$ rpki-client -vvvf r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/AS262287.roa File: AS262287.roa (raw, json) Hash identifier: I626rqJuIle4z3yg/QzzNxQ6BPagmMqyH3BIOmx+at4= Subject key identifier: F1:E3:23:1C:E0:D0:60:65:F3:1E:89:8A:91:91:22:5C:A1:F2:CB:10 Certificate issuer: /CN=D34606949D385DB42714FE71274FAC9948EF279C Certificate serial: 0CA58C62E8C0807C55DA8CEA247BA07C156029B7 Authority key identifier: D3:46:06:94:9D:38:5D:B4:27:14:FE:71:27:4F:AC:99:48:EF:27:9C Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/D34606949D385DB42714FE71274FAC9948EF279C.cer Subject info access: rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/AS262287.roa Signing time: Fri 11 Sep 2026 13:49:35 +0000 ROA not before: Fri 11 Sep 2026 13:44:35 +0000 ROA not after: Fri 10 Sep 2027 13:49:35 +0000 asID: 262287 IP address blocks: 86.38.32.0/24 maxlen: 24 86.38.185.0/24 maxlen: 24 86.38.186.0/24 maxlen: 24 89.116.60.0/24 maxlen: 24 89.116.61.0/24 maxlen: 24 89.116.63.0/24 maxlen: 24 89.116.68.0/24 maxlen: 24 89.116.154.0/24 maxlen: 24 89.116.158.0/24 maxlen: 24 89.116.218.0/24 maxlen: 24 89.116.253.0/24 maxlen: 24 89.117.101.0/24 maxlen: 24 89.117.155.0/24 maxlen: 24 89.117.254.0/24 maxlen: 24 Validation: OK Signature path: rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/D34606949D385DB42714FE71274FAC9948EF279C.crl rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/D34606949D385DB42714FE71274FAC9948EF279C.mft rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/D34606949D385DB42714FE71274FAC9948EF279C.cer rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/9DF85997B1B9B358E1C43F36765AA0A4A02144AE.crl rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/9DF85997B1B9B358E1C43F36765AA0A4A02144AE.mft rsync://rpki.ripe.net/repository/DEFAULT/nfhZl7G5s1jhxD82dlqgpKAhRK4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 21 Sep 2026 11:16:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0c:a5:8c:62:e8:c0:80:7c:55:da:8c:ea:24:7b:a0:7c:15:60:29:b7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D34606949D385DB42714FE71274FAC9948EF279C Validity Not Before: Sep 11 13:44:35 2026 GMT Not After : Sep 10 13:49:35 2027 GMT Subject: CN=F1E3231CE0D06065F31E898A9191225CA1F2CB10 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:00:dc:a7:44:3c:93:bc:1e:c5:74:14:38:50: 4d:83:4c:22:da:bd:fc:f5:3c:3d:af:2d:de:3d:14: 16:03:64:41:02:93:6c:ae:78:7d:06:01:9c:1c:56: 94:9b:0f:ec:90:52:d8:1b:8d:c2:4a:f4:f2:6d:7a: 65:1d:a4:80:e5:29:6d:1d:d5:6e:e3:10:38:2b:c8: 3d:55:88:db:93:3d:50:94:87:86:08:4c:ed:81:db: d0:0a:20:c0:16:80:a9:da:23:7a:cb:6b:d2:e4:2c: 44:6a:ab:9f:f0:a4:4d:ab:35:73:97:c3:2f:b3:59: dc:a1:e6:1c:72:75:6a:d1:77:c6:60:eb:44:e3:37: 40:db:d6:ab:dc:95:46:5a:22:e2:1b:0b:e8:61:2e: 72:fa:c7:a8:a2:e2:8f:8f:d0:0a:e0:d7:05:75:bf: a8:78:14:c4:9b:eb:01:90:67:5f:16:3d:3e:22:76: e9:94:d4:87:d8:60:27:5b:48:c7:0d:37:ee:60:6f: 98:4e:9b:bb:c0:a1:f3:6e:7a:5b:c8:9c:39:ad:38: b5:6e:c4:7f:c7:94:31:55:b1:2a:19:5e:75:06:28: 2b:46:b4:ce:8d:02:c0:9a:84:6a:20:be:7d:ce:64: 97:66:26:a6:2e:5a:e0:6b:97:56:c7:e0:a0:88:96: 65:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:E3:23:1C:E0:D0:60:65:F3:1E:89:8A:91:91:22:5C:A1:F2:CB:10 X509v3 Authority Key Identifier: keyid:D3:46:06:94:9D:38:5D:B4:27:14:FE:71:27:4F:AC:99:48:EF:27:9C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/D34606949D385DB42714FE71274FAC9948EF279C.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/D34606949D385DB42714FE71274FAC9948EF279C.cer Subject Information Access: Signed Object - URI:rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/AS262287.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 86.38.32.0/24 86.38.185.0-86.38.186.255 89.116.60.0/23 89.116.63.0/24 89.116.68.0/24 89.116.154.0/24 89.116.158.0/24 89.116.218.0/24 89.116.253.0/24 89.117.101.0/24 89.117.155.0/24 89.117.254.0/24 Signature Algorithm: sha256WithRSAEncryption 35:97:8b:28:81:3a:f8:98:d3:d4:bf:81:3e:6b:7e:ba:21:dd: 38:da:63:65:ed:2a:43:27:59:2b:e8:06:cd:b7:07:c3:dc:75: 2b:e2:16:04:66:01:4a:10:f7:c2:28:9e:e0:ea:69:db:ad:15: d8:b9:42:92:41:e4:da:80:80:65:1c:b0:69:f4:83:17:b1:51: 67:57:33:12:50:b5:b2:f6:d8:a5:ff:24:77:2e:43:da:7b:05: 17:7e:32:60:58:ef:f3:65:65:1c:d8:16:f9:55:99:e4:15:48: e0:fd:7c:94:35:df:0d:98:b5:c6:37:4e:05:32:1a:57:26:a2: 16:ac:f2:ab:54:8e:7d:41:1b:96:64:aa:62:7a:55:3e:a6:ea: 72:cd:5f:52:5c:40:cc:18:a4:c0:80:6a:3e:c7:84:47:f0:f6: fd:1b:7e:05:2f:90:b7:77:45:60:f2:99:5c:a1:93:f2:bd:4d: 68:80:38:ce:01:ec:89:3b:e2:4e:a2:93:da:e4:ea:83:b3:01: 79:23:f9:36:f8:26:b0:86:88:0c:97:3d:97:4d:97:4a:3f:de: 58:f4:85:a4:0b:61:51:1f:98:fd:55:be:85:86:91:ba:60:41: 10:94:9f:d2:8c:00:d4:4f:d7:80:a5:41:1c:f4:87:e7:e8:e8: 2c:ca:6d:fb -----BEGIN CERTIFICATE----- MIIFbzCCBFegAwIBAgIUDKWMYujAgHxV2ozqJHugfBVgKbcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDM0NjA2OTQ5RDM4NURCNDI3MTRGRTcxMjc0RkFDOTk0 OEVGMjc5QzAeFw0yNjA5MTExMzQ0MzVaFw0yNzA5MTAxMzQ5MzVaMDMxMTAvBgNV BAMTKEYxRTMyMzFDRTBEMDYwNjVGMzFFODk4QTkxOTEyMjVDQTFGMkNCMTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCNANynRDyTvB7FdBQ4UE2DTCLa vfz1PD2vLd49FBYDZEECk2yueH0GAZwcVpSbD+yQUtgbjcJK9PJtemUdpIDlKW0d 1W7jEDgryD1ViNuTPVCUh4YITO2B29AKIMAWgKnaI3rLa9LkLERqq5/wpE2rNXOX wy+zWdyh5hxydWrRd8Zg60TjN0Db1qvclUZaIuIbC+hhLnL6x6ii4o+P0Arg1wV1 v6h4FMSb6wGQZ18WPT4idumU1IfYYCdbSMcNN+5gb5hOm7vAofNuelvInDmtOLVu xH/HlDFVsSoZXnUGKCtGtM6NAsCahGogvn3OZJdmJqYuWuBrl1bH4KCIlmW3AgMB AAGjggJ5MIICdTAdBgNVHQ4EFgQU8eMjHODQYGXzHomKkZEiXKHyyxAwHwYDVR0j BBgwFoAU00YGlJ04XbQnFP5xJ0+smUjvJ5wwDgYDVR0PAQH/BAQDAgeAMIGIBgNV HR8EgYAwfjB8oHqgeIZ2cnN5bmM6Ly9yLm1hZ2VsbGFuLmlweG8uY29tL3JlcG8v NTI4YTIxOGYtYWQyOC00MGQyLWJkN2YtMzUwZWFkYTNkNzA1LTAvMC9EMzQ2MDY5 NDlEMzg1REI0MjcxNEZFNzEyNzRGQUM5OTQ4RUYyNzlDLmNybDCBngYIKwYBBQUH AQEEgZEwgY4wgYsGCCsGAQUFBzAChn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5y aXBlLm5ldC9yZXBvc2l0b3J5LzAwMmUwYmEzLWZlNjAtNDViMS05MTYwLTg2OGEy ZjhhNDNiMS8zL0QzNDYwNjk0OUQzODVEQjQyNzE0RkU3MTI3NEZBQzk5NDhFRjI3 OUMuY2VyMHIGCCsGAQUFBwELBGYwZDBiBggrBgEFBQcwC4ZWcnN5bmM6Ly9yLm1h Z2VsbGFuLmlweG8uY29tL3JlcG8vNTI4YTIxOGYtYWQyOC00MGQyLWJkN2YtMzUw ZWFkYTNkNzA1LTAvMC9BUzI2MjI4Ny5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEF BQcOAjBpBggrBgEFBQcBBwEB/wRaMFgwVgQCAAEwUAMEAFYmIDAMAwQAVia5AwQA Via6AwQBWXQ8AwQAWXQ/AwQAWXREAwQAWXSaAwQAWXSeAwQAWXTaAwQAWXT9AwQA WXVlAwQAWXWbAwQAWXX+MA0GCSqGSIb3DQEBCwUAA4IBAQA1l4sogTr4mNPUv4E+ a366Id042mNl7SpDJ1kr6AbNtwfD3HUr4hYEZgFKEPfCKJ7g6mnbrRXYuUKSQeTa gIBlHLBp9IMXsVFnVzMSULWy9til/yR3LkPaewUXfjJgWO/zZWUc2Bb5VZnkFUjg /XyUNd8NmLXGN04FMhpXJqIWrPKrVI59QRuWZKpielU+pupyzV9SXEDMGKTAgGo+ x4RH8Pb9G34FL5C3d0Vg8plcoZPyvU1ogDjOAeyJO+JOopPa5OqDswF5I/k2+Caw hogMlz2XTZdKP95Y9IWkC2FRH5j9Vb6FhpG6YEEQlJ/SjADUT9eApUEc9Ifn6Ogs ym37 -----END CERTIFICATE-----Generated at Mon Sep 21 01:27:39 2026 by rpki-client