$ rpki-client -vvvf r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/AS200019.roa File: AS200019.roa (raw, json) Hash identifier: Wi/RvqXuXxbxeA2/S6nBOF6rWmWhnB3kbpBj+it3E3A= Subject key identifier: F7:87:7D:0A:81:01:75:1F:86:4B:5A:03:4A:EA:18:EB:17:B0:42:B9 Certificate issuer: /CN=D34606949D385DB42714FE71274FAC9948EF279C Certificate serial: 6028CCD36B78E618F8D5737F7A9125F322627C79 Authority key identifier: D3:46:06:94:9D:38:5D:B4:27:14:FE:71:27:4F:AC:99:48:EF:27:9C Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/D34606949D385DB42714FE71274FAC9948EF279C.cer Subject info access: rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/AS200019.roa Signing time: Tue 15 Sep 2026 18:49:35 +0000 ROA not before: Tue 15 Sep 2026 18:44:35 +0000 ROA not after: Tue 14 Sep 2027 18:49:35 +0000 asID: 200019 IP address blocks: 89.117.64.0/22 maxlen: 24 89.117.104.0/22 maxlen: 24 89.117.132.0/22 maxlen: 24 89.117.160.0/22 maxlen: 24 Validation: OK Signature path: rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/D34606949D385DB42714FE71274FAC9948EF279C.crl rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/D34606949D385DB42714FE71274FAC9948EF279C.mft rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/D34606949D385DB42714FE71274FAC9948EF279C.cer rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/9DF85997B1B9B358E1C43F36765AA0A4A02144AE.crl rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/9DF85997B1B9B358E1C43F36765AA0A4A02144AE.mft rsync://rpki.ripe.net/repository/DEFAULT/nfhZl7G5s1jhxD82dlqgpKAhRK4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 21 Sep 2026 01:08:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 60:28:cc:d3:6b:78:e6:18:f8:d5:73:7f:7a:91:25:f3:22:62:7c:79 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D34606949D385DB42714FE71274FAC9948EF279C Validity Not Before: Sep 15 18:44:35 2026 GMT Not After : Sep 14 18:49:35 2027 GMT Subject: CN=F7877D0A8101751F864B5A034AEA18EB17B042B9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:d8:5f:a5:a0:b7:d3:d6:b3:26:e1:8e:1b:be: eb:24:32:22:9c:57:a9:00:03:2c:9f:2b:ec:83:e6: 05:11:bc:e1:1d:7f:39:a8:b9:dd:f5:79:41:6f:3e: 8a:57:1d:b8:cd:64:54:9e:b8:3b:91:8f:39:7e:90: c2:bd:d0:22:d1:0e:79:4a:6c:2b:b3:0d:b2:78:bd: 94:b0:fc:b0:cf:67:6b:92:ce:14:fa:6c:a5:ce:9d: 7f:33:aa:8e:4b:02:ea:33:31:84:66:12:86:fc:da: ed:f5:7d:ba:c1:bc:48:b2:1f:90:f4:a0:3e:db:0f: 6f:99:2f:60:a0:2c:da:b2:4d:ba:13:2e:3c:1b:cb: 1e:a0:ac:4a:21:c7:5c:de:95:1a:8d:bf:e1:20:d5: ca:22:f4:61:70:5a:73:b1:65:d4:e1:f5:b2:a8:c0: 96:be:a9:b4:29:21:68:5a:7c:ff:bb:c7:77:54:28: b1:e6:04:56:75:d9:3b:e6:de:7b:69:6c:2b:bc:46: f4:35:92:1d:db:6e:74:ac:93:64:2f:cb:7a:9c:e4: 34:03:e6:0f:ce:70:c6:34:57:57:35:8a:11:76:da: 7c:38:77:52:6b:17:b0:c3:da:6c:89:b1:5e:0f:31: 75:8c:13:a3:2f:f5:3f:c8:65:72:e2:fb:0e:a0:31: 67:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:87:7D:0A:81:01:75:1F:86:4B:5A:03:4A:EA:18:EB:17:B0:42:B9 X509v3 Authority Key Identifier: keyid:D3:46:06:94:9D:38:5D:B4:27:14:FE:71:27:4F:AC:99:48:EF:27:9C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/D34606949D385DB42714FE71274FAC9948EF279C.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/D34606949D385DB42714FE71274FAC9948EF279C.cer Subject Information Access: Signed Object - URI:rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/AS200019.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 89.117.64.0/22 89.117.104.0/22 89.117.132.0/22 89.117.160.0/22 Signature Algorithm: sha256WithRSAEncryption 88:e3:6b:b0:ca:17:9b:ef:18:f6:75:8d:e8:c8:0d:d5:82:c3: 56:12:8a:3c:57:5d:ad:de:a2:b0:30:dd:c4:fb:65:6b:bd:30: 28:8d:e4:59:9b:a0:6f:99:5e:08:92:4f:9e:dc:e7:30:93:9b: a8:ed:08:2a:0b:c0:44:e7:0e:5b:b2:b6:52:81:29:87:31:5d: 85:60:57:cf:9f:22:19:a2:77:9e:a0:e2:4a:cc:73:b5:3b:a6: ec:0b:02:55:1e:d2:f1:b3:2a:29:5f:30:fe:24:95:ce:5d:ef: 44:db:4e:cc:7e:cf:2b:fe:bb:72:ca:46:08:b7:31:b9:3a:37: e7:97:db:e6:72:91:f7:3a:30:d8:82:80:17:3f:80:4e:d7:89: 3a:bd:41:d9:8d:8e:25:dc:ec:a1:fb:4a:3b:49:74:19:1a:0b: fa:2c:ba:a1:58:ef:62:8f:5a:db:fe:94:68:db:ce:9f:b7:40: 09:b2:8b:ff:b5:02:e2:7d:e2:01:ba:e2:57:bf:d0:9c:50:1c: ad:c4:29:4d:ec:31:af:63:99:54:4f:cc:5e:a9:c6:bd:44:d7: d6:39:91:1b:25:30:43:67:bd:51:3d:3b:a5:77:b6:de:59:80: 0f:8c:40:7d:e2:7e:12:a4:ce:a5:16:c0:2e:36:f4:ba:ba:d2: b4:bb:0a:14 -----BEGIN CERTIFICATE----- MIIFNzCCBB+gAwIBAgIUYCjM02t45hj41XN/epEl8yJifHkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDM0NjA2OTQ5RDM4NURCNDI3MTRGRTcxMjc0RkFDOTk0 OEVGMjc5QzAeFw0yNjA5MTUxODQ0MzVaFw0yNzA5MTQxODQ5MzVaMDMxMTAvBgNV BAMTKEY3ODc3RDBBODEwMTc1MUY4NjRCNUEwMzRBRUExOEVCMTdCMDQyQjkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCN2F+loLfT1rMm4Y4bvuskMiKc V6kAAyyfK+yD5gURvOEdfzmoud31eUFvPopXHbjNZFSeuDuRjzl+kMK90CLRDnlK bCuzDbJ4vZSw/LDPZ2uSzhT6bKXOnX8zqo5LAuozMYRmEob82u31fbrBvEiyH5D0 oD7bD2+ZL2CgLNqyTboTLjwbyx6grEohx1zelRqNv+Eg1coi9GFwWnOxZdTh9bKo wJa+qbQpIWhafP+7x3dUKLHmBFZ12Tvm3ntpbCu8RvQ1kh3bbnSsk2Qvy3qc5DQD 5g/OcMY0V1c1ihF22nw4d1JrF7DD2myJsV4PMXWME6Mv9T/IZXLi+w6gMWcxAgMB AAGjggJBMIICPTAdBgNVHQ4EFgQU94d9CoEBdR+GS1oDSuoY6xewQrkwHwYDVR0j BBgwFoAU00YGlJ04XbQnFP5xJ0+smUjvJ5wwDgYDVR0PAQH/BAQDAgeAMIGIBgNV HR8EgYAwfjB8oHqgeIZ2cnN5bmM6Ly9yLm1hZ2VsbGFuLmlweG8uY29tL3JlcG8v NTI4YTIxOGYtYWQyOC00MGQyLWJkN2YtMzUwZWFkYTNkNzA1LTAvMC9EMzQ2MDY5 NDlEMzg1REI0MjcxNEZFNzEyNzRGQUM5OTQ4RUYyNzlDLmNybDCBngYIKwYBBQUH AQEEgZEwgY4wgYsGCCsGAQUFBzAChn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5y aXBlLm5ldC9yZXBvc2l0b3J5LzAwMmUwYmEzLWZlNjAtNDViMS05MTYwLTg2OGEy ZjhhNDNiMS8zL0QzNDYwNjk0OUQzODVEQjQyNzE0RkU3MTI3NEZBQzk5NDhFRjI3 OUMuY2VyMHIGCCsGAQUFBwELBGYwZDBiBggrBgEFBQcwC4ZWcnN5bmM6Ly9yLm1h Z2VsbGFuLmlweG8uY29tL3JlcG8vNTI4YTIxOGYtYWQyOC00MGQyLWJkN2YtMzUw ZWFkYTNkNzA1LTAvMC9BUzIwMDAxOS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEF BQcOAjAxBggrBgEFBQcBBwEB/wQiMCAwHgQCAAEwGAMEAll1QAMEAll1aAMEAll1 hAMEAll1oDANBgkqhkiG9w0BAQsFAAOCAQEAiONrsMoXm+8Y9nWN6MgN1YLDVhKK PFddrd6isDDdxPtla70wKI3kWZugb5leCJJPntznMJObqO0IKgvAROcOW7K2UoEp hzFdhWBXz58iGaJ3nqDiSsxztTum7AsCVR7S8bMqKV8w/iSVzl3vRNtOzH7PK/67 cspGCLcxuTo355fb5nKR9zow2IKAFz+ATteJOr1B2Y2OJdzsoftKO0l0GRoL+iy6 oVjvYo9a2/6UaNvOn7dACbKL/7UC4n3iAbriV7/QnFAcrcQpTewxr2OZVE/MXqnG vUTX1jmRGyUwQ2e9UT07pXe23lmAD4xAfeJ+EqTOpRbALjb0urrStLsKFA== -----END CERTIFICATE-----Generated at Sun Sep 20 13:24:20 2026 by rpki-client