$ rpki-client -vvf r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/AS214025.roa File: AS214025.roa (raw, json) Hash identifier: L/rFF9v+ZAD91LrUGuc5pi04duLY5jypgto60Pep7UU= Subject key identifier: 33:23:29:72:1F:4C:10:D5:A0:49:B3:07:E2:85:07:1B:DF:F3:31:C4 Certificate issuer: /CN=D34606949D385DB42714FE71274FAC9948EF279C Certificate serial: 5C4BB0363DF1941502A1C284F8EF8AAF8C696FC0 Authority key identifier: D3:46:06:94:9D:38:5D:B4:27:14:FE:71:27:4F:AC:99:48:EF:27:9C Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/D34606949D385DB42714FE71274FAC9948EF279C.cer Subject info access: rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/AS214025.roa Signing time: Mon 23 Feb 2026 11:53:12 +0000 ROA not before: Mon 23 Feb 2026 11:48:12 +0000 ROA not after: Mon 22 Feb 2027 11:53:12 +0000 asID: 214025 IP address blocks: 86.38.156.0/24 maxlen: 24 89.116.203.0/24 maxlen: 24 89.117.84.0/24 maxlen: 24 Validation: OK Signature path: rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/D34606949D385DB42714FE71274FAC9948EF279C.crl rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/D34606949D385DB42714FE71274FAC9948EF279C.mft rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/D34606949D385DB42714FE71274FAC9948EF279C.cer rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/9DF85997B1B9B358E1C43F36765AA0A4A02144AE.crl rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/9DF85997B1B9B358E1C43F36765AA0A4A02144AE.mft rsync://rpki.ripe.net/repository/DEFAULT/nfhZl7G5s1jhxD82dlqgpKAhRK4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 02 Mar 2026 10:54:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5c:4b:b0:36:3d:f1:94:15:02:a1:c2:84:f8:ef:8a:af:8c:69:6f:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D34606949D385DB42714FE71274FAC9948EF279C Validity Not Before: Feb 23 11:48:12 2026 GMT Not After : Feb 22 11:53:12 2027 GMT Subject: CN=332329721F4C10D5A049B307E285071BDFF331C4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:46:97:13:e4:d0:8d:15:b6:ae:95:16:04:75: 0f:10:b7:f7:c3:18:f9:5b:b1:f8:db:9d:0f:b9:e9: c8:99:52:a8:08:7f:4d:a9:d3:ff:54:25:76:fe:9b: e4:af:c5:c9:33:13:40:d7:1a:32:bf:94:d0:c2:a5: 6b:b3:cb:fe:b9:fb:ac:b4:e8:57:be:50:e3:8f:14: c2:84:e0:05:f8:0a:50:4c:4a:cc:b8:6d:3a:7f:b2: 49:bc:6a:48:91:6c:95:2d:25:33:d1:8d:10:5e:ef: 8b:64:92:f8:ce:56:8e:3b:9a:d4:cb:1e:8d:91:1d: 62:65:7b:05:83:16:3b:f7:59:63:9f:04:05:cb:8a: 07:98:29:12:37:59:f9:16:1c:c8:b8:aa:91:64:ae: 38:48:2f:ae:d0:32:a8:28:6d:36:e7:f0:8f:c6:08: e7:df:20:3a:18:95:c9:b3:a5:bc:0e:2f:44:b3:45: 0d:66:4a:45:ca:51:e7:60:cc:6b:b1:d9:5f:f5:fb: e9:49:e4:d9:65:b1:be:1c:64:c6:a5:49:a5:5e:97: d4:36:f1:20:ba:cf:20:0a:2c:74:fc:b3:a5:e3:52: 6a:89:38:63:f6:88:90:f2:e2:2e:2c:e9:3f:23:d4: 18:50:f8:a7:4a:11:7e:63:70:aa:e4:76:8b:c1:ee: c6:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:23:29:72:1F:4C:10:D5:A0:49:B3:07:E2:85:07:1B:DF:F3:31:C4 X509v3 Authority Key Identifier: keyid:D3:46:06:94:9D:38:5D:B4:27:14:FE:71:27:4F:AC:99:48:EF:27:9C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/D34606949D385DB42714FE71274FAC9948EF279C.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/D34606949D385DB42714FE71274FAC9948EF279C.cer Subject Information Access: Signed Object - URI:rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/AS214025.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 86.38.156.0/24 89.116.203.0/24 89.117.84.0/24 Signature Algorithm: sha256WithRSAEncryption 78:2c:a5:90:9f:69:dc:1f:fd:df:c4:46:c7:7a:24:32:b6:63: 43:89:4d:88:64:4e:21:a3:bf:74:87:e6:5d:00:92:2f:4d:6b: e7:f0:d6:8f:ce:a4:05:43:ec:17:84:06:b3:5b:66:ca:eb:ed: ab:63:b1:7f:78:d5:bd:2a:09:ff:a1:c4:85:23:4e:98:89:01: e0:c5:63:73:3f:40:55:c8:1a:73:31:c1:e3:dd:ce:4f:1b:f4: 81:66:6f:c1:85:09:35:25:c7:a5:63:fe:fb:b4:54:d1:11:f9: 23:1f:af:42:d8:a7:cc:dc:b5:29:c2:c9:6f:e8:1c:54:7d:8e: d1:3f:b2:09:a6:cd:ba:43:26:45:aa:71:05:44:95:32:94:87: 73:8f:34:3f:cd:fc:03:90:be:2c:7f:38:1f:06:2e:2d:fe:7e: d1:37:2e:65:24:44:e1:50:0c:35:af:0d:5a:64:d5:51:60:1a: 4e:36:95:38:ae:7f:71:c6:8c:f3:3d:98:aa:66:dc:e2:1e:c8: 0e:3b:12:8f:e5:94:6a:af:b8:61:0b:f7:6e:c7:13:54:12:52: 95:99:60:94:ca:de:0d:f2:55:e4:98:1e:b5:91:cd:6d:2b:26: 90:39:f3:bc:60:83:fa:04:c9:9c:8e:95:d1:e3:d2:f6:40:89: 9a:9b:b8:24 -----BEGIN CERTIFICATE----- MIIFMTCCBBmgAwIBAgIUXEuwNj3xlBUCocKE+O+Kr4xpb8AwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDM0NjA2OTQ5RDM4NURCNDI3MTRGRTcxMjc0RkFDOTk0 OEVGMjc5QzAeFw0yNjAyMjMxMTQ4MTJaFw0yNzAyMjIxMTUzMTJaMDMxMTAvBgNV BAMTKDMzMjMyOTcyMUY0QzEwRDVBMDQ5QjMwN0UyODUwNzFCREZGMzMxQzQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCwRpcT5NCNFbaulRYEdQ8Qt/fD GPlbsfjbnQ+56ciZUqgIf02p0/9UJXb+m+SvxckzE0DXGjK/lNDCpWuzy/65+6y0 6Fe+UOOPFMKE4AX4ClBMSsy4bTp/skm8akiRbJUtJTPRjRBe74tkkvjOVo47mtTL Ho2RHWJlewWDFjv3WWOfBAXLigeYKRI3WfkWHMi4qpFkrjhIL67QMqgobTbn8I/G COffIDoYlcmzpbwOL0SzRQ1mSkXKUedgzGux2V/1++lJ5Nllsb4cZMalSaVel9Q2 8SC6zyAKLHT8s6XjUmqJOGP2iJDy4i4s6T8j1BhQ+KdKEX5jcKrkdovB7sbLAgMB AAGjggI7MIICNzAdBgNVHQ4EFgQUMyMpch9MENWgSbMH4oUHG9/zMcQwHwYDVR0j BBgwFoAU00YGlJ04XbQnFP5xJ0+smUjvJ5wwDgYDVR0PAQH/BAQDAgeAMIGIBgNV HR8EgYAwfjB8oHqgeIZ2cnN5bmM6Ly9yLm1hZ2VsbGFuLmlweG8uY29tL3JlcG8v NTI4YTIxOGYtYWQyOC00MGQyLWJkN2YtMzUwZWFkYTNkNzA1LTAvMC9EMzQ2MDY5 NDlEMzg1REI0MjcxNEZFNzEyNzRGQUM5OTQ4RUYyNzlDLmNybDCBngYIKwYBBQUH AQEEgZEwgY4wgYsGCCsGAQUFBzAChn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5y aXBlLm5ldC9yZXBvc2l0b3J5LzAwMmUwYmEzLWZlNjAtNDViMS05MTYwLTg2OGEy ZjhhNDNiMS8zL0QzNDYwNjk0OUQzODVEQjQyNzE0RkU3MTI3NEZBQzk5NDhFRjI3 OUMuY2VyMHIGCCsGAQUFBwELBGYwZDBiBggrBgEFBQcwC4ZWcnN5bmM6Ly9yLm1h Z2VsbGFuLmlweG8uY29tL3JlcG8vNTI4YTIxOGYtYWQyOC00MGQyLWJkN2YtMzUw ZWFkYTNkNzA1LTAvMC9BUzIxNDAyNS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEF BQcOAjArBggrBgEFBQcBBwEB/wQcMBowGAQCAAEwEgMEAFYmnAMEAFl0ywMEAFl1 VDANBgkqhkiG9w0BAQsFAAOCAQEAeCylkJ9p3B/938RGx3okMrZjQ4lNiGROIaO/ dIfmXQCSL01r5/DWj86kBUPsF4QGs1tmyuvtq2Oxf3jVvSoJ/6HEhSNOmIkB4MVj cz9AVcgaczHB493OTxv0gWZvwYUJNSXHpWP++7RU0RH5Ix+vQtinzNy1KcLJb+gc VH2O0T+yCabNukMmRapxBUSVMpSHc480P838A5C+LH84HwYuLf5+0TcuZSRE4VAM Na8NWmTVUWAaTjaVOK5/ccaM8z2Yqmbc4h7IDjsSj+WUaq+4YQv3bscTVBJSlZlg lMreDfJV5JgetZHNbSsmkDnzvGCD+gTJnI6V0ePS9kCJmpu4JA== -----END CERTIFICATE-----Generated at Mon Mar 2 01:00:31 2026 by rpki-client