$ rpki-client -vvvf r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/AS211936.roa File: AS211936.roa (raw, json) Hash identifier: zYbF7c+VdeTGyDinFtXf7Vvk+byH2szXq5xC0NEah+4= Subject key identifier: 86:78:C2:49:74:AD:B5:C5:79:84:67:EB:46:71:97:C1:BD:26:83:A2 Certificate issuer: /CN=D34606949D385DB42714FE71274FAC9948EF279C Certificate serial: 1A658B0B5CC4D26297B5944590CD09220B03B9AA Authority key identifier: D3:46:06:94:9D:38:5D:B4:27:14:FE:71:27:4F:AC:99:48:EF:27:9C Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/D34606949D385DB42714FE71274FAC9948EF279C.cer Subject info access: rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/AS211936.roa Signing time: Tue 03 Nov 2026 13:49:39 +0000 ROA not before: Tue 03 Nov 2026 13:44:39 +0000 ROA not after: Tue 02 Nov 2027 13:49:39 +0000 asID: 211936 IP address blocks: 86.38.248.0/21 maxlen: 24 Validation: OK Signature path: rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/D34606949D385DB42714FE71274FAC9948EF279C.crl rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/D34606949D385DB42714FE71274FAC9948EF279C.mft rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/D34606949D385DB42714FE71274FAC9948EF279C.cer rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/9DF85997B1B9B358E1C43F36765AA0A4A02144AE.crl rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/9DF85997B1B9B358E1C43F36765AA0A4A02144AE.mft rsync://rpki.ripe.net/repository/DEFAULT/nfhZl7G5s1jhxD82dlqgpKAhRK4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 08 Nov 2026 05:00:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1a:65:8b:0b:5c:c4:d2:62:97:b5:94:45:90:cd:09:22:0b:03:b9:aa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D34606949D385DB42714FE71274FAC9948EF279C Validity Not Before: Nov 3 13:44:39 2026 GMT Not After : Nov 2 13:49:39 2027 GMT Subject: CN=8678C24974ADB5C5798467EB467197C1BD2683A2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:c0:6b:1d:b9:5f:8e:be:fb:17:d4:b4:31:75: b6:0f:ea:b9:52:87:ac:93:b0:c7:ec:30:f4:6c:83: 57:e6:c9:a3:9e:50:f2:10:a8:31:72:e4:16:67:cb: 44:81:c4:e3:45:cf:9c:9f:c8:0e:b1:52:99:18:c8: e5:57:c4:aa:2d:25:86:88:4e:f3:01:68:5c:04:8c: 83:a6:c0:70:63:16:7f:4b:94:fc:3b:45:e9:83:7e: d6:99:fe:27:ca:7b:c3:59:58:2b:f8:9b:c9:1e:a5: 9b:41:78:4d:82:1b:99:06:e0:cd:ce:aa:6e:43:05: 26:21:7f:85:4b:79:3f:40:14:1b:75:be:54:cb:1c: a4:1c:dd:6a:46:0f:a8:a4:92:86:71:c9:95:14:2b: fa:61:c9:d6:46:fe:da:79:65:bf:e6:c9:15:5f:4a: 0a:b4:ef:8b:a9:f5:63:ba:06:3f:a7:eb:e6:0e:37: 69:80:93:92:1a:44:b8:f5:d1:d3:c0:90:a7:51:4e: 79:38:bf:ec:94:ca:19:a0:fe:28:17:f1:6e:75:96: 00:ee:8e:2a:de:b1:6f:8c:df:33:94:c2:e6:eb:25: ae:24:ee:5e:5d:05:26:15:df:56:69:93:a6:fd:f6: 23:08:81:e5:18:9f:b6:75:e6:2e:9d:a8:72:56:df: c3:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:78:C2:49:74:AD:B5:C5:79:84:67:EB:46:71:97:C1:BD:26:83:A2 X509v3 Authority Key Identifier: keyid:D3:46:06:94:9D:38:5D:B4:27:14:FE:71:27:4F:AC:99:48:EF:27:9C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/D34606949D385DB42714FE71274FAC9948EF279C.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/D34606949D385DB42714FE71274FAC9948EF279C.cer Subject Information Access: Signed Object - URI:rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/AS211936.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 86.38.248.0/21 Signature Algorithm: sha256WithRSAEncryption 46:7e:ee:09:11:20:27:d3:50:68:f6:ee:1c:56:94:df:c6:dd: 5b:7b:83:f7:1d:b9:5e:47:3a:e3:3f:45:83:9b:fd:99:c6:a1: dc:ef:6c:15:a3:d9:be:f5:e7:9e:61:4e:52:3a:f8:95:7d:7b: 90:b3:68:9b:01:e3:f1:c3:36:21:07:38:36:64:e7:b4:18:c6: 2d:fd:93:a9:8d:77:70:06:df:30:ba:c1:78:34:89:25:24:d3: 52:3a:b9:16:ba:58:33:f0:00:51:7b:23:3c:7d:5a:f3:ba:4f: a5:2b:6e:40:25:eb:d1:c5:4d:d6:9e:14:df:b1:4d:03:cf:cf: 8c:18:82:a0:db:b3:7f:64:e1:e7:2b:73:9a:11:d9:82:a7:e8: 9c:41:ff:30:3a:78:27:b7:21:55:00:56:96:c6:5a:7d:c2:a9: 90:eb:23:81:85:9c:54:12:06:2e:ab:77:94:13:ab:b5:fa:38: 4b:d4:62:c8:f8:00:a3:5a:de:48:d6:5d:fe:00:2d:f8:e9:02: 7e:ff:f0:03:52:c3:31:4a:df:74:37:b1:9f:1e:3d:65:c0:2b: eb:76:25:d2:9b:dd:32:15:41:ba:4d:b8:e1:3b:c8:c5:6d:be: d9:87:d2:7c:37:8c:0a:e9:5f:51:28:27:b9:10:e5:b8:60:83: b8:9d:03:ca -----BEGIN CERTIFICATE----- MIIFJTCCBA2gAwIBAgIUGmWLC1zE0mKXtZRFkM0JIgsDuaowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDM0NjA2OTQ5RDM4NURCNDI3MTRGRTcxMjc0RkFDOTk0 OEVGMjc5QzAeFw0yNjExMDMxMzQ0MzlaFw0yNzExMDIxMzQ5MzlaMDMxMTAvBgNV BAMTKDg2NzhDMjQ5NzRBREI1QzU3OTg0NjdFQjQ2NzE5N0MxQkQyNjgzQTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDSwGsduV+OvvsX1LQxdbYP6rlS h6yTsMfsMPRsg1fmyaOeUPIQqDFy5BZny0SBxONFz5yfyA6xUpkYyOVXxKotJYaI TvMBaFwEjIOmwHBjFn9LlPw7RemDftaZ/ifKe8NZWCv4m8kepZtBeE2CG5kG4M3O qm5DBSYhf4VLeT9AFBt1vlTLHKQc3WpGD6ikkoZxyZUUK/phydZG/tp5Zb/myRVf Sgq074up9WO6Bj+n6+YON2mAk5IaRLj10dPAkKdRTnk4v+yUyhmg/igX8W51lgDu jiresW+M3zOUwubrJa4k7l5dBSYV31Zpk6b99iMIgeUYn7Z15i6dqHJW38O3AgMB AAGjggIvMIICKzAdBgNVHQ4EFgQUhnjCSXSttcV5hGfrRnGXwb0mg6IwHwYDVR0j BBgwFoAU00YGlJ04XbQnFP5xJ0+smUjvJ5wwDgYDVR0PAQH/BAQDAgeAMIGIBgNV HR8EgYAwfjB8oHqgeIZ2cnN5bmM6Ly9yLm1hZ2VsbGFuLmlweG8uY29tL3JlcG8v NTI4YTIxOGYtYWQyOC00MGQyLWJkN2YtMzUwZWFkYTNkNzA1LTAvMC9EMzQ2MDY5 NDlEMzg1REI0MjcxNEZFNzEyNzRGQUM5OTQ4RUYyNzlDLmNybDCBngYIKwYBBQUH AQEEgZEwgY4wgYsGCCsGAQUFBzAChn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5y aXBlLm5ldC9yZXBvc2l0b3J5LzAwMmUwYmEzLWZlNjAtNDViMS05MTYwLTg2OGEy ZjhhNDNiMS8zL0QzNDYwNjk0OUQzODVEQjQyNzE0RkU3MTI3NEZBQzk5NDhFRjI3 OUMuY2VyMHIGCCsGAQUFBwELBGYwZDBiBggrBgEFBQcwC4ZWcnN5bmM6Ly9yLm1h Z2VsbGFuLmlweG8uY29tL3JlcG8vNTI4YTIxOGYtYWQyOC00MGQyLWJkN2YtMzUw ZWFkYTNkNzA1LTAvMC9BUzIxMTkzNi5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEF BQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEA1Ym+DANBgkqhkiG9w0B AQsFAAOCAQEARn7uCREgJ9NQaPbuHFaU38bdW3uD9x25Xkc64z9Fg5v9mcah3O9s FaPZvvXnnmFOUjr4lX17kLNomwHj8cM2IQc4NmTntBjGLf2TqY13cAbfMLrBeDSJ JSTTUjq5FrpYM/AAUXsjPH1a87pPpStuQCXr0cVN1p4U37FNA8/PjBiCoNuzf2Th 5ytzmhHZgqfonEH/MDp4J7chVQBWlsZafcKpkOsjgYWcVBIGLqt3lBOrtfo4S9Ri yPgAo1reSNZd/gAt+OkCfv/wA1LDMUrfdDexnx49ZcAr63Yl0pvdMhVBuk244TvI xW2+2YfSfDeMCulfUSgnuRDluGCDuJ0Dyg== -----END CERTIFICATE-----Generated at Sat Nov 7 13:12:21 2026 by rpki-client