$ rpki-client -vvf r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/AS834.roa File: AS834.roa (raw, json) Hash identifier: Z4egBVeWc7edfntU5PuUfLN5gP+wLBFQUy6AsAuu0W4= Subject key identifier: 4D:82:1D:51:98:D2:D2:DF:AD:19:97:C5:F7:86:BB:CD:D1:6A:E0:B7 Certificate issuer: /CN=D34606949D385DB42714FE71274FAC9948EF279C Certificate serial: 23F2BDE843D4ED1A1A282FD3BA9AAC16B043F91E Authority key identifier: D3:46:06:94:9D:38:5D:B4:27:14:FE:71:27:4F:AC:99:48:EF:27:9C Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/D34606949D385DB42714FE71274FAC9948EF279C.cer Subject info access: rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/AS834.roa Signing time: Sat 28 Jun 2025 00:02:36 +0000 ROA not before: Fri 27 Jun 2025 23:57:36 +0000 ROA not after: Sat 27 Jun 2026 00:02:36 +0000 asID: 834 IP address blocks: 84.46.236.0/22 maxlen: 24 86.38.180.0/23 maxlen: 24 86.38.182.0/23 maxlen: 24 86.38.184.0/24 maxlen: 24 89.116.64.0/22 maxlen: 24 89.116.72.0/23 maxlen: 24 89.116.148.0/23 maxlen: 23 89.116.165.0/24 maxlen: 24 89.116.210.0/23 maxlen: 23 89.117.0.0/22 maxlen: 24 89.117.12.0/23 maxlen: 24 89.117.84.0/24 maxlen: 24 89.117.94.0/23 maxlen: 24 89.117.96.0/22 maxlen: 24 89.117.112.0/22 maxlen: 22 89.117.120.0/22 maxlen: 24 89.117.132.0/22 maxlen: 22 89.117.142.0/23 maxlen: 24 89.117.158.0/23 maxlen: 24 89.117.172.0/22 maxlen: 24 89.117.216.0/23 maxlen: 23 Validation: OK Signature path: rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/D34606949D385DB42714FE71274FAC9948EF279C.crl rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/D34606949D385DB42714FE71274FAC9948EF279C.mft rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/D34606949D385DB42714FE71274FAC9948EF279C.cer rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/9DF85997B1B9B358E1C43F36765AA0A4A02144AE.crl rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/9DF85997B1B9B358E1C43F36765AA0A4A02144AE.mft rsync://rpki.ripe.net/repository/DEFAULT/nfhZl7G5s1jhxD82dlqgpKAhRK4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 01 Jul 2025 09:44:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 23:f2:bd:e8:43:d4:ed:1a:1a:28:2f:d3:ba:9a:ac:16:b0:43:f9:1e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D34606949D385DB42714FE71274FAC9948EF279C Validity Not Before: Jun 27 23:57:36 2025 GMT Not After : Jun 27 00:02:36 2026 GMT Subject: CN=4D821D5198D2D2DFAD1997C5F786BBCDD16AE0B7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:e7:09:da:d0:aa:be:e6:98:a2:10:7c:29:e7: b2:16:a2:58:92:92:2e:d2:b5:04:0a:b8:01:5e:48: b9:1c:e0:41:14:63:d8:b5:59:8e:c5:ea:73:39:d6: 8f:4a:99:e4:96:2b:f8:63:63:22:ce:92:70:51:e4: 6e:d3:7d:35:d6:bb:52:7a:df:1c:e8:c8:2d:31:98: c3:6e:85:aa:33:36:fe:92:7e:24:7a:ec:95:1b:34: a3:78:92:45:13:00:f7:c8:2f:2a:ad:f0:6b:eb:15: e0:3c:84:a6:a3:60:72:fe:9c:36:98:de:db:f6:23: 63:f1:61:f2:d6:5e:6b:25:2c:ea:d6:3f:dc:85:84: 81:b9:31:c4:a4:e1:af:fe:6e:46:dd:c6:cf:55:3f: 32:3f:87:52:bb:fb:ca:1d:ea:12:e3:87:72:82:c9: 68:03:64:6b:ef:21:c2:4b:e9:ae:cb:3d:6a:10:20: dd:1b:a2:f6:a3:40:6c:cc:e4:65:20:f2:38:07:65: 26:2c:e7:02:03:a0:fe:6b:61:0f:c9:ff:43:23:0a: 57:84:6a:2d:ca:76:7c:8c:fa:e6:35:15:54:8b:39: d1:0c:9a:77:4e:70:93:c9:75:17:bb:43:e7:aa:5a: 94:33:4b:da:05:72:56:4b:54:5f:b3:65:30:48:54: b9:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:82:1D:51:98:D2:D2:DF:AD:19:97:C5:F7:86:BB:CD:D1:6A:E0:B7 X509v3 Authority Key Identifier: keyid:D3:46:06:94:9D:38:5D:B4:27:14:FE:71:27:4F:AC:99:48:EF:27:9C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/D34606949D385DB42714FE71274FAC9948EF279C.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/D34606949D385DB42714FE71274FAC9948EF279C.cer Subject Information Access: Signed Object - URI:rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/AS834.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 84.46.236.0/22 86.38.180.0-86.38.184.255 89.116.64.0/22 89.116.72.0/23 89.116.148.0/23 89.116.165.0/24 89.116.210.0/23 89.117.0.0/22 89.117.12.0/23 89.117.84.0/24 89.117.94.0-89.117.99.255 89.117.112.0/22 89.117.120.0/22 89.117.132.0/22 89.117.142.0/23 89.117.158.0/23 89.117.172.0/22 89.117.216.0/23 Signature Algorithm: sha256WithRSAEncryption 04:a3:c4:dc:27:38:70:56:77:cd:75:51:f7:42:ae:fd:e6:83: 1a:f5:62:17:4a:97:fe:b9:ef:97:10:59:bd:59:70:c8:a0:c1: 51:e5:62:bc:6c:28:56:f1:9c:ff:c4:93:14:d0:fe:04:62:53: f4:87:b3:7d:be:93:c1:0c:f0:f4:0b:ca:10:e1:84:ff:0f:45: 35:b8:5f:4d:1e:b6:6e:d1:c8:30:f8:14:a0:08:1a:01:7d:c5: 35:f9:25:16:14:27:d8:fb:9e:17:33:65:29:15:87:d3:ea:07: 6b:89:fd:50:44:af:23:04:53:d2:bb:fa:c8:36:43:b4:94:fd: 51:28:a4:38:c7:2d:d3:b9:55:71:54:a2:6c:31:94:89:e0:4e: 69:26:91:12:f8:a7:de:0f:54:a7:de:33:e1:61:5a:5d:e1:d0: 79:1f:1e:ab:36:82:29:e4:96:9e:12:d0:5f:ec:b1:bf:a5:52: 3c:ad:6e:65:b9:9b:9c:b6:cf:41:ba:9d:2e:ee:6a:1b:c6:a4: d9:02:e0:b4:cf:82:86:81:51:4b:a7:76:11:5a:8c:66:44:0b: 3b:71:9a:ef:d4:e4:16:7d:dd:5f:b9:29:54:82:64:7f:c4:7a: 9f:ea:f4:08:6a:92:61:95:2e:20:20:d0:91:45:d3:8b:a5:c7: 93:cb:43:86 -----BEGIN CERTIFICATE----- MIIFnDCCBISgAwIBAgIUI/K96EPU7RoaKC/TupqsFrBD+R4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDM0NjA2OTQ5RDM4NURCNDI3MTRGRTcxMjc0RkFDOTk0 OEVGMjc5QzAeFw0yNTA2MjcyMzU3MzZaFw0yNjA2MjcwMDAyMzZaMDMxMTAvBgNV BAMTKDREODIxRDUxOThEMkQyREZBRDE5OTdDNUY3ODZCQkNERDE2QUUwQjcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCJ5wna0Kq+5piiEHwp57IWoliS ki7StQQKuAFeSLkc4EEUY9i1WY7F6nM51o9KmeSWK/hjYyLOknBR5G7TfTXWu1J6 3xzoyC0xmMNuhaozNv6SfiR67JUbNKN4kkUTAPfILyqt8GvrFeA8hKajYHL+nDaY 3tv2I2PxYfLWXmslLOrWP9yFhIG5McSk4a/+bkbdxs9VPzI/h1K7+8od6hLjh3KC yWgDZGvvIcJL6a7LPWoQIN0bovajQGzM5GUg8jgHZSYs5wIDoP5rYQ/J/0MjCleE ai3KdnyM+uY1FVSLOdEMmndOcJPJdRe7Q+eqWpQzS9oFclZLVF+zZTBIVLmdAgMB AAGjggKmMIICojAdBgNVHQ4EFgQUTYIdUZjS0t+tGZfF94a7zdFq4LcwHwYDVR0j BBgwFoAU00YGlJ04XbQnFP5xJ0+smUjvJ5wwDgYDVR0PAQH/BAQDAgeAMIGIBgNV HR8EgYAwfjB8oHqgeIZ2cnN5bmM6Ly9yLm1hZ2VsbGFuLmlweG8uY29tL3JlcG8v NTI4YTIxOGYtYWQyOC00MGQyLWJkN2YtMzUwZWFkYTNkNzA1LTAvMC9EMzQ2MDY5 NDlEMzg1REI0MjcxNEZFNzEyNzRGQUM5OTQ4RUYyNzlDLmNybDCBngYIKwYBBQUH AQEEgZEwgY4wgYsGCCsGAQUFBzAChn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5y aXBlLm5ldC9yZXBvc2l0b3J5LzAwMmUwYmEzLWZlNjAtNDViMS05MTYwLTg2OGEy ZjhhNDNiMS8zL0QzNDYwNjk0OUQzODVEQjQyNzE0RkU3MTI3NEZBQzk5NDhFRjI3 OUMuY2VyMG8GCCsGAQUFBwELBGMwYTBfBggrBgEFBQcwC4ZTcnN5bmM6Ly9yLm1h Z2VsbGFuLmlweG8uY29tL3JlcG8vNTI4YTIxOGYtYWQyOC00MGQyLWJkN2YtMzUw ZWFkYTNkNzA1LTAvMC9BUzgzNC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcO AjCBmAYIKwYBBQUHAQcBAf8EgYgwgYUwgYIEAgABMHwDBAJULuwwDAMEAlYmtAME AFYmuAMEAll0QAMEAVl0SAMEAVl0lAMEAFl0pQMEAVl00gMEAll1AAMEAVl1DAME AFl1VDAMAwQBWXVeAwQCWXVgAwQCWXVwAwQCWXV4AwQCWXWEAwQBWXWOAwQBWXWe AwQCWXWsAwQBWXXYMA0GCSqGSIb3DQEBCwUAA4IBAQAEo8TcJzhwVnfNdVH3Qq79 5oMa9WIXSpf+ue+XEFm9WXDIoMFR5WK8bChW8Zz/xJMU0P4EYlP0h7N9vpPBDPD0 C8oQ4YT/D0U1uF9NHrZu0cgw+BSgCBoBfcU1+SUWFCfY+54XM2UpFYfT6gdrif1Q RK8jBFPSu/rINkO0lP1RKKQ4xy3TuVVxVKJsMZSJ4E5pJpES+KfeD1Sn3jPhYVpd 4dB5Hx6rNoIp5JaeEtBf7LG/pVI8rW5luZucts9Bup0u7mobxqTZAuC0z4KGgVFL p3YRWoxmRAs7cZrv1OQWfd1fuSlUgmR/xHqf6vQIapJhlS4gINCRRdOLpceTy0OG -----END CERTIFICATE-----Generated at Mon Jun 30 18:29:28 2025 by rpki-client