$ rpki-client -vvf r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/AS214025.roa File: AS214025.roa (raw, json) Hash identifier: /6GWqx+p+BsKYuNnzow3fUHmtOnYXGv3OUjTdN5Jgiw= Subject key identifier: BB:02:33:54:E7:AE:21:39:65:E6:31:88:93:93:6A:1C:C3:22:82:1D Certificate issuer: /CN=D34606949D385DB42714FE71274FAC9948EF279C Certificate serial: 0D39A4C88199669398F4088FB12201050EAB1069 Authority key identifier: D3:46:06:94:9D:38:5D:B4:27:14:FE:71:27:4F:AC:99:48:EF:27:9C Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/D34606949D385DB42714FE71274FAC9948EF279C.cer Subject info access: rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/AS214025.roa Signing time: Wed 01 Apr 2026 00:55:44 +0000 ROA not before: Wed 01 Apr 2026 00:50:44 +0000 ROA not after: Wed 31 Mar 2027 00:55:44 +0000 asID: 214025 IP address blocks: 86.38.255.0/24 maxlen: 24 89.116.9.0/24 maxlen: 24 89.116.127.0/24 maxlen: 24 89.116.141.0/24 maxlen: 24 89.117.129.0/24 maxlen: 24 Validation: OK Signature path: rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/D34606949D385DB42714FE71274FAC9948EF279C.crl rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/D34606949D385DB42714FE71274FAC9948EF279C.mft rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/D34606949D385DB42714FE71274FAC9948EF279C.cer rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/9DF85997B1B9B358E1C43F36765AA0A4A02144AE.crl rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/9DF85997B1B9B358E1C43F36765AA0A4A02144AE.mft rsync://rpki.ripe.net/repository/DEFAULT/nfhZl7G5s1jhxD82dlqgpKAhRK4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 17 Apr 2026 18:47:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0d:39:a4:c8:81:99:66:93:98:f4:08:8f:b1:22:01:05:0e:ab:10:69 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D34606949D385DB42714FE71274FAC9948EF279C Validity Not Before: Apr 1 00:50:44 2026 GMT Not After : Mar 31 00:55:44 2027 GMT Subject: CN=BB023354E7AE213965E6318893936A1CC322821D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:ec:a1:d1:be:d2:98:b5:d9:07:0b:40:7e:48: e9:d1:31:38:58:a4:b2:c9:89:59:0d:05:71:51:ee: 8a:ec:be:fa:f3:df:12:59:d8:a2:09:58:23:13:c5: e9:ea:50:6e:f0:bd:6f:0c:3e:06:9e:f0:6d:6f:15: 98:e9:d9:31:b6:4f:2d:99:4b:e9:af:12:c4:b2:08: 9e:db:d4:d1:8e:df:c4:f2:71:07:20:e4:d6:17:1b: af:3a:4e:2c:c9:46:c2:4b:ae:8d:5f:86:06:83:fb: 70:4b:3b:2f:a6:8d:1f:e9:b2:40:28:79:a3:2a:fd: b2:ce:46:f5:1e:83:10:f3:86:4e:05:5a:fc:65:7d: cd:d1:19:6a:3a:ec:a8:38:f2:3a:c6:f6:26:62:93: 44:bd:08:c7:bc:b0:b3:e2:dc:8b:09:e0:3c:90:03: 20:d4:de:3b:b2:03:00:c7:06:fc:5c:42:cf:d8:be: ed:54:32:34:b6:5a:cf:c5:bc:84:e1:fd:97:71:54: 9f:e4:39:31:7a:64:71:26:e5:f4:56:4d:7d:03:de: 8c:1f:56:e8:fc:2b:ae:76:5c:fe:76:41:35:94:b5: 31:a1:98:d2:96:7c:9e:e8:a5:03:fa:24:3d:7b:f3: 9d:0e:40:13:37:33:68:2b:6e:83:4d:c9:8b:66:9a: d3:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:02:33:54:E7:AE:21:39:65:E6:31:88:93:93:6A:1C:C3:22:82:1D X509v3 Authority Key Identifier: keyid:D3:46:06:94:9D:38:5D:B4:27:14:FE:71:27:4F:AC:99:48:EF:27:9C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/D34606949D385DB42714FE71274FAC9948EF279C.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/D34606949D385DB42714FE71274FAC9948EF279C.cer Subject Information Access: Signed Object - URI:rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/AS214025.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 86.38.255.0/24 89.116.9.0/24 89.116.127.0/24 89.116.141.0/24 89.117.129.0/24 Signature Algorithm: sha256WithRSAEncryption 60:01:e3:86:59:eb:bf:44:f7:86:a3:b7:76:55:f2:df:20:ea: 07:50:ae:2f:86:e5:51:50:e4:df:2e:de:ad:c8:91:63:13:94: 74:fe:24:77:11:a1:8f:66:c9:d9:41:3c:b1:59:c8:52:70:02: 6d:b3:5e:25:bb:f1:91:b0:5a:d5:97:0d:81:3b:ad:20:09:0a: ab:e3:72:a0:6e:fd:ae:c0:c7:21:43:a6:3b:41:26:3f:da:b8: c4:db:75:08:64:bd:66:a4:9f:04:cb:dd:50:79:75:62:10:29: 0b:36:db:19:35:88:e4:02:fd:6e:29:58:59:67:65:16:68:1e: 93:22:0d:70:32:a4:7f:98:95:c8:a7:6f:a6:6e:14:2b:ba:db: 00:9a:ef:04:f2:fd:66:11:27:85:58:d4:17:9a:4b:c4:2e:c9: b7:58:b2:63:1f:db:40:69:69:05:98:6f:a5:49:24:8b:e7:b7: 3b:e9:bb:d1:a9:31:4f:cb:ad:fc:37:45:6e:b2:9f:a2:78:46: 28:3e:62:e4:cb:6a:60:ce:af:56:a0:4c:8e:cd:d9:3d:e5:73: 72:de:4b:0e:90:28:5a:f4:41:2d:50:3b:e7:a7:23:7b:ae:44: b1:e6:df:4d:19:e3:f6:a7:a3:84:fb:bf:ac:ea:82:05:50:2c: b6:45:ad:c0 -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUDTmkyIGZZpOY9AiPsSIBBQ6rEGkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDM0NjA2OTQ5RDM4NURCNDI3MTRGRTcxMjc0RkFDOTk0 OEVGMjc5QzAeFw0yNjA0MDEwMDUwNDRaFw0yNzAzMzEwMDU1NDRaMDMxMTAvBgNV BAMTKEJCMDIzMzU0RTdBRTIxMzk2NUU2MzE4ODkzOTM2QTFDQzMyMjgyMUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDE7KHRvtKYtdkHC0B+SOnRMThY pLLJiVkNBXFR7orsvvrz3xJZ2KIJWCMTxenqUG7wvW8MPgae8G1vFZjp2TG2Ty2Z S+mvEsSyCJ7b1NGO38TycQcg5NYXG686TizJRsJLro1fhgaD+3BLOy+mjR/pskAo eaMq/bLORvUegxDzhk4FWvxlfc3RGWo67Kg48jrG9iZik0S9CMe8sLPi3IsJ4DyQ AyDU3juyAwDHBvxcQs/Yvu1UMjS2Ws/FvITh/ZdxVJ/kOTF6ZHEm5fRWTX0D3owf Vuj8K652XP52QTWUtTGhmNKWfJ7opQP6JD17850OQBM3M2grboNNyYtmmtNJAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUuwIzVOeuITll5jGIk5NqHMMigh0wHwYDVR0j BBgwFoAU00YGlJ04XbQnFP5xJ0+smUjvJ5wwDgYDVR0PAQH/BAQDAgeAMIGIBgNV HR8EgYAwfjB8oHqgeIZ2cnN5bmM6Ly9yLm1hZ2VsbGFuLmlweG8uY29tL3JlcG8v NTI4YTIxOGYtYWQyOC00MGQyLWJkN2YtMzUwZWFkYTNkNzA1LTAvMC9EMzQ2MDY5 NDlEMzg1REI0MjcxNEZFNzEyNzRGQUM5OTQ4RUYyNzlDLmNybDCBngYIKwYBBQUH AQEEgZEwgY4wgYsGCCsGAQUFBzAChn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5y aXBlLm5ldC9yZXBvc2l0b3J5LzAwMmUwYmEzLWZlNjAtNDViMS05MTYwLTg2OGEy ZjhhNDNiMS8zL0QzNDYwNjk0OUQzODVEQjQyNzE0RkU3MTI3NEZBQzk5NDhFRjI3 OUMuY2VyMHIGCCsGAQUFBwELBGYwZDBiBggrBgEFBQcwC4ZWcnN5bmM6Ly9yLm1h Z2VsbGFuLmlweG8uY29tL3JlcG8vNTI4YTIxOGYtYWQyOC00MGQyLWJkN2YtMzUw ZWFkYTNkNzA1LTAvMC9BUzIxNDAyNS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEF BQcOAjA3BggrBgEFBQcBBwEB/wQoMCYwJAQCAAEwHgMEAFYm/wMEAFl0CQMEAFl0 fwMEAFl0jQMEAFl1gTANBgkqhkiG9w0BAQsFAAOCAQEAYAHjhlnrv0T3hqO3dlXy 3yDqB1CuL4blUVDk3y7erciRYxOUdP4kdxGhj2bJ2UE8sVnIUnACbbNeJbvxkbBa 1ZcNgTutIAkKq+NyoG79rsDHIUOmO0EmP9q4xNt1CGS9ZqSfBMvdUHl1YhApCzbb GTWI5AL9bilYWWdlFmgekyINcDKkf5iVyKdvpm4UK7rbAJrvBPL9ZhEnhVjUF5pL xC7Jt1iyYx/bQGlpBZhvpUkki+e3O+m70akxT8ut/DdFbrKfonhGKD5i5MtqYM6v VqBMjs3ZPeVzct5LDpAoWvRBLVA756cje65EsebfTRnj9qejhPu/rOqCBVAstkWt wA== -----END CERTIFICATE-----Generated at Fri Apr 17 07:37:33 2026 by rpki-client