$ rpki-client -vvf r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/AS40021.roa File: AS40021.roa (raw, json) Hash identifier: v9oT2LPxFQq9f8wEnn/6k1wh9+bqIbFnPWFLXXykSPA= Subject key identifier: 09:38:E4:7F:DA:88:3C:BE:8C:1A:59:69:AF:FD:E7:5A:61:D1:07:58 Certificate issuer: /CN=D34606949D385DB42714FE71274FAC9948EF279C Certificate serial: 3C2DA4B36C86C8C7EE283532AFF2467103B1E4A4 Authority key identifier: D3:46:06:94:9D:38:5D:B4:27:14:FE:71:27:4F:AC:99:48:EF:27:9C Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/D34606949D385DB42714FE71274FAC9948EF279C.cer Subject info access: rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/AS40021.roa Signing time: Fri 27 Jun 2025 14:54:11 +0000 ROA not before: Fri 27 Jun 2025 14:49:11 +0000 ROA not after: Fri 26 Jun 2026 14:54:11 +0000 asID: 40021 IP address blocks: 89.117.16.0/21 maxlen: 21 89.117.72.0/21 maxlen: 24 89.117.144.0/21 maxlen: 21 Validation: OK Signature path: rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/D34606949D385DB42714FE71274FAC9948EF279C.crl rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/D34606949D385DB42714FE71274FAC9948EF279C.mft rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/D34606949D385DB42714FE71274FAC9948EF279C.cer rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/9DF85997B1B9B358E1C43F36765AA0A4A02144AE.crl rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/9DF85997B1B9B358E1C43F36765AA0A4A02144AE.mft rsync://rpki.ripe.net/repository/DEFAULT/nfhZl7G5s1jhxD82dlqgpKAhRK4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 02 Jul 2025 08:57:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3c:2d:a4:b3:6c:86:c8:c7:ee:28:35:32:af:f2:46:71:03:b1:e4:a4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D34606949D385DB42714FE71274FAC9948EF279C Validity Not Before: Jun 27 14:49:11 2025 GMT Not After : Jun 26 14:54:11 2026 GMT Subject: CN=0938E47FDA883CBE8C1A5969AFFDE75A61D10758 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:22:6d:d6:07:a4:56:0e:35:89:68:a2:18:05: 9d:10:8c:cc:34:d3:b5:e7:ec:1e:a1:de:38:60:f3: 4f:f8:87:62:67:94:0f:ed:75:f2:08:8a:0c:a0:4e: d2:9d:00:ad:e3:db:5f:4f:0d:ad:ec:e1:41:d3:79: 33:76:4b:9e:41:66:94:18:fb:40:ad:63:2e:f4:68: 3b:b8:dd:a3:71:c8:50:e4:ba:40:2b:82:37:52:80: ae:fb:2f:64:48:b4:98:ab:ab:5a:b2:0a:5a:41:ec: b4:87:14:bb:e4:cc:c2:32:11:14:b7:6e:52:fc:d0: 67:cb:f4:83:fb:6c:76:25:6f:f0:ef:49:2f:9d:02: 36:30:3e:ac:90:12:ac:78:c5:cc:2f:0f:8a:e0:a7: 22:37:36:a5:52:54:eb:92:de:1a:3f:bf:6a:d5:e6: 60:48:9d:13:a6:91:6a:8e:53:f8:12:7a:78:a4:f4: db:7c:7e:53:3f:19:b2:43:48:03:5e:78:bc:f2:ed: cb:99:94:0e:e5:50:82:3e:86:c7:c7:af:0d:6a:d9: e6:87:07:0e:6b:ff:57:e2:8f:c2:d7:b4:6f:ff:22: db:e4:22:3c:78:a5:36:50:17:d7:25:28:05:a7:68: 68:1a:80:e0:20:e8:3d:6f:ab:e4:1b:ce:8e:47:65: 53:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:38:E4:7F:DA:88:3C:BE:8C:1A:59:69:AF:FD:E7:5A:61:D1:07:58 X509v3 Authority Key Identifier: keyid:D3:46:06:94:9D:38:5D:B4:27:14:FE:71:27:4F:AC:99:48:EF:27:9C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/D34606949D385DB42714FE71274FAC9948EF279C.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/D34606949D385DB42714FE71274FAC9948EF279C.cer Subject Information Access: Signed Object - URI:rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/AS40021.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 89.117.16.0/21 89.117.72.0/21 89.117.144.0/21 Signature Algorithm: sha256WithRSAEncryption 91:99:76:78:aa:7a:23:7e:e8:d8:af:24:b7:0f:54:8b:53:ca: 81:45:f0:e1:a5:20:42:0b:90:69:b3:78:67:d4:1d:52:6a:5b: 5d:92:85:98:5a:92:38:35:b0:be:e0:4e:62:91:9b:22:2e:99: 23:98:b9:a6:04:c9:7f:cc:81:4b:14:a2:48:aa:38:ae:b0:c2: 5e:5d:ad:e0:ce:48:1f:cd:29:f4:96:e5:7f:77:4b:a3:35:41: 8b:9f:c7:60:70:80:e5:06:f1:35:03:4b:47:90:ca:d1:fc:79: ba:75:91:3f:d0:a0:5e:22:d4:a4:4d:f8:d6:39:60:bc:1a:97: 94:71:7d:0b:59:c6:61:fd:12:cc:59:9b:1a:72:bd:75:da:b2: 54:49:9e:41:28:00:97:84:42:47:45:1d:22:23:59:9d:8c:b5: f2:94:11:c7:73:83:63:1a:ba:c3:57:1d:2a:da:37:91:a1:a4: 3a:b8:69:03:a1:af:95:78:c2:b5:66:8b:5c:a3:7d:82:ff:1d: 38:6f:40:b1:35:66:ea:7c:b4:32:8b:8a:dd:f4:3e:96:c5:f5: ec:5c:63:01:a7:54:5b:3f:48:eb:8d:c3:7b:6d:4b:8b:90:a2: 30:53:d7:68:0e:38:d5:15:f6:35:89:58:ce:24:7e:0d:41:ea: 45:6a:57:9b -----BEGIN CERTIFICATE----- MIIFMDCCBBigAwIBAgIUPC2ks2yGyMfuKDUyr/JGcQOx5KQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDM0NjA2OTQ5RDM4NURCNDI3MTRGRTcxMjc0RkFDOTk0 OEVGMjc5QzAeFw0yNTA2MjcxNDQ5MTFaFw0yNjA2MjYxNDU0MTFaMDMxMTAvBgNV BAMTKDA5MzhFNDdGREE4ODNDQkU4QzFBNTk2OUFGRkRFNzVBNjFEMTA3NTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2Im3WB6RWDjWJaKIYBZ0QjMw0 07Xn7B6h3jhg80/4h2JnlA/tdfIIigygTtKdAK3j219PDa3s4UHTeTN2S55BZpQY +0CtYy70aDu43aNxyFDkukArgjdSgK77L2RItJirq1qyClpB7LSHFLvkzMIyERS3 blL80GfL9IP7bHYlb/DvSS+dAjYwPqyQEqx4xcwvD4rgpyI3NqVSVOuS3ho/v2rV 5mBInROmkWqOU/gSenik9Nt8flM/GbJDSANeeLzy7cuZlA7lUII+hsfHrw1q2eaH Bw5r/1fij8LXtG//ItvkIjx4pTZQF9clKAWnaGgagOAg6D1vq+Qbzo5HZVMPAgMB AAGjggI6MIICNjAdBgNVHQ4EFgQUCTjkf9qIPL6MGllpr/3nWmHRB1gwHwYDVR0j BBgwFoAU00YGlJ04XbQnFP5xJ0+smUjvJ5wwDgYDVR0PAQH/BAQDAgeAMIGIBgNV HR8EgYAwfjB8oHqgeIZ2cnN5bmM6Ly9yLm1hZ2VsbGFuLmlweG8uY29tL3JlcG8v NTI4YTIxOGYtYWQyOC00MGQyLWJkN2YtMzUwZWFkYTNkNzA1LTAvMC9EMzQ2MDY5 NDlEMzg1REI0MjcxNEZFNzEyNzRGQUM5OTQ4RUYyNzlDLmNybDCBngYIKwYBBQUH AQEEgZEwgY4wgYsGCCsGAQUFBzAChn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5y aXBlLm5ldC9yZXBvc2l0b3J5LzAwMmUwYmEzLWZlNjAtNDViMS05MTYwLTg2OGEy ZjhhNDNiMS8zL0QzNDYwNjk0OUQzODVEQjQyNzE0RkU3MTI3NEZBQzk5NDhFRjI3 OUMuY2VyMHEGCCsGAQUFBwELBGUwYzBhBggrBgEFBQcwC4ZVcnN5bmM6Ly9yLm1h Z2VsbGFuLmlweG8uY29tL3JlcG8vNTI4YTIxOGYtYWQyOC00MGQyLWJkN2YtMzUw ZWFkYTNkNzA1LTAvMC9BUzQwMDIxLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQDWXUQAwQDWXVIAwQDWXWQ MA0GCSqGSIb3DQEBCwUAA4IBAQCRmXZ4qnojfujYryS3D1SLU8qBRfDhpSBCC5Bp s3hn1B1SaltdkoWYWpI4NbC+4E5ikZsiLpkjmLmmBMl/zIFLFKJIqjiusMJeXa3g zkgfzSn0luV/d0ujNUGLn8dgcIDlBvE1A0tHkMrR/Hm6dZE/0KBeItSkTfjWOWC8 GpeUcX0LWcZh/RLMWZsacr112rJUSZ5BKACXhEJHRR0iI1mdjLXylBHHc4NjGrrD Vx0q2jeRoaQ6uGkDoa+VeMK1Zotco32C/x04b0CxNWbqfLQyi4rd9D6WxfXsXGMB p1RbP0jrjcN7bUuLkKIwU9doDjjVFfY1iVjOJH4NQepFaleb -----END CERTIFICATE-----Generated at Wed Jul 2 00:44:21 2025 by rpki-client