$ rpki-client -vvvf r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/AS205220.roa File: AS205220.roa (raw, json) Hash identifier: vrEDVKlimHfhj1nuxTY54d9ltDFy3H5froAJ0JSjdhw= Subject key identifier: 97:27:25:32:42:93:24:B1:C2:AF:05:E0:22:B7:C9:ED:B4:62:43:52 Certificate issuer: /CN=D34606949D385DB42714FE71274FAC9948EF279C Certificate serial: 53A7DCA2BA1F0061ECD1EE3BCC47057CD60FC0ED Authority key identifier: D3:46:06:94:9D:38:5D:B4:27:14:FE:71:27:4F:AC:99:48:EF:27:9C Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/D34606949D385DB42714FE71274FAC9948EF279C.cer Subject info access: rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/AS205220.roa Signing time: Tue 15 Sep 2026 19:49:35 +0000 ROA not before: Tue 15 Sep 2026 19:44:35 +0000 ROA not after: Tue 14 Sep 2027 19:49:35 +0000 asID: 205220 IP address blocks: 89.116.148.0/23 maxlen: 24 89.117.24.0/23 maxlen: 24 89.117.70.0/23 maxlen: 24 Validation: OK Signature path: rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/D34606949D385DB42714FE71274FAC9948EF279C.crl rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/D34606949D385DB42714FE71274FAC9948EF279C.mft rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/D34606949D385DB42714FE71274FAC9948EF279C.cer rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/9DF85997B1B9B358E1C43F36765AA0A4A02144AE.crl rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/9DF85997B1B9B358E1C43F36765AA0A4A02144AE.mft rsync://rpki.ripe.net/repository/DEFAULT/nfhZl7G5s1jhxD82dlqgpKAhRK4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 22 Sep 2026 19:45:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 53:a7:dc:a2:ba:1f:00:61:ec:d1:ee:3b:cc:47:05:7c:d6:0f:c0:ed Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D34606949D385DB42714FE71274FAC9948EF279C Validity Not Before: Sep 15 19:44:35 2026 GMT Not After : Sep 14 19:49:35 2027 GMT Subject: CN=97272532429324B1C2AF05E022B7C9EDB4624352 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:47:bb:19:75:87:37:d5:1a:51:86:27:84:b6: 9a:39:dc:8a:4a:8d:3e:92:be:8b:dd:14:ea:88:0c: e0:04:87:87:7c:d0:33:3b:d2:a4:9e:90:ba:84:f9: f0:de:74:b6:19:0a:54:ee:e3:fd:1c:90:56:66:7a: 5c:25:1c:55:b6:d3:32:46:1c:ce:db:db:a6:36:d7: 2d:39:c9:b8:69:08:17:c5:b8:df:33:36:be:20:ab: c1:95:db:bf:a6:c6:40:47:ee:20:53:95:d5:73:7d: 35:ae:6d:6b:45:77:a2:91:6e:a0:64:4b:e5:3e:f4: e0:67:02:ab:e5:14:97:10:96:fa:7c:55:2e:32:ec: f5:d2:db:83:e7:4f:c7:7a:2c:39:dc:a4:46:98:1a: 75:93:81:ef:81:14:34:f4:5b:9e:b0:58:3b:9e:d0: 25:4c:32:5c:f8:05:bd:08:d5:93:da:b2:ba:b9:1a: 07:47:23:08:4c:eb:01:2e:a4:06:32:6c:d2:84:8e: 7e:32:92:14:3e:8f:26:90:f9:31:04:b1:59:16:05: 79:90:79:11:d1:1b:46:4f:1d:66:a7:5f:4f:31:2c: 23:8b:12:53:80:00:e8:c6:a3:b3:89:f6:38:6f:9d: 73:75:33:be:e0:94:21:4b:59:f6:9d:bb:4f:84:b3: d0:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:27:25:32:42:93:24:B1:C2:AF:05:E0:22:B7:C9:ED:B4:62:43:52 X509v3 Authority Key Identifier: keyid:D3:46:06:94:9D:38:5D:B4:27:14:FE:71:27:4F:AC:99:48:EF:27:9C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/D34606949D385DB42714FE71274FAC9948EF279C.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/D34606949D385DB42714FE71274FAC9948EF279C.cer Subject Information Access: Signed Object - URI:rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/AS205220.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 89.116.148.0/23 89.117.24.0/23 89.117.70.0/23 Signature Algorithm: sha256WithRSAEncryption 81:6e:a7:5f:b8:ba:10:bd:cd:50:0c:a6:3d:d6:53:d4:b5:b1: cd:6f:25:2d:96:e0:02:ae:34:3f:10:6c:21:13:44:fe:bc:0a: 38:08:91:07:b2:36:04:12:bd:90:24:a7:14:72:6c:6b:31:27: 3e:eb:2c:85:e4:d2:51:30:bb:fa:0b:5b:13:b7:91:02:11:77: 9a:0c:19:86:dc:6e:3e:2e:6a:a0:6d:a3:fd:f1:3a:f7:d0:fc: 00:f3:9d:29:a4:3d:fc:35:e9:6a:02:e6:a0:c9:9a:80:32:6c: 8b:5f:2d:39:29:9a:11:ac:37:4d:4f:9b:4b:14:69:df:34:fc: a7:84:a2:ae:48:11:9a:03:93:c3:8b:64:13:80:be:c2:65:ff: e0:09:05:87:8e:cc:b6:a2:51:14:5a:2c:c2:a4:5c:67:e3:98: 97:77:1e:4a:8c:1f:39:42:1d:f8:72:70:1b:31:9e:e1:9c:7d: ad:b1:f9:d5:2d:9d:e6:b5:50:5a:12:d8:af:5f:11:2d:54:d0: e8:0d:16:5a:c6:48:c8:b6:04:c2:1b:9b:7c:b5:5d:90:ef:b2: e8:06:7a:96:67:c9:f5:5a:6f:5d:71:a5:7a:fc:f6:75:66:14: 8e:39:a8:de:85:cb:7e:39:aa:02:52:78:9f:22:84:f1:a6:8f: ac:d3:a7:e2 -----BEGIN CERTIFICATE----- MIIFMTCCBBmgAwIBAgIUU6fcorofAGHs0e47zEcFfNYPwO0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDM0NjA2OTQ5RDM4NURCNDI3MTRGRTcxMjc0RkFDOTk0 OEVGMjc5QzAeFw0yNjA5MTUxOTQ0MzVaFw0yNzA5MTQxOTQ5MzVaMDMxMTAvBgNV BAMTKDk3MjcyNTMyNDI5MzI0QjFDMkFGMDVFMDIyQjdDOUVEQjQ2MjQzNTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDqR7sZdYc31RpRhieEtpo53IpK jT6SvovdFOqIDOAEh4d80DM70qSekLqE+fDedLYZClTu4/0ckFZmelwlHFW20zJG HM7b26Y21y05ybhpCBfFuN8zNr4gq8GV27+mxkBH7iBTldVzfTWubWtFd6KRbqBk S+U+9OBnAqvlFJcQlvp8VS4y7PXS24PnT8d6LDncpEaYGnWTge+BFDT0W56wWDue 0CVMMlz4Bb0I1ZPasrq5GgdHIwhM6wEupAYybNKEjn4ykhQ+jyaQ+TEEsVkWBXmQ eRHRG0ZPHWanX08xLCOLElOAAOjGo7OJ9jhvnXN1M77glCFLWfadu0+Es9B5AgMB AAGjggI7MIICNzAdBgNVHQ4EFgQUlyclMkKTJLHCrwXgIrfJ7bRiQ1IwHwYDVR0j BBgwFoAU00YGlJ04XbQnFP5xJ0+smUjvJ5wwDgYDVR0PAQH/BAQDAgeAMIGIBgNV HR8EgYAwfjB8oHqgeIZ2cnN5bmM6Ly9yLm1hZ2VsbGFuLmlweG8uY29tL3JlcG8v NTI4YTIxOGYtYWQyOC00MGQyLWJkN2YtMzUwZWFkYTNkNzA1LTAvMC9EMzQ2MDY5 NDlEMzg1REI0MjcxNEZFNzEyNzRGQUM5OTQ4RUYyNzlDLmNybDCBngYIKwYBBQUH AQEEgZEwgY4wgYsGCCsGAQUFBzAChn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5y aXBlLm5ldC9yZXBvc2l0b3J5LzAwMmUwYmEzLWZlNjAtNDViMS05MTYwLTg2OGEy ZjhhNDNiMS8zL0QzNDYwNjk0OUQzODVEQjQyNzE0RkU3MTI3NEZBQzk5NDhFRjI3 OUMuY2VyMHIGCCsGAQUFBwELBGYwZDBiBggrBgEFBQcwC4ZWcnN5bmM6Ly9yLm1h Z2VsbGFuLmlweG8uY29tL3JlcG8vNTI4YTIxOGYtYWQyOC00MGQyLWJkN2YtMzUw ZWFkYTNkNzA1LTAvMC9BUzIwNTIyMC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEF BQcOAjArBggrBgEFBQcBBwEB/wQcMBowGAQCAAEwEgMEAVl0lAMEAVl1GAMEAVl1 RjANBgkqhkiG9w0BAQsFAAOCAQEAgW6nX7i6EL3NUAymPdZT1LWxzW8lLZbgAq40 PxBsIRNE/rwKOAiRB7I2BBK9kCSnFHJsazEnPussheTSUTC7+gtbE7eRAhF3mgwZ htxuPi5qoG2j/fE699D8APOdKaQ9/DXpagLmoMmagDJsi18tOSmaEaw3TU+bSxRp 3zT8p4SirkgRmgOTw4tkE4C+wmX/4AkFh47MtqJRFFoswqRcZ+OYl3ceSowfOUId +HJwGzGe4Zx9rbH51S2d5rVQWhLYr18RLVTQ6A0WWsZIyLYEwhubfLVdkO+y6AZ6 lmfJ9VpvXXGlevz2dWYUjjmo3oXLfjmqAlJ4nyKE8aaPrNOn4g== -----END CERTIFICATE-----Generated at Tue Sep 22 06:35:17 2026 by rpki-client