$ rpki-client -vvf r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/AS262287.roa File: AS262287.roa (raw, json) Hash identifier: iQQEW774GbRApHczyhE5HLXZk4DPgN5d7Vgc9f6205M= Subject key identifier: C0:F5:C3:D9:9A:32:93:A8:D8:0C:8B:71:2B:85:6D:74:F8:39:51:17 Certificate issuer: /CN=D34606949D385DB42714FE71274FAC9948EF279C Certificate serial: 7D71AE79BB89E77895F2616EF66DCF867066F0C7 Authority key identifier: D3:46:06:94:9D:38:5D:B4:27:14:FE:71:27:4F:AC:99:48:EF:27:9C Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/D34606949D385DB42714FE71274FAC9948EF279C.cer Subject info access: rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/AS262287.roa Signing time: Wed 16 Apr 2025 11:39:42 +0000 ROA not before: Wed 16 Apr 2025 11:34:42 +0000 ROA not after: Wed 15 Apr 2026 11:39:42 +0000 asID: 262287 IP address blocks: 86.38.32.0/24 maxlen: 24 86.38.185.0/24 maxlen: 24 86.38.186.0/24 maxlen: 24 89.116.60.0/24 maxlen: 24 89.116.61.0/24 maxlen: 24 89.116.63.0/24 maxlen: 24 89.116.68.0/24 maxlen: 24 89.116.154.0/24 maxlen: 24 89.116.158.0/24 maxlen: 24 89.116.218.0/24 maxlen: 24 89.116.253.0/24 maxlen: 24 89.117.101.0/24 maxlen: 24 89.117.254.0/24 maxlen: 24 Validation: OK Signature path: rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/D34606949D385DB42714FE71274FAC9948EF279C.crl rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/D34606949D385DB42714FE71274FAC9948EF279C.mft rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/D34606949D385DB42714FE71274FAC9948EF279C.cer rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/9DF85997B1B9B358E1C43F36765AA0A4A02144AE.crl rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/9DF85997B1B9B358E1C43F36765AA0A4A02144AE.mft rsync://rpki.ripe.net/repository/DEFAULT/nfhZl7G5s1jhxD82dlqgpKAhRK4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 01 May 2025 03:38:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7d:71:ae:79:bb:89:e7:78:95:f2:61:6e:f6:6d:cf:86:70:66:f0:c7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D34606949D385DB42714FE71274FAC9948EF279C Validity Not Before: Apr 16 11:34:42 2025 GMT Not After : Apr 15 11:39:42 2026 GMT Subject: CN=C0F5C3D99A3293A8D80C8B712B856D74F8395117 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:e7:f9:2e:49:c1:c7:a0:6f:2c:d4:13:d1:e0: 0a:e5:27:dd:4a:a4:24:d8:46:98:5d:0d:8b:5d:64: 7f:7a:00:df:01:db:b2:68:81:70:cd:d3:e7:09:0b: 64:48:44:b4:bb:ca:53:3d:85:2d:2a:54:19:75:9c: 30:f2:31:e4:b3:ab:83:cf:c3:57:a2:69:91:e1:b9: 98:d8:02:25:06:02:82:df:85:89:d9:8b:d4:23:8a: 3f:d8:89:36:94:43:ef:9c:86:ea:a8:51:5c:6a:76: 24:47:e5:2e:34:93:68:f7:42:80:6f:ce:3f:5e:c5: 63:ec:2f:68:a4:44:1f:37:6f:36:ef:da:ff:58:48: 6f:7a:be:52:ca:a9:c4:56:3d:4a:c3:7f:3b:6d:5c: 71:78:1a:a3:31:f5:da:7e:6f:d0:2f:81:30:fa:18: 31:51:c5:8e:62:c4:12:a5:79:6e:8c:e7:ee:ed:42: 1e:fd:e2:ef:91:61:86:f0:b8:b1:d6:73:c4:8f:aa: 93:3a:94:f8:6d:df:fc:c8:f6:5c:d6:b6:5c:43:05: b5:1c:2d:a6:7d:29:ad:26:c2:83:0e:3e:6a:b4:92: c3:fd:cb:c9:04:29:f5:58:37:1e:26:a7:7c:92:05: 15:0d:9e:1e:61:1b:9d:3f:67:bb:ad:11:b4:8b:cf: 53:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:F5:C3:D9:9A:32:93:A8:D8:0C:8B:71:2B:85:6D:74:F8:39:51:17 X509v3 Authority Key Identifier: keyid:D3:46:06:94:9D:38:5D:B4:27:14:FE:71:27:4F:AC:99:48:EF:27:9C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/D34606949D385DB42714FE71274FAC9948EF279C.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/D34606949D385DB42714FE71274FAC9948EF279C.cer Subject Information Access: Signed Object - URI:rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/AS262287.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 86.38.32.0/24 86.38.185.0-86.38.186.255 89.116.60.0/23 89.116.63.0/24 89.116.68.0/24 89.116.154.0/24 89.116.158.0/24 89.116.218.0/24 89.116.253.0/24 89.117.101.0/24 89.117.254.0/24 Signature Algorithm: sha256WithRSAEncryption c1:d8:e9:45:b3:88:c4:3a:be:fb:d3:af:5b:28:8a:6b:ff:b3: 7e:8a:0e:53:62:ac:52:65:20:99:a1:3d:e2:cc:6d:3c:f9:2d: 8f:63:22:48:4e:cd:93:5d:c2:c9:50:df:00:b7:0b:de:16:99: 1d:cf:9c:72:db:71:d4:c0:8c:68:bc:ee:fb:33:80:5c:4f:9b: 33:9b:35:61:e0:20:aa:9c:b0:c5:1c:98:2b:c1:f0:93:f6:3d: ef:6c:d1:b6:ed:ff:7b:d8:d1:74:37:0e:20:a4:19:1d:fa:b4: c2:00:d4:64:50:75:ec:cd:74:b1:62:7d:a9:eb:33:ee:04:f9: 71:43:e4:30:5c:79:ac:14:73:1a:62:23:d2:08:72:7e:3e:03: 7e:a8:86:3d:29:90:76:88:50:d1:be:25:37:4a:52:39:03:15: 3c:59:0c:8e:fa:c6:16:90:2b:f2:e8:7a:a7:6e:4d:95:16:2a: 20:b1:69:15:cc:4b:17:68:30:d4:e1:98:5f:d0:37:7b:b2:ff: 78:d0:d8:69:16:48:6b:09:48:47:45:0b:4e:3f:27:7a:30:9e: c7:9a:f3:6b:49:45:d7:af:4a:3d:7c:35:33:a7:ea:61:29:ab: 42:c2:c9:f5:f4:e5:98:8b:fc:3b:b0:a4:5a:b1:66:ff:38:2b: 00:e0:76:f0 -----BEGIN CERTIFICATE----- MIIFaTCCBFGgAwIBAgIUfXGuebuJ53iV8mFu9m3PhnBm8McwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDM0NjA2OTQ5RDM4NURCNDI3MTRGRTcxMjc0RkFDOTk0 OEVGMjc5QzAeFw0yNTA0MTYxMTM0NDJaFw0yNjA0MTUxMTM5NDJaMDMxMTAvBgNV BAMTKEMwRjVDM0Q5OUEzMjkzQThEODBDOEI3MTJCODU2RDc0RjgzOTUxMTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCo5/kuScHHoG8s1BPR4ArlJ91K pCTYRphdDYtdZH96AN8B27JogXDN0+cJC2RIRLS7ylM9hS0qVBl1nDDyMeSzq4PP w1eiaZHhuZjYAiUGAoLfhYnZi9Qjij/YiTaUQ++chuqoUVxqdiRH5S40k2j3QoBv zj9exWPsL2ikRB83bzbv2v9YSG96vlLKqcRWPUrDfzttXHF4GqMx9dp+b9AvgTD6 GDFRxY5ixBKleW6M5+7tQh794u+RYYbwuLHWc8SPqpM6lPht3/zI9lzWtlxDBbUc LaZ9Ka0mwoMOPmq0ksP9y8kEKfVYNx4mp3ySBRUNnh5hG50/Z7utEbSLz1MJAgMB AAGjggJzMIICbzAdBgNVHQ4EFgQUwPXD2Zoyk6jYDItxK4VtdPg5URcwHwYDVR0j BBgwFoAU00YGlJ04XbQnFP5xJ0+smUjvJ5wwDgYDVR0PAQH/BAQDAgeAMIGIBgNV HR8EgYAwfjB8oHqgeIZ2cnN5bmM6Ly9yLm1hZ2VsbGFuLmlweG8uY29tL3JlcG8v NTI4YTIxOGYtYWQyOC00MGQyLWJkN2YtMzUwZWFkYTNkNzA1LTAvMC9EMzQ2MDY5 NDlEMzg1REI0MjcxNEZFNzEyNzRGQUM5OTQ4RUYyNzlDLmNybDCBngYIKwYBBQUH AQEEgZEwgY4wgYsGCCsGAQUFBzAChn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5y aXBlLm5ldC9yZXBvc2l0b3J5LzAwMmUwYmEzLWZlNjAtNDViMS05MTYwLTg2OGEy ZjhhNDNiMS8zL0QzNDYwNjk0OUQzODVEQjQyNzE0RkU3MTI3NEZBQzk5NDhFRjI3 OUMuY2VyMHIGCCsGAQUFBwELBGYwZDBiBggrBgEFBQcwC4ZWcnN5bmM6Ly9yLm1h Z2VsbGFuLmlweG8uY29tL3JlcG8vNTI4YTIxOGYtYWQyOC00MGQyLWJkN2YtMzUw ZWFkYTNkNzA1LTAvMC9BUzI2MjI4Ny5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEF BQcOAjBjBggrBgEFBQcBBwEB/wRUMFIwUAQCAAEwSgMEAFYmIDAMAwQAVia5AwQA Via6AwQBWXQ8AwQAWXQ/AwQAWXREAwQAWXSaAwQAWXSeAwQAWXTaAwQAWXT9AwQA WXVlAwQAWXX+MA0GCSqGSIb3DQEBCwUAA4IBAQDB2OlFs4jEOr77069bKIpr/7N+ ig5TYqxSZSCZoT3izG08+S2PYyJITs2TXcLJUN8AtwveFpkdz5xy23HUwIxovO77 M4BcT5szmzVh4CCqnLDFHJgrwfCT9j3vbNG27f972NF0Nw4gpBkd+rTCANRkUHXs zXSxYn2p6zPuBPlxQ+QwXHmsFHMaYiPSCHJ+PgN+qIY9KZB2iFDRviU3SlI5AxU8 WQyO+sYWkCvy6Hqnbk2VFiogsWkVzEsXaDDU4Zhf0Dd7sv940NhpFkhrCUhHRQtO Pyd6MJ7HmvNrSUXXr0o9fDUzp+phKatCwsn19OWYi/w7sKRasWb/OCsA4Hbw -----END CERTIFICATE-----Generated at Wed Apr 30 17:52:37 2025 by rpki-client