$ rpki-client -vvf r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/AS140641.roa File: AS140641.roa (raw, json) Hash identifier: cU+YOIASrn7C4323U4m4LCa8Hs9OdeHs+VGF7pncJgE= Subject key identifier: 01:2B:5C:42:A5:0E:AB:BE:A8:71:F2:52:27:1C:81:93:09:E9:03:4E Certificate issuer: /CN=D34606949D385DB42714FE71274FAC9948EF279C Certificate serial: 1571CA2E3342657A463406B1A8D1B1AC128D9B00 Authority key identifier: D3:46:06:94:9D:38:5D:B4:27:14:FE:71:27:4F:AC:99:48:EF:27:9C Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/D34606949D385DB42714FE71274FAC9948EF279C.cer Subject info access: rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/AS140641.roa Signing time: Thu 05 Feb 2026 08:26:38 +0000 ROA not before: Thu 05 Feb 2026 08:21:38 +0000 ROA not after: Thu 04 Feb 2027 08:26:38 +0000 asID: 140641 IP address blocks: 86.38.232.0/24 maxlen: 24 Validation: OK Signature path: rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/D34606949D385DB42714FE71274FAC9948EF279C.crl rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/D34606949D385DB42714FE71274FAC9948EF279C.mft rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/D34606949D385DB42714FE71274FAC9948EF279C.cer rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/9DF85997B1B9B358E1C43F36765AA0A4A02144AE.crl rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/9DF85997B1B9B358E1C43F36765AA0A4A02144AE.mft rsync://rpki.ripe.net/repository/DEFAULT/nfhZl7G5s1jhxD82dlqgpKAhRK4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 02 Mar 2026 03:32:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 15:71:ca:2e:33:42:65:7a:46:34:06:b1:a8:d1:b1:ac:12:8d:9b:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D34606949D385DB42714FE71274FAC9948EF279C Validity Not Before: Feb 5 08:21:38 2026 GMT Not After : Feb 4 08:26:38 2027 GMT Subject: CN=012B5C42A50EABBEA871F252271C819309E9034E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:1a:3d:66:ac:36:ef:89:dd:e4:87:eb:74:be: be:f4:5a:25:be:87:d3:58:ad:1c:37:b3:31:bb:97: 18:5e:81:16:bf:ad:4b:a4:1b:9a:c6:5d:bf:fe:35: dc:55:a6:dc:35:6e:2c:6b:5e:d5:12:41:15:9e:d2: 53:e8:f3:60:b7:35:59:9a:1b:ac:f6:90:c2:98:81: a7:10:2d:56:38:13:2e:db:5b:58:d8:cf:fd:55:cb: f1:3c:92:28:b3:22:f2:ea:1f:41:47:ef:8a:00:35: 13:c2:52:14:cc:e0:aa:81:f2:fb:20:e8:91:a4:17: 3d:fa:9c:25:54:0f:15:ef:50:9a:65:ee:33:5c:eb: 32:d1:8c:29:e6:94:fc:fc:08:ee:d3:cd:f1:d3:5a: 40:d7:f7:00:78:c6:81:44:c5:1f:bd:32:36:69:d3: 1e:02:c5:97:e4:21:a5:28:38:b6:96:15:5c:76:29: 8c:ad:10:61:23:05:0b:bc:64:a0:15:23:fb:02:2a: ec:d3:a1:c9:b9:52:5c:3c:69:4f:76:5c:1f:3c:58: ad:69:29:b3:83:ae:54:a3:cb:21:f9:f5:fd:3a:ba: ea:56:65:85:3d:5b:a5:c7:e5:1a:67:84:17:cf:b2: a0:77:0c:29:95:e1:c0:6e:24:09:29:37:2a:92:01: 14:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:2B:5C:42:A5:0E:AB:BE:A8:71:F2:52:27:1C:81:93:09:E9:03:4E X509v3 Authority Key Identifier: keyid:D3:46:06:94:9D:38:5D:B4:27:14:FE:71:27:4F:AC:99:48:EF:27:9C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/D34606949D385DB42714FE71274FAC9948EF279C.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/D34606949D385DB42714FE71274FAC9948EF279C.cer Subject Information Access: Signed Object - URI:rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/AS140641.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 86.38.232.0/24 Signature Algorithm: sha256WithRSAEncryption 6f:cd:8a:00:fa:63:df:4d:db:b3:b9:bd:4a:8a:91:92:00:32: 81:26:77:27:f5:7b:c8:4b:50:da:f8:a9:ac:b1:3d:b8:2a:d1: 1e:59:f2:1e:62:d7:7f:68:c0:11:16:13:bb:a2:96:d5:df:c6: fd:84:37:4b:fe:b2:99:db:ec:e4:b3:94:3f:65:0f:ef:3c:5a: 9c:e2:a2:65:42:e7:e1:76:68:8b:0a:1b:5b:47:f7:43:fd:95: d4:01:2f:55:36:72:81:94:5d:d3:54:82:d8:c8:ac:98:0c:28: 78:24:66:57:fb:ac:29:41:23:8c:62:f9:32:38:e8:61:01:28: 70:d6:96:24:fd:f0:b1:37:4e:55:bb:0a:ea:23:b2:c9:56:cc: f0:c1:d9:2b:af:db:fb:6d:9e:03:6d:db:77:3a:15:1f:7e:6a: f7:d2:4e:5f:7f:c4:bb:a3:78:9e:83:67:c0:a2:5a:e3:09:0c: 3c:1f:29:51:33:b8:12:f6:0d:62:30:75:21:63:51:24:da:55: ba:03:51:81:e5:27:e1:06:bf:94:3d:5a:53:51:3b:1e:de:e2: da:23:40:8a:20:7c:65:9d:ad:bb:36:86:db:1f:89:88:a2:b2: 23:04:22:be:f8:04:2c:c6:c9:37:28:d2:cc:94:f8:5b:56:40: f6:c6:15:2e -----BEGIN CERTIFICATE----- MIIFJTCCBA2gAwIBAgIUFXHKLjNCZXpGNAaxqNGxrBKNmwAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDM0NjA2OTQ5RDM4NURCNDI3MTRGRTcxMjc0RkFDOTk0 OEVGMjc5QzAeFw0yNjAyMDUwODIxMzhaFw0yNzAyMDQwODI2MzhaMDMxMTAvBgNV BAMTKDAxMkI1QzQyQTUwRUFCQkVBODcxRjI1MjI3MUM4MTkzMDlFOTAzNEUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDnGj1mrDbvid3kh+t0vr70WiW+ h9NYrRw3szG7lxhegRa/rUukG5rGXb/+NdxVptw1bixrXtUSQRWe0lPo82C3NVma G6z2kMKYgacQLVY4Ey7bW1jYz/1Vy/E8kiizIvLqH0FH74oANRPCUhTM4KqB8vsg 6JGkFz36nCVUDxXvUJpl7jNc6zLRjCnmlPz8CO7TzfHTWkDX9wB4xoFExR+9MjZp 0x4CxZfkIaUoOLaWFVx2KYytEGEjBQu8ZKAVI/sCKuzTocm5Ulw8aU92XB88WK1p KbODrlSjyyH59f06uupWZYU9W6XH5RpnhBfPsqB3DCmV4cBuJAkpNyqSARSRAgMB AAGjggIvMIICKzAdBgNVHQ4EFgQUAStcQqUOq76ocfJSJxyBkwnpA04wHwYDVR0j BBgwFoAU00YGlJ04XbQnFP5xJ0+smUjvJ5wwDgYDVR0PAQH/BAQDAgeAMIGIBgNV HR8EgYAwfjB8oHqgeIZ2cnN5bmM6Ly9yLm1hZ2VsbGFuLmlweG8uY29tL3JlcG8v NTI4YTIxOGYtYWQyOC00MGQyLWJkN2YtMzUwZWFkYTNkNzA1LTAvMC9EMzQ2MDY5 NDlEMzg1REI0MjcxNEZFNzEyNzRGQUM5OTQ4RUYyNzlDLmNybDCBngYIKwYBBQUH AQEEgZEwgY4wgYsGCCsGAQUFBzAChn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5y aXBlLm5ldC9yZXBvc2l0b3J5LzAwMmUwYmEzLWZlNjAtNDViMS05MTYwLTg2OGEy ZjhhNDNiMS8zL0QzNDYwNjk0OUQzODVEQjQyNzE0RkU3MTI3NEZBQzk5NDhFRjI3 OUMuY2VyMHIGCCsGAQUFBwELBGYwZDBiBggrBgEFBQcwC4ZWcnN5bmM6Ly9yLm1h Z2VsbGFuLmlweG8uY29tL3JlcG8vNTI4YTIxOGYtYWQyOC00MGQyLWJkN2YtMzUw ZWFkYTNkNzA1LTAvMC9BUzE0MDY0MS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEF BQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAFYm6DANBgkqhkiG9w0B AQsFAAOCAQEAb82KAPpj303bs7m9SoqRkgAygSZ3J/V7yEtQ2viprLE9uCrRHlny HmLXf2jAERYTu6KW1d/G/YQ3S/6ymdvs5LOUP2UP7zxanOKiZULn4XZoiwobW0f3 Q/2V1AEvVTZygZRd01SC2MismAwoeCRmV/usKUEjjGL5MjjoYQEocNaWJP3wsTdO VbsK6iOyyVbM8MHZK6/b+22eA23bdzoVH35q99JOX3/Eu6N4noNnwKJa4wkMPB8p UTO4EvYNYjB1IWNRJNpVugNRgeUn4Qa/lD1aU1E7Ht7i2iNAiiB8ZZ2tuzaG2x+J iKKyIwQivvgELMbJNyjSzJT4W1ZA9sYVLg== -----END CERTIFICATE-----Generated at Sun Mar 1 18:33:55 2026 by rpki-client