$ rpki-client -vvf r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/AS61317.roa File: AS61317.roa (raw, json) Hash identifier: 7Yx7nAQJ3fcQfEF/4draqb64poRg15mqo/ZDrZjfoeY= Subject key identifier: A1:B2:63:F9:1C:46:44:BD:66:C9:5A:2F:99:F3:41:62:90:B0:FC:0B Certificate issuer: /CN=D34606949D385DB42714FE71274FAC9948EF279C Certificate serial: 2E1D9D445C65D16E78721FA5B51515F86044C769 Authority key identifier: D3:46:06:94:9D:38:5D:B4:27:14:FE:71:27:4F:AC:99:48:EF:27:9C Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/D34606949D385DB42714FE71274FAC9948EF279C.cer Subject info access: rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/AS61317.roa Signing time: Tue 05 May 2026 00:06:17 +0000 ROA not before: Tue 05 May 2026 00:01:17 +0000 ROA not after: Tue 04 May 2027 00:06:17 +0000 asID: 61317 IP address blocks: 86.38.177.0/24 maxlen: 24 86.38.183.0/24 maxlen: 24 89.116.56.0/24 maxlen: 24 89.117.126.0/24 maxlen: 24 89.117.215.0/24 maxlen: 24 Validation: OK Signature path: rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/D34606949D385DB42714FE71274FAC9948EF279C.crl rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/D34606949D385DB42714FE71274FAC9948EF279C.mft rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/D34606949D385DB42714FE71274FAC9948EF279C.cer rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/9DF85997B1B9B358E1C43F36765AA0A4A02144AE.crl rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/9DF85997B1B9B358E1C43F36765AA0A4A02144AE.mft rsync://rpki.ripe.net/repository/DEFAULT/nfhZl7G5s1jhxD82dlqgpKAhRK4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 13 May 2026 14:18:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2e:1d:9d:44:5c:65:d1:6e:78:72:1f:a5:b5:15:15:f8:60:44:c7:69 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D34606949D385DB42714FE71274FAC9948EF279C Validity Not Before: May 5 00:01:17 2026 GMT Not After : May 4 00:06:17 2027 GMT Subject: CN=A1B263F91C4644BD66C95A2F99F3416290B0FC0B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:6f:63:03:21:2a:a7:69:dd:3f:b0:5a:97:08: 16:53:11:b0:7b:5d:0e:52:78:97:58:d2:a9:e3:16: a6:2b:3d:55:3d:c1:e3:a1:8f:26:7b:5a:7b:3c:c8: 12:3f:9b:06:ce:74:9b:4a:c4:c5:fb:20:fe:76:68: 7d:0a:95:f4:58:13:dc:5f:32:ca:db:d9:fb:6c:bc: a9:ca:e8:e8:e3:c0:f5:52:b4:4a:6a:48:da:6e:bd: 05:0b:ab:9f:01:63:98:82:5f:f8:94:2f:b4:25:9a: 40:c4:02:18:0d:24:74:43:8b:75:70:2b:1f:82:da: 2a:13:c2:bb:4d:51:d4:7a:cd:76:62:17:45:24:d3: ae:82:b8:2d:43:93:bc:cb:86:6a:bc:2a:eb:5d:55: 8a:df:71:5d:e3:31:5d:d9:c8:77:8f:40:05:67:5b: e8:4c:32:d5:1f:e5:a2:3f:b7:67:5c:2e:fd:20:8d: 77:92:08:bf:a1:e9:bc:6f:71:5d:8b:20:af:cd:d2: b7:81:57:88:cb:35:36:53:74:90:3b:57:d5:22:d5: 16:a9:29:33:a8:41:a4:01:68:73:20:ee:46:1d:b6: 51:27:14:8a:21:4e:41:c1:26:6b:1a:5b:ab:ff:af: ba:1b:f9:06:a6:ba:78:39:c5:dc:b1:21:7c:31:b5: 11:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:B2:63:F9:1C:46:44:BD:66:C9:5A:2F:99:F3:41:62:90:B0:FC:0B X509v3 Authority Key Identifier: keyid:D3:46:06:94:9D:38:5D:B4:27:14:FE:71:27:4F:AC:99:48:EF:27:9C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/D34606949D385DB42714FE71274FAC9948EF279C.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/D34606949D385DB42714FE71274FAC9948EF279C.cer Subject Information Access: Signed Object - URI:rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/AS61317.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 86.38.177.0/24 86.38.183.0/24 89.116.56.0/24 89.117.126.0/24 89.117.215.0/24 Signature Algorithm: sha256WithRSAEncryption 2b:7f:e3:01:57:51:71:7f:1f:32:41:25:69:ab:d3:a0:7d:f0: a8:5a:86:13:61:04:09:c8:ba:37:ce:18:46:4b:01:49:bd:fd: f0:44:3b:2c:5e:53:45:59:7e:4a:fc:81:28:3a:6f:63:04:8a: bc:19:fe:2c:3d:2f:3b:6c:37:87:c3:46:fe:8b:47:ff:14:f8: d4:c1:bf:20:26:3e:32:ec:d9:40:73:7a:2b:cb:b4:ab:09:46: e8:91:32:3b:f3:51:ad:0d:a5:a4:b8:36:b5:44:7d:50:8c:01: d2:47:4b:1c:dc:61:be:4b:c7:78:d0:f5:41:4f:4d:9d:5a:71: 35:7d:39:d8:f0:e5:e2:b7:e2:1f:c2:a7:17:87:94:2c:a2:31: 1e:2f:59:14:f0:57:a4:67:09:a1:25:2b:6e:72:b7:f9:4a:e7: 43:a5:93:97:a6:47:88:25:14:85:3e:4e:bf:e5:9b:e5:e2:6c: 79:e2:8e:bb:5e:b7:f1:34:1b:3d:45:6e:b7:62:60:ae:93:9f: 98:80:d9:49:f1:5f:53:4c:e8:7c:7a:e3:20:bc:4b:0b:ed:44: 05:ea:a3:b3:ab:d7:e4:fb:2b:f8:b5:fd:60:ac:f8:89:ea:f3: 3c:86:bd:65:39:d0:d2:64:e1:81:3e:f5:92:de:eb:bb:fa:f1: 40:11:49:3b -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgIULh2dRFxl0W54ch+ltRUV+GBEx2kwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDM0NjA2OTQ5RDM4NURCNDI3MTRGRTcxMjc0RkFDOTk0 OEVGMjc5QzAeFw0yNjA1MDUwMDAxMTdaFw0yNzA1MDQwMDA2MTdaMDMxMTAvBgNV BAMTKEExQjI2M0Y5MUM0NjQ0QkQ2NkM5NUEyRjk5RjM0MTYyOTBCMEZDMEIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDAb2MDISqnad0/sFqXCBZTEbB7 XQ5SeJdY0qnjFqYrPVU9weOhjyZ7Wns8yBI/mwbOdJtKxMX7IP52aH0KlfRYE9xf Msrb2ftsvKnK6OjjwPVStEpqSNpuvQULq58BY5iCX/iUL7QlmkDEAhgNJHRDi3Vw Kx+C2ioTwrtNUdR6zXZiF0Uk066CuC1Dk7zLhmq8KutdVYrfcV3jMV3ZyHePQAVn W+hMMtUf5aI/t2dcLv0gjXeSCL+h6bxvcV2LIK/N0reBV4jLNTZTdJA7V9Ui1Rap KTOoQaQBaHMg7kYdtlEnFIohTkHBJmsaW6v/r7ob+Qamung5xdyxIXwxtRExAgMB AAGjggJGMIICQjAdBgNVHQ4EFgQUobJj+RxGRL1myVovmfNBYpCw/AswHwYDVR0j BBgwFoAU00YGlJ04XbQnFP5xJ0+smUjvJ5wwDgYDVR0PAQH/BAQDAgeAMIGIBgNV HR8EgYAwfjB8oHqgeIZ2cnN5bmM6Ly9yLm1hZ2VsbGFuLmlweG8uY29tL3JlcG8v NTI4YTIxOGYtYWQyOC00MGQyLWJkN2YtMzUwZWFkYTNkNzA1LTAvMC9EMzQ2MDY5 NDlEMzg1REI0MjcxNEZFNzEyNzRGQUM5OTQ4RUYyNzlDLmNybDCBngYIKwYBBQUH AQEEgZEwgY4wgYsGCCsGAQUFBzAChn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5y aXBlLm5ldC9yZXBvc2l0b3J5LzAwMmUwYmEzLWZlNjAtNDViMS05MTYwLTg2OGEy ZjhhNDNiMS8zL0QzNDYwNjk0OUQzODVEQjQyNzE0RkU3MTI3NEZBQzk5NDhFRjI3 OUMuY2VyMHEGCCsGAQUFBwELBGUwYzBhBggrBgEFBQcwC4ZVcnN5bmM6Ly9yLm1h Z2VsbGFuLmlweG8uY29tL3JlcG8vNTI4YTIxOGYtYWQyOC00MGQyLWJkN2YtMzUw ZWFkYTNkNzA1LTAvMC9BUzYxMzE3LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMDcGCCsGAQUFBwEHAQH/BCgwJjAkBAIAATAeAwQAViaxAwQAVia3AwQAWXQ4 AwQAWXV+AwQAWXXXMA0GCSqGSIb3DQEBCwUAA4IBAQArf+MBV1Fxfx8yQSVpq9Og ffCoWoYTYQQJyLo3zhhGSwFJvf3wRDssXlNFWX5K/IEoOm9jBIq8Gf4sPS87bDeH w0b+i0f/FPjUwb8gJj4y7NlAc3ory7SrCUbokTI781GtDaWkuDa1RH1QjAHSR0sc 3GG+S8d40PVBT02dWnE1fTnY8OXit+IfwqcXh5QsojEeL1kU8FekZwmhJStucrf5 SudDpZOXpkeIJRSFPk6/5Zvl4mx54o67XrfxNBs9RW63YmCuk5+YgNlJ8V9TTOh8 euMgvEsL7UQF6qOzq9fk+yv4tf1grPiJ6vM8hr1lOdDSZOGBPvWS3uu7+vFAEUk7 -----END CERTIFICATE-----Generated at Tue May 12 22:29:55 2026 by rpki-client