$ rpki-client -vvf r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/AS834.roa File: AS834.roa (raw, json) Hash identifier: m/dX4hFRgbfICBHNMpexspzMTbFxySMAM4iGf43gsC4= Subject key identifier: 50:8E:50:A5:4C:21:E9:74:A8:83:5F:7D:C0:AD:90:BC:0B:25:62:3F Certificate issuer: /CN=D34606949D385DB42714FE71274FAC9948EF279C Certificate serial: 2A166D59FFEFA99A07409ABD42AAC5FE1CFAFA3E Authority key identifier: D3:46:06:94:9D:38:5D:B4:27:14:FE:71:27:4F:AC:99:48:EF:27:9C Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/D34606949D385DB42714FE71274FAC9948EF279C.cer Subject info access: rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/AS834.roa Signing time: Tue 19 Aug 2025 16:57:58 +0000 ROA not before: Tue 19 Aug 2025 16:52:58 +0000 ROA not after: Tue 18 Aug 2026 16:57:58 +0000 asID: 834 IP address blocks: 84.46.236.0/22 maxlen: 24 86.38.180.0/23 maxlen: 24 86.38.182.0/23 maxlen: 24 89.116.64.0/22 maxlen: 24 89.116.72.0/23 maxlen: 24 89.116.148.0/23 maxlen: 23 89.116.210.0/23 maxlen: 23 89.117.0.0/22 maxlen: 24 89.117.12.0/23 maxlen: 24 89.117.94.0/23 maxlen: 24 89.117.96.0/22 maxlen: 24 89.117.112.0/22 maxlen: 22 89.117.120.0/22 maxlen: 24 89.117.132.0/22 maxlen: 22 89.117.142.0/23 maxlen: 24 89.117.158.0/23 maxlen: 24 89.117.172.0/22 maxlen: 24 89.117.216.0/23 maxlen: 23 Validation: OK Signature path: rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/D34606949D385DB42714FE71274FAC9948EF279C.crl rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/D34606949D385DB42714FE71274FAC9948EF279C.mft rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/D34606949D385DB42714FE71274FAC9948EF279C.cer rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/9DF85997B1B9B358E1C43F36765AA0A4A02144AE.crl rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/9DF85997B1B9B358E1C43F36765AA0A4A02144AE.mft rsync://rpki.ripe.net/repository/DEFAULT/nfhZl7G5s1jhxD82dlqgpKAhRK4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 23 Aug 2025 15:02:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2a:16:6d:59:ff:ef:a9:9a:07:40:9a:bd:42:aa:c5:fe:1c:fa:fa:3e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D34606949D385DB42714FE71274FAC9948EF279C Validity Not Before: Aug 19 16:52:58 2025 GMT Not After : Aug 18 16:57:58 2026 GMT Subject: CN=508E50A54C21E974A8835F7DC0AD90BC0B25623F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:0c:3b:ad:7e:8e:1a:5d:22:15:6a:6f:49:c5: af:e4:eb:73:b9:8e:b6:b4:63:0c:f5:48:f2:78:5f: ba:65:67:b8:d8:c8:fa:11:61:72:22:4a:f1:c1:10: bb:40:b0:80:13:1c:8b:4e:62:77:41:0b:4b:17:94: 15:e0:9d:f7:0c:a4:34:4d:cc:90:9e:74:f5:2c:ab: 13:38:09:6d:37:3f:4d:21:34:bc:4f:0f:5d:fb:47: d1:1a:f6:34:ed:94:7b:5b:a8:4d:88:d6:06:5b:cd: 97:1f:27:77:db:9b:5b:5c:94:c3:a4:17:36:cd:e6: ee:89:ec:7b:0c:4b:0e:09:c1:b6:9c:e6:33:09:7d: 51:40:f9:e2:f3:bf:3e:e8:7c:ee:84:b8:9d:cf:e1: d9:04:2a:88:b6:bd:ee:2b:9e:b7:51:62:37:86:29: eb:84:d5:87:74:f5:02:3e:7d:17:17:cb:4b:37:55: fd:01:7b:bf:64:76:ca:9d:50:33:52:b4:25:33:f9: 7b:b7:0e:75:3b:c5:ad:fe:95:0c:76:b5:98:84:cf: f0:af:0e:cb:1c:65:08:10:d2:a4:d3:02:9d:2a:82: 6f:47:b5:fb:c9:8b:4d:46:1d:e0:ea:2f:0a:4d:43: 2b:ec:1b:08:15:35:3c:6a:b7:fd:75:09:77:9f:c2: 1a:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:8E:50:A5:4C:21:E9:74:A8:83:5F:7D:C0:AD:90:BC:0B:25:62:3F X509v3 Authority Key Identifier: keyid:D3:46:06:94:9D:38:5D:B4:27:14:FE:71:27:4F:AC:99:48:EF:27:9C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/D34606949D385DB42714FE71274FAC9948EF279C.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/D34606949D385DB42714FE71274FAC9948EF279C.cer Subject Information Access: Signed Object - URI:rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/AS834.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 84.46.236.0/22 86.38.180.0/22 89.116.64.0/22 89.116.72.0/23 89.116.148.0/23 89.116.210.0/23 89.117.0.0/22 89.117.12.0/23 89.117.94.0-89.117.99.255 89.117.112.0/22 89.117.120.0/22 89.117.132.0/22 89.117.142.0/23 89.117.158.0/23 89.117.172.0/22 89.117.216.0/23 Signature Algorithm: sha256WithRSAEncryption 80:f6:e0:70:ee:95:21:6a:61:ae:c5:9e:9b:a9:a1:88:33:ea: 6b:ae:46:b8:23:c0:d5:3f:90:33:60:4b:72:f4:94:8c:fc:cf: d0:f5:37:82:de:53:3b:66:f6:c2:04:62:e8:0e:9e:a8:a1:c4: 05:bb:c7:bd:65:11:5c:55:17:75:04:5b:4c:ff:a2:14:72:19: 9f:da:22:1c:52:88:3d:25:d2:f9:62:46:15:61:ea:41:47:66: 81:58:60:52:19:31:07:f6:11:e5:2f:9a:af:8c:c7:5e:5a:a7: 93:36:07:9c:cf:91:65:54:64:ea:4f:d0:ac:40:95:ce:b1:8d: 54:cf:40:4a:d2:62:33:7b:ed:a3:2e:b4:59:58:ca:6a:46:05: 0c:6a:d4:5b:75:5b:e1:63:d4:33:fc:dd:97:a0:78:b4:25:8f: da:19:a9:43:8b:30:8d:7c:fc:04:f5:da:ee:53:51:bb:66:34: 5b:40:96:c1:10:c2:ca:f8:15:6b:15:43:a5:77:6c:29:1f:05: b5:3b:bd:3d:3f:36:29:99:83:90:dc:a0:45:8d:62:44:37:3e: f9:30:18:48:ca:ad:4b:01:02:60:a5:ac:77:9d:a6:09:18:23: 0a:63:aa:1d:1a:df:02:d8:ff:63:09:52:63:41:02:d7:16:df: e6:5f:13:ee -----BEGIN CERTIFICATE----- MIIFhTCCBG2gAwIBAgIUKhZtWf/vqZoHQJq9QqrF/hz6+j4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDM0NjA2OTQ5RDM4NURCNDI3MTRGRTcxMjc0RkFDOTk0 OEVGMjc5QzAeFw0yNTA4MTkxNjUyNThaFw0yNjA4MTgxNjU3NThaMDMxMTAvBgNV BAMTKDUwOEU1MEE1NEMyMUU5NzRBODgzNUY3REMwQUQ5MEJDMEIyNTYyM0YwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDoDDutfo4aXSIVam9Jxa/k63O5 jra0Ywz1SPJ4X7plZ7jYyPoRYXIiSvHBELtAsIATHItOYndBC0sXlBXgnfcMpDRN zJCedPUsqxM4CW03P00hNLxPD137R9Ea9jTtlHtbqE2I1gZbzZcfJ3fbm1tclMOk FzbN5u6J7HsMSw4Jwbac5jMJfVFA+eLzvz7ofO6EuJ3P4dkEKoi2ve4rnrdRYjeG KeuE1Yd09QI+fRcXy0s3Vf0Be79kdsqdUDNStCUz+Xu3DnU7xa3+lQx2tZiEz/Cv DsscZQgQ0qTTAp0qgm9HtfvJi01GHeDqLwpNQyvsGwgVNTxqt/11CXefwhrDAgMB AAGjggKPMIICizAdBgNVHQ4EFgQUUI5QpUwh6XSog199wK2QvAslYj8wHwYDVR0j BBgwFoAU00YGlJ04XbQnFP5xJ0+smUjvJ5wwDgYDVR0PAQH/BAQDAgeAMIGIBgNV HR8EgYAwfjB8oHqgeIZ2cnN5bmM6Ly9yLm1hZ2VsbGFuLmlweG8uY29tL3JlcG8v NTI4YTIxOGYtYWQyOC00MGQyLWJkN2YtMzUwZWFkYTNkNzA1LTAvMC9EMzQ2MDY5 NDlEMzg1REI0MjcxNEZFNzEyNzRGQUM5OTQ4RUYyNzlDLmNybDCBngYIKwYBBQUH AQEEgZEwgY4wgYsGCCsGAQUFBzAChn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5y aXBlLm5ldC9yZXBvc2l0b3J5LzAwMmUwYmEzLWZlNjAtNDViMS05MTYwLTg2OGEy ZjhhNDNiMS8zL0QzNDYwNjk0OUQzODVEQjQyNzE0RkU3MTI3NEZBQzk5NDhFRjI3 OUMuY2VyMG8GCCsGAQUFBwELBGMwYTBfBggrBgEFBQcwC4ZTcnN5bmM6Ly9yLm1h Z2VsbGFuLmlweG8uY29tL3JlcG8vNTI4YTIxOGYtYWQyOC00MGQyLWJkN2YtMzUw ZWFkYTNkNzA1LTAvMC9BUzgzNC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcO AjCBgQYIKwYBBQUHAQcBAf8EcjBwMG4EAgABMGgDBAJULuwDBAJWJrQDBAJZdEAD BAFZdEgDBAFZdJQDBAFZdNIDBAJZdQADBAFZdQwwDAMEAVl1XgMEAll1YAMEAll1 cAMEAll1eAMEAll1hAMEAVl1jgMEAVl1ngMEAll1rAMEAVl12DANBgkqhkiG9w0B AQsFAAOCAQEAgPbgcO6VIWphrsWem6mhiDPqa65GuCPA1T+QM2BLcvSUjPzP0PU3 gt5TO2b2wgRi6A6eqKHEBbvHvWURXFUXdQRbTP+iFHIZn9oiHFKIPSXS+WJGFWHq QUdmgVhgUhkxB/YR5S+ar4zHXlqnkzYHnM+RZVRk6k/QrECVzrGNVM9AStJiM3vt oy60WVjKakYFDGrUW3Vb4WPUM/zdl6B4tCWP2hmpQ4swjXz8BPXa7lNRu2Y0W0CW wRDCyvgVaxVDpXdsKR8FtTu9PT82KZmDkNygRY1iRDc++TAYSMqtSwECYKWsd52m CRgjCmOqHRrfAtj/YwlSY0EC1xbf5l8T7g== -----END CERTIFICATE-----Generated at Sat Aug 23 06:49:36 2025 by rpki-client