20:a5:66:1b: 6b:0a:01:e7:89:39:2d:49:29:36:0f:3e:34:a8:85:bc:ac:26: 06:60:44:c1 -----BEGIN CERTIFICATE----- MIIFKzCCBBOgAwIBAgIUQvPTe80eoszcxdmLDXMKWOjKo68wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDM0NjA2OTQ5RDM4NURCNDI3MTRGRTcxMjc0RkFDOTk0 OEVGMjc5QzAeFw0yNTA4MTkxNjUzMDNaFw0yNjA4MTgxNjU4MDNaMDMxMTAvBgNV BAMTKDQ4RkYxNTZFNzYwN0FEOTM1M0RGRURDREQ0QjU4OTkxNzNCNzVDM0UwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC98gJyOU38l9CHeV58U+Pe+6+z rgaat8fCIVDDAQQM/lCXTx4PkU4RBP2hWcD61IDm5yCQZJ4zICDnVns9r/cTUnXY IbAVuFfmThr7FnT9IqbUD8lTA/b7AYz3/jp+jf8B+Fa5QhkzKFDKtjghQbKKrZxx Zw0udVlLd4jWhSXiIFD2gn8IumKxM8sG3sYKAy/JMeRXwv6IqbsAwDF2mU2f1rJD Ezqvw3HzJhnkfPGJkjQZ1WpsmT3LjhBaVXtl2GbkR8/Ea57sXyD+lrBAoTAyasJ5 kkA0MwYiBJOzgStrK2LrntoMd0a/Id474zBafVgdC25UM+tllr/Ro3lJssTnAgMB AAGjggI1MIICMTAdBgNVHQ4EFgQUSP8VbnYHrZNT3+3N1LWJkXO3XD4wHwYDVR0j BBgwFoAU00YGlJ04XbQnFP5xJ0+smUjvJ5wwDgYDVR0PAQH/BAQDAgeAMIGIBgNV HR8EgYAwfjB8oHqgeIZ2cnN5bmM6Ly9yLm1hZ2VsbGFuLmlweG8uY29tL3JlcG8v NTI4YTIxOGYtYWQyOC00MGQyLWJkN2YtMzUwZWFkYTNkNzA1LTAvMC9EMzQ2MDY5 NDlEMzg1REI0MjcxNEZFNzEyNzRGQUM5OTQ4RUYyNzlDLmNybDCBngYIKwYBBQUH AQEEgZEwgY4wgYsGCCsGAQUFBzAChn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5y aXBlLm5ldC9yZXBvc2l0b3J5LzAwMmUwYmEzLWZlNjAtNDViMS05MTYwLTg2OGEy ZjhhNDNiMS8zL0QzNDYwNjk0OUQzODVEQjQyNzE0RkU3MTI3NEZBQzk5NDhFRjI3 OUMuY2VyMHIGCCsGAQUFBwELBGYwZDBiBggrBgEFBQcwC4ZWcnN5bmM6Ly9yLm1h Z2VsbGFuLmlweG8uY29tL3JlcG8vNTI4YTIxOGYtYWQyOC00MGQyLWJkN2YtMzUw ZWFkYTNkNzA1LTAvMC9BUzM5NzYzMC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEF BQcOAjAlBggrBgEFBQcBBwEB/wQWMBQwEgQCAAEwDAMEAFYmnAMEAFYm/zANBgkq hkiG9w0BAQsFAAOCAQEARdPVFuERacqCzmILsHpORbjUzd4gsOWFl1iS0eM/R2Jw w43n0nWbR/44DISS4r90Qzi0meHB047gl4vcN2Qk5lzkBqOEo3nJY703RmrRHucO wdBOTMuJ2BikakFlCr/xPB/vrt5Thler5QK9s3thAq7l34cQ7Tt4VveG3pow1EKO h18VsY8WI97DSZ4c33mCK8/N7rOh1zyLJj2QzYxJArBtqI9HudL5+OF5riXJyECn 1zdvwT99bVioVLU0t4R3AW1zbodVScSRCYZ/nZRC/VCEQsOHbwx2a9k5gR2Fr/GW Tke7FYcgpWYbawoB54k5LUkpNg8+NKiFvKwmBmBEwQ== -----END CERTIFICATE-----Generated at Sat Aug 23 16:34:29 2025 by rpki-client