$ rpki-client -vvf r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/AS13213.roa File: AS13213.roa (raw, json) Hash identifier: otCu7s8DKXdIlUyq4jTIqbRDisfw2uWGK93QHlFDCYY= Subject key identifier: 07:94:2A:BB:E8:D9:05:1F:33:21:A7:F4:96:7D:36:A6:1B:32:B3:10 Certificate issuer: /CN=D34606949D385DB42714FE71274FAC9948EF279C Certificate serial: 042CD2CBBA71A38AEF99AAD86BF5ED510C6902AA Authority key identifier: D3:46:06:94:9D:38:5D:B4:27:14:FE:71:27:4F:AC:99:48:EF:27:9C Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/D34606949D385DB42714FE71274FAC9948EF279C.cer Subject info access: rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/AS13213.roa Signing time: Thu 17 Apr 2025 09:24:53 +0000 ROA not before: Thu 17 Apr 2025 09:19:53 +0000 ROA not after: Thu 16 Apr 2026 09:24:53 +0000 asID: 13213 IP address blocks: 86.38.248.0/24 maxlen: 24 86.38.250.0/24 maxlen: 24 86.38.252.0/24 maxlen: 24 86.38.254.0/24 maxlen: 24 89.116.62.0/24 maxlen: 24 89.116.182.0/24 maxlen: 24 89.116.241.0/24 maxlen: 24 89.117.80.0/24 maxlen: 24 89.117.83.0/24 maxlen: 24 89.117.91.0/24 maxlen: 24 89.117.105.0/24 maxlen: 24 89.117.106.0/24 maxlen: 24 89.117.107.0/24 maxlen: 24 89.117.155.0/24 maxlen: 24 89.117.160.0/24 maxlen: 24 89.117.161.0/24 maxlen: 24 89.117.162.0/24 maxlen: 24 89.117.163.0/24 maxlen: 24 89.117.218.0/24 maxlen: 24 Validation: OK Signature path: rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/D34606949D385DB42714FE71274FAC9948EF279C.crl rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/D34606949D385DB42714FE71274FAC9948EF279C.mft rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/D34606949D385DB42714FE71274FAC9948EF279C.cer rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/9DF85997B1B9B358E1C43F36765AA0A4A02144AE.crl rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/9DF85997B1B9B358E1C43F36765AA0A4A02144AE.mft rsync://rpki.ripe.net/repository/DEFAULT/nfhZl7G5s1jhxD82dlqgpKAhRK4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 05 Nov 2025 15:58:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 04:2c:d2:cb:ba:71:a3:8a:ef:99:aa:d8:6b:f5:ed:51:0c:69:02:aa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D34606949D385DB42714FE71274FAC9948EF279C Validity Not Before: Apr 17 09:19:53 2025 GMT Not After : Apr 16 09:24:53 2026 GMT Subject: CN=07942ABBE8D9051F3321A7F4967D36A61B32B310 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:26:98:5e:69:7f:12:15:53:f4:b9:9f:fd:fb: 90:1b:7d:dc:d8:4c:11:d0:d8:69:93:8c:c5:d7:6c: a6:ea:e1:fc:66:97:69:2a:fe:25:21:90:5d:2c:b1: 70:1b:e8:ca:f3:c0:2e:f7:43:86:c8:c5:1f:22:93: 9d:a3:99:2b:5e:66:bf:ff:ab:c8:c1:de:c0:c6:bd: d4:8a:a7:2a:2b:9f:d7:d1:65:ca:56:e5:94:2f:74: 55:6d:5b:08:04:a8:50:06:b4:b4:a8:e5:4e:31:3b: b5:2f:7e:1c:0f:39:eb:66:22:e9:dd:13:84:2f:a6: 2f:73:c3:1b:89:9c:3d:51:7c:68:bd:fb:c9:ae:a5: 4d:d4:bb:cd:c8:6b:d9:28:5c:e0:b4:6f:8c:ea:6d: a4:9d:0b:02:1c:00:e0:80:0f:46:b2:28:86:51:df: 02:e8:30:b2:d8:45:f5:4f:5b:50:a3:a6:f2:7c:f8: cb:7a:ed:1c:1c:c6:cc:72:b2:97:3d:f5:89:22:b0: 58:6b:5d:ce:3e:02:a6:eb:4e:19:55:33:5b:9a:2e: e1:f5:42:0a:d1:c5:77:7c:3c:26:c7:aa:5c:1d:e9: c7:92:94:f4:2c:9c:f5:27:51:4a:64:2c:6b:0d:77: 8a:b3:b9:84:4b:96:7b:b3:8a:e3:ab:b6:42:e8:d7: 87:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:94:2A:BB:E8:D9:05:1F:33:21:A7:F4:96:7D:36:A6:1B:32:B3:10 X509v3 Authority Key Identifier: keyid:D3:46:06:94:9D:38:5D:B4:27:14:FE:71:27:4F:AC:99:48:EF:27:9C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/D34606949D385DB42714FE71274FAC9948EF279C.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/D34606949D385DB42714FE71274FAC9948EF279C.cer Subject Information Access: Signed Object - URI:rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/AS13213.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 86.38.248.0/24 86.38.250.0/24 86.38.252.0/24 86.38.254.0/24 89.116.62.0/24 89.116.182.0/24 89.116.241.0/24 89.117.80.0/24 89.117.83.0/24 89.117.91.0/24 89.117.105.0-89.117.107.255 89.117.155.0/24 89.117.160.0/22 89.117.218.0/24 Signature Algorithm: sha256WithRSAEncryption 8a:85:09:d4:bf:68:09:19:2c:d7:48:87:bb:bf:40:23:5f:9f: f7:11:59:dc:ee:c5:94:a6:b0:70:4d:e2:c6:ef:18:8d:e1:7b: 47:48:df:e1:40:48:e4:47:d4:2d:b1:ee:1e:1c:80:ec:9b:57: a8:0d:39:a7:45:40:26:72:2e:ee:e6:14:e6:72:d0:73:45:4b: 60:93:e6:fa:c4:89:65:b5:b8:37:5e:29:90:30:14:ae:a1:d2: 2d:29:b5:bf:d6:f7:b6:06:69:01:c3:10:e0:d6:8e:a0:d5:14: 02:9a:72:93:7b:81:02:23:fb:50:ef:c1:28:6e:c4:04:bf:93: aa:7f:4f:58:4a:08:95:6e:7d:92:fa:87:3c:cf:b7:cf:63:39: b2:f0:35:f7:71:c9:de:41:af:ef:b0:74:35:c2:3b:d6:e9:43: 13:7b:2d:b9:ed:3f:4f:dc:09:18:b7:62:97:c9:da:c1:72:aa: c9:41:a8:79:99:ce:fa:7d:b9:77:c7:57:4d:2d:5f:9f:98:b5: 15:30:37:f0:e3:86:26:8b:d2:8d:3d:4e:1c:bd:b8:9e:f8:b0: 0a:7d:1b:be:77:20:2e:34:a7:e2:c2:77:82:17:04:ee:8e:7c: ce:23:f4:ba:1a:ec:44:a7:8f:ad:22:13:b4:7b:cd:d6:dc:f1: 6b:9f:c7:98 -----BEGIN CERTIFICATE----- MIIFejCCBGKgAwIBAgIUBCzSy7pxo4rvmarYa/XtUQxpAqowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDM0NjA2OTQ5RDM4NURCNDI3MTRGRTcxMjc0RkFDOTk0 OEVGMjc5QzAeFw0yNTA0MTcwOTE5NTNaFw0yNjA0MTYwOTI0NTNaMDMxMTAvBgNV BAMTKDA3OTQyQUJCRThEOTA1MUYzMzIxQTdGNDk2N0QzNkE2MUIzMkIzMTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCvJpheaX8SFVP0uZ/9+5AbfdzY TBHQ2GmTjMXXbKbq4fxml2kq/iUhkF0ssXAb6MrzwC73Q4bIxR8ik52jmSteZr// q8jB3sDGvdSKpyorn9fRZcpW5ZQvdFVtWwgEqFAGtLSo5U4xO7UvfhwPOetmIund E4Qvpi9zwxuJnD1RfGi9+8mupU3Uu83Ia9koXOC0b4zqbaSdCwIcAOCAD0ayKIZR 3wLoMLLYRfVPW1CjpvJ8+Mt67Rwcxsxyspc99YkisFhrXc4+AqbrThlVM1uaLuH1 QgrRxXd8PCbHqlwd6ceSlPQsnPUnUUpkLGsNd4qzuYRLlnuziuOrtkLo14cjAgMB AAGjggKEMIICgDAdBgNVHQ4EFgQUB5Qqu+jZBR8zIaf0ln02phsysxAwHwYDVR0j BBgwFoAU00YGlJ04XbQnFP5xJ0+smUjvJ5wwDgYDVR0PAQH/BAQDAgeAMIGIBgNV HR8EgYAwfjB8oHqgeIZ2cnN5bmM6Ly9yLm1hZ2VsbGFuLmlweG8uY29tL3JlcG8v NTI4YTIxOGYtYWQyOC00MGQyLWJkN2YtMzUwZWFkYTNkNzA1LTAvMC9EMzQ2MDY5 NDlEMzg1REI0MjcxNEZFNzEyNzRGQUM5OTQ4RUYyNzlDLmNybDCBngYIKwYBBQUH AQEEgZEwgY4wgYsGCCsGAQUFBzAChn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5y aXBlLm5ldC9yZXBvc2l0b3J5LzAwMmUwYmEzLWZlNjAtNDViMS05MTYwLTg2OGEy ZjhhNDNiMS8zL0QzNDYwNjk0OUQzODVEQjQyNzE0RkU3MTI3NEZBQzk5NDhFRjI3 OUMuY2VyMHEGCCsGAQUFBwELBGUwYzBhBggrBgEFBQcwC4ZVcnN5bmM6Ly9yLm1h Z2VsbGFuLmlweG8uY29tL3JlcG8vNTI4YTIxOGYtYWQyOC00MGQyLWJkN2YtMzUw ZWFkYTNkNzA1LTAvMC9BUzEzMjEzLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMHUGCCsGAQUFBwEHAQH/BGYwZDBiBAIAATBcAwQAVib4AwQAVib6AwQAVib8 AwQAVib+AwQAWXQ+AwQAWXS2AwQAWXTxAwQAWXVQAwQAWXVTAwQAWXVbMAwDBABZ dWkDBAJZdWgDBABZdZsDBAJZdaADBABZddowDQYJKoZIhvcNAQELBQADggEBAIqF CdS/aAkZLNdIh7u/QCNfn/cRWdzuxZSmsHBN4sbvGI3he0dI3+FASORH1C2x7h4c gOybV6gNOadFQCZyLu7mFOZy0HNFS2CT5vrEiWW1uDdeKZAwFK6h0i0ptb/W97YG aQHDEODWjqDVFAKacpN7gQIj+1DvwShuxAS/k6p/T1hKCJVufZL6hzzPt89jObLw Nfdxyd5Br++wdDXCO9bpQxN7LbntP0/cCRi3YpfJ2sFyqslBqHmZzvp9uXfHV00t X5+YtRUwN/DjhiaL0o09Thy9uJ74sAp9G753IC40p+LCd4IXBO6OfM4j9Loa7ESn j60iE7R7zdbc8Wufx5g= -----END CERTIFICATE-----Generated at Wed Nov 5 03:55:59 2025 by rpki-client