$ rpki-client -vvvf r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/AS9009.roa File: AS9009.roa (raw, json) Hash identifier: CIXkGWXMfAoA1RKr51+E0TfElidEvi150d4aw/FqXnM= Subject key identifier: 93:92:A5:2E:2E:D8:A6:00:17:DB:AD:30:4C:CA:34:ED:75:1B:37:B3 Certificate issuer: /CN=D34606949D385DB42714FE71274FAC9948EF279C Certificate serial: 7FA1F9459B866B1FB5504CB2E90903CBD5EE91D1 Authority key identifier: D3:46:06:94:9D:38:5D:B4:27:14:FE:71:27:4F:AC:99:48:EF:27:9C Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/D34606949D385DB42714FE71274FAC9948EF279C.cer Subject info access: rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/AS9009.roa Signing time: Sat 07 Nov 2026 06:33:04 +0000 ROA not before: Sat 07 Nov 2026 06:28:04 +0000 ROA not after: Sat 06 Nov 2027 06:33:04 +0000 asID: 9009 IP address blocks: 84.46.170.0/24 maxlen: 24 84.46.234.0/24 maxlen: 24 84.46.235.0/24 maxlen: 24 86.38.178.0/23 maxlen: 24 89.116.62.0/24 maxlen: 24 89.116.102.0/24 maxlen: 24 89.116.163.0/24 maxlen: 24 89.116.215.0/24 maxlen: 24 89.117.28.0/24 maxlen: 24 89.117.64.0/24 maxlen: 24 89.117.82.0/24 maxlen: 24 89.117.88.0/24 maxlen: 24 89.117.89.0/24 maxlen: 24 89.117.90.0/24 maxlen: 24 89.117.113.0/24 maxlen: 24 89.117.114.0/24 maxlen: 24 89.117.154.0/24 maxlen: 24 89.117.155.0/24 maxlen: 24 89.117.160.0/24 maxlen: 24 89.117.161.0/24 maxlen: 24 89.117.162.0/24 maxlen: 24 89.117.163.0/24 maxlen: 24 Validation: OK Signature path: rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/D34606949D385DB42714FE71274FAC9948EF279C.crl rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/D34606949D385DB42714FE71274FAC9948EF279C.mft rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/D34606949D385DB42714FE71274FAC9948EF279C.cer rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/9DF85997B1B9B358E1C43F36765AA0A4A02144AE.crl rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/9DF85997B1B9B358E1C43F36765AA0A4A02144AE.mft rsync://rpki.ripe.net/repository/DEFAULT/nfhZl7G5s1jhxD82dlqgpKAhRK4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 11 Nov 2026 23:56:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7f:a1:f9:45:9b:86:6b:1f:b5:50:4c:b2:e9:09:03:cb:d5:ee:91:d1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D34606949D385DB42714FE71274FAC9948EF279C Validity Not Before: Nov 7 06:28:04 2026 GMT Not After : Nov 6 06:33:04 2027 GMT Subject: CN=9392A52E2ED8A60017DBAD304CCA34ED751B37B3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:87:74:6e:0e:2d:df:db:21:e2:3d:a0:bc:3f: a5:fd:7a:fb:8c:2d:3a:28:66:c4:ee:c7:4a:d4:36: c1:4f:1d:78:6d:c8:55:45:8e:d9:b8:2b:bc:40:4f: c6:62:d7:09:55:e9:f9:06:79:ae:2f:e1:ee:bc:d7: 55:56:01:70:f1:5c:b6:a6:d5:0b:9b:fb:ee:c8:3e: c6:c3:c8:f5:44:91:d0:1d:f6:81:0e:b3:8e:58:89: 03:56:29:5c:13:48:be:7e:56:93:1a:d9:6e:c3:12: 22:af:97:27:04:fc:68:45:c9:f7:d0:7d:e1:11:04: f1:2e:2e:07:77:ab:04:aa:47:0c:f9:02:05:10:03: 73:45:98:8b:f3:46:72:f9:7f:12:fe:92:81:92:ab: 09:53:d6:02:b6:45:c7:e8:f0:6c:94:c0:e1:18:4e: 98:72:0a:13:f9:8e:07:10:d6:b7:13:9c:c5:94:2b: 03:bf:a5:44:8f:a5:7f:b8:49:53:4c:59:e3:22:d4: a1:75:ef:34:08:cf:d0:11:af:31:d7:f6:e5:e7:33: 9f:76:45:dc:33:1f:91:f2:00:1b:3c:8c:ea:b6:0f: fc:61:29:af:d3:c0:d1:09:bb:e0:d8:9c:12:32:8f: 0a:58:8a:98:20:6f:8b:56:09:41:57:53:1a:de:b5: 79:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:92:A5:2E:2E:D8:A6:00:17:DB:AD:30:4C:CA:34:ED:75:1B:37:B3 X509v3 Authority Key Identifier: keyid:D3:46:06:94:9D:38:5D:B4:27:14:FE:71:27:4F:AC:99:48:EF:27:9C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/D34606949D385DB42714FE71274FAC9948EF279C.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/D34606949D385DB42714FE71274FAC9948EF279C.cer Subject Information Access: Signed Object - URI:rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/AS9009.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 84.46.170.0/24 84.46.234.0/23 86.38.178.0/23 89.116.62.0/24 89.116.102.0/24 89.116.163.0/24 89.116.215.0/24 89.117.28.0/24 89.117.64.0/24 89.117.82.0/24 89.117.88.0-89.117.90.255 89.117.113.0-89.117.114.255 89.117.154.0/23 89.117.160.0/22 Signature Algorithm: sha256WithRSAEncryption 6b:58:11:b7:64:fb:52:57:89:8f:6f:c6:fb:3d:06:ec:6b:d0: bd:79:8e:c6:bb:f2:40:86:ac:fe:0e:fa:dc:94:d0:7a:cf:0f: dd:3c:46:64:19:2e:25:c3:a5:8d:bc:48:9e:f1:78:50:1f:24: 6c:bc:e2:ed:a6:6f:f5:fa:43:8d:85:e8:21:35:d4:c2:7b:e0: ad:7c:d3:26:4a:0c:65:be:42:55:36:3e:e7:9b:a6:ff:91:94: dc:4c:7e:83:9e:2f:92:07:7a:84:96:e8:0c:44:10:63:30:9d: f0:57:fa:d7:62:d9:8c:df:e2:38:f3:83:e8:8d:b8:d8:08:c7: 82:db:50:fb:74:46:20:78:59:95:0a:5c:5b:99:5b:2f:a1:4d: 6a:cf:4d:d5:70:57:be:c4:38:f7:1d:26:60:a1:1a:ab:4f:e8: 67:71:74:26:b9:1a:04:60:95:19:9e:fe:59:7c:e8:24:24:35: 43:5c:ad:8e:dd:6f:20:b6:24:0b:9c:1d:3c:f6:d5:e0:55:3a: 5b:25:66:0c:b3:af:14:96:d6:46:08:1d:16:05:92:d7:9c:af: 8b:c3:4b:b3:d6:2d:6c:b9:55:85:97:72:bf:cf:3d:69:51:7f: d9:e9:7c:0a:65:dc:39:d2:53:2f:62:03:47:61:9a:9a:d5:b9: fd:96:e1:3f -----BEGIN CERTIFICATE----- MIIFgTCCBGmgAwIBAgIUf6H5RZuGax+1UEyy6QkDy9XukdEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDM0NjA2OTQ5RDM4NURCNDI3MTRGRTcxMjc0RkFDOTk0 OEVGMjc5QzAeFw0yNjExMDcwNjI4MDRaFw0yNzExMDYwNjMzMDRaMDMxMTAvBgNV BAMTKDkzOTJBNTJFMkVEOEE2MDAxN0RCQUQzMDRDQ0EzNEVENzUxQjM3QjMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDPh3RuDi3f2yHiPaC8P6X9evuM LTooZsTux0rUNsFPHXhtyFVFjtm4K7xAT8Zi1wlV6fkGea4v4e6811VWAXDxXLam 1Qub++7IPsbDyPVEkdAd9oEOs45YiQNWKVwTSL5+VpMa2W7DEiKvlycE/GhFyffQ feERBPEuLgd3qwSqRwz5AgUQA3NFmIvzRnL5fxL+koGSqwlT1gK2Rcfo8GyUwOEY TphyChP5jgcQ1rcTnMWUKwO/pUSPpX+4SVNMWeMi1KF17zQIz9ARrzHX9uXnM592 RdwzH5HyABs8jOq2D/xhKa/TwNEJu+DYnBIyjwpYipggb4tWCUFXUxretXnHAgMB AAGjggKLMIIChzAdBgNVHQ4EFgQUk5KlLi7YpgAX260wTMo07XUbN7MwHwYDVR0j BBgwFoAU00YGlJ04XbQnFP5xJ0+smUjvJ5wwDgYDVR0PAQH/BAQDAgeAMIGIBgNV HR8EgYAwfjB8oHqgeIZ2cnN5bmM6Ly9yLm1hZ2VsbGFuLmlweG8uY29tL3JlcG8v NTI4YTIxOGYtYWQyOC00MGQyLWJkN2YtMzUwZWFkYTNkNzA1LTAvMC9EMzQ2MDY5 NDlEMzg1REI0MjcxNEZFNzEyNzRGQUM5OTQ4RUYyNzlDLmNybDCBngYIKwYBBQUH AQEEgZEwgY4wgYsGCCsGAQUFBzAChn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5y aXBlLm5ldC9yZXBvc2l0b3J5LzAwMmUwYmEzLWZlNjAtNDViMS05MTYwLTg2OGEy ZjhhNDNiMS8zL0QzNDYwNjk0OUQzODVEQjQyNzE0RkU3MTI3NEZBQzk5NDhFRjI3 OUMuY2VyMHAGCCsGAQUFBwELBGQwYjBgBggrBgEFBQcwC4ZUcnN5bmM6Ly9yLm1h Z2VsbGFuLmlweG8uY29tL3JlcG8vNTI4YTIxOGYtYWQyOC00MGQyLWJkN2YtMzUw ZWFkYTNkNzA1LTAvMC9BUzkwMDkucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUH DgIwfQYIKwYBBQUHAQcBAf8EbjBsMGoEAgABMGQDBABULqoDBAFULuoDBAFWJrID BABZdD4DBABZdGYDBABZdKMDBABZdNcDBABZdRwDBABZdUADBABZdVIwDAMEA1l1 WAMEAFl1WjAMAwQAWXVxAwQAWXVyAwQBWXWaAwQCWXWgMA0GCSqGSIb3DQEBCwUA A4IBAQBrWBG3ZPtSV4mPb8b7PQbsa9C9eY7Gu/JAhqz+DvrclNB6zw/dPEZkGS4l w6WNvEie8XhQHyRsvOLtpm/1+kONheghNdTCe+CtfNMmSgxlvkJVNj7nm6b/kZTc TH6Dni+SB3qElugMRBBjMJ3wV/rXYtmM3+I484PojbjYCMeC21D7dEYgeFmVClxb mVsvoU1qz03VcFe+xDj3HSZgoRqrT+hncXQmuRoEYJUZnv5ZfOgkJDVDXK2O3W8g tiQLnB089tXgVTpbJWYMs68UltZGCB0WBZLXnK+Lw0uz1i1suVWFl3K/zz1pUX/Z 6XwKZdw50lMvYgNHYZqa1bn9luE/ -----END CERTIFICATE-----Generated at Wed Nov 11 16:54:53 2026 by rpki-client