$ rpki-client -vvf r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/AS51847.roa File: AS51847.roa (raw, json) Hash identifier: 4b6uGB2BVEIrxL4K9/2Xm0tun2/fjhQi5MdlGEylO7o= Subject key identifier: E7:11:BA:5C:C8:53:DB:BA:D2:17:51:31:48:7E:92:E8:53:65:02:AF Certificate issuer: /CN=D34606949D385DB42714FE71274FAC9948EF279C Certificate serial: 33A08B4348A4A17BD54757C276A95BDF311041C4 Authority key identifier: D3:46:06:94:9D:38:5D:B4:27:14:FE:71:27:4F:AC:99:48:EF:27:9C Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/D34606949D385DB42714FE71274FAC9948EF279C.cer Subject info access: rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/AS51847.roa Signing time: Thu 14 Aug 2025 13:54:13 +0000 ROA not before: Thu 14 Aug 2025 13:49:13 +0000 ROA not after: Thu 13 Aug 2026 13:54:13 +0000 asID: 51847 IP address blocks: 89.116.88.0/23 maxlen: 23 89.116.88.0/23 maxlen: 24 Validation: OK Signature path: rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/D34606949D385DB42714FE71274FAC9948EF279C.crl rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/D34606949D385DB42714FE71274FAC9948EF279C.mft rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/D34606949D385DB42714FE71274FAC9948EF279C.cer rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/9DF85997B1B9B358E1C43F36765AA0A4A02144AE.crl rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/9DF85997B1B9B358E1C43F36765AA0A4A02144AE.mft rsync://rpki.ripe.net/repository/DEFAULT/nfhZl7G5s1jhxD82dlqgpKAhRK4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 24 Aug 2025 09:09:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 33:a0:8b:43:48:a4:a1:7b:d5:47:57:c2:76:a9:5b:df:31:10:41:c4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D34606949D385DB42714FE71274FAC9948EF279C Validity Not Before: Aug 14 13:49:13 2025 GMT Not After : Aug 13 13:54:13 2026 GMT Subject: CN=E711BA5CC853DBBAD2175131487E92E8536502AF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:52:e9:24:94:34:b4:55:30:51:df:ad:39:2e: 92:4d:fe:4a:fc:d3:55:62:63:57:60:79:f6:b7:4e: 95:c9:c6:53:d3:8d:2c:f6:5e:e5:4c:45:0b:1c:3d: 41:e0:c1:b3:a9:17:91:ad:d3:c0:36:7f:74:1e:70: 23:e2:62:6f:1b:27:a5:bf:63:e2:c1:f8:e0:de:c0: 6f:3f:71:b7:b5:c8:b3:fa:ad:ef:e0:7a:8b:88:fc: 42:ca:8d:49:4c:33:22:04:39:e4:cd:50:3d:6f:13: 9b:4c:2a:2d:9e:fb:b7:05:85:bf:17:24:e9:5b:d1: 76:7b:91:4d:af:ea:22:0d:fa:6b:71:b5:da:6e:ad: 69:9c:2a:ba:4e:12:e9:0a:f9:ee:72:0f:a4:32:87: 3f:46:38:83:91:a8:42:04:cd:84:97:f9:fb:93:02: a6:88:ca:3c:c0:ef:ad:75:2d:08:1d:a3:33:3e:67: 44:5c:cb:2a:11:52:a9:ef:3e:58:f0:5d:b0:c9:d5: 84:b9:d5:75:ba:84:2b:98:dc:0a:e1:98:d2:87:65: 03:81:d6:4e:15:c0:02:d2:74:0b:c7:f3:0c:8c:0b: e2:a2:0b:25:91:1c:56:be:62:71:ac:28:6f:48:9b: b9:70:75:68:d9:71:9f:66:97:fd:7f:2c:29:08:4e: b8:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:11:BA:5C:C8:53:DB:BA:D2:17:51:31:48:7E:92:E8:53:65:02:AF X509v3 Authority Key Identifier: keyid:D3:46:06:94:9D:38:5D:B4:27:14:FE:71:27:4F:AC:99:48:EF:27:9C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/D34606949D385DB42714FE71274FAC9948EF279C.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/D34606949D385DB42714FE71274FAC9948EF279C.cer Subject Information Access: Signed Object - URI:rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/AS51847.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 89.116.88.0/23 Signature Algorithm: sha256WithRSAEncryption 2a:ba:bb:c7:de:8a:3a:6f:f7:49:b3:59:25:38:6b:92:aa:19: 55:d5:64:8b:20:fe:e0:f7:a2:15:12:4f:37:3e:ba:0c:4b:4e: ab:38:c9:ff:05:5b:2f:28:18:c8:c4:5e:20:78:b5:61:71:60: dd:80:95:c3:79:20:dd:fa:dd:29:78:ab:b4:39:b1:60:06:d0: 13:e3:c4:d4:d6:2e:48:ad:61:0e:9f:cc:84:ea:b2:49:e1:01: 54:0e:4c:4c:c5:04:cf:f7:9b:99:a5:1f:6e:0a:24:32:fb:79: 47:aa:80:1d:d7:8d:66:cc:d3:19:35:f5:76:d0:c2:a0:6e:5b: fe:a4:5b:15:be:be:1b:4f:35:fb:97:9a:9e:38:34:d0:85:6a: d4:ee:eb:55:c3:5e:12:60:77:1b:ad:65:64:3f:13:85:81:6d: 82:fa:1c:88:09:cd:11:a1:3f:32:2a:ff:36:9c:f0:32:4f:f7: f7:1e:bc:0e:7d:72:18:69:22:9d:83:84:40:e4:b6:1e:d1:49: 31:5d:69:74:4d:46:c8:7c:31:71:e2:71:f9:f9:65:95:1e:f2: f3:50:9f:40:29:ca:e8:89:0d:7e:2a:bb:43:2e:e6:e8:14:e8: f4:3c:6d:f8:9b:13:00:c4:e5:29:d8:b9:8c:29:6d:5a:9d:f4: 51:a3:6a:25 -----BEGIN CERTIFICATE----- MIIFJDCCBAygAwIBAgIUM6CLQ0ikoXvVR1fCdqlb3zEQQcQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDM0NjA2OTQ5RDM4NURCNDI3MTRGRTcxMjc0RkFDOTk0 OEVGMjc5QzAeFw0yNTA4MTQxMzQ5MTNaFw0yNjA4MTMxMzU0MTNaMDMxMTAvBgNV BAMTKEU3MTFCQTVDQzg1M0RCQkFEMjE3NTEzMTQ4N0U5MkU4NTM2NTAyQUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDLUukklDS0VTBR3605LpJN/kr8 01ViY1dgefa3TpXJxlPTjSz2XuVMRQscPUHgwbOpF5Gt08A2f3QecCPiYm8bJ6W/ Y+LB+ODewG8/cbe1yLP6re/geouI/ELKjUlMMyIEOeTNUD1vE5tMKi2e+7cFhb8X JOlb0XZ7kU2v6iIN+mtxtdpurWmcKrpOEukK+e5yD6Qyhz9GOIORqEIEzYSX+fuT AqaIyjzA7611LQgdozM+Z0RcyyoRUqnvPljwXbDJ1YS51XW6hCuY3ArhmNKHZQOB 1k4VwALSdAvH8wyMC+KiCyWRHFa+YnGsKG9Im7lwdWjZcZ9ml/1/LCkITrgZAgMB AAGjggIuMIICKjAdBgNVHQ4EFgQU5xG6XMhT27rSF1ExSH6S6FNlAq8wHwYDVR0j BBgwFoAU00YGlJ04XbQnFP5xJ0+smUjvJ5wwDgYDVR0PAQH/BAQDAgeAMIGIBgNV HR8EgYAwfjB8oHqgeIZ2cnN5bmM6Ly9yLm1hZ2VsbGFuLmlweG8uY29tL3JlcG8v NTI4YTIxOGYtYWQyOC00MGQyLWJkN2YtMzUwZWFkYTNkNzA1LTAvMC9EMzQ2MDY5 NDlEMzg1REI0MjcxNEZFNzEyNzRGQUM5OTQ4RUYyNzlDLmNybDCBngYIKwYBBQUH AQEEgZEwgY4wgYsGCCsGAQUFBzAChn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5y aXBlLm5ldC9yZXBvc2l0b3J5LzAwMmUwYmEzLWZlNjAtNDViMS05MTYwLTg2OGEy ZjhhNDNiMS8zL0QzNDYwNjk0OUQzODVEQjQyNzE0RkU3MTI3NEZBQzk5NDhFRjI3 OUMuY2VyMHEGCCsGAQUFBwELBGUwYzBhBggrBgEFBQcwC4ZVcnN5bmM6Ly9yLm1h Z2VsbGFuLmlweG8uY29tL3JlcG8vNTI4YTIxOGYtYWQyOC00MGQyLWJkN2YtMzUw ZWFkYTNkNzA1LTAvMC9BUzUxODQ3LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBWXRYMA0GCSqGSIb3DQEB CwUAA4IBAQAqurvH3oo6b/dJs1klOGuSqhlV1WSLIP7g96IVEk83ProMS06rOMn/ BVsvKBjIxF4geLVhcWDdgJXDeSDd+t0peKu0ObFgBtAT48TU1i5IrWEOn8yE6rJJ 4QFUDkxMxQTP95uZpR9uCiQy+3lHqoAd141mzNMZNfV20MKgblv+pFsVvr4bTzX7 l5qeODTQhWrU7utVw14SYHcbrWVkPxOFgW2C+hyICc0RoT8yKv82nPAyT/f3HrwO fXIYaSKdg4RA5LYe0UkxXWl0TUbIfDFx4nH5+WWVHvLzUJ9AKcroiQ1+KrtDLubo FOj0PG34mxMAxOUp2LmMKW1anfRRo2ol -----END CERTIFICATE-----Generated at Sat Aug 23 18:27:06 2025 by rpki-client