$ rpki-client -vvf r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/AS9304.roa File: AS9304.roa (raw, json) Hash identifier: oDLGFB7XofDUGytXzQjpmpLORDpmX2Ngf8rl5FtH6Fs= Subject key identifier: 7E:90:BC:FF:A3:C0:EE:22:8B:F0:8F:FF:DA:22:FF:2D:AB:A8:4E:ED Certificate issuer: /CN=D34606949D385DB42714FE71274FAC9948EF279C Certificate serial: 230284D9303A2F242A3B947A967962297EC61DBF Authority key identifier: D3:46:06:94:9D:38:5D:B4:27:14:FE:71:27:4F:AC:99:48:EF:27:9C Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/D34606949D385DB42714FE71274FAC9948EF279C.cer Subject info access: rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/AS9304.roa Signing time: Thu 25 Sep 2025 08:30:41 +0000 ROA not before: Thu 25 Sep 2025 08:25:41 +0000 ROA not after: Thu 24 Sep 2026 08:30:41 +0000 asID: 9304 IP address blocks: 86.38.184.0/24 maxlen: 24 89.116.8.0/24 maxlen: 24 89.116.9.0/24 maxlen: 24 89.116.10.0/24 maxlen: 24 89.116.11.0/24 maxlen: 24 89.116.141.0/24 maxlen: 24 89.116.165.0/24 maxlen: 24 89.116.172.0/24 maxlen: 24 89.116.184.0/23 maxlen: 24 89.116.237.0/24 maxlen: 24 89.116.244.0/24 maxlen: 24 89.117.65.0/24 maxlen: 24 89.117.84.0/24 maxlen: 24 89.117.129.0/24 maxlen: 24 89.117.250.0/24 maxlen: 24 Validation: OK Signature path: rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/D34606949D385DB42714FE71274FAC9948EF279C.crl rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/D34606949D385DB42714FE71274FAC9948EF279C.mft rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/D34606949D385DB42714FE71274FAC9948EF279C.cer rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/9DF85997B1B9B358E1C43F36765AA0A4A02144AE.crl rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/9DF85997B1B9B358E1C43F36765AA0A4A02144AE.mft rsync://rpki.ripe.net/repository/DEFAULT/nfhZl7G5s1jhxD82dlqgpKAhRK4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 20 Oct 2025 11:38:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 23:02:84:d9:30:3a:2f:24:2a:3b:94:7a:96:79:62:29:7e:c6:1d:bf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D34606949D385DB42714FE71274FAC9948EF279C Validity Not Before: Sep 25 08:25:41 2025 GMT Not After : Sep 24 08:30:41 2026 GMT Subject: CN=7E90BCFFA3C0EE228BF08FFFDA22FF2DABA84EED Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:cc:e2:ef:c2:52:be:88:1a:72:a9:91:5e:68: ec:f2:41:62:88:a4:76:3b:e1:d2:59:91:2c:bb:66: 30:57:fd:c6:d6:85:35:e5:b5:e6:17:cf:9e:87:8d: ec:02:1a:8f:29:99:b8:4a:c4:ed:c2:06:4f:4e:8f: 58:02:30:2e:76:7c:3e:44:57:0f:9f:02:b9:8b:c8: dd:78:32:df:9a:c8:9f:c6:3b:d0:b4:b2:ec:1b:64: dd:eb:1e:cd:df:aa:19:75:1b:01:3b:0a:a1:a1:cc: f8:13:83:9d:be:be:f8:52:0f:4b:f5:98:c6:86:94: 9f:be:a0:61:67:8f:30:2b:ea:80:07:91:8d:eb:ec: 70:52:24:7b:88:26:e7:b9:46:52:61:3d:87:f8:8f: f5:03:70:dd:fc:50:2e:69:13:7e:97:52:cb:13:44: 1f:26:30:35:30:5b:79:e8:90:2b:8e:cf:15:f6:33: 17:95:a7:bb:e3:6a:46:01:31:cc:65:dd:9a:03:8a: ce:fc:1b:e0:8c:5d:4d:0b:93:8e:51:ec:de:f2:7f: fa:34:99:e5:00:7b:6b:c4:1c:2b:2e:03:9c:68:2e: d8:d4:9c:55:8f:2d:d7:a4:76:00:c5:d2:e6:ba:42: f4:35:dd:45:21:a8:93:82:57:c9:95:ba:98:bb:f6: e3:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:90:BC:FF:A3:C0:EE:22:8B:F0:8F:FF:DA:22:FF:2D:AB:A8:4E:ED X509v3 Authority Key Identifier: keyid:D3:46:06:94:9D:38:5D:B4:27:14:FE:71:27:4F:AC:99:48:EF:27:9C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/D34606949D385DB42714FE71274FAC9948EF279C.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/D34606949D385DB42714FE71274FAC9948EF279C.cer Subject Information Access: Signed Object - URI:rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/AS9304.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 86.38.184.0/24 89.116.8.0/22 89.116.141.0/24 89.116.165.0/24 89.116.172.0/24 89.116.184.0/23 89.116.237.0/24 89.116.244.0/24 89.117.65.0/24 89.117.84.0/24 89.117.129.0/24 89.117.250.0/24 Signature Algorithm: sha256WithRSAEncryption 18:07:67:9b:be:b9:3e:28:f5:73:10:37:48:a8:09:81:b0:f7: 72:f8:ed:5b:16:3a:b0:db:05:92:83:99:31:89:03:86:78:d2: d1:3e:ba:75:22:c8:aa:08:00:69:b0:3e:ab:be:2a:13:f0:e9: 44:ef:29:88:1b:ae:c4:ef:43:bd:44:8b:7d:ac:7a:de:65:67: 25:04:24:52:1b:ca:1e:46:f7:5d:36:c3:8e:06:f7:41:d5:19: ad:81:c6:68:a9:f9:f2:09:ac:65:00:c8:17:44:0e:5c:74:e1: 90:bd:65:bb:6b:b2:d9:ce:9a:36:1c:ce:e2:62:40:45:77:09: 80:c3:65:b0:b0:cc:8c:70:7c:cc:d4:1d:24:c3:2a:81:f8:a7: c9:f2:89:28:a7:d8:af:5c:8b:2e:c5:21:90:4c:8c:df:2c:0c: 50:de:d6:d8:f0:c1:33:81:59:69:74:b0:07:a9:0e:21:ac:35: 12:bf:84:4b:ae:bd:68:7e:01:4a:54:61:cb:ec:bb:b4:c3:90: 19:88:92:20:f8:b9:55:97:13:e5:d8:72:00:26:8a:05:f0:ec: 3c:d5:5a:33:c4:d5:f6:59:9c:46:6d:ea:ec:91:d1:13:5e:b0: 48:09:22:0e:b0:64:e1:1c:5d:b4:16:4a:7f:64:65:f9:3f:4d: 82:90:da:d0 -----BEGIN CERTIFICATE----- MIIFZTCCBE2gAwIBAgIUIwKE2TA6LyQqO5R6lnliKX7GHb8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDM0NjA2OTQ5RDM4NURCNDI3MTRGRTcxMjc0RkFDOTk0 OEVGMjc5QzAeFw0yNTA5MjUwODI1NDFaFw0yNjA5MjQwODMwNDFaMDMxMTAvBgNV BAMTKDdFOTBCQ0ZGQTNDMEVFMjI4QkYwOEZGRkRBMjJGRjJEQUJBODRFRUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8zOLvwlK+iBpyqZFeaOzyQWKI pHY74dJZkSy7ZjBX/cbWhTXlteYXz56HjewCGo8pmbhKxO3CBk9Oj1gCMC52fD5E Vw+fArmLyN14Mt+ayJ/GO9C0suwbZN3rHs3fqhl1GwE7CqGhzPgTg52+vvhSD0v1 mMaGlJ++oGFnjzAr6oAHkY3r7HBSJHuIJue5RlJhPYf4j/UDcN38UC5pE36XUssT RB8mMDUwW3nokCuOzxX2MxeVp7vjakYBMcxl3ZoDis78G+CMXU0Lk45R7N7yf/o0 meUAe2vEHCsuA5xoLtjUnFWPLdekdgDF0ua6QvQ13UUhqJOCV8mVupi79uPFAgMB AAGjggJvMIICazAdBgNVHQ4EFgQUfpC8/6PA7iKL8I//2iL/LauoTu0wHwYDVR0j BBgwFoAU00YGlJ04XbQnFP5xJ0+smUjvJ5wwDgYDVR0PAQH/BAQDAgeAMIGIBgNV HR8EgYAwfjB8oHqgeIZ2cnN5bmM6Ly9yLm1hZ2VsbGFuLmlweG8uY29tL3JlcG8v NTI4YTIxOGYtYWQyOC00MGQyLWJkN2YtMzUwZWFkYTNkNzA1LTAvMC9EMzQ2MDY5 NDlEMzg1REI0MjcxNEZFNzEyNzRGQUM5OTQ4RUYyNzlDLmNybDCBngYIKwYBBQUH AQEEgZEwgY4wgYsGCCsGAQUFBzAChn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5y aXBlLm5ldC9yZXBvc2l0b3J5LzAwMmUwYmEzLWZlNjAtNDViMS05MTYwLTg2OGEy ZjhhNDNiMS8zL0QzNDYwNjk0OUQzODVEQjQyNzE0RkU3MTI3NEZBQzk5NDhFRjI3 OUMuY2VyMHAGCCsGAQUFBwELBGQwYjBgBggrBgEFBQcwC4ZUcnN5bmM6Ly9yLm1h Z2VsbGFuLmlweG8uY29tL3JlcG8vNTI4YTIxOGYtYWQyOC00MGQyLWJkN2YtMzUw ZWFkYTNkNzA1LTAvMC9BUzkzMDQucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUH DgIwYQYIKwYBBQUHAQcBAf8EUjBQME4EAgABMEgDBABWJrgDBAJZdAgDBABZdI0D BABZdKUDBABZdKwDBAFZdLgDBABZdO0DBABZdPQDBABZdUEDBABZdVQDBABZdYED BABZdfowDQYJKoZIhvcNAQELBQADggEBABgHZ5u+uT4o9XMQN0ioCYGw93L47VsW OrDbBZKDmTGJA4Z40tE+unUiyKoIAGmwPqu+KhPw6UTvKYgbrsTvQ71Ei32set5l ZyUEJFIbyh5G9102w44G90HVGa2Bxmip+fIJrGUAyBdEDlx04ZC9ZbtrstnOmjYc zuJiQEV3CYDDZbCwzIxwfMzUHSTDKoH4p8nyiSin2K9ciy7FIZBMjN8sDFDe1tjw wTOBWWl0sAepDiGsNRK/hEuuvWh+AUpUYcvsu7TDkBmIkiD4uVWXE+XYcgAmigXw 7DzVWjPE1fZZnEZt6uyR0RNesEgJIg6wZOEcXbQWSn9kZfk/TYKQ2tA= -----END CERTIFICATE-----Generated at Mon Oct 20 01:13:41 2025 by rpki-client