$ rpki-client -vvvf r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/AS207152.roa File: AS207152.roa (raw, json) Hash identifier: DzfMTGC2hBZcUfqqTFym4Ozw69XEJglLY6vjdo6MAnc= Subject key identifier: 51:A5:D2:6B:A6:19:5D:E6:5D:02:B6:89:7A:A2:36:70:C7:F2:C1:B1 Certificate issuer: /CN=D34606949D385DB42714FE71274FAC9948EF279C Certificate serial: 7C2E9897B6CB6A29BF547BCD8092A1C2F573FD24 Authority key identifier: D3:46:06:94:9D:38:5D:B4:27:14:FE:71:27:4F:AC:99:48:EF:27:9C Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/D34606949D385DB42714FE71274FAC9948EF279C.cer Subject info access: rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/AS207152.roa Signing time: Tue 03 Nov 2026 13:49:39 +0000 ROA not before: Tue 03 Nov 2026 13:44:39 +0000 ROA not after: Tue 02 Nov 2027 13:49:39 +0000 asID: 207152 IP address blocks: 86.38.184.0/23 maxlen: 24 86.38.186.0/23 maxlen: 24 86.38.246.0/23 maxlen: 24 89.116.172.0/23 maxlen: 24 89.116.210.0/23 maxlen: 24 89.117.88.0/22 maxlen: 24 89.117.132.0/22 maxlen: 24 Validation: OK Signature path: rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/D34606949D385DB42714FE71274FAC9948EF279C.crl rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/D34606949D385DB42714FE71274FAC9948EF279C.mft rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/D34606949D385DB42714FE71274FAC9948EF279C.cer rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/9DF85997B1B9B358E1C43F36765AA0A4A02144AE.crl rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/9DF85997B1B9B358E1C43F36765AA0A4A02144AE.mft rsync://rpki.ripe.net/repository/DEFAULT/nfhZl7G5s1jhxD82dlqgpKAhRK4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 05 Nov 2026 22:58:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7c:2e:98:97:b6:cb:6a:29:bf:54:7b:cd:80:92:a1:c2:f5:73:fd:24 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D34606949D385DB42714FE71274FAC9948EF279C Validity Not Before: Nov 3 13:44:39 2026 GMT Not After : Nov 2 13:49:39 2027 GMT Subject: CN=51A5D26BA6195DE65D02B6897AA23670C7F2C1B1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:ea:8d:b4:c6:4a:79:93:c9:a6:90:21:1b:47: f6:c5:14:c1:d9:52:ec:09:71:bc:09:ba:03:d2:41: ca:68:da:23:b2:56:1a:3d:55:b9:de:af:f6:01:85: b0:27:f4:c3:c8:e8:de:40:bb:89:44:10:54:be:31: 1c:29:47:ac:c9:38:92:0a:33:62:83:1d:fe:5b:12: 03:ca:4e:cf:1e:4e:72:c2:28:9f:14:bf:c5:5c:05: ba:c2:aa:2a:a4:29:c9:da:94:7e:27:92:a1:4a:12: 6e:3a:8a:dd:84:91:94:11:91:73:08:9d:d9:50:4c: 33:95:bf:52:d7:9d:99:da:86:f4:d8:63:80:97:c4: 79:a2:cb:05:f4:be:5a:5f:90:05:62:81:36:b8:81: 73:ff:2e:5b:d2:8a:f7:d1:fb:c7:1d:b2:bc:af:16: 8e:06:f0:1f:ee:a7:f6:6e:f8:05:e4:c1:69:5b:d5: 38:5a:fc:11:23:ad:5f:a5:f0:e0:16:60:b8:34:b6: 17:a3:a7:1f:cb:7d:f4:2e:31:3f:3d:4c:58:ed:a3: a7:63:30:fd:48:fb:3b:a5:01:14:40:d9:22:74:52: 2f:8e:59:cb:29:e9:58:1e:7a:4c:7c:61:78:b3:de: 41:0d:a0:b7:65:84:4b:95:21:a5:a4:24:7d:f4:23: 6b:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:A5:D2:6B:A6:19:5D:E6:5D:02:B6:89:7A:A2:36:70:C7:F2:C1:B1 X509v3 Authority Key Identifier: keyid:D3:46:06:94:9D:38:5D:B4:27:14:FE:71:27:4F:AC:99:48:EF:27:9C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/D34606949D385DB42714FE71274FAC9948EF279C.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/D34606949D385DB42714FE71274FAC9948EF279C.cer Subject Information Access: Signed Object - URI:rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/AS207152.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 86.38.184.0/22 86.38.246.0/23 89.116.172.0/23 89.116.210.0/23 89.117.88.0/22 89.117.132.0/22 Signature Algorithm: sha256WithRSAEncryption 4c:88:3a:ef:5e:5f:fb:94:5a:e6:dd:a5:33:56:6a:ce:c2:cc: 7c:ed:b4:bb:08:a9:09:b1:38:47:72:1f:4a:84:d4:34:d1:5c: 28:8c:9a:fb:1d:22:3c:e8:1e:f3:e4:97:9c:c5:30:83:64:f3: 50:96:18:c9:bc:09:b5:b6:4c:ce:ea:3d:73:fd:ae:ad:f5:cb: fc:e7:12:da:20:2d:65:56:66:d7:53:a9:d7:ce:8a:ac:71:13: b2:ce:90:ef:3b:a3:7a:1d:f3:0a:40:16:4c:a0:62:97:be:d2: a0:39:ec:9f:f1:6d:4c:c1:02:7a:c5:d4:53:74:88:f6:e6:99: d8:fa:fe:ed:07:8c:90:16:9c:25:22:f2:b0:de:38:a6:e2:3c: c8:10:61:f9:03:2e:5d:bc:7c:72:4d:8c:62:97:22:42:1a:16: 7d:4e:94:44:e1:8d:8c:a0:60:28:3b:4a:95:7a:cf:1a:ce:29: 1f:3a:c6:18:0f:75:de:fd:a1:1b:ba:56:8d:71:ba:12:8a:ad: df:0e:bb:6d:8f:4c:55:1e:3d:a4:28:7d:f3:a1:d5:3b:d8:02: 8e:ea:38:c6:65:f7:4f:ba:56:17:73:88:ec:0b:d0:9d:82:25: ea:70:cf:01:e5:b4:04:03:04:94:8c:df:67:8c:a9:54:f5:c5: 95:db:a6:25 -----BEGIN CERTIFICATE----- MIIFQzCCBCugAwIBAgIUfC6Yl7bLaim/VHvNgJKhwvVz/SQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDM0NjA2OTQ5RDM4NURCNDI3MTRGRTcxMjc0RkFDOTk0 OEVGMjc5QzAeFw0yNjExMDMxMzQ0MzlaFw0yNzExMDIxMzQ5MzlaMDMxMTAvBgNV BAMTKDUxQTVEMjZCQTYxOTVERTY1RDAyQjY4OTdBQTIzNjcwQzdGMkMxQjEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCI6o20xkp5k8mmkCEbR/bFFMHZ UuwJcbwJugPSQcpo2iOyVho9Vbner/YBhbAn9MPI6N5Au4lEEFS+MRwpR6zJOJIK M2KDHf5bEgPKTs8eTnLCKJ8Uv8VcBbrCqiqkKcnalH4nkqFKEm46it2EkZQRkXMI ndlQTDOVv1LXnZnahvTYY4CXxHmiywX0vlpfkAVigTa4gXP/LlvSivfR+8cdsryv Fo4G8B/up/Zu+AXkwWlb1Tha/BEjrV+l8OAWYLg0thejpx/LffQuMT89TFjto6dj MP1I+zulARRA2SJ0Ui+OWcsp6Vgeekx8YXiz3kENoLdlhEuVIaWkJH30I2tbAgMB AAGjggJNMIICSTAdBgNVHQ4EFgQUUaXSa6YZXeZdAraJeqI2cMfywbEwHwYDVR0j BBgwFoAU00YGlJ04XbQnFP5xJ0+smUjvJ5wwDgYDVR0PAQH/BAQDAgeAMIGIBgNV HR8EgYAwfjB8oHqgeIZ2cnN5bmM6Ly9yLm1hZ2VsbGFuLmlweG8uY29tL3JlcG8v NTI4YTIxOGYtYWQyOC00MGQyLWJkN2YtMzUwZWFkYTNkNzA1LTAvMC9EMzQ2MDY5 NDlEMzg1REI0MjcxNEZFNzEyNzRGQUM5OTQ4RUYyNzlDLmNybDCBngYIKwYBBQUH AQEEgZEwgY4wgYsGCCsGAQUFBzAChn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5y aXBlLm5ldC9yZXBvc2l0b3J5LzAwMmUwYmEzLWZlNjAtNDViMS05MTYwLTg2OGEy ZjhhNDNiMS8zL0QzNDYwNjk0OUQzODVEQjQyNzE0RkU3MTI3NEZBQzk5NDhFRjI3 OUMuY2VyMHIGCCsGAQUFBwELBGYwZDBiBggrBgEFBQcwC4ZWcnN5bmM6Ly9yLm1h Z2VsbGFuLmlweG8uY29tL3JlcG8vNTI4YTIxOGYtYWQyOC00MGQyLWJkN2YtMzUw ZWFkYTNkNzA1LTAvMC9BUzIwNzE1Mi5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEF BQcOAjA9BggrBgEFBQcBBwEB/wQuMCwwKgQCAAEwJAMEAlYmuAMEAVYm9gMEAVl0 rAMEAVl00gMEAll1WAMEAll1hDANBgkqhkiG9w0BAQsFAAOCAQEATIg6715f+5Ra 5t2lM1ZqzsLMfO20uwipCbE4R3IfSoTUNNFcKIya+x0iPOge8+SXnMUwg2TzUJYY ybwJtbZMzuo9c/2urfXL/OcS2iAtZVZm11Op186KrHETss6Q7zujeh3zCkAWTKBi l77SoDnsn/FtTMECesXUU3SI9uaZ2Pr+7QeMkBacJSLysN44puI8yBBh+QMuXbx8 ck2MYpciQhoWfU6UROGNjKBgKDtKlXrPGs4pHzrGGA913v2hG7pWjXG6Eoqt3w67 bY9MVR49pCh986HVO9gCjuo4xmX3T7pWF3OI7AvQnYIl6nDPAeW0BAMElIzfZ4yp VPXFldumJQ== -----END CERTIFICATE-----Generated at Thu Nov 5 07:17:37 2026 by rpki-client