$ rpki-client -vvf r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/AS9009.roa File: AS9009.roa (raw, json) Hash identifier: Ne2tgcC0psQn4CHR2uSWUBirgw5DNh3byhQn79Tgqi4= Subject key identifier: FB:CC:B0:D4:91:D8:AB:8F:2C:38:07:D6:66:A2:6D:EB:12:24:2A:3F Certificate issuer: /CN=D34606949D385DB42714FE71274FAC9948EF279C Certificate serial: 104F153D22D91AF0545C58B7867ED1BD5456185F Authority key identifier: D3:46:06:94:9D:38:5D:B4:27:14:FE:71:27:4F:AC:99:48:EF:27:9C Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/D34606949D385DB42714FE71274FAC9948EF279C.cer Subject info access: rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/AS9009.roa Signing time: Wed 06 May 2026 11:01:11 +0000 ROA not before: Wed 06 May 2026 10:56:11 +0000 ROA not after: Wed 05 May 2027 11:01:11 +0000 asID: 9009 IP address blocks: 84.46.170.0/24 maxlen: 24 84.46.234.0/24 maxlen: 24 84.46.235.0/24 maxlen: 24 86.38.178.0/23 maxlen: 24 89.116.62.0/24 maxlen: 24 89.116.102.0/24 maxlen: 24 89.116.163.0/24 maxlen: 24 89.116.215.0/24 maxlen: 24 89.117.64.0/24 maxlen: 24 89.117.82.0/24 maxlen: 24 89.117.88.0/24 maxlen: 24 89.117.89.0/24 maxlen: 24 89.117.90.0/24 maxlen: 24 89.117.113.0/24 maxlen: 24 89.117.114.0/24 maxlen: 24 89.117.154.0/24 maxlen: 24 89.117.155.0/24 maxlen: 24 89.117.160.0/24 maxlen: 24 89.117.161.0/24 maxlen: 24 89.117.162.0/24 maxlen: 24 89.117.163.0/24 maxlen: 24 Validation: OK Signature path: rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/D34606949D385DB42714FE71274FAC9948EF279C.crl rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/D34606949D385DB42714FE71274FAC9948EF279C.mft rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/D34606949D385DB42714FE71274FAC9948EF279C.cer rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/9DF85997B1B9B358E1C43F36765AA0A4A02144AE.crl rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/9DF85997B1B9B358E1C43F36765AA0A4A02144AE.mft rsync://rpki.ripe.net/repository/DEFAULT/nfhZl7G5s1jhxD82dlqgpKAhRK4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 13 May 2026 14:18:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10:4f:15:3d:22:d9:1a:f0:54:5c:58:b7:86:7e:d1:bd:54:56:18:5f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D34606949D385DB42714FE71274FAC9948EF279C Validity Not Before: May 6 10:56:11 2026 GMT Not After : May 5 11:01:11 2027 GMT Subject: CN=FBCCB0D491D8AB8F2C3807D666A26DEB12242A3F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:fc:78:11:44:81:0a:70:52:46:73:a8:21:4a: 77:e1:0d:8f:f1:f1:27:af:98:67:bd:2f:4f:38:94: 18:6a:3d:0f:73:10:af:80:83:c9:4d:60:ba:f5:13: 3f:28:ad:39:0b:70:41:dd:b0:cc:2b:f1:94:5d:2d: 7e:11:5e:22:e7:b5:c4:57:a1:15:2b:47:b7:30:a1: 7b:02:1b:8b:57:81:65:91:a9:68:aa:2f:27:7d:15: ed:fa:60:33:86:87:ee:2a:6f:5b:b2:23:9f:23:2c: 0c:c2:15:c5:01:b8:ff:c5:77:de:92:d8:8e:7a:1c: f3:9d:14:f6:7d:c2:b2:dd:a8:d6:2e:8a:07:d4:5c: 92:50:b1:1a:3b:59:22:e4:9b:45:1a:18:01:07:d5: 7b:eb:76:6c:14:25:75:e9:97:ef:11:38:03:99:cc: 64:43:8a:84:2d:74:3d:85:63:ad:00:4d:7f:f7:be: f1:03:ad:23:18:24:be:cc:d9:44:bc:83:a7:4e:ae: fc:eb:de:a2:13:36:01:d9:49:a7:50:cd:7c:ae:3c: 05:e0:8b:66:6f:56:ea:aa:83:b0:64:c5:e2:e8:c4: 0b:ff:d2:01:e7:1b:79:22:56:b8:17:01:59:76:c4: 9f:24:ff:93:b4:c6:d8:c8:09:df:e5:fc:e9:23:2f: 24:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:CC:B0:D4:91:D8:AB:8F:2C:38:07:D6:66:A2:6D:EB:12:24:2A:3F X509v3 Authority Key Identifier: keyid:D3:46:06:94:9D:38:5D:B4:27:14:FE:71:27:4F:AC:99:48:EF:27:9C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/D34606949D385DB42714FE71274FAC9948EF279C.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/D34606949D385DB42714FE71274FAC9948EF279C.cer Subject Information Access: Signed Object - URI:rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/AS9009.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 84.46.170.0/24 84.46.234.0/23 86.38.178.0/23 89.116.62.0/24 89.116.102.0/24 89.116.163.0/24 89.116.215.0/24 89.117.64.0/24 89.117.82.0/24 89.117.88.0-89.117.90.255 89.117.113.0-89.117.114.255 89.117.154.0/23 89.117.160.0/22 Signature Algorithm: sha256WithRSAEncryption 28:f8:fa:f2:e8:99:2b:1e:1f:0b:3d:7c:51:9d:80:1b:78:d2: aa:0a:9f:2c:b6:20:c1:48:90:69:25:b0:8d:dc:47:5a:1d:8d: a9:c9:93:0a:63:dc:fc:aa:f3:4b:37:1b:a1:fb:13:69:35:f6: e4:9f:e8:6b:18:29:b5:dd:96:43:4e:68:df:df:19:99:d8:20: f1:8d:dd:7c:ce:1e:99:34:fb:e0:46:a9:89:1b:d8:b5:e6:d4: 34:60:6c:e9:5f:1e:80:a3:f0:63:19:e4:08:72:34:b8:a0:96: 2a:64:58:29:a0:f9:9d:77:9a:38:51:99:a5:79:07:bb:9c:a4: ec:19:91:5c:21:78:0f:3a:05:53:c3:53:b1:b9:94:d8:f8:7c: 8d:9f:1e:be:12:59:2d:dd:be:eb:6f:b6:3a:8a:62:36:e2:51: 10:0b:7b:fd:12:11:5c:40:73:3b:83:6e:68:4b:56:3e:46:5b: f1:cf:50:4c:58:3d:f5:53:d8:da:71:75:9b:04:63:07:44:a8: f2:02:02:e3:74:e1:ef:84:ad:be:b2:67:dc:30:6a:22:a7:00: 7d:00:0f:52:38:22:86:0c:bc:58:e0:b4:b5:79:4d:07:ec:c3: 60:db:b3:62:e6:46:58:72:5a:1c:f6:90:f5:26:0c:e3:3d:3b: a4:ab:82:aa -----BEGIN CERTIFICATE----- MIIFezCCBGOgAwIBAgIUEE8VPSLZGvBUXFi3hn7RvVRWGF8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDM0NjA2OTQ5RDM4NURCNDI3MTRGRTcxMjc0RkFDOTk0 OEVGMjc5QzAeFw0yNjA1MDYxMDU2MTFaFw0yNzA1MDUxMTAxMTFaMDMxMTAvBgNV BAMTKEZCQ0NCMEQ0OTFEOEFCOEYyQzM4MDdENjY2QTI2REVCMTIyNDJBM0YwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDF/HgRRIEKcFJGc6ghSnfhDY/x 8SevmGe9L084lBhqPQ9zEK+Ag8lNYLr1Ez8orTkLcEHdsMwr8ZRdLX4RXiLntcRX oRUrR7cwoXsCG4tXgWWRqWiqLyd9Fe36YDOGh+4qb1uyI58jLAzCFcUBuP/Fd96S 2I56HPOdFPZ9wrLdqNYuigfUXJJQsRo7WSLkm0UaGAEH1XvrdmwUJXXpl+8ROAOZ zGRDioQtdD2FY60ATX/3vvEDrSMYJL7M2US8g6dOrvzr3qITNgHZSadQzXyuPAXg i2ZvVuqqg7BkxeLoxAv/0gHnG3kiVrgXAVl2xJ8k/5O0xtjICd/l/OkjLyTxAgMB AAGjggKFMIICgTAdBgNVHQ4EFgQU+8yw1JHYq48sOAfWZqJt6xIkKj8wHwYDVR0j BBgwFoAU00YGlJ04XbQnFP5xJ0+smUjvJ5wwDgYDVR0PAQH/BAQDAgeAMIGIBgNV HR8EgYAwfjB8oHqgeIZ2cnN5bmM6Ly9yLm1hZ2VsbGFuLmlweG8uY29tL3JlcG8v NTI4YTIxOGYtYWQyOC00MGQyLWJkN2YtMzUwZWFkYTNkNzA1LTAvMC9EMzQ2MDY5 NDlEMzg1REI0MjcxNEZFNzEyNzRGQUM5OTQ4RUYyNzlDLmNybDCBngYIKwYBBQUH AQEEgZEwgY4wgYsGCCsGAQUFBzAChn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5y aXBlLm5ldC9yZXBvc2l0b3J5LzAwMmUwYmEzLWZlNjAtNDViMS05MTYwLTg2OGEy ZjhhNDNiMS8zL0QzNDYwNjk0OUQzODVEQjQyNzE0RkU3MTI3NEZBQzk5NDhFRjI3 OUMuY2VyMHAGCCsGAQUFBwELBGQwYjBgBggrBgEFBQcwC4ZUcnN5bmM6Ly9yLm1h Z2VsbGFuLmlweG8uY29tL3JlcG8vNTI4YTIxOGYtYWQyOC00MGQyLWJkN2YtMzUw ZWFkYTNkNzA1LTAvMC9BUzkwMDkucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUH DgIwdwYIKwYBBQUHAQcBAf8EaDBmMGQEAgABMF4DBABULqoDBAFULuoDBAFWJrID BABZdD4DBABZdGYDBABZdKMDBABZdNcDBABZdUADBABZdVIwDAMEA1l1WAMEAFl1 WjAMAwQAWXVxAwQAWXVyAwQBWXWaAwQCWXWgMA0GCSqGSIb3DQEBCwUAA4IBAQAo +Pry6JkrHh8LPXxRnYAbeNKqCp8stiDBSJBpJbCN3EdaHY2pyZMKY9z8qvNLNxuh +xNpNfbkn+hrGCm13ZZDTmjf3xmZ2CDxjd18zh6ZNPvgRqmJG9i15tQ0YGzpXx6A o/BjGeQIcjS4oJYqZFgpoPmdd5o4UZmleQe7nKTsGZFcIXgPOgVTw1OxuZTY+HyN nx6+Elkt3b7rb7Y6imI24lEQC3v9EhFcQHM7g25oS1Y+Rlvxz1BMWD31U9jacXWb BGMHRKjyAgLjdOHvhK2+smfcMGoipwB9AA9SOCKGDLxY4LS1eU0H7MNg27Ni5kZY cloc9pD1JgzjPTukq4Kq -----END CERTIFICATE-----Generated at Tue May 12 22:29:47 2026 by rpki-client