$ rpki-client -vvf r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/AS198020.roa File: AS198020.roa (raw, json) Hash identifier: ErrA4gY6oTyMZ1pSgZHxhcp9v3D6Dsjg9ivvGu3+Axs= Subject key identifier: 22:EB:AB:29:BB:3C:B8:26:9E:27:7B:57:3D:9D:4A:63:AF:DA:50:20 Certificate issuer: /CN=D34606949D385DB42714FE71274FAC9948EF279C Certificate serial: 08A0D45984807D4F5407477ADD419060EDF51FB8 Authority key identifier: D3:46:06:94:9D:38:5D:B4:27:14:FE:71:27:4F:AC:99:48:EF:27:9C Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/D34606949D385DB42714FE71274FAC9948EF279C.cer Subject info access: rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/AS198020.roa Signing time: Fri 31 Oct 2025 10:55:11 +0000 ROA not before: Fri 31 Oct 2025 10:50:11 +0000 ROA not after: Fri 30 Oct 2026 10:55:11 +0000 asID: 198020 IP address blocks: 86.38.182.0/24 maxlen: 24 86.38.238.0/24 maxlen: 24 Validation: OK Signature path: rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/D34606949D385DB42714FE71274FAC9948EF279C.crl rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/D34606949D385DB42714FE71274FAC9948EF279C.mft rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/D34606949D385DB42714FE71274FAC9948EF279C.cer rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/9DF85997B1B9B358E1C43F36765AA0A4A02144AE.crl rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/9DF85997B1B9B358E1C43F36765AA0A4A02144AE.mft rsync://rpki.ripe.net/repository/DEFAULT/nfhZl7G5s1jhxD82dlqgpKAhRK4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 05 Nov 2025 15:58:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 08:a0:d4:59:84:80:7d:4f:54:07:47:7a:dd:41:90:60:ed:f5:1f:b8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D34606949D385DB42714FE71274FAC9948EF279C Validity Not Before: Oct 31 10:50:11 2025 GMT Not After : Oct 30 10:55:11 2026 GMT Subject: CN=22EBAB29BB3CB8269E277B573D9D4A63AFDA5020 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:3a:b1:92:a5:92:a1:69:03:e6:12:3d:a1:de: 71:69:ed:57:eb:84:d5:60:78:ce:02:f4:0b:8f:bb: ef:6c:56:3c:56:66:f2:05:0a:03:53:6a:17:e3:47: f9:e9:98:a4:c2:f8:f2:a9:b2:0b:63:ab:e9:2f:c7: e8:d0:79:2b:20:ad:e7:36:cb:de:e2:64:9f:a6:e4: 8f:89:c2:f6:26:24:54:6e:42:00:11:bf:41:ad:c5: af:65:8c:64:df:8a:23:0a:2a:57:7e:48:bf:ea:13: fd:68:79:66:29:b0:f7:4b:38:f2:28:38:6a:6f:fe: 25:3b:41:c3:46:bf:fc:bb:11:80:c2:82:b7:8d:fe: 7b:86:65:7e:24:a9:ee:da:09:14:2a:dd:bc:86:90: 8e:c9:e3:de:2c:11:00:34:d7:51:01:d9:8b:3d:5f: e2:a8:0b:20:8a:14:a3:84:f3:ba:61:e9:1f:9d:3b: fc:c9:ed:11:a7:c0:77:e6:33:20:13:69:fa:02:1e: 91:b5:1c:08:d0:11:8d:10:34:e0:9b:33:85:11:a6: 29:be:47:89:69:d7:27:09:55:3d:95:ee:19:e0:1d: 51:70:1c:e7:80:00:46:73:eb:7a:1b:3e:f7:88:ad: 95:ea:48:ad:68:11:e5:eb:12:12:36:3d:ac:da:77: 3a:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:EB:AB:29:BB:3C:B8:26:9E:27:7B:57:3D:9D:4A:63:AF:DA:50:20 X509v3 Authority Key Identifier: keyid:D3:46:06:94:9D:38:5D:B4:27:14:FE:71:27:4F:AC:99:48:EF:27:9C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/D34606949D385DB42714FE71274FAC9948EF279C.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/D34606949D385DB42714FE71274FAC9948EF279C.cer Subject Information Access: Signed Object - URI:rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/AS198020.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 86.38.182.0/24 86.38.238.0/24 Signature Algorithm: sha256WithRSAEncryption c6:15:a1:d9:99:32:23:b3:80:1b:b9:aa:42:4b:7f:98:85:d3: 5f:32:fe:00:40:49:35:15:88:f6:32:23:ef:c5:fe:5a:66:d3: a0:3e:2c:c9:14:8e:3f:0e:68:80:28:5e:90:21:a4:09:f6:63: 0b:7a:c5:88:59:8f:79:2b:7e:13:e1:d3:0a:46:0b:cd:dc:29: 3d:33:a9:c5:d1:98:4e:c3:45:da:97:f0:13:2b:2d:15:33:d7: fa:15:db:2d:cd:2d:a0:20:13:94:9c:74:8e:f4:6d:84:b1:f7: c8:1f:1c:3f:d9:7e:c2:b9:14:e6:50:b4:2b:55:51:75:f9:9e: 86:68:06:c1:9b:04:0b:69:b1:b7:6c:db:5a:0c:d8:68:5d:00: c8:ad:65:8b:8d:64:87:d8:11:35:1f:07:0a:d9:6e:d2:53:32: 63:90:bc:89:07:b9:b8:5a:97:de:aa:89:01:fb:08:c5:67:75: 9e:db:ad:c3:9b:dc:70:3c:7d:67:c2:ea:ca:e5:ab:7e:b6:74: 28:c7:dd:67:05:e1:40:41:ca:b0:7a:bf:3d:93:19:2c:61:5e: 53:4f:b3:ae:d9:93:61:24:ce:3a:7f:77:08:09:d5:00:b8:ac: e3:d5:e9:41:4c:e0:7d:22:09:72:cc:84:97:4c:9d:f8:a2:63: 50:80:ca:4d -----BEGIN CERTIFICATE----- MIIFKzCCBBOgAwIBAgIUCKDUWYSAfU9UB0d63UGQYO31H7gwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDM0NjA2OTQ5RDM4NURCNDI3MTRGRTcxMjc0RkFDOTk0 OEVGMjc5QzAeFw0yNTEwMzExMDUwMTFaFw0yNjEwMzAxMDU1MTFaMDMxMTAvBgNV BAMTKDIyRUJBQjI5QkIzQ0I4MjY5RTI3N0I1NzNEOUQ0QTYzQUZEQTUwMjAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDdOrGSpZKhaQPmEj2h3nFp7Vfr hNVgeM4C9AuPu+9sVjxWZvIFCgNTahfjR/npmKTC+PKpsgtjq+kvx+jQeSsgrec2 y97iZJ+m5I+JwvYmJFRuQgARv0Gtxa9ljGTfiiMKKld+SL/qE/1oeWYpsPdLOPIo OGpv/iU7QcNGv/y7EYDCgreN/nuGZX4kqe7aCRQq3byGkI7J494sEQA011EB2Ys9 X+KoCyCKFKOE87ph6R+dO/zJ7RGnwHfmMyATafoCHpG1HAjQEY0QNOCbM4URpim+ R4lp1ycJVT2V7hngHVFwHOeAAEZz63obPveIrZXqSK1oEeXrEhI2PazadzobAgMB AAGjggI1MIICMTAdBgNVHQ4EFgQUIuurKbs8uCaeJ3tXPZ1KY6/aUCAwHwYDVR0j BBgwFoAU00YGlJ04XbQnFP5xJ0+smUjvJ5wwDgYDVR0PAQH/BAQDAgeAMIGIBgNV HR8EgYAwfjB8oHqgeIZ2cnN5bmM6Ly9yLm1hZ2VsbGFuLmlweG8uY29tL3JlcG8v NTI4YTIxOGYtYWQyOC00MGQyLWJkN2YtMzUwZWFkYTNkNzA1LTAvMC9EMzQ2MDY5 NDlEMzg1REI0MjcxNEZFNzEyNzRGQUM5OTQ4RUYyNzlDLmNybDCBngYIKwYBBQUH AQEEgZEwgY4wgYsGCCsGAQUFBzAChn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5y aXBlLm5ldC9yZXBvc2l0b3J5LzAwMmUwYmEzLWZlNjAtNDViMS05MTYwLTg2OGEy ZjhhNDNiMS8zL0QzNDYwNjk0OUQzODVEQjQyNzE0RkU3MTI3NEZBQzk5NDhFRjI3 OUMuY2VyMHIGCCsGAQUFBwELBGYwZDBiBggrBgEFBQcwC4ZWcnN5bmM6Ly9yLm1h Z2VsbGFuLmlweG8uY29tL3JlcG8vNTI4YTIxOGYtYWQyOC00MGQyLWJkN2YtMzUw ZWFkYTNkNzA1LTAvMC9BUzE5ODAyMC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEF BQcOAjAlBggrBgEFBQcBBwEB/wQWMBQwEgQCAAEwDAMEAFYmtgMEAFYm7jANBgkq hkiG9w0BAQsFAAOCAQEAxhWh2ZkyI7OAG7mqQkt/mIXTXzL+AEBJNRWI9jIj78X+ WmbToD4syRSOPw5ogChekCGkCfZjC3rFiFmPeSt+E+HTCkYLzdwpPTOpxdGYTsNF 2pfwEystFTPX+hXbLc0toCATlJx0jvRthLH3yB8cP9l+wrkU5lC0K1VRdfmehmgG wZsEC2mxt2zbWgzYaF0AyK1li41kh9gRNR8HCtlu0lMyY5C8iQe5uFqX3qqJAfsI xWd1ntutw5vccDx9Z8LqyuWrfrZ0KMfdZwXhQEHKsHq/PZMZLGFeU0+zrtmTYSTO On93CAnVALis49XpQUzgfSIJcsyEl0yd+KJjUIDKTQ== -----END CERTIFICATE-----Generated at Wed Nov 5 03:17:44 2025 by rpki-client