$ rpki-client -vvvf r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/AS1299.roa File: AS1299.roa (raw, json) Hash identifier: 6ohoRgNnMT7Ixeb5aMnllAz9O7kKvEtXBqQc7Kb9y6Q= Subject key identifier: 49:2B:00:B2:45:6B:EB:49:D2:47:E4:B9:D5:15:8E:90:BC:01:48:C2 Certificate issuer: /CN=D34606949D385DB42714FE71274FAC9948EF279C Certificate serial: 6E757D2551719C2FE928B3DC330AA557776236D8 Authority key identifier: D3:46:06:94:9D:38:5D:B4:27:14:FE:71:27:4F:AC:99:48:EF:27:9C Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/D34606949D385DB42714FE71274FAC9948EF279C.cer Subject info access: rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/AS1299.roa Signing time: Tue 03 Nov 2026 13:49:39 +0000 ROA not before: Tue 03 Nov 2026 13:44:39 +0000 ROA not after: Tue 02 Nov 2027 13:49:39 +0000 asID: 1299 IP address blocks: 89.116.210.0/23 maxlen: 24 89.117.88.0/22 maxlen: 24 89.117.132.0/22 maxlen: 24 Validation: OK Signature path: rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/D34606949D385DB42714FE71274FAC9948EF279C.crl rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/D34606949D385DB42714FE71274FAC9948EF279C.mft rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/D34606949D385DB42714FE71274FAC9948EF279C.cer rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/9DF85997B1B9B358E1C43F36765AA0A4A02144AE.crl rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/9DF85997B1B9B358E1C43F36765AA0A4A02144AE.mft rsync://rpki.ripe.net/repository/DEFAULT/nfhZl7G5s1jhxD82dlqgpKAhRK4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 05 Nov 2026 17:37:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6e:75:7d:25:51:71:9c:2f:e9:28:b3:dc:33:0a:a5:57:77:62:36:d8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D34606949D385DB42714FE71274FAC9948EF279C Validity Not Before: Nov 3 13:44:39 2026 GMT Not After : Nov 2 13:49:39 2027 GMT Subject: CN=492B00B2456BEB49D247E4B9D5158E90BC0148C2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:86:6d:9c:fd:32:02:80:c6:ba:9e:8c:3f:53: 2f:d5:fc:c7:d8:54:d0:cf:4b:f3:71:42:7d:fe:60: 59:31:ee:fb:e3:1a:49:14:79:1d:d2:1a:a5:e6:41: c6:47:90:71:07:a1:31:f5:3e:3f:08:69:39:e9:fe: ab:97:40:e1:b3:d0:a6:bc:c6:8c:65:f5:3c:2b:36: 03:89:4d:9a:46:2f:10:7b:12:13:0b:bc:2a:15:ea: 3c:87:1f:27:34:e1:a0:21:6b:78:b8:72:9e:c7:9c: ca:e3:f8:77:04:d5:c4:be:3a:a5:74:6a:1f:15:01: d3:5a:d1:6c:6c:08:2b:4f:be:76:dc:97:8b:90:9d: f8:b3:6d:3d:d0:68:b1:f4:67:50:42:40:10:5e:87: 1d:95:e9:f8:c3:51:97:ef:c7:16:05:71:dd:d4:e2: a1:77:18:0a:fe:b0:a9:79:7f:ed:91:44:5d:95:3b: 74:93:22:7c:39:d4:c7:15:ea:01:58:55:95:b3:a0: 37:8f:ed:70:b7:3e:86:28:f1:35:1a:c6:a5:fb:12: 96:62:13:80:89:34:24:98:c3:65:a1:5a:de:52:8a: 0b:3a:3f:e8:79:bf:c2:cf:e8:c2:2a:ef:40:c3:d0: 42:46:be:95:d4:cb:86:91:a0:80:c3:15:69:cb:65: dd:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:2B:00:B2:45:6B:EB:49:D2:47:E4:B9:D5:15:8E:90:BC:01:48:C2 X509v3 Authority Key Identifier: keyid:D3:46:06:94:9D:38:5D:B4:27:14:FE:71:27:4F:AC:99:48:EF:27:9C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/D34606949D385DB42714FE71274FAC9948EF279C.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/D34606949D385DB42714FE71274FAC9948EF279C.cer Subject Information Access: Signed Object - URI:rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/AS1299.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 89.116.210.0/23 89.117.88.0/22 89.117.132.0/22 Signature Algorithm: sha256WithRSAEncryption 74:3b:57:16:5b:9d:4e:47:4c:25:3e:46:29:0f:cf:92:42:93: 6a:00:6f:6e:e9:54:a3:19:4c:a9:f0:c8:67:0c:57:57:d7:ca: 0c:db:96:92:99:37:9f:d9:48:b7:6f:27:ec:c7:65:26:d7:04: d4:be:be:a1:49:79:01:4b:3c:92:03:a9:33:8c:1c:b2:34:68: 8a:e0:43:ad:ae:e9:c0:4a:5b:6f:0d:c2:cf:74:55:1b:e6:47: 8b:0d:2a:c6:2a:4f:81:73:49:c7:65:cf:42:ff:97:b1:70:23: 76:99:cd:e2:65:4d:6a:2c:8e:e9:a3:65:24:a9:15:97:2b:d9: 8f:37:93:54:d1:aa:33:48:66:f3:1a:89:a6:44:d9:08:a5:b3: 9a:cd:57:53:b5:6a:ce:85:b0:57:d1:63:30:4a:7c:b2:30:f9: ba:9c:1e:b4:70:c3:c2:59:58:db:9d:10:2f:34:09:be:17:03: 68:b7:44:c9:19:b4:17:fd:62:b1:69:c4:64:60:5e:9b:db:ad: ff:31:67:4b:13:92:56:f0:0d:7d:e2:a0:5c:bf:a3:95:f5:b3: 29:21:22:27:19:91:71:99:42:a2:2a:05:2b:a2:c9:b0:48:18: 71:8e:eb:7e:ee:f5:77:30:c5:04:4f:be:dd:de:e6:0a:0a:8a: 69:b2:89:c5 -----BEGIN CERTIFICATE----- MIIFLzCCBBegAwIBAgIUbnV9JVFxnC/pKLPcMwqlV3diNtgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDM0NjA2OTQ5RDM4NURCNDI3MTRGRTcxMjc0RkFDOTk0 OEVGMjc5QzAeFw0yNjExMDMxMzQ0MzlaFw0yNzExMDIxMzQ5MzlaMDMxMTAvBgNV BAMTKDQ5MkIwMEIyNDU2QkVCNDlEMjQ3RTRCOUQ1MTU4RTkwQkMwMTQ4QzIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDIhm2c/TICgMa6now/Uy/V/MfY VNDPS/NxQn3+YFkx7vvjGkkUeR3SGqXmQcZHkHEHoTH1Pj8IaTnp/quXQOGz0Ka8 xoxl9TwrNgOJTZpGLxB7EhMLvCoV6jyHHyc04aAha3i4cp7HnMrj+HcE1cS+OqV0 ah8VAdNa0WxsCCtPvnbcl4uQnfizbT3QaLH0Z1BCQBBehx2V6fjDUZfvxxYFcd3U 4qF3GAr+sKl5f+2RRF2VO3STInw51McV6gFYVZWzoDeP7XC3PoYo8TUaxqX7EpZi E4CJNCSYw2WhWt5Sigs6P+h5v8LP6MIq70DD0EJGvpXUy4aRoIDDFWnLZd0nAgMB AAGjggI5MIICNTAdBgNVHQ4EFgQUSSsAskVr60nSR+S51RWOkLwBSMIwHwYDVR0j BBgwFoAU00YGlJ04XbQnFP5xJ0+smUjvJ5wwDgYDVR0PAQH/BAQDAgeAMIGIBgNV HR8EgYAwfjB8oHqgeIZ2cnN5bmM6Ly9yLm1hZ2VsbGFuLmlweG8uY29tL3JlcG8v NTI4YTIxOGYtYWQyOC00MGQyLWJkN2YtMzUwZWFkYTNkNzA1LTAvMC9EMzQ2MDY5 NDlEMzg1REI0MjcxNEZFNzEyNzRGQUM5OTQ4RUYyNzlDLmNybDCBngYIKwYBBQUH AQEEgZEwgY4wgYsGCCsGAQUFBzAChn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5y aXBlLm5ldC9yZXBvc2l0b3J5LzAwMmUwYmEzLWZlNjAtNDViMS05MTYwLTg2OGEy ZjhhNDNiMS8zL0QzNDYwNjk0OUQzODVEQjQyNzE0RkU3MTI3NEZBQzk5NDhFRjI3 OUMuY2VyMHAGCCsGAQUFBwELBGQwYjBgBggrBgEFBQcwC4ZUcnN5bmM6Ly9yLm1h Z2VsbGFuLmlweG8uY29tL3JlcG8vNTI4YTIxOGYtYWQyOC00MGQyLWJkN2YtMzUw ZWFkYTNkNzA1LTAvMC9BUzEyOTkucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUH DgIwKwYIKwYBBQUHAQcBAf8EHDAaMBgEAgABMBIDBAFZdNIDBAJZdVgDBAJZdYQw DQYJKoZIhvcNAQELBQADggEBAHQ7VxZbnU5HTCU+RikPz5JCk2oAb27pVKMZTKnw yGcMV1fXygzblpKZN5/ZSLdvJ+zHZSbXBNS+vqFJeQFLPJIDqTOMHLI0aIrgQ62u 6cBKW28Nws90VRvmR4sNKsYqT4FzScdlz0L/l7FwI3aZzeJlTWosjumjZSSpFZcr 2Y83k1TRqjNIZvMaiaZE2Qils5rNV1O1as6FsFfRYzBKfLIw+bqcHrRww8JZWNud EC80Cb4XA2i3RMkZtBf9YrFpxGRgXpvbrf8xZ0sTklbwDX3ioFy/o5X1sykhIicZ kXGZQqIqBSuiybBIGHGO637u9XcwxQRPvt3e5goKimmyicU= -----END CERTIFICATE-----Generated at Thu Nov 5 01:43:24 2026 by rpki-client