$ rpki-client -vvf r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/AS9009.roa File: AS9009.roa (raw, json) Hash identifier: cey6E9+unU8fCns1+i7DS5LZkazeL8yOr73QuI/z5Bs= Subject key identifier: D4:C3:E7:28:DB:85:2F:DB:90:D9:D4:A0:45:89:D9:5A:26:58:D0:F1 Certificate issuer: /CN=D34606949D385DB42714FE71274FAC9948EF279C Certificate serial: 0F4907BB691F05E38FE50E9C4D560371A99DF003 Authority key identifier: D3:46:06:94:9D:38:5D:B4:27:14:FE:71:27:4F:AC:99:48:EF:27:9C Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/D34606949D385DB42714FE71274FAC9948EF279C.cer Subject info access: rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/AS9009.roa Signing time: Tue 01 Jul 2025 00:00:26 +0000 ROA not before: Mon 30 Jun 2025 23:55:26 +0000 ROA not after: Tue 30 Jun 2026 00:00:26 +0000 asID: 9009 IP address blocks: 84.46.170.0/24 maxlen: 24 84.46.234.0/24 maxlen: 24 84.46.235.0/24 maxlen: 24 86.38.178.0/23 maxlen: 24 89.116.102.0/24 maxlen: 24 89.116.163.0/24 maxlen: 24 89.116.215.0/24 maxlen: 24 89.117.64.0/24 maxlen: 24 89.117.82.0/24 maxlen: 24 89.117.88.0/24 maxlen: 24 89.117.89.0/24 maxlen: 24 89.117.90.0/24 maxlen: 24 89.117.113.0/24 maxlen: 24 89.117.114.0/24 maxlen: 24 89.117.154.0/24 maxlen: 24 Validation: OK Signature path: rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/D34606949D385DB42714FE71274FAC9948EF279C.crl rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/D34606949D385DB42714FE71274FAC9948EF279C.mft rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/D34606949D385DB42714FE71274FAC9948EF279C.cer rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/9DF85997B1B9B358E1C43F36765AA0A4A02144AE.crl rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/9DF85997B1B9B358E1C43F36765AA0A4A02144AE.mft rsync://rpki.ripe.net/repository/DEFAULT/nfhZl7G5s1jhxD82dlqgpKAhRK4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 02 Jul 2025 01:43:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0f:49:07:bb:69:1f:05:e3:8f:e5:0e:9c:4d:56:03:71:a9:9d:f0:03 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D34606949D385DB42714FE71274FAC9948EF279C Validity Not Before: Jun 30 23:55:26 2025 GMT Not After : Jun 30 00:00:26 2026 GMT Subject: CN=D4C3E728DB852FDB90D9D4A04589D95A2658D0F1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:19:ab:1d:eb:da:a8:7d:48:6a:9e:f7:0a:f9: e5:e4:6d:d6:d6:10:09:c0:88:31:d9:ed:28:01:83: 97:04:4f:9c:d6:bd:83:fb:67:24:11:ed:ce:14:e8: 98:df:fb:c9:64:19:69:d4:17:ea:f8:8b:76:e1:c0: d9:ef:59:b4:13:f8:96:4e:a5:a8:05:4d:53:11:81: 2f:9f:67:a9:d6:f1:31:14:a0:eb:a3:c4:14:3d:bd: ad:32:e1:0e:6a:53:55:b0:07:3f:8f:cc:37:8e:20: e0:77:c1:ed:d1:db:b6:4c:53:b1:5e:76:a0:6c:9b: 84:b1:e4:13:0c:cc:a7:09:0f:29:2e:07:b5:f8:37: 05:e5:59:4f:2d:e3:86:03:69:49:d3:44:5a:a8:4b: 6d:43:62:18:92:18:44:0b:fc:76:16:da:b2:34:94: 50:48:a4:a2:8b:9b:c4:e1:ce:66:37:8c:ff:52:d4: 96:98:cf:f3:71:25:dd:01:d9:53:14:cc:ef:4c:27: a4:fa:17:b0:ae:72:53:05:32:26:9d:f6:1c:2d:04: c7:7c:c3:1a:37:9c:ca:d6:7a:b9:1c:4f:45:ad:61: 74:cc:03:10:13:aa:60:5b:56:c2:c8:e7:3d:0f:ad: a0:59:7f:c9:ea:1c:36:a6:48:08:8e:55:15:6e:7c: 15:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:C3:E7:28:DB:85:2F:DB:90:D9:D4:A0:45:89:D9:5A:26:58:D0:F1 X509v3 Authority Key Identifier: keyid:D3:46:06:94:9D:38:5D:B4:27:14:FE:71:27:4F:AC:99:48:EF:27:9C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/D34606949D385DB42714FE71274FAC9948EF279C.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/D34606949D385DB42714FE71274FAC9948EF279C.cer Subject Information Access: Signed Object - URI:rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/AS9009.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 84.46.170.0/24 84.46.234.0/23 86.38.178.0/23 89.116.102.0/24 89.116.163.0/24 89.116.215.0/24 89.117.64.0/24 89.117.82.0/24 89.117.88.0-89.117.90.255 89.117.113.0-89.117.114.255 89.117.154.0/24 Signature Algorithm: sha256WithRSAEncryption 94:61:d9:64:9f:4d:66:d9:cd:e1:0e:ce:a7:1d:60:e6:1e:68: 70:c9:77:14:f7:04:c3:0f:aa:66:66:1f:63:1f:ce:2a:21:d8: ad:e3:c5:c9:8a:e6:fc:f9:85:c3:3b:20:1e:74:f0:c4:31:ec: 42:8d:ef:0e:a2:07:c9:b4:77:a7:b5:39:cf:9f:e5:2a:8b:85: 42:8e:9c:d7:0c:35:5a:46:8f:17:0d:54:a5:b7:8a:73:3e:a8: 14:7d:4f:9e:7e:39:08:47:0f:70:f5:39:20:0e:41:d5:95:e1: 92:88:e6:a9:99:12:e0:02:9c:7b:2c:0e:5e:75:21:ff:c6:88: d9:a8:17:89:26:38:2f:1e:34:d1:a1:6d:6f:f2:8d:6a:82:db: f9:79:40:c5:bb:ae:84:f1:f0:bc:70:d7:1a:13:94:8c:11:c1: a4:28:97:31:b3:2a:ba:3d:27:f8:4c:61:e8:1a:22:0e:3b:a1: 4f:09:25:c8:7c:bf:bc:8a:73:c6:90:89:44:27:f3:9d:2a:9d: c9:37:2b:42:89:dc:ee:e9:1f:33:13:6b:2a:28:07:27:40:ba: 61:96:59:04:36:46:e5:34:c5:7d:55:ba:e9:87:99:59:e6:1c: b4:39:f2:3b:6b:4d:7a:89:e3:fa:9c:ee:36:62:75:6b:0d:d7: 88:79:40:bd -----BEGIN CERTIFICATE----- MIIFbzCCBFegAwIBAgIUD0kHu2kfBeOP5Q6cTVYDcamd8AMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDM0NjA2OTQ5RDM4NURCNDI3MTRGRTcxMjc0RkFDOTk0 OEVGMjc5QzAeFw0yNTA2MzAyMzU1MjZaFw0yNjA2MzAwMDAwMjZaMDMxMTAvBgNV BAMTKEQ0QzNFNzI4REI4NTJGREI5MEQ5RDRBMDQ1ODlEOTVBMjY1OEQwRjEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDKGasd69qofUhqnvcK+eXkbdbW EAnAiDHZ7SgBg5cET5zWvYP7ZyQR7c4U6Jjf+8lkGWnUF+r4i3bhwNnvWbQT+JZO pagFTVMRgS+fZ6nW8TEUoOujxBQ9va0y4Q5qU1WwBz+PzDeOIOB3we3R27ZMU7Fe dqBsm4Sx5BMMzKcJDykuB7X4NwXlWU8t44YDaUnTRFqoS21DYhiSGEQL/HYW2rI0 lFBIpKKLm8ThzmY3jP9S1JaYz/NxJd0B2VMUzO9MJ6T6F7CuclMFMiad9hwtBMd8 wxo3nMrWerkcT0WtYXTMAxATqmBbVsLI5z0PraBZf8nqHDamSAiOVRVufBXPAgMB AAGjggJ5MIICdTAdBgNVHQ4EFgQU1MPnKNuFL9uQ2dSgRYnZWiZY0PEwHwYDVR0j BBgwFoAU00YGlJ04XbQnFP5xJ0+smUjvJ5wwDgYDVR0PAQH/BAQDAgeAMIGIBgNV HR8EgYAwfjB8oHqgeIZ2cnN5bmM6Ly9yLm1hZ2VsbGFuLmlweG8uY29tL3JlcG8v NTI4YTIxOGYtYWQyOC00MGQyLWJkN2YtMzUwZWFkYTNkNzA1LTAvMC9EMzQ2MDY5 NDlEMzg1REI0MjcxNEZFNzEyNzRGQUM5OTQ4RUYyNzlDLmNybDCBngYIKwYBBQUH AQEEgZEwgY4wgYsGCCsGAQUFBzAChn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5y aXBlLm5ldC9yZXBvc2l0b3J5LzAwMmUwYmEzLWZlNjAtNDViMS05MTYwLTg2OGEy ZjhhNDNiMS8zL0QzNDYwNjk0OUQzODVEQjQyNzE0RkU3MTI3NEZBQzk5NDhFRjI3 OUMuY2VyMHAGCCsGAQUFBwELBGQwYjBgBggrBgEFBQcwC4ZUcnN5bmM6Ly9yLm1h Z2VsbGFuLmlweG8uY29tL3JlcG8vNTI4YTIxOGYtYWQyOC00MGQyLWJkN2YtMzUw ZWFkYTNkNzA1LTAvMC9BUzkwMDkucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUH DgIwawYIKwYBBQUHAQcBAf8EXDBaMFgEAgABMFIDBABULqoDBAFULuoDBAFWJrID BABZdGYDBABZdKMDBABZdNcDBABZdUADBABZdVIwDAMEA1l1WAMEAFl1WjAMAwQA WXVxAwQAWXVyAwQAWXWaMA0GCSqGSIb3DQEBCwUAA4IBAQCUYdlkn01m2c3hDs6n HWDmHmhwyXcU9wTDD6pmZh9jH84qIdit48XJiub8+YXDOyAedPDEMexCje8OogfJ tHentTnPn+Uqi4VCjpzXDDVaRo8XDVSlt4pzPqgUfU+efjkIRw9w9TkgDkHVleGS iOapmRLgApx7LA5edSH/xojZqBeJJjgvHjTRoW1v8o1qgtv5eUDFu66E8fC8cNca E5SMEcGkKJcxsyq6PSf4TGHoGiIOO6FPCSXIfL+8inPGkIlEJ/OdKp3JNytCidzu 6R8zE2sqKAcnQLphllkENkblNMV9Vbrph5lZ5hy0OfI7a016ieP6nO42YnVrDdeI eUC9 -----END CERTIFICATE-----Generated at Tue Jul 1 15:07:17 2025 by rpki-client